We Looked Into REFOLEX: Scam or Trustworthy? The Verdict

Recently, Refolex.com service appeared, promoting itself as a platform where you can securely keep cryptocurrency and other assets. I managed to gather reliable supporting information that clearly reveals it is, actually, a deceptive service.

Despite the promises of the most easy, dependable, and customer-centric service, Refolex.com does not offer any of them. In fact, all this is just a golden wrap around a clear scam, which takes your money and never returns them. Any tales about gifts, backing from celebrities etc are non-existent as well.

It is better to prevent, than repair and repent!

When we talk about the intrusion of unfamiliar programs into your computer’s work, the proverb “Forewarned is forearmed” describes the situation as accurately as possible. Gridinsoft Anti-Malware is exactly the tool that is always useful to have in your armory: fast, efficient, up-to-date. It is appropriate to use it as an emergency help at the slightest suspicion of infection.

DOWNLOAD NOW

Gridinsoft Anti-Malware 6-day trial available.
EULA | Privacy Policy | 10% Off Coupon

Subscribe to our Telegram channel to be the first to know about news and our exclusive materials on information security.

REFOLEX Scam Overview

Originally, REFOLEX poses as a crypto trading & cryptowallet service with remarkably low commission fees. Another bright marketing point for this service is backing from celebrities that are known as crypto activists. Vitalii Buterin (Ethereum creator), Elon Musk, Jeff Bezos, Bill Gates, Warren Buffet – the site claims having significant support from them. To make these claims look more realistic, con actors use deepfake videos where those celebrities promote the fraud as the best thing in the world. Obviously, Elon Musk is the most common among them. But, as I said in the introduction, all this is just a blatant wrap around an obvious scam.

REFOLEX Scam

First and foremost, REFOLEX copies the layout of multiple similar websites. There are quite a few examples, like Vetbex, Hueglot or Gatexbeast. They are completely indistinguishable in terms of visual elements, with small discrepancies in the website header. Other specific elements, and sometimes even crypto wallet addresses, are unchanged. Probably, all these fraudulent sites are operated by the same gang of swindrels.

Cryptocurrency Scam Summary

How the REFOLEX Scam Works?

REFOLEX is a part of a significant cryptocurrency scam scheme that started circulating actively in 2023. Scammers who stand behind it use various website designs, which still share the same overall layout. Another shared element are the ways the scams like NAME are promoted, and the manner all this ends up to the victim of the scam. To reach peak efficiency, frauds apply complex psychological tricks that make the user believe in the legitimacy of the website. But let’s review them one by one.

Step 1: Promotion

To begin the scam, criminals set up and fill accounts on popular social media platforms. They primarily target Facebook, Instagram, Twitter, and TikTok. Subsequently, the marketing campaign commences. Using bots and paid advertisements (when achievable), fraud actors intensify the presence of their fraudulent activities to potential victims. And as I said, fraudsters do not disdain using generative AI for creating videos with the aforementioned celebs that advertise their scam to the public. To boost the folks even more, frauds claim the bonus for every user who enrolls the service immediately.

Promotions of cryptoscams like REFOLEX in TikTok. Most of these videos are AI-generated deepfakes

Users receive an encouragement to sign up, drawn by the assurance of obtaining crypto prizes valued at hundreds of dollars, all without cost. To increase the appeal of the offer, fake suggestions of sponsorship by a celebrity are incorporated. As you may guess, these assertions are entirely baseless.

Step 2: Gaining Traffic

After clicking the promos, targets end up on a page filled with enticing offers. “Crypto starts with REFOLEX”, “Your crypto savings are secured with REFOLEX, “Start earning with REFOLEX – they look rather authoritative. To heat up the interest and make the users proceed to step 3, fraudsters say that getting the pledged bonus requires registration. And since nothing suspicious happens at this point, unaware users happily proceed – especially as the gift appears to be right behind the corner.

This is the last stage when it is possible to skip the scam without any losses. Before you sign up using your personal data, crooks will not earn even a penny from your presence on the website.

Step 3: Data Gathering

This is the starting poing of the main fraud action. As I just said, scammers bait folks into registration to get bonuses. And all the personal information needed for it – username, email, cryptocurrency wallet address – are valuable for user identification. Exclusively by gathering this info and selling it further into the Darknet, fraudsters can earn quite a penny. Still, their plans go much further.

As it turns out, you cannot use the alleged bonus right away. To make at least crypto purchases on the platform with it, you need to top up the account with the equivalent sum. At this point, the final stage of the scam begins.

Step 4: Requesting funds

Eventually, any cryptocurrency operations require you to have money on your account. With REFOLEX, users are also coerced to top up to use the bonuses. And this is what creates the majority of the money flow to this scam site. By topping up the account, users hope to get the promised gift (usually $500-1000 in USDT), and may start engaging on this website hoping to use all the credited funds and withdraw them.

This, however, is where the first obvious issues start to surface. When keeping an eye on the actual crypto wallet vs what the website says, you can spot that no transactions are done whatsoever. And then, when you’d try to pull out the money from your account, the scam is finally uncovered to the user.

Step 5: Escaping from Funds Withdrawal

There’s no need to explain that swindlers are naught on intentions to give your money back. Though to make the fraud look more realistic, they’ve crafted a whole bunch of reasons to decline the wireout request. Most of them repeat what Know Your Client guidelines say, but for the Refolex.com they are here only to make the withdrawal impossible.

By requesting your personal data, frauds just stall hoping for you to accept the loss and stop contacting them. If you don’t – well, there are multiple other checks you would desperately need to undergo before getting your grand back. And every check will share more and more info of yours, which – you guessed it right – will be then marketed on the Darknet. Never reveal your real info to strangers!

