Recently, Tonex.gg service popped up, promoting itself as a platform to store cryptocurrency and other assets safely. I managed to gather reliable evidence that clearly reveals it is, actually, a fraudulent site.
Despite the promises of the most convenient, reliable, and customer-centric service, Tonex.gg does not fulfill any of them. All this is just a gilded wrap around a dirty scam, which steals your funds and never returns them. Any tales about bonuses, sponsorship from celebrities etc are absent as well.
TONEX Scam Overview
Originally, TONEX poses as a cryptocurrency trading & cryptowallet service with exceptionally low commission fees. Another bright selling point for this platform is backing from celebrities that have relation to the crypto world. Elon Musk, Bill Gates, Vitalii Buterin, Warren Buffet – the site says about being supported by them. To make these claims look more realistic, rascals use deepfake videos where those celebrities promote the fake crypto service as the best thing in the world. Obviously, Elon Musk is the most common choise for that. But, as I said in the introduction, all this is just a vivid wrap around an obvious scam.
TONEX Scam
To begin with, TONEX shares the appearance of numerous similar websites. There are quite a few examples, like Map18, Wisteia or Wynorx. They are completely undistinguishable in terms of visual elements, with small discrepancies in the webpage header. Other specific elements, and sometimes even crypto wallet addresses, are unchanged. Probably, all these fraudulent online platforms are managed by a single group of frauds.
Cryptocurrency Scam Summary
| Website | Tonex.gg |
| Hosting | AS13335 Cloudflare, Inc. United States, San Francisco |
| IP Address | 104.21.4.147 |
| Threat Type | Scam/Fraud |
| Scam Type | Fraudulent offers of cryptocurrency services |
How the TONEX Scam Works?
TONEX is a part of a significant cryptocurrency scam scheme that started circulating vividly in 2023. Rascals who stand behind it use numerous website designs, which still share the identical overall layout. Another shared element are the ways the scams like NAME are promoted, and the manner all this ends up to the victim of the scam. To reach peak efficiency, frauds apply complex psychological tricks that make the user believe in the validity of the website. But let’s review them one by one.
Step 1: Promotion
To initiate the deceptive scheme, criminals set up and fill accounts on well-liked social media platforms. They mainly aim at Facebook, Instagram, Twitter, and TikTok. Subsequently, the advertising campaign commences. Utilizing bots and paid ads (when achievable), fraud actors boost the visibility of their scam activities to potential victims. And as I said, crooks do not disdain using generative AI for creating videos with the mentioned celebs that promote their scam to the public. To boost the folks even more, frauds claim the bonus for every user who enrolls the service immediately.
Promotions of cryptoscams like TONEX in TikTok. Most of these videos are AI-generated deepfakes
Users obtain an encouragement to register, enticed by the commitment of receiving crypto prizes valued at hundreds of dollars, all without cost. To increase the appeal of the offer, fake suggestions of cooperation with a celebrity are incorporated. As you may guess, these assertions are completely baseless.
Step 2: Gaining Traffic
After following the promotions, users end up on a page filled with appealing offers. “Crypto starts with TONEX”, “Your crypto savings are secured with TONEX, “Start earning with TONEX – they look rather credible. To heat up users and make them proceed to step 3, fraudsters say that claiming the promoted bonus requires registration. And since nothing suspicious happens at this point, unaware users happily keep on – especially since the reward appears to be right behind the corner.
This is the last stage when it is possible to skip the scam without any losses. Before you sign up using your personal information, rascals will not be able to earn even a nickel from your presence on the website.
Step 3: Data Gathering
This is where the main fraud action begins. As I just mentioned, deceivers bait folks for registration with bonuses. And all the personal info needed for it – email, username, crypto wallet address – is valuable for user identification. Only by gathering this info and selling it further into the Darknet, fraudsters can earn quite a penny. Still, their plans go much further.
As it turns out, the claimed bonus is not available to use right away. To make at least crypto purchases on the platform with it, you need to top up the account with the equivalent sum. At this point, the final stage of the scam begins.
Step 4: Requesting funds
It is obvious that any cryptocurrency operations require you to have capital on your account. With TONEX, users are also coerced to top up to claim the bonuses. And this is what creates the majority of the cash flow to this scam website. By topping up the account, users hope to get the pledged gift (usually $500-1000 in USDT), and may start participating on this website hoping to use all the transferred funds and withdraw them.
This is where the first obvious issues start to surface. When keeping an eye on the actual crypto wallet vs what the site says, you can observe that no transactions are done whatsoever. And then, when you’d try to pull out the money from your account, the scam is finally uncovered to the user.
