Recently, Xolunor.com service popped up, promoting itself as a platform to keep cryptocurrency and other assets safely. I managed to gather reliable supporting information that clearly indicates it is, actually, a deceptive site.
Regardless of the promises of the most convenient, trustworthy, and client-friendly service, Xolunor.com does not offer any of them. All this is just a shiny wrap around a blatant scam, which takes your money and never gives them back. Any tales about gifts, endorsement from celebrities etc are nowhere to be found as well.
XOLUNOR Scam Overview
Originally, XOLUNOR poses as a cryptocurrency trading & cryptowallet service with outstandingly low commission fees. Another highlighted marketing point for this platform is backing from celebrities that are known as crypto activists. Warren Buffet, Elon Musk, Vitalii Buterin, Jeff Bezos – the site claims having significant support from them. To make these claims look real, rascals use AI-generated videos with those celebs promote the fake crypto service as the best thing in the world. For known reasons, Elon Musk is the most common among them. But, as I mentioned above, all this is just a vivid wrap around a transparent scam.
Initially, XOLUNOR repeats the layout of many similar online platforms. There are quite a few examples, like Xoxodex, Prizmera or Ponxdex. They are totally indistinguishable in terms of graphic elements, with minor discrepancies in the website header. Other specific elements, and at times even crypto wallet addresses, are matching. Most likely, all these scam sites are managed by the same gang of swindrels.
Cryptocurrency Scam Summary
| Website | Xolunor.com |
| Hosting | AS13335 Cloudflare, Inc. United States, San Francisco |
| IP Address | 104.21.75.165 |
| Threat Type | Scam/Fraud |
| Scam Type | Fraudulent offers of cryptocurrency services |
How the XOLUNOR Scam Works?
XOLUNOR is a part of a extensive cryptocurrency scam scheme that started circulating actively in 2023. Swindlers who stand behind it use various website designs, which still share the same overall layout. Another mutual element are the ways the scams like NAME are promoted, and the manner all this ends up to the victim of the scam. To reach peak efficiency, frauds apply sophisticated psychological tricks that make the user believe in the validity of the website. But let’s review them one by one.
Step 1: Promotion
To begin the scam, criminals set up and fill accounts on popular social media platforms. They generally aim at Facebook, Instagram, Twitter, and TikTok. Subsequently, the advertising campaign commences. Employing bots and paid ads (when feasible), fraud actors increase the presence of their deceptive activities to possible victims. And as I said, crooks do not shy away using generative AI for creating videos with the aforementioned celebrities that advertise their scam to the public. To boost the folks even more, deceivers claim the bonus for every user who enrolls the service immediately.

Promotions of cryptoscams like XOLUNOR in TikTok. Most of these videos are AI-generated deepfakes
Users obtain a stimulus to sign up, attracted by the commitment of getting crypto prizes valued at hundreds of dollars, all free of charge. To increase the attractiveness of the offer, false suggestions of sponsorship by a celebrity are incorporated. As you may guess, these assertions are entirely baseless.
Step 2: Gaining Traffic
After clicking the promotions, targets end up on a page filled with attractive offers. “Crypto starts with XOLUNOR”, “Your crypto savings are secured with XOLUNOR, “Start earning with XOLUNOR – they look rather credible. To heat up users and make them proceed to step 3, scammers say that unlocking the pledged bonus requires registration. And since nothing concerning happens at this point, uninformed users happily move on – especially as the gift appears to be right behind the corner.
This is the last stage when it is possible to skip the scam without any losses. Before you sign up using your personal data, swindrels will not be able to earn even a nickel from your presence on the website.
Step 3: Data Gathering
This is where the main fraud action begins. As I just said, frauds bait folks for registration with bonuses. And all the personal data needed for it – username, email, crypto wallet address – are valuable for user identification. Solely by gathering this information and selling it further into the Darknet, crooks can earn quite a penny. Nonetheless, their plans go much further.
As it turns out, you cannot use the alleged bonus right away. To make at least crypto purchases on the platform with it, the user should top up the account with the sum of a bonus. At this point, the final stage of the scam begins.
Step 4: Requesting funds
It is obvious that any crypto purchases require you to have money on your account. With XOLUNOR, users are also compelled to top up to get the bonuses. And this is what creates most of the money flow to this scam website. By topping up the account, users hope to get the committed gift (usually $500-1000 in USDT), and may start participating on this website hoping to use all the deposited capital and withdraw them.
This, however, is where the first obvious issues start to surface. When comparing the real cryptocurrency wallet vs what the site says, you can observe that no transactions are done whatsoever. And then, when you’d try to retrieve the funds from your account, the scam is finally uncovered to the user.
