We Investigated Shhoh: Legit or Scam? The Facts

Recently, Shhoh.com site appeared, promoting itself as a platform to store cryptocurrency and other assets safely. I managed to gather credible supporting information that unmistakably reveals it is, in truth, a scam service.

Despite the promises of the most easy, reliable, and customer-centric service, Shhoh.com does not follow any of them. All this is just a gilded wrap around a clear scam, which steals your money and data and never gives them back. Any tales about bonuses, sponsorship from celebrities etc are non-existent as well.

Shhoh Scam Overview

Originally, Shhoh poses as a cryptocurrency trading & cryptowallet service with exceptionally low commission fees. Another highlighted marketing point for this site is partnerships with celebrities that are known as crypto activists. Elon Musk, Bill Gates, Vitalii Buterin, Warren Buffet – the site says about being supported by them. To make these claims look more realistic, rascals use AI-generated videos where those celebrities advertise the scam as if it was the best thing in the world. For known reasons, Elon Musk is the most common choise for that. But, as I mentioned above, all this is just a vivid wrap around an obvious scam.

Shhoh Scam

First and foremost, Shhoh repeats the appearance of numerous equivalent websites. There are quite a few examples, like Bitwexy, Bitswifer or Ferionex. They are completely indistinguishable in terms of graphic elements, with small discrepancies in the site header. Other specific elements, and at times even crypto wallet addresses, are matching. Presumably, all these scam websites are managed by a single team of scammers.

Cryptocurrency Scam Summary

How the Shhoh Scam Works?

Shhoh is a part of a large cryptocurrency scam scheme that started circulating actively in 2023. Scammers who stand behind it use several website designs, which still share the similar overall layout. Another mutual element are the ways the scams like NAME are promoted, and the manner all this ends up to the victim of the scam. To reach peak efficiency, frauds apply advanced psychological tricks that make the user believe in the validity of the website. But let’s review them one by one.

Step 1: Promotion

To initiate the deceptive scheme, criminals set up and fill accounts on well-liked social media platforms. They primarily aim at Facebook, Instagram, Twitter, and TikTok. Subsequently, the promotional campaign commences. Utilizing bots and sponsored ads (when possible), fraud actors boost the presence of their scam activities to possible victims. And as I said, fraudsters do not shy away using deepfake for creating videos with the mentioned celebrities that advertise their scam to the public. To boost the folks even more, deceivers claim the bonus for every user who registers the service immediately.

Promotions of cryptoscams like Shhoh in TikTok. Most of these videos are AI-generated deepfakes

Users obtain an encouragement to register, enticed by the promise of obtaining crypto rewards valued at thousands of dollars, all for free. To increase the appeal of the offer, false claims of sponsorship by a celebrity are added. As you may guess, these claims are completely baseless.

Step 2: Gaining Traffic

Upon clicking the ads, victims end up on a page filled with enticing offers. “Crypto starts with Shhoh”, “Your crypto savings are secured with Shhoh, “Start earning with Shhoh – they look rather credible. To heat up the interest and make the users proceed to step 3, fraudsters say that unlocking the promoted bonus requires registration. And as nothing questionable happens at this point, unexperienced users happily proceed – especially since the reward appears to be right behind the corner.

This is the last stage when it is possible to get away from the scam without any losses. Before you sign up using your personal info, rascals will not be able to earn even a penny from your presence on the website.

Step 3: Data Gathering

This is where the main fraud action begins. As I just said, deceivers bait folks into signing up for bonuses. And all the personal info needed for it – email, username, crypto wallet address – are valuable for user identification. Only by gathering this info and selling it further into the Darknet, fraudsters can earn quite a penny. Nonetheless, their plans go much further.

As it turns out, you cannot use the promised bonus right away. To make at least cryptocurrency purchases on the platform with it, you need to top up the account with the equivalent sum. And this is what starts the final step of the scam.

Step 4: Requesting funds

Obviously, any cryptocurrency purchases require you to have capital on your account. In the case of Shhoh, users are also compelled to top up to claim the bonuses. And these top ups is what creates the majority of the cash flow to this scam site. By topping up the account, users hope to get the promised gift (usually $500-1000 in USDT), and may start trading on this site hoping to use all the credited money and withdraw them.

This, however, is where the first obvious issues start to surface. When keeping an eye on the actual crypto wallet vs what the site says, you can spot that no transactions are done whatsoever. And then, when you’d try to pull out the money from your account, the scam is finally uncovered to the user.