Step 5: Escaping from Funds Withdrawal
There’s no need to explain that swindlers are naught on intentions to return your money. But to make it look more legitimate, they’ve developed a whole pack of reasons to decline the transfer-out request. Usually, they repeat what KYC requirements say, but for the Tonex.gg they are here only to make the withdrawal impossible.
By asking for your personal info, frauds just stall hoping for you to understand that you’ve been scammed and stop contacting them. If you don’t – well, there are numerous other checks you would desperately need to undergo before getting your money back. And every check will reveal more and more information, which – you guessed it right – will be then traded on the Darknet. Never reveal your real info to strangers!
Signs of Scam
I gathered several facts that point at the scammy nature of the Tonex.gg. Actually, there are a lot of scams that fall under the same points, so they are pretty much universal.
- Cryptocurrency-Only Transactions. Tonex.gg insists on cryptocurrency payments exclusively, excluding conventional methods like bank transfers. This strategy ensures anonymity for the scam and eliminates any possibility of seeking refunds.
- Dubious Company Credentials. TONEX arouses suspicion by failing to provide critical information about ownership, location, and legal registration. The lack of valid contact details and the recent creation of domain and social media profiles cast doubt on its legitimacy.
- Baseless Hype Generation. TONEX resorts to fabricating non-existent achievements, such as contracts with Coinbase or endorsements from Elon Musk, to manipulate emotions and enhance the perception of potential returns, enticing victims to invest more.
- Fictitious Celebrity Association. TONEX employs a deceptive tactic by falsely associating itself with well-known figures like Elon Musk, Jeff Bezos, Mr. Beast, and Mark Zuckerberg. Additionally, the scam falsely claims partnerships with established entities like Coinbase, Binance, or MetaMask to bolster its false credibility.
- Potential Ponzi-Like Model. The scam operates on a pyramid-style referral system disseminated through social media, benefiting only initial participants and relying on later investments to sustain the illusion.
- Unrealistic Profit Promises. Promising improbable returns of 50-100-200%, TONEX capitalizes on the desire for high profits. However, the tumultuous nature of the cryptocurrency market renders such gains implausible, solidifying Tonex.gg as a definite scam.
What Should I do as a Victim?
If you had to deal with TONEX site and fell victim to that scam, there are still some steps to take. They will make further scam attempts harder, and also boost the knowledge about that scam among folks.
- Immediate Reporting. Your initial step should involve promptly notifying local authorities specializing in financial fraud. Extend your reach by reaching out to wallet providers and engaging with social networks’ technical support teams. These actions serve to raise the bar for the scammers’ operations.
- Share among Friends. Amplify your efforts by informing your close friends about the scam. Similar to informing authorities, this dissemination of information restricts the scammers’ potential victim pool.
- Preserve Crucial Information. Compile a comprehensive evidence archive by capturing screenshots and archiving all relevant website-related data. Collect the website URL, screenshots of the main page, login interface, end-user license agreement (EULA), account top-up menu, and wallet addresses. These records could provide vital clues for authorities in their pursuit of the scammers.
- Exploring Refund Options. While most banks’ refund policies may exclude cryptocurrency payments, it’s advisable to explore potential refund avenues under specific circumstances. Maintain hope until you obtain confirmation of the loss.
- Transform Loss into Knowledge. Turn your financial setback into an opportunity for growth. View your loss as an investment in understanding the strategies employed by crypto scam sites. Familiarize yourself with their telltale characteristics, the methods they employ to entice individuals, and the extravagant promises they make. Equipped with this insight, you’ll be well-prepared to spot and evade future traps without suffering additional financial setbacks.
Scan your system for possible malware infections
Beware of cross scams! Scam actors can use your trust to make you download some stuff or interact with certain documents. It may be a trap that installs malware to your system. There are no moral barriers or limits for these scoundrels.
Throughout the course of the fraud, fraudsters may reach out to you with specific files. Alternatively, they may offer you to set up “cryptocurrency wallet applications” or “browser extensions” to facilitate access to your crypto funds. As we previously figured out, these rascals have no intent of restoring your money. So, what do these emails and browser plugins represent? Correct – this is another component of the scam designed to throw you into willingly installing malicious applications onto your device.
Both add-ons and files attached to email messages can act as a carrier for diverse malware. In this scenario, I foresee the presence of spyware and stealers among other types of threats. While it is not obligatory for scammers to distribute malware, the chance is always above zero. As previously mentioned, their conscience is of little concern, and their dignity is already deeply compromised. They have nothing to give up and strive to maximize revenues.
