Research

How a Skype notification turned into a costly lesson

A Cautionary Tale of Digital Deception
Luis Corrons
Security Evangelist at Gen
Published
October 24, 2024
Read time
7 Minutes
How a Skype notification turned into a costly lesson
Written by
Luis Corrons
Security Evangelist at Gen
Published
October 24, 2024
Read time
7 Minutes
How a Skype notification turned into a costly lesson
    Share this article

    Imagine you are enjoying your weekend when you suddenly get a notification. You check it out, and it turns out it’s from Skype—yes, that old software you didn’t even remember you had installed. You open it up and find that someone has added you to a group called “Options Trading-86,” and you’re in there with 500 other people. 

    Skype profile picture of the group
    Skype profile picture of the group

    At first glance, it seems harmless—maybe even intriguing. The group claims to be a space for learning how to make money trading Bitcoin, led by an "analyst" from ARK Investment Management, no less. But as you scroll through the messages, things start to feel a little off. 

    The Pitch: Free Advice from a "Professional" 

    The first message comes from someone claiming to be Yassine Elmandjra, a real analyst from ARK Investment, welcoming everyone to this "charity class" on Bitcoin trading. They introduce Probit, a cryptocurrency exchange, and promise daily guidance on how to grow your wealth through Bitcoin contracts. The tone is friendly, and the offer of "free" advice sounds like a great deal. 

    But here’s the thing—when was the last time a legitimate financial analyst offered free, daily trading tips to random people on Skype? 

    Building Trust Through Familiar Names 

    This is where the scam starts to take shape. Scammers often borrow the names of trusted companies or individuals to build credibility. ARK Investment Management and Yassine Elmandjra are real, reputable entities, but their names have been hijacked here to create an illusion of legitimacy. 

    The fake account posting a screenshot to the group belonging to the real Yassine Elmadjra
    The fake account posting a screenshot to the group belonging to the real Yassine Elmadjra

    As you scroll further, you notice people chiming in about how much money they’ve made from following the advice. The group is lively, with people expressing gratitude for their daily profits and praising Elmandjra's accuracy. But are these people even real? 

    The Emotional Hook: Get Rich Together 

    Then the emotional manipulation kicks in. Participants share stories of how the pandemic affected their finances and how Bitcoin trading has given them a second chance. Others talk about securing their family's future or how this trading opportunity has changed their lives. 

    Example of an emotional story posted in the group chat
    Example of an emotional story posted in the group chat

    This is a classic scam tactic—use emotional appeals to lower your defenses. They want you to believe that by joining in, you too can turn things around and secure financial freedom. After all, if everyone else is making money, why shouldn’t you? 

    The "Opportunity" Unfolds 

    As you stay in the group, the real offer becomes clear. The group offers two investment options: 

    1. Pay 20% of your profits as a commission. 
    2. A "guaranteed" 100% profit if you give them 50% of the earnings as commission, with the promise that any losses will be compensated by the investment advisor. 

    Let’s stop here for a second. Guaranteed profits? Covered losses? In any real investment scenario, these promises would set off alarm bells. No legitimate financial advisor can guarantee profits, especially in the volatile world of cryptocurrency. 

    Pressure to Invest Big 

    The group doesn't waste time encouraging you to invest substantial amounts. They provide a handy guide on how much to start with, based on how much USDT (a cryptocurrency pegged to the US dollar) you have: $3,000, $6,000, or even $15,000. 

    The message is clear: the more you invest, the more you can supposedly earn. But what’s really happening is the scammer trying to get as much money from you as possible before disappearing. 

    The Push for Action 

    Throughout the chat, there's constant pressure to act now. “If you want to learn more, sign up for a Probit account,” they say. The assistant, Lilian, is always available to help, promising easy registration and seamless trading. If you’re on the fence, testimonials from other group members provide glowing reviews of how easy and profitable it all is. 

    Of course, none of this is real. The real goal is to get you to sign up for a fake account, give away personal information, and invest your money into an account you don’t control. 

    What Happens Next? 

    Once they’ve gained your trust and your money, the scammers will vanish. The group will likely continue to look active for a while, with bots or fake accounts continuing to post messages of success, but eventually, the entire operation will disappear, leaving you with empty pockets. 

    Red Flags to Watch For 

    • Unsolicited Group Invitations: Being added to a group out of nowhere is a huge red flag. 
    • Impersonating Trusted Companies: Scammers often use the names of real, reputable entities to build credibility. 
    • Promises of Guaranteed Profits: No legitimate financial advisor guarantees profits, especially in the world of cryptocurrency. 
    • Emotional Manipulation: Scammers play on emotions, hoping you’ll be too focused on the promise of easy money to recognize the risks. 
    • Pushing One Specific Platform: The heavy push to use Probit (or any single platform) should raise suspicion. 

    How to Protect Yourself 

    1. Always Be Skeptical of Unsolicited Offers: Whether it's a random group invite or a message from someone you don’t know, always question why you’re being contacted. 
    2. Verify the Source: Do your own research on the company or individual. In this case, contacting ARK Investment would reveal that they have no connection to this group. 
    3. Don’t Share Personal Information: Be cautious about sharing any personal or financial details with people or platforms you don’t trust. 
    4. Do Your Research: Always investigate the platforms being promoted. A quick online search might reveal whether others have reported it as a scam. 

    Final Thoughts 

    This case illustrates just how far scammers are willing to go to exploit the growing interest in cryptocurrency. By creating a false sense of security, urgency, and community, they convince people to part with their money. 

    Nowadays most of the threats we protect of are scams, more than virus, trojans or worms. Make sure you have a good security solution installed. Another good way to protect yourself is to stay informed. If something feels off or sounds too good to be true, it probably is. Be cautious, do your research, and never make decisions based on pressure or emotion. 

    Luis Corrons
    Security Evangelist at Gen
    Luis has worked in anti-virus for over a century. Outside of Gen, he's a WildList reporter, chairman of the Board of Directors of AMTSO (Anti-Malware Testing Standards Org) and a member of the Board of Directors of MUTE (Malicious URLs Tracking and Exchange).
    Follow us for more