Step 5: Escaping from Funds Withdrawal

Needless to say that scoundrels have no intentions to return your money. Though to make the fraud look more legitimate, they’ve crafted a whole bunch of reasons to decline the transfer-out request. Most of them repeat what Know Your Client guidelines say, but in this case they are here exclusively to make the withdrawal impossible.

By asking for your personal data, deceivers just stall hoping for you to understand that you’ve been scammed and stop contacting them. If you don’t – well, there are multiple other checks you should go through before getting your money back. And each of these checks will share more and more information, which – you guessed it right – will be then traded on the Darknet. Never reveal your real info to strangers!

Signs of Scam

I gathered several facts that point at the scammy nature of the Shhoh.com. Actually, there are a lot of scams that fall under the same points, so they are pretty much universal.

• False Celebrity Sponsorship. Shhoh often resorts to fake endorsements from celebrities such as Elon Musk, Jeff Bezos, Mr. Beast, and Mark Zuckerberg. This fraudulent tactic extends to claiming partnerships with reputable companies like Coinbase, Binance, or MetaMask, despite lacking any genuine affiliations.
• Cryptocurrency-Only Payments. Shhoh.com exclusively accepts payments in cryptocurrencies, rejecting traditional bank transfers and other methods. This approach not only masks the company’s identity but also eliminates the possibility of seeking refunds.
• Dubious Company Information. Shhoh raises suspicion by withholding essential ownership, location, and registration details. Furthermore, the absence of legitimate contact information and the recent establishment of domain and social media pages intensify skepticism.
• Unsubstantiated Hype. Shhoh.com employs groundless hype tactics, fabricating events like securing contracts with Coinbase or receiving endorsements from Elon Musk. These manipulative techniques aim to instill false confidence and encourage further investments.
• Potential Pyramid Scheme. The scam relies on a structure resembling a Ponzi scheme, leveraging a referral system spread through social media. However, only initial participants benefit, often at the expense of subsequent investors.
• Implausible Claims. Promising returns of 50-100-200%, Shhoh preys on the desire for quick profits. Yet, the volatile nature of the cryptocurrency market makes such gains highly unlikely, definitively labeling Shhoh as a scam.

What Should I do as a Victim?

If you had to deal with Shhoh site and fell victim to that scam, there are still some steps to take. They will make further scam attempts harder, and also boost the knowledge about that scam among folks.

• Secure Your Actions. Begin by promptly reporting the scam to appropriate local authorities tasked with handling financial fraud. Notify wallet providers and engage with social networks’ technical support teams. By taking these measures, you contribute to making the scammers’ operations significantly more difficult.
• Expand Awareness. Extend your efforts by sharing the scam information with your close friends. This action has a parallel effect to reporting to the authorities, as disseminating details about fraudulent crypto services reduces the potential victims they can deceive.
• Gather Evidence. Preserve comprehensive evidence by capturing screenshots and saving all pertinent data linked to the deceptive website. Collect the URL, screenshots of the main page, login interface, end-user license agreement (EULA), account top-up menu, and wallet addresses. These materials could prove invaluable for authorities in their pursuit of the scammers.
• Explore Refund Possibilities. While cryptocurrency payments generally fall outside the scope of refund policies within most banks, it’s worth investigating the potential for a refund in specific circumstances. Maintain optimism until you definitively confirm the loss.
• Convert Mistake into Wisdom. Transform your financial setback into a valuable learning experience. Treat your loss as an investment in understanding the tactics of crypto scam sites. Familiarize yourself with their key characteristics, how they lure individuals, and the grandiose promises they make. Armed with this knowledge, you’ll be well-equipped to recognize and avoid falling into future traps without incurring further losses.

Scan your system for possible malware infections

Beware of cross scams! Scam actors can use your trust to make you download some stuff or interact with certain documents. It may be a trap that installs malware to your system. There are no moral barriers or limits for these scoundrels.

Throughout the timeline of the scam, its actors may get in touch with you with particular files. Alternatively, they may suggest you to set up “cryptocurrency wallet applications” or “browser extensions” to facilitate access to your cryptocurrency savings. As we already determined, these scoundrels have no intent of giving back your capital. So, what can these emails and browser plugins represent? You guessed it right – that is another side of the deceptive plan designed to throw you into deliberately running destructive programs onto your device.

Both add-ons and attachments attached to email messages can function as a shell for diverse malicious code. In this scenario, I anticipate the presence of spyware and stealers among all types of threats. While it is not mandatory for scammers to distribute malware, the likelihood is always greater than zero. As previously mentioned, their ethics is of negligible importance, and their reputation is already neck deep in mud. They have no principles to lose and strive to maximize gains.

Frequently asked questions