Crypto scammers use fake 'Amazon Token' website to trick victims

midian182

Posts: 7,794   +80
Staff member
In a nutshell: It’s not just hackers who target cryptocurrency fans; scammers are also a common threat for those that like to invest in digital currency. A new phishing campaign uses the Amazon name and a fake news report to try and trick people into handing over cash or crypto for a token that doesn’t exist.

Researchers from Akamai Technologies (via ZDNet) highlighted the campaign. It begins with social media posts targeted at groups interested in all things crypto-related. Clicking on one of the posts' links directs to a fake website called "CNBC Decoded" that shows an article claiming the Amazon Token presale is coming.

The fake site is only visible for 30 seconds, enough for someone to skim through without flagging it as a fake, before it redirects to the Amazon Token project website, which, of course, isn't a real thing.

Interested buyers can register for an account on the fully functional 'Amazon Token' page. It requires an email confirmation, making the site appear more authentic, and comes with a fake progress bar suggesting the tokens are close to selling out, triggering a victim’s FOMO and pressuring them into handing over their payment details. There's even a friends and family referral program for snaring more people.

The site uses a captcha-style challenge to filter out bots and web crawlers looking for malicious content while also adding to its apparent legitimacy.

Akamai reports that 98% of people who visited the fake crypto landing page were mobile users, most of whom came from North and South America and Asia. The firm has reported its findings to Amazon, which has never announced any plans for its own digital coin.

Back in July last year, an Amazon job ad suggested the tech giant would soon start accepting crypto as payment for goods, but the company quickly denied this would be the case.

Permalink to story.

 

QuantumPhysics

Posts: 6,297   +7,227
I keep hoping that the scams and fraud in crypto (I refuse to call it currency) continue and get so bad that the US government is forced to regulate them so heavily that no one wants them anymore. Better that money chase real companies with real products and intrinsic value.

...rather than a few crypto farms made of scalped Nvidia GPU.
 

m4a4

Posts: 2,850   +3,629
TechSpot Elite
I keep hoping that the scams and fraud in crypto (I refuse to call it currency) continue and get so bad that the US government is forced to regulate them so heavily that no one wants them anymore. Better that money chase real companies with real products and intrinsic value.

...rather than a few crypto farms made of scalped Nvidia GPU.
This is what we call "irrational hate".
I'd rather scammers of all sizes and types get caught, but that might just be me...
 

kiwigraeme

Posts: 990   +740
The thing is if was Amazon - they have a billion credit cards stored anyway - so why would you need to enter you details - I would be more concerned - it was harvesting your Amazon password .-
Again have 2FA at least - my browser remembers nothing of cookies - so remember on this device - doesn't work on new opening - plus for amazon - no 1 click - have to re-enter password to buy and get 2fa . kind of a pain for checking orders - have I already bought that game expansion and it's stored in my garage .
Not sure of Amazon security for changing shipping address - but there is a lot of digital products