Recently, Tonfex.com site popped up, promoting itself as a place to store cryptocurrency and other assets safely. I managed to gather reliable proof that unmistakably indicates it is, actually, a scam site.
Regardless of the promises of the most easy, trustworthy, and customer-centric service, Tonfex.com does not offer any of them. In fact, all this is just a shiny wrap around a blatant scam, which steals your funds and never returns them. Any stories about bonuses, endorsement from celebrities etc are nowhere to be found as well.
Tonfex Scam Overview
Originally, Tonfex poses as a cryptocurrency trading & cryptowallet platform with remarkably low commission fees. Another notable selling point for this service is partnerships with celebrities that are known in the crypto world. Warren Buffet, Elon Musk, Vitalii Buterin, Jeff Bezos – the site claims having significant support from them. To make these claims look real, con actors employ deepfake videos with those celebs advertise the scam as if it was the best thing in the world. For obvious reasons, Elon Musk is the most common choise for that. But, as I said in the introduction, all this is just a glaring wrap around an obvious scam.
To begin with, Tonfex copies the layout of multiple similar online platforms. There are quite a few examples, like Sundropex, Starcryptex or Suldex. They are totally indistinguishable in terms of graphic elements, with minor discrepancies in the website header. Other particulars, and sometimes even crypto wallet addresses, are identical. Presumably, all these fraudulent sites are operated by a single team of scoundrels.
Cryptocurrency Scam Summary
Website | Tonfex.com |
Hosting | AS13335 Cloudflare, Inc. United States, San Francisco |
IP Address | 188.114.96.3 |
Threat Type | Scam/Fraud |
Scam Type | Fraudulent offers of cryptocurrency services |
How the Tonfex Scam Works?
Tonfex is a part of a significant cryptocurrency scam scheme that started circulating actively in 2023. Scammers who stand behind it use several website designs, which still share the same overall layout. Another common element are the ways the scams like NAME are promoted, and the manner all this ends up to the victim of the scam. To reach peak efficiency, frauds apply sophisticated psychological tricks that make the user believe in the validity of the website. But let’s review them one by one.
Step 1: Promotion
To start the scam, criminals establish and fill accounts on popular social media platforms. They mainly target Facebook, Instagram, Twitter, and TikTok. Subsequently, the promotional campaign commences. Employing bots and paid ads (when feasible), scam actors boost the exposure of their deceptive activities to possible victims. And as I said, crooks do not disdain using deepfake for creating videos with the mentioned celebrities that advertise their scam to the public. To boost the folks even more, frauds claim the bonus for every user who registers the service immediately.
Users obtain a stimulus to sign up, drawn by the promise of receiving cryptocurrency benefits valued at hundreds of dollars, all for free. To enhance the attractiveness of the offer, false claims of sponsorship by a celebrity are incorporated. As you may guess, these claims are entirely baseless.
Step 2: Gaining Traffic
Upon following the promos, targets end up on a page filled with appealing offers. “Crypto starts with Tonfex”, “Your crypto savings are secured with Tonfex, “Start earning with Tonfex – they look rather authoritative. To heat up the interest and make the users proceed to step 3, fraudsters say that retrieving the promised bonus requires registration. And as nothing questionable happens at this point, uninformed users happily move on – especially since the gift appears to be right behind the corner.
At this point, it is possible to skip the scam without any losses. Before you sign up using your personal data, frauds will not be able to earn even a nickel from your presence on the website.
Step 3: Data Gathering
This is where the main fraud action begins. As I just mentioned, scammers bait folks into registration for bonuses. And all the personal information needed for it – email, username, crypto wallet address – are valuable for user identification. Solely by gathering this info and selling it further into the Darknet, swindlers can earn quite a penny. Nonetheless, their plans go much further.
As it turns out, the promised bonus is not available for withdrawal right away. To make at least crypto purchases on the platform with it, the user should top up the account with the sum of a bonus. At this point, the final stage of the scam kicks in.
Step 4: Requesting funds
Eventually, any crypto purchases require you to have money on your account. In the case of Tonfex, users are also compelled to top up to get the bonuses. And this is what creates most of the cash flow to this scam website. By topping up the account, users hope to get the committed gift (usually $500-1000 in USDT), and may start engaging on this website hoping to use all the transferred funds and withdraw them.
This, however, is where the victim notices the issues. When comparing the real cryptocurrency wallet vs what the website says, you can spot that no transactions are done whatsoever. And then, when you’d try to retrieve the funds from your account, the scam is finally uncovered to the user.
Step 5: Escaping from Funds Withdrawal
Needless to say that scoundrels have no intentions to give your money back. But to make the denial look more realistic, they’ve made up a whole bunch of reasons to decline the transfer-out request. Most of them repeat what KYC regulations say, but in this case they are here only to make the withdrawal impossible.
