Fraudulent YouTube Tutorials Targeting Crypto Traders
A fraudulent wave of YouTube tutorials masquerading as educational resources on AI-driven crypto trading bots has scammed 224 unsuspecting individuals, resulting in the theft of approximately 274.6 ETH, equivalent to around $517,000. A recent report published by TRM Labs on September 14 outlines how the operation cleverly disguised malicious Ethereum contracts as legit automated trading platforms purportedly using Anthropic’s AI tool, Claude.
Operation Overview
This innovative approach enabled the perpetrators to siphon off funds without relying on traditional phishing tactics such as dubious links or unclear wallet approvals. The investigation by TRM Labs traced 234 contracts that were incorrectly deployed by victims—though only 224 individuals fell prey since some participants attempted to create multiple contracts. Ultimately, the stolen funds were funneled to six addresses controlled by the scam operators.
Notably, the average loss per incident was calculated to be around 1 ETH, highlighting that the overall theft didn’t hinge on a single, large victim.
Deceptive Educational Experience
What sets this scam apart is its presentation. Unlike typical phishing schemes that prompt immediate access to wallet information, these videos presented a more deceptive educational experience. Victims stumbled upon these seemingly instructional videos, followed step-by-step guides, and unwittingly executed the malicious actions themselves.
TRM identified an alarming number of nearly identical tutorials, crafted under various user identities. Each tutorial featured AI-generated characters and voiceovers that endowed them with a facade of credibility.
The creators promised that, with their guidance, viewers could build a fully automated crypto arbitrage bot using Claude. During the viewing process, victims were instructed to copy and paste code into a designated compiler site, which bore resemblance to Remix—a legitimate development platform for Ethereum smart contracts.
What the victims didn’t realize was that the backend script ignored their pasted code and instead pulled a different malicious contract from a server operated by the scammers, preparing it for deployment.
Mechanics of the Scam
This deceit meant that while victims thought they were working on legitimate code, what was actually being deployed was a harmful contract that accepted ETH deposits, giving the illusion that they were contributing capital for a trading bot to function.
Upon reaching a balance of over 0.05 ETH, the contract was designed to redirect funds to the scammers’ wallet upon the user’s selection of either the ‘Start’ or ‘Withdraw’ functions. The buttons were crafted to mislead; clicking ‘Start’ did not activate a trading strategy, and ‘Withdraw’ did not return funds. In essence, all actions served the same duplicitous goal, facilitating the scam without raising red flags.
False Promises and Lack of AI
TRM’s findings revealed that contrary to the promises made, there were no AI interactions or trading algorithms involved—the branding of Claude was merely part of the scam’s lure. The smart contracts deployed were designed purely to receive deposits and transfer funds to the criminals behind the con.
The clever design of this operation circumvented the traditional wallet protections that usually signal phishing attempts, as the scammers presented themselves as legitimate through the victims’ deployment of new contracts, which were unobstructed by established security mechanisms. This contrasts sharply with the usual phishing operations, which rely on fraudulent domains or requests for broad permissions.
Call to Action and Rising Threats
A previous case involving fake websites, like one with Hyperliquid, also highlighted how online advertising could lead victims to malicious platforms. In this instance, a user lost a staggering 550,000 USDC after being directed to a counterfeit site.
In light of these developments, the FBI’s Internet Crime Complaint Center is urging individuals to report incidents of cryptocurrency fraud. The agency emphasizes that sharing complaint data can assist in uncovering interconnected fraud schemes and halting further thefts. For 2024, they reported losses from internet crimes amounting to $16.6 billion, indicating a significant rise from $12.5 billion the previous year.
Furthermore, security groups focused on cryptocurrency theft are ramping up efforts to combat these sophisticated schemes. As scams evolve, it is crucial for users to remain vigilant, especially when engaging with platforms or tools that promise high returns through seemingly automated trading processes. As the cryptocurrency landscape becomes more complex, the protection of assets will increasingly depend on consumer awareness and education.
