Recently, Winshine.buzz site surfaced, promoting itself as a place to store cryptocurrency and other assets securely. I managed to gather reliable evidence that unmistakably indicates it is, in fact, a scam platform.
Regardless of the promises of the most convenient, trustworthy, and customer-centric service, Winshine.buzz does not fulfill any of them. All this is just a gilded wrap around a dirty scam, which takes your funds and never returns them. Any tales about gifts, backing from celebrities etc are non-existent as well.
Winshine Scam Overview
Originally, Winshine poses as a cryptocurrency trading & cryptowallet service with exceptionally low commission fees. Another highlighted selling point for this site is partnerships with celebrities that are known as crypto activists. Vitalii Buterin (Ethereum creator), Elon Musk, Jeff Bezos, Bill Gates, Warren Buffet – the site claims having significant support from them. To make these claims look more realistic, frauds use deepfake videos where those celebrities promote the fake crypto service as if it was the best thing in the world. For known reasons, Elon Musk is the most common among them. But, as I said in the introduction, all this is just a glaring wrap around an obvious scam.
Winshine Scam
First and foremost, Winshine repeats the layout of multiple equivalent online platforms. There are quite a few examples, like Winshine, Teslacapitalhub or Zetboom. They are entirely undistinguishable in terms of graphic elements, with small discrepancies in the site header. Other specific elements, and at times even crypto wallet addresses, are unchanged. Probably, all these deceptive sites are operated by a single gang of scammers.
Cryptocurrency Scam Summary
| Website | Winshine.buzz |
| Hosting | AS13335 Cloudflare, Inc. United States, San Francisco |
| IP Address | 172.67.145.5 |
| Threat Type | Scam/Fraud |
| Scam Type | Fraudulent offers of cryptocurrency services |
How the Winshine Scam Works?
Winshine is a part of a extensive cryptocurrency scam scheme that started circulating actively in 2023. Rascals who stand behind it use various website designs, which still share the same overall layout. Another common element are the ways the scams like NAME are promoted, and the manner all this ends up to the victim of the scam. To reach peak efficiency, frauds apply sophisticated psychological tricks that make the user believe in the legitimacy of the website. But let’s review them one by one.
Step 1: Promotion
To start the deceptive scheme, criminals create and fill accounts on popular social media platforms. They mainly focus on Facebook, Instagram, Twitter, and TikTok. Subsequently, the advertising campaign commences. Employing bots and sponsored promotions (when feasible), scam actors boost the visibility of their fraudulent activities to possible victims. And as I said, crooks do not disdain using deepfake for creating clips with the aforementioned celebs that promote their scam to the public. To boost the folks even more, frauds claim the bonus for every user who enrolls the service immediately.
Promotions of cryptoscams like Winshine in TikTok. Most of these videos are AI-generated deepfakes
Step 2: Gaining Traffic
After clicking the promotions, users end up on a page filled with appealing offers. “Crypto starts with Winshine”, “Your crypto savings are secured with Winshine, “Start earning with Winshine – they look rather authoritative. To heat up the interest and make the users proceed to step 3, fraudsters say that getting the pledged bonus requires registration. And as nothing concerning happens at this point, uninformed users happily proceed – especially since the bonus appears to be right behind the corner.
At this point, it is possible to skip the scam without any losses. Before you sign up using your personal information, crooks will not be able to earn even a penny from your presence on the website.
Step 3: Data Gathering
This is the starting poing of the main fraud action. As I just said, scammers bait folks for registration with bonuses. And all the personal data needed for it – email, username, cryptocurrency wallet address – are valuable for user identification. Solely by gathering this information and selling it further into the Darknet, crooks can earn quite a penny. Still, their plans go much further.
As it turns out, you cannot use the promised bonus right away. To make at least crypto purchases on the platform with it, the user should top up the account with the equivalent sum. And this is what starts the final stage of the scam.
Step 4: Requesting funds
It is obvious that any crypto operations require you to have money on your account. With Winshine, users are also forced to top up to get the bonuses. And this is what creates the majority of the cash flow to this fraudulent site. By topping up the account, users hope to get the pledged gift (usually $500-1000 in USDT), and may start trading on this site hoping to use all the credited money and withdraw them.
This is where the victim notices the problems. When comparing the real crypto wallet vs what the website says, you can spot that no transactions are done whatsoever. And then, when you’d try to pull out the funds from your account, the scam is finally uncovered to the user.
