The Great Scammer Shift: How the Magnetism of Bitcoin is Attracting Cybercriminals from Lesser Blockchains
Know More
Phishing syndicates are abandoning the TON ecosystem to pivot their efforts toward Bitcoin, hinting at a notable transformation within the world of cybercrime. Factors driving this change include a scarcity of high-value accounts ('whales') and Bitcoin's strong appeal to both legitimate users and hackers alike.

A prominent phishing entity, once entrenched in the TON (The Open Network) ecosystem, has announced it will transition to targeting the Bitcoin blockchain instead. This shift offers valuable insights into the current landscape of various blockchain ecosystems and marks a significant evolution in the cybercrime underworld.
It seems that certain nefarious groups are losing interest in the TON ecosystem, which was previously viewed as a fertile ground for both scammers and legitimate players. The primary reason cited for this exit is the claimed lack of 'whales'—a term in the crypto scene referring to individuals or entities with vast holdings of digital assets. This trend underscores Bitcoin's sustained allure while raising red flags about the future viability of the TON network.
Know More
Developed by the messaging giant Telegram, The Open Network (TON) continued to flourish independently despite Telegram's withdrawal due to regulatory challenges. Through initiatives like incentive-driven airdrops and innovative blockchain-based games such as Notcoin and Hamster Kombat, it garnered a significant following. These efforts contributed to a noticeable rise in daily active users.
However, the characteristics of this user base have proven to be a double-edged sword. While TON enjoyed a considerable influx of users, a significant portion consisted of what are known as 'airdrop farmers'—individuals making minimal transactions solely to qualify for token distributions. This behavior, coupled with contentious tokenomics, has seemingly created an environment that initially attracted fraudsters but ultimately did not yield the expected profits.
Fraudulent Tactics within the TON Ecosystem
Scammers deployed a variety of sophisticated strategies while operating in the TON landscape. One notable tactic involved exploiting TON’s comment feature. Tricksters crafted enticing yet fraudulent transaction promises, boasting sums as significant as 5,000 USDT, for instance. When victims engaged with these deceiving offers, they would inadvertently authorize transactions that drained their crypto wallets.
There were cases in May where losses exceeded $150,000, showcasing just how effective this scheme was for a period. The success of these scams illustrates the critical need for user awareness and robust security in any blockchain environment. It also serves as a stark reminder of how features designed to enhance user experiences can, if not implemented with stringent security in mind, become tools for malicious exploitation.
Motivations and Implications of the Bitcoin Shift
The decision by this phishing group to pivot towards Bitcoin provides significant insights. Bitcoin, being the oldest and most established cryptocurrency, retains a vast user base with numerous valuable wallets. The presence of these 'whales' entices fraudsters looking to capitalize on illicit gains.
This shift is also reflective of Bitcoin's stability and maturity. Despite its age in the rapidly evolving cryptocurrency landscape, Bitcoin remains a keystone in the digital asset market. Its ongoing popularity and substantial transaction volume make it a prime target for cybercriminals.
However, targeting Bitcoin comes with its own set of challenges. Compared to newer blockchain ecosystems, the Bitcoin community is generally more security-aware. Many users in this space may be more resistant to phishing attempts due to their exposure to multiple fraud cycles over the years. Moreover, the Bitcoin community has developed formidable security measures that present serious hurdles for potential scammers.
The Broader Landscape of Cryptocurrency Fraud
The transition of this phishing organization from TON to Bitcoin is part of a wider trend observed in cryptocurrency fraud. Alarming statistics paint a vivid picture of the scale and sophistication of these attacks. In September alone, phishing crimes resulted in losses totaling nearly $46.6 million across 10,800 victims. An individual phishing transaction managed to pilfer almost $32 million in cryptocurrency, underscoring the massive potential losses associated with such schemes.
These figures highlight the ongoing challenges faced by the crypto industry in safeguarding consumers and their assets. As blockchain technologies evolve and gain wider adoption, scammers are likely to seek out these systems, perpetuating a steady stream of potential victims for their elaborate phishing operations.
Read More
Cryptocurrency scammers are continuously innovating their tactics. Attackers are increasingly utilizing advanced tools beyond simple phishing websites, such as wallet drainers. Once access is gained, these malicious applications are designed to automatically siphon funds from the victim’s wallet—often through deceptive means.
Recently, a notorious tool known as Angel Drainer was updated and rebranded as AngelX. This enhanced version can deploy hundreds of phishing decentralized applications (DApps) within just a few days. Security firms and everyday users face considerable obstacles due to the rapid pace and volume of these technological advancements.
Additionally, criminals are becoming more adept at exploiting various facets of the cryptocurrency ecosystem. For instance, search engines have inadvertently displayed harmful phishing links. In one notable case, users were tricked into connecting their MetaMask wallets through counterfeit Etherscan sites featured by DuckDuckGo, potentially enabling hackers to drain their assets. The TON case study illustrates how fraudsters can exploit blockchain technologies designed to enhance user experiences. The comment feature of TON, which encourages more interactive transactions, inadvertently opened doors for phishing attempts. This highlights the critical need for blockchain developers to meticulously evaluate the security ramifications of new features, ensuring a balance between robust security measures against known vulnerabilities and functionality. Other blockchain platforms have also grappled with the risk of malicious exploitation of their unique features. For example, smart contract frameworks have been plagued by numerous instances where contract vulnerabilities were exploited. The challenge lies in creating systems that are both resilient against sophisticated threats and user-friendly.
Read more
User education remains paramount in the battle against crypto fraud, as essential as technological advancements. Rather than relying solely on technical vulnerabilities, successful phishing schemes often exploit human psychology. Victims tend to make impulsive decisions without proper diligence or are seduced by unrealistic promises of returns.
By educating users about common scam tactics, the importance of transaction verification, and the basics of cryptographic security, the incidence of phishing attempts can be significantly reduced. However, imparting this knowledge effectively, especially to newcomers in the crypto realm, continues to pose a challenge.
Please remember that the information provided on this page is not intended as legal, tax, investment, or financial advice and shouldn't be interpreted as such. It's essential to invest only what you can afford to lose and consult with independent financial advisors if you have any uncertainties. For more details, we recommend checking the terms and conditions and support pages provided by the issuer or advertiser. MetaversePost is dedicated to delivering accurate and impartial reporting, but do note that market conditions can change without prior notice.
Victoria writes on a broad spectrum of technology topics, including Web 3.0, artificial intelligence, and cryptocurrencies. Her extensive background equips her to craft insightful pieces aimed at a diverse audience.
Alisa Davidson
April 29, 2025 News Report Binance Completes USDC Integration on Sonic Network, With Deposit Support Now Active
Technology
Space And Time Launches Foundation to Catalyze Adoption of ZK-Proven Data in Blockchain Applications
by