{"id":2009,"date":"2025-09-26T13:19:18","date_gmt":"2025-09-26T19:19:18","guid":{"rendered":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/?p=2009"},"modified":"2025-10-02T22:36:23","modified_gmt":"2025-10-03T04:36:23","slug":"from-one-tip-to-thousands-of-connected-scams-the-2025-online-gaming-fraud-network","status":"publish","type":"post","link":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/2025\/09\/26\/from-one-tip-to-thousands-of-connected-scams-the-2025-online-gaming-fraud-network\/","title":{"rendered":"From One Tip to Thousands of Connected Scams: The 2025 Online Gaming Fraud Network"},"content":{"rendered":"\n
In 2025, online scams continue to escalate, with hundreds of sites recently exposed as malicious online gaming and gambling platforms[1]. These sites lure victims by advertising themselves as the \u201c#1 crypto gaming platform,\u201d often claiming ties to billionaires such as Elon Musk, Bill Gates, and MrBeast to appear credible [3]. Beyond fake endorsements, the platforms offer financial incentives and unrealistic winnings. These sites are not randomly created; they form part of a larger, coordinated network designed to defraud thousands of users[2].<\/p>\n\n\n\n
KrebsOnSecurity first identified this network through a tip from a 17-year-old Discord user known as \u201cThereallo,\u201d who noticed misleading spam messages promoting multiple gaming sites. This discovery led to a deeper investigation, revealing a sprawling criminal network of more than 1,200 scam domains [1].<\/p>\n\n\n\n<\/figure>\n\n\n\n
Figure 1: Example of scam online gaming sites identified by KrebsOnSecurity [1].<\/p>\n\n\n\n
Examples of High-Risk Scam Sites<\/strong><\/h3>\n\n\n\n
Many of these sites were recently created and share gaming or wagering theme and some invoking the same API keys, following a consistent scam strategy[1]. Several have been flagged as high-risk due to fraudulent activity, with some established as recently as 15 days ago. Examples include:<\/p>\n\n\n\n
\n
Socmex.com <\/li>\n\n\n\n
Liobax.com <\/li>\n\n\n\n
Gambwex.com <\/li>\n\n\n\n
Toprexx.com<\/li>\n<\/ul>\n\n\n\n
The communities behind these sites are tied to a Russian-language affiliate program known as Gambler Panel. This program rewards its partners with up to 70% of the profits generated from exploited users. In addition, Gambler Panel supplies affiliates with detailed strategies and ready-made gaming content, making it easier for them to carry out these scams[2].<\/p>\n\n\n\n<\/figure>\n\n\n\n
How These Scams Work<\/strong><\/h3>\n\n\n\n\n
Social Engineering via Ads<\/strong> <\/strong> Scammers post advertisements on platforms such as Discord, YouTube, and Twitter, offering promo codes that claim $2,500\u2013$10,000 in credits. These credits appear in-game\/website but are never actually given [1]. <\/li>\n\n\n\n
Free Gameplay<\/strong> <\/strong> Users play games using the promo credits, feeling no financial risk and trusting the platform [1]. <\/li>\n\n\n\n
Withdrawal Trap <\/strong> When attempting to withdraw winnings, the sites request a verification deposit of $100\u2013$500 in cryptocurrency [1]. Users are led to believe they remain at a net positive. In the withdrawal trap, scammers exploit cryptocurrency to collect users\u2019 deposits. Here\u2019s why they rely on cryptocurrency for their schemes: <\/li>\n<\/ol>\n\n\n\n
\n
Side Note\/Crypto Lesson:<\/strong> In cryptocurrency transactions, a public key functions like an address, allowing users to send funds to a specific wallet. The private key is held by the wallet owner and is required to authorize withdrawals. Once a transaction is recorded on the decentralized and irreversible blockchain, scammers who control the private keys can immediately access all deposits, making it impossible for victims to recover their funds[6]. <\/li>\n<\/ul>\n\n\n\n
\n
Continuous Deception<\/strong> <\/strong> The platforms provide excuses to block withdrawals and may request additional deposits, ultimately causing victims to lose real money [1].<\/li>\n<\/ul>\n\n\n\n
<\/p>\n\n\n\n
How to Avoid Getting Duped<\/strong><\/h3>\n\n\n\n
Although social engineering is the main tactic scammers use, several precautions can help reduce risk:<\/p>\n\n\n\n
\n
Watch for fake endorsements<\/strong> [3]\u2013 Celebrity images or endorsements without verified affiliation are red flags. <\/li>\n\n\n\n
Question inflated stats<\/strong>[3] \u2013 Claims such as \u201c50,000 active users\u201d may be fabricated. <\/li>\n\n\n\n
Beware of withdrawal requirements<\/strong>[3] \u2013 Sites that lock withdrawals until a verification deposit is made are typically fraudulent. <\/li>\n\n\n\n
Check for licenses and policies<\/strong>[3] \u2013 Legitimate platforms clearly display legal information. <\/li>\n\n\n\n
Avoid unrealistic promo offers<\/strong>[3] \u2013 Offers of $2,500\u2013$10,000 in free credits are usually scams. <\/li>\n\n\n\n
Use security tools<\/strong> \u2013 Antivirus software and adblockers help prevent malicious pop-ups or access to fraudulent sites.[3]<\/li>\n<\/ul>\n\n\n\n
Conclusion<\/strong><\/h3>\n\n\n\n
With online crime on the rise, it is essential to stay informed about the latest tactics used by cybercriminals. Scam gambling platforms now exploit social engineering and cryptocurrency\u2019s irreversible transactions to deceive and defraud users. As thousands of new domains continue to emerge, awareness and education are critical to avoiding these traps. Practicing strong security habits and promoting caution online remain the most effective ways to protect against such evolving threats. Having been tricked by ads and scam websites in the past, this topic is particularly important to me. Next time you see a celebrity endorsement on a website or a random link in Discord, exercise caution. While visiting the site is often harmless, it\u2019s always safer to remember that you don\u2019t have to click the link or interact with the site at all.<\/p>\n\n\n\n
![\"\"](\"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-content\/uploads\/sites\/119\/2025\/09\/image-2.png\")
<\/figure>\n\n\n\n![\"\"](\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\")
<\/figure>\n\n\n\n![\"\"](\"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-content\/uploads\/sites\/119\/2025\/09\/image-3.png\")
<\/figure>\n\n\n\n