Step 5: Escaping from Funds Withdrawal
There’s no need to explain that fraudsters are naught on intentions to return your money. Though to make it look more legitimate, they’ve elaborated a whole pack of reasons to decline the wireout request. Most of them repeat what Know Your Client regulations say, but for the Xolunor.com they are here exclusively to make the withdrawal impossible.
By asking for your personal information, deceivers just stall hoping for you to accept the loss and stop contacting them. If you don’t – well, there are numerous other checks you would desperately need to undergo before getting your money back. And every check will uncover more and more info of yours, which – you guessed it right – will be then sold on the Darknet. Never reveal your real info to strangers!
Signs of Scam
I gathered several facts that point at the scammy nature of the Xolunor.com. Actually, there are a lot of scams that fall under the same points, so they are pretty much universal.
- False Celebrity Sponsorship. XOLUNOR often resorts to fake endorsements from celebrities such as Elon Musk, Jeff Bezos, Mr. Beast, and Mark Zuckerberg. This fraudulent tactic extends to claiming partnerships with reputable companies like Coinbase, Binance, or MetaMask, despite lacking any genuine affiliations.
- Cryptocurrency-Only Payments. Xolunor.com exclusively accepts payments in cryptocurrencies, rejecting traditional bank transfers and other methods. This approach not only masks the company’s identity but also eliminates the possibility of seeking refunds.
- Dubious Company Information. XOLUNOR raises suspicion by withholding essential ownership, location, and registration details. Furthermore, the absence of legitimate contact information and the recent establishment of domain and social media pages intensify skepticism.
- Unsubstantiated Hype. Xolunor.com employs groundless hype tactics, fabricating events like securing contracts with Coinbase or receiving endorsements from Elon Musk. These manipulative techniques aim to instill false confidence and encourage further investments.
- Potential Pyramid Scheme. The scam relies on a structure resembling a Ponzi scheme, leveraging a referral system spread through social media. However, only initial participants benefit, often at the expense of subsequent investors.
- Implausible Claims. Promising returns of 50-100-200%, XOLUNOR preys on the desire for quick profits. Yet, the volatile nature of the cryptocurrency market makes such gains highly unlikely, definitively labeling XOLUNOR as a scam.
What Should I do as a Victim?
If you had to deal with XOLUNOR site and fell victim to that scam, there are still some steps to take. They will make further scam attempts harder, and also boost the knowledge about that scam among folks.
- Report to Authorities. Your initial action should involve reporting the scam to local authorities responsible for addressing financial fraud. Additionally, reach out to wallet providers and engage with the technical support teams of social networks. This collective effort raises the bar for the scammers’ operations.
- Inform Your Inner Circle. Extend your impact by sharing information about the scam with your close friends. Similar to notifying authorities, this dissemination of details curbs the scammers’ potential to deceive.
- Document the Trail. Assemble a comprehensive record by capturing screenshots and archiving all relevant website-related data. This encompasses the website URL, screenshots of the main page, login interface, end-user license agreement (EULA), account top-up menu, and wallet addresses. These materials offer invaluable leads for authorities in their pursuit of the scammers.
- Explore Refund Possibilities. While cryptocurrency payments may not typically align with traditional bank refund policies, it’s worthwhile to explore potential refund avenues under specific circumstances. Maintain a positive outlook until you secure confirmation of the loss.
- Transform Loss into Insight. Shift your focus from the financial loss to gaining wisdom. Consider your loss as an investment in comprehending the tactics employed by crypto scam sites. Familiarize yourself with their distinctive traits, the methods they employ to entice individuals, and the extravagant pledges they make. This knowledge equips you to recognize and avoid future traps, minimizing the risk of enduring further financial setbacks.
Scan your system for possible malware infections
Beware of cross scams! Scam actors can use your trust to make you download some stuff or interact with certain documents. It may be a trap that installs malware to your system. There are no moral barriers or limits for these scoundrels.
Throughout the duration of the scam, rascals may contact you with specific files. Alternatively, they may suggest you to set up “cryptocurrency wallet applications” or “browser extensions” to streamline access to your cryptocurrency funds. As we earlier determined, these rascals have no plan of returning your capital. So, what do these messages and browser plugins represent? Correct – this is another component of the deceptive plan designed to entice you into deliberately installing destructive programs onto your system.
Both plugins and attachments added to email messages can function as a shell for diverse malicious software. In this situation, I expect the presence of spyware and stealers among all forms of malicious programs. While it is not mandatory for scammers to distribute malware, the probability is always significant. As stated, their morality is of negligible importance, and their reputation is already deeply compromised. They have nothing to give up and aim to boost profits.
Frequently asked questions
- Contact your bank or card provider and ask about chargeback options.
- Save screenshots, receipts, tracking numbers, and emails as evidence.
- Change reused passwords and enable two-factor authentication on important accounts.
- Watch for follow-up phishing emails pretending to offer refunds or delivery updates.