By asking for your personal information, deceivers just stall hoping for you to accept the loss and stop contacting them. If you don’t – well, there are numerous other checks you would desperately need to undergo before getting your funds back. And every check will uncover more and more info of yours, which – you guessed it right – will be then marketed on the Darknet. Never reveal your real info to strangers!
Signs of Scam
I gathered several facts that point at the scammy nature of the Tonfex.com. Actually, there are a lot of scams that fall under the same points, so they are pretty much universal.
- Unsubstantiated Credibility. Tonfex employs fraudulent celebrity endorsements, often featuring names like Elon Musk, Jeff Bezos, Mr. Beast, and Mark Zuckerberg. These false claims extend to fictitious partnerships with reputable entities like Coinbase, Binance, or MetaMask, despite the absence of genuine connections.
- Implausible Earnings Claims. Promising remarkable returns of 50-100-200%, Tonfex exploits the longing for quick profits. However, such gains are unrealistic within the volatile cryptocurrency landscape, unequivocally identifying Tonfex as a scam.
- Dubious Corporate Information. Tonfex arouses suspicion by providing inadequate documentation about ownership, location, and registration. Furthermore, the lack of legitimate contact information and the recent registration of domain and social media profiles deepen skepticism.
- Exclusive Cryptocurrency Payments. Tonfex.com solely accepts payments in cryptocurrencies, refraining from traditional bank transfers and other payment methods. This approach not only shrouds the company’s identity but also prevents the possibility of requesting refunds.
- Potential Pyramid Scheme. The scam relies on a Ponzi-like referral structure disseminated through social media. Nevertheless, only initial participants profit, often at the expense of funds brought in by subsequent members.
- Groundless Hype Tactics. Tonfex utilizes fabricated claims about non-existent events, such as securing contracts with Coinbase or receiving endorsements from Elon Musk. This manipulative strategy aims to foster belief in money returns and encourages individuals to top up their accounts again.
What Should I do as a Victim?
If you had to deal with Tonfex site and fell victim to that scam, there are still some steps to take. They will make further scam attempts harder, and also boost the knowledge about that scam among folks.
- Report to Authorities. Your initial action should involve reporting the scam to local authorities responsible for addressing financial fraud. Additionally, reach out to wallet providers and engage with the technical support teams of social networks. This collective effort raises the bar for the scammers’ operations.
- Inform Your Inner Circle. Extend your impact by sharing information about the scam with your close friends. Similar to notifying authorities, this dissemination of details curbs the scammers’ potential to deceive.
- Document the Trail. Assemble a comprehensive record by capturing screenshots and archiving all relevant website-related data. This encompasses the website URL, screenshots of the main page, login interface, end-user license agreement (EULA), account top-up menu, and wallet addresses. These materials offer invaluable leads for authorities in their pursuit of the scammers.
- Explore Refund Possibilities. While cryptocurrency payments may not typically align with traditional bank refund policies, it’s worthwhile to explore potential refund avenues under specific circumstances. Maintain a positive outlook until you secure confirmation of the loss.
- Transform Loss into Insight. Shift your focus from the financial loss to gaining wisdom. Consider your loss as an investment in comprehending the tactics employed by crypto scam sites. Familiarize yourself with their distinctive traits, the methods they employ to entice individuals, and the extravagant pledges they make. This knowledge equips you to recognize and avoid future traps, minimizing the risk of enduring further financial setbacks.
Scan your system for possible malware infections
Beware of cross scams! Scam actors can use your trust to make you download some stuff or interact with certain documents. It may be a trap that installs malware to your system. There are no moral barriers or limits for these scoundrels.
Throughout the course of the scam, its masters may reach out to you with specific files. Alternatively, they may propose you to set up “cryptocurrency wallet applications” or “browser extensions” to facilitate access to your crypto savings. As we already figured out, these rascals have no plan of restoring your money. So, what do these emails and browser add-ons represent? You guessed – that is another element of the fraudulent scheme designed to entice you into willingly running destructive applications onto your system.
Both plugins and files attached to email messages can act as a carrier for various malware. In this scenario, I expect the presence of spyware and stealers among other kinds of malicious programs. While it is not obligatory for scammers to distribute malware, the likelihood is always significant. As previously mentioned, their ethics is of little concern, and their reputation is already severely tarnished. They have no principles to give up and strive to maximize gains.
Remove spyware with Gridinsoft Anti-Malware
We have also been using this software on our systems ever since, and it has always been successful in detecting viruses. It has blocked the most common malicious programs as shown from our tests with the software, and we assure you that it can remove spyware as well as other malware hiding on your computer.