Signs of Scam

I gathered several facts that point at the scammy nature of the Refolex.com. Actually, there are a lot of scams that fall under the same points, so they are pretty much universal.

• Unsubstantiated Credibility. REFOLEX employs fraudulent celebrity endorsements, often featuring names like Elon Musk, Jeff Bezos, Mr. Beast, and Mark Zuckerberg. These false claims extend to fictitious partnerships with reputable entities like Coinbase, Binance, or MetaMask, despite the absence of genuine connections.
• Implausible Earnings Claims. Promising remarkable returns of 50-100-200%, REFOLEX exploits the longing for quick profits. However, such gains are unrealistic within the volatile cryptocurrency landscape, unequivocally identifying REFOLEX as a scam.
• Dubious Corporate Information. REFOLEX arouses suspicion by providing inadequate documentation about ownership, location, and registration. Furthermore, the lack of legitimate contact information and the recent registration of domain and social media profiles deepen skepticism.
• Exclusive Cryptocurrency Payments. Refolex.com solely accepts payments in cryptocurrencies, refraining from traditional bank transfers and other payment methods. This approach not only shrouds the company’s identity but also prevents the possibility of requesting refunds.
• Potential Pyramid Scheme. The scam relies on a Ponzi-like referral structure disseminated through social media. Nevertheless, only initial participants profit, often at the expense of funds brought in by subsequent members.
• Groundless Hype Tactics. REFOLEX utilizes fabricated claims about non-existent events, such as securing contracts with Coinbase or receiving endorsements from Elon Musk. This manipulative strategy aims to foster belief in money returns and encourages individuals to top up their accounts again.

What Should I do as a Victim?

If you had to deal with REFOLEX site and fell victim to that scam, there are still some steps to take. They will make further scam attempts harder, and also boost the knowledge about that scam among folks.

• Report the scam to authorities. Search for local authorities responsible for financial frauds, and also notify wallet providers and social networks via their tech support. It is essential to make the further operations of these scammers much harder.
• Tell your close friends. That step is similar to reporting to the authorities, and has similar effects. By posting info about scam crypto service, you decrease the pool of people they can fool.
• Get evidence. Screenshot or save all the information related to the website. URL, screenshot of a main page, login window, EULA, account top-up menu, wallet addresses – all these things may be useful for authorities to find the scammers.
• Check whether you can ask for a refund. As I’ve said above, crypto payments do not fall under refund policies in most banks. Nonetheless, in some circumstances, it is still possible. Never lose hope until you actually confirm it is gone.
• Make your mistake your lesson. Financial losses are always a reason for frustration, but let’s imagine it was a pay for scam revealing courses. Remember the key features of these crypto scam sites, the way they attract people and what they promise. In the future, you will easily recognize a trap of spending no money.

Scan your system for possible malware infections

Beware of cross scams! Scam actors can use your trust to make you download some stuff or interact with certain documents. It may be a trap that installs malware to your system. There are no moral barriers or limits for these scoundrels.

Throughout the duration of the fraud, its masters may reach out to you with specific documents. Alternatively, they may propose you to deploy “cryptocurrency wallet applications” or “browser extensions” to streamline access to your crypto funds. As we previously determined, these deceivers have no intention of returning your money. So, what can these emails and browser extensions represent? Correct – this is another component of the scam designed to entice you into deliberately installing harmful programs onto your system.

Both plugins and files attached to email messages can act as a shell for various malware. In this scenario, I foresee the presence of spyware and stealers among all kinds of malicious programs. While it is not obligatory for scammers to distribute malware, the likelihood is always significant. As previously mentioned, their ethics is of no concern, and their reputation is already deeply compromised. They have nothing to lose and strive to boost gains.

Remove spyware with Gridinsoft Anti-Malware

We have also been using this software on our systems ever since, and it has always been successful in detecting viruses. It has blocked the most common malicious programs as shown from our tests with the software, and we assure you that it can remove spyware as well as other malware hiding on your computer.

To use Gridinsoft for remove malicious threats, follow the steps below:

1. Begin by downloading Gridinsoft Anti-Malware, accessible via the blue button below or directly from the official website gridinsoft.com.

2.Once the Gridinsoft setup file (setup-gridinsoft-fix.exe) is downloaded, execute it by clicking on the file.

3.Follow the installation setup wizard's instructions diligently.

4. Access the "Scan Tab" on the application's start screen and launch a comprehensive "Full Scan" to examine your entire computer. This inclusive scan encompasses the memory, startup items, the registry, services, drivers, and all files, ensuring that it detects malware hidden in all possible locations.

Be patient, as the scan duration depends on the number of files and your computer's hardware capabilities. Use this time to relax or attend to other tasks.

5. Upon completion, Anti-Malware will present a detailed report containing all the detected malicious items and threats on your PC.

6. Select all the identified items from the report and confidently click the "Clean Now" button. This action will safely remove the malicious files from your computer, transferring them to the secure quarantine zone of the anti-malware program to prevent any further harmful actions.

8. If prompted, restart your computer to finalize the full system scan procedure. This step is crucial to ensure thorough removal of any remaining threats. After the restart, Gridinsoft Anti-Malware will open and display a message confirming the completion of the scan.

Remember Gridinsoft offers a 6-day free trial. This means you can take advantage of the trial period at no cost to experience the full benefits of the software and prevent any future malware infections on your system. Embrace this opportunity to fortify your computer's security without any financial commitment.

Frequently asked questions