Step 5: Escaping from Funds Withdrawal
There’s no need to explain that scoundrels have 0 intentions to send you money. But to make the fraud look more legitimate, they’ve developed a whole bunch of reasons to decline the withdrawal request. Most of them repeat what Know Your Client guidelines say, but for the Winshine.buzz they are here only to make the wireout impossible.
By requesting your personal information, frauds just stall hoping for you to accept the loss and stop contacting them. If you don’t – well, there are multiple other checks you would desperately need to undergo before getting your funds back. And every check will reveal more and more information, which – you guessed it right – will be then sold on the Darknet. Never reveal your real info to strangers!
Signs of Scam
I gathered several facts that point at the scammy nature of the Winshine.buzz. Actually, there are a lot of scams that fall under the same points, so they are pretty much universal.
- False Celebrity Sponsorship. Winshine often resorts to fake endorsements from celebrities such as Elon Musk, Jeff Bezos, Mr. Beast, and Mark Zuckerberg. This fraudulent tactic extends to claiming partnerships with reputable companies like Coinbase, Binance, or MetaMask, despite lacking any genuine affiliations.
- Cryptocurrency-Only Payments. Winshine.buzz exclusively accepts payments in cryptocurrencies, rejecting traditional bank transfers and other methods. This approach not only masks the company’s identity but also eliminates the possibility of seeking refunds.
- Dubious Company Information. Winshine raises suspicion by withholding essential ownership, location, and registration details. Furthermore, the absence of legitimate contact information and the recent establishment of domain and social media pages intensify skepticism.
- Unsubstantiated Hype. Winshine.buzz employs groundless hype tactics, fabricating events like securing contracts with Coinbase or receiving endorsements from Elon Musk. These manipulative techniques aim to instill false confidence and encourage further investments.
- Potential Pyramid Scheme. The scam relies on a structure resembling a Ponzi scheme, leveraging a referral system spread through social media. However, only initial participants benefit, often at the expense of subsequent investors.
- Implausible Claims. Promising returns of 50-100-200%, Winshine preys on the desire for quick profits. Yet, the volatile nature of the cryptocurrency market makes such gains highly unlikely, definitively labeling Winshine as a scam.
What Should I do as a Victim?
If you had to deal with Winshine site and fell victim to that scam, there are still some steps to take. They will make further scam attempts harder, and also boost the knowledge about that scam among folks.
- Immediate Reporting. Your initial step should involve promptly notifying local authorities specializing in financial fraud. Extend your reach by reaching out to wallet providers and engaging with social networks’ technical support teams. These actions serve to raise the bar for the scammers’ operations.
- Share among Friends. Amplify your efforts by informing your close friends about the scam. Similar to informing authorities, this dissemination of information restricts the scammers’ potential victim pool.
- Preserve Crucial Information. Compile a comprehensive evidence archive by capturing screenshots and archiving all relevant website-related data. Collect the website URL, screenshots of the main page, login interface, end-user license agreement (EULA), account top-up menu, and wallet addresses. These records could provide vital clues for authorities in their pursuit of the scammers.
- Exploring Refund Options. While most banks’ refund policies may exclude cryptocurrency payments, it’s advisable to explore potential refund avenues under specific circumstances. Maintain hope until you obtain confirmation of the loss.
- Transform Loss into Knowledge. Turn your financial setback into an opportunity for growth. View your loss as an investment in understanding the strategies employed by crypto scam sites. Familiarize yourself with their telltale characteristics, the methods they employ to entice individuals, and the extravagant promises they make. Equipped with this insight, you’ll be well-prepared to spot and evade future traps without suffering additional financial setbacks.
Scan your system for possible malware infections
Beware of cross scams! Scam actors can use your trust to make you download some stuff or interact with certain documents. It may be a trap that installs malware to your system. There are no moral barriers or limits for these scoundrels.
Throughout the timeline of the scam, scoundrels may contact you with particular documents. Alternatively, they may suggest you to install “cryptocurrency wallet applications” or “browser extensions” to streamline access to your crypto savings. As we previously figured out, these rascals have no intent of giving back your funds. So, what can these messages and browser extensions represent? You guessed – that is another component of the scam designed to throw you into willingly running harmful programs onto your system.
Both extensions and attachments included to emails can serve as a carrier for diverse malware. In this situation, I foresee the presence of spyware and stealers among all forms of threats. While it is not mandatory for scammers to distribute malware, the probability is always above zero. As previously mentioned, their morality is of little concern, and their dignity is already seriously marred. They have no principles to give up and intend to maximize revenues.