To use Gridinsoft for remove malicious threats, follow the steps below:
1. Begin by downloading Gridinsoft Anti-Malware, accessible via the blue button below or directly from the official website gridinsoft.com.
2.Once the Gridinsoft setup file (setup-gridinsoft-fix.exe) is downloaded, execute it by clicking on the file.
3.Follow the installation setup wizard's instructions diligently.
4. Access the "Scan Tab" on the application's start screen and launch a comprehensive "Full Scan" to examine your entire computer. This inclusive scan encompasses the memory, startup items, the registry, services, drivers, and all files, ensuring that it detects malware hidden in all possible locations.
Be patient, as the scan duration depends on the number of files and your computer's hardware capabilities. Use this time to relax or attend to other tasks.
5. Upon completion, Anti-Malware will present a detailed report containing all the detected malicious items and threats on your PC.
6. Select all the identified items from the report and confidently click the "Clean Now" button. This action will safely remove the malicious files from your computer, transferring them to the secure quarantine zone of the anti-malware program to prevent any further harmful actions.
8. If prompted, restart your computer to finalize the full system scan procedure. This step is crucial to ensure thorough removal of any remaining threats. After the restart, Gridinsoft Anti-Malware will open and display a message confirming the completion of the scan.
Remember Gridinsoft offers a 6-day free trial. This means you can take advantage of the trial period at no cost to experience the full benefits of the software and prevent any future malware infections on your system. Embrace this opportunity to fortify your computer's security without any financial commitment.
Frequently asked questions
The vast majority of information posted on the Tonfex site is false. It is either fabricated, or a manipulation that misses the context of mentioned events. However, things like quotes or other interactive elements related to current prices may be trustworthy. But I would rather avoid using them as a primary source of information.
No, there is no legitimate information on the Tonfex site. The operators of this site use fabricated details and deceptive tactics to create an appearance of credibility, such as appealing visuals and claims of being a licensed company. However, these claims are false, and the site is part of a larger network of interconnected crypto scam sites designed to defraud victims. The scammers manipulate users into providing sensitive personal information and making deposits, ultimately leading to the loss of funds.
Unfortunately, recovering funds lost to a scam like Tonfex can be extremely challenging, if not impossible. Scammers often operate from obscure locations and use various tactics to cover their tracks, making it difficult to trace or retrieve the stolen funds. In many cases, these scams are designed to exploit victims and disappear once they have obtained the money.
Spotting crypto trading scams requires vigilance and a critical eye. Here are some tips to help you identify potential crypto trading scams in the future:
- Verify Regulation and Licensing. Before proceeding, ensure that the platform or service is regulated and possesses the necessary licenses from relevant authorities. Scammers often operate without proper authorization.
- Resist Urgency. Be cautious of tactics that create a false sense of urgency to pressure you into quick decisions. Legitimate investments provide ample time for research and consideration.
- Consult Reviews and Feedback. Seek independent reviews and feedback from other traders. While positive reviews can be fabricated, negative reviews often reveal valuable insights.
- Question Unrealistic Promises. Approach offers with unrealistically high returns or guaranteed profits skeptically. If an investment opportunity seems too good to be true, it probably is.
- Scrutinize Celebrity Endorsements. Exercise skepticism when faced with endorsements from celebrities or public figures. Scammers frequently create fake endorsements to enhance credibility.
If you have become a victim of a Tonfex or similar crypto trading scam, it’s important to take immediate action to minimize further damage and increase the chances of recovering your losses. Here’s what you should do:
- Cease Communication. If you realize that you’ve been scammed, stop all communication with the scammers. Do not respond to their emails, messages, or calls.
- Document Everything. Gather and preserve all relevant information, including emails, screenshots, transaction records, and any communication you had with the scammers. This documentation will be crucial for reporting the scam and seeking assistance.
- Report to Authorities. File a report with your local law enforcement agency and any relevant regulatory authorities in your country. Provide them with all the evidence you have gathered. This helps initiate investigations and raises awareness about the scam.
- Contact Financial Institutions. If you made any payments or deposits using your credit card or bank account, contact your financial institution immediately. They may be able to help you with disputing transactions or initiating a chargeback.
- Seek Legal Advice. Consult with a legal professional who specializes in fraud or financial matters. They can provide advice on potential legal actions you can take to recover your funds.
- Notify Cryptocurrency Exchanges. If you used a cryptocurrency exchange to make transactions related to the scam, notify the exchange about the fraudulent activity. They may be able to assist you in some cases.
- Monitor Your Accounts. Keep a close eye on your financial and online accounts for any suspicious activity. Change passwords and enable two-factor authentication wherever possible.