Scam bitcoin ads using unauthorised Australian celebrity images traced to Moscow addresses

Exclusive: Guardian investigation finds ads featuring unauthorised images of Dick Smith, Andrew Forrest and others are part of a highly organised global enterprise

Scam bitcoin ads trading off unauthorised images of Dick Smith, Andrew Forrest and other celebrities, which have taken in tens of thousands of Australians, are part of a highly organised global business that uses five addresses in the centre of Moscow, a Guardian investigation has found.

The sheer scale of the scam has made it difficult for Google to block them, and for Australian regulators to take action.

The fake celebrity ads have run on news websites since at least 2018, but with people stuck at home during the Covid-19 pandemic, many more have been caught out by the scams.

In the most common form of the scam, the unwitting user who clicks on an ad is taken to a fake news story that includes a link purporting to be a cryptocurrency investment scheme. If they enter their details to register for the scheme, they receive a phone call typically asking them to invest a small sum, such as US$250, and then increasingly large amounts.

IDCare, a registered charity that offers support to people scammed online, has been hearing from a victim every business hour since March, its managing director told Guardian Australia.

“This is becoming increasingly common. For some of these people they have lost their entire life savings,” Prof David Lacey said.

Australia is making Google and Facebook pay for news: what difference will the code make?

 Read more

‘How could it hurt?’

Janice*, a 77-year-old grandmother from Queensland’s Sunshine Coast, saw an ad on Facebook earlier this year featuring Forrest promoting a bitcoin investment scheme. She clicked through to find out more and was presented with a story on a fake news site that also referred to The Project host Waleed Aly.

After entering her details, she received a call from a man with an English accent who encouraged her to invest in the scheme, so she transferred $5,000 via her bank to Jubiter, a cryptocurrency exchange.

Janice eventually handed over $80,000 to the scammers, her entire life savings, before her daughter told her it was a scam. Despite contacting her bank, the police and the Australian Competition and Consumer Commission’s Scamwatch website, she was unable to get the money back.

Scam celebrity endorsements are a “common deceptive technique”, Lacey says.

“In Germany, Boris Becker is promoting cryptocurrency fraud investments. He, of course, doesn’t, but the crooks know his celebrity attracts and assists with the deception. For an initial US$250 investment, people think, ‘Why not? How could it hurt? It’s not a lot of money.’”

Lacey says the initial investment is a ploy to bait people.

“In fact the real value for the scammers is not the initial US$250, but the harvesting of contact details from someone they know is primed and ready to explore the cryptocurrency investment world.”

How does the scam work?

Guardian Australia began the process of signing up for the scam to determine how people were duped into paying.

Advertisement

The site I signed up to purported to be a bitcoin trading service called bitcoin-Up, but I was ultimately directed to another site called Gtlot, which purports to be a cryptocurrency trading platform. It operates from St Vincent and the Grenadines in the Caribbean, which does not regulate foreign exchange trading platforms.

About five minutes after signing up for the service, I received a call from the Netherlands. The man on the line attempted to walk me through the process of signing up, claiming that from an initial investment of US$250 I could make between $500 and $3,000 a month.

He claimed governments were looking to phase out paper money because of Covid-19, so now was the right time to get on board.

When I told him I was a reporter, he denied any links to scam ads, and still attempted to get me to put in my credit card details and invest money.

At best, these services encourage people to invest in highly risky, often unregulated forex trading platforms where they are likely to lose most, if not all, of their money, with little recourse to get their money back.

At worst they are scams, designed to encourage people to hand over more and more money in an attempt to get their initial investment back.

An international investigation by the Organized Crime and Corruption Reporting Project reported that contact details of people who signed up for such services were also passed on to brokers offering other risky or illegitimate investments.

How do the ads evade detection?

Google says it removed 5,000 bad ads per minute in 2019 – 2.7bn in total – but “scammers are constantly evolving their efforts, while we evolve our policies and enforcement to address this”.

The scammers buy millions of ads in Google’s ad market places, using the names of local celebrities in each country, without their knowledge or endorsement. Dick Smith, Chris Hemsworth, David Koch and Waleed Aly are among those whose profiles have been used in Australia.

The scammers have increasingly sought to get past Google’s detection by making repeated minor changes to the text of the ads in what Google calls a “cat and mouse” game.

Media outlets and other websites that take Google’s ads cannot easily control whether the scam ads appear on their website.

Guardian Australia managed to prevent the ads appearing on its site by blocking a specific marketplace where the ads were being sold. A typical marketplace has tens of thousands of ads – this one had millions.Advertisementhttps://b7fa56f03057901590fc22d2f1924e5e.safeframe.googlesyndication.com/safeframe/1-0-37/html/container.html

The scammers purchase hundreds of domain names every month, using a variety of domain registration companies, to host the pages that users are directed to when they click on the ads. The URLs are a jumble of letters, typically only around 10 characters long.

The source code of one of these sites reveals that from Australia it looks like the fake news sites promoting the scam investment, but viewed from outside the target region, it appears to be a website discussing mandarins.

Source: https://www.theguardian.com/technology/2020/dec/14/scam-bitcoin-ads-using-unauthorised-celebrity-images-fool-tens-of-thousands-of-australians?&web_view=true