Avoid getting scammed by fake "Binance Bitcoin Payout" websites

What is the "Binance Bitcoin Payout" scam?

"Binance Bitcoin Payout" is a scam that our researchers discovered while investigating a spam email. The message promises a "percentage of profitability" in BTC (Bitcoin cryptocurrency). The email's attachment impersonates a Binance chat and redirects to a website with an identical appearance. This page in turn promotes a fake Binance site that seeks to steal digital assets from victims' cryptocurrency wallets.

IMPORTANT NOTE: We do not review crypto projects, please do your own research when investing money.

Federal Trade Comission (FTC) states that since the start of 2021, more than 46,000 people have reported losing over $1 billion in crypto to scams – that's about one out of every four dollars reported lost, more than any other payment method.

"Binance Bitcoin Payout" scam overview

We found this scam while inspecting a spam email. The subject line of this message stated that the recipient's wallet is being verified for a 0.35260 BTC (Bitcoin cryptocurrency) "percentage of profitability". This opportunity is time-limited and requires the user to verify their identity by logging in.

The body of the letter claims that the fund transfer requested by the recipient has been completed. For accessing the service, they are provided with a password. This email has a PDF document attached to it. This file "_reciept111300.pdf" (filename may vary) is presented as a chat for the Binance cryptocurrency exchange.

Clicking on this image redirects the user to a site bearing the same appearance. The fake chat (in the attachment and webpage) greets the visitor as "Dear Customer" and requests their confirmation of a fund receipt in the amount of 1.349225 BTC (Bitcoin).

In another message, it is stated that due to the provided payment details being incorrect – the funds were undelivered yet remain with Binance. The last message instructs the user to provide the correct payment information and follow the instructions given by the service to receive their payout.

At the time of research, interacting with this site resulted in a redirect to a webpage that was down. It is likely that the endorsed page was disguised as Binance's official website (binance.com).

It must be emphasized that the claims made by this scam are false, and it is not associated with the real Binance or any other legitimate services or entities.

Cryptocurrency-specific scams primarily operate in one of three ways – phishing for wallet log-in credentials, using draining mechanisms to siphon funds from exposed wallets, and tricking users into manually transferring assets to scammer-owned wallets.

As the email promoting this scam mentions logging in and the bogus chat instructs to "correctly indicate your payment information", it is most likely that it operates as a phishing scheme. These types of scams record disclosed information, such as cryptowallet passphrases.

It must be mentioned that victims of crypto-centered schemes cannot recover their digital assets, as cryptocurrency transactions are practically untraceable.

Threat Summary:

Name	"Binance Bitcoin Payout" scam website
Threat Type	Phishing, Scam, Social Engineering, Fraud
Fake Claim	User must provide their payment details to receive the 1.349225 BTC (Bitcoin) payout.
Disguise	Binance
Related Domains	repanem[.]top
Detection Names (repanem[.]top)	Combo Cleaner (Malware), CRDF (Malicious), ESET (Phishing), Fortinet (Phishing), Kaspersky (Phishing), Full List Of Detections (VirusTotal)
Distribution methods	Compromised websites, social media spam, rogue online pop-up ads, potentially unwanted applications.
Damage	Monetary loss
Malware Removal (Windows)	To eliminate possible malware infections, scan your computer with legitimate antivirus software. Our security researchers recommend using Combo Cleaner. ▼ Download Combo Cleaner To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Cryptocurrency-targeting scam examples

We have examined countless online scams; "$PAW Token Exchange", "LINGO Airdrop", "Trust Wallet Airdrop", "Fake BitPay Wallet", "$AVAIL Airdrop", and "ClaimTokens" are just some of our latest articles on cryptocurrency-specific schemes.

Various lures are used to gain victims' interest and trust, such as false claims concerning transactions/payments, pre-sale events, airdrops/giveaways, new coin/token promotions, security upgrades, account/wallet issues, etc.

It must be stressed that since the Internet is rife with deceptive and malicious content – exercising caution is essential when browsing.

How did I open a scam website?

As detailed in the article above, the "Binance Bitcoin Payout" scam was promoted through spam emails. Attachments in these letters redirected to a webpage bearing the same appearance, which in turn promoted a different scam page. However, this scheme could be endorsed using other methods.

Online scams are often promoted via websites that use rogue advertising networks, various types of spam (e.g., emails, DMs/PMs, social media/ forum posts, browser notifications, SMSes, etc.), intrusive advertisements (malvertising), mistyped URLs (typosquatting), and adware.

How to avoid visiting scam websites?

Caution is essential to device and user safety. Therefore, be wary of adverts and sites making promises that sound too good to be true. Pay attention to URLs and enter them carefully. Do not use websites offering pirated content or any other questionable services (e.g., Torrenting, illegal streaming/downloading, etc.), as these webpages usually utilize rogue advertising networks.

Do not permit suspect pages to deliver browser notifications; instead, ignore or deny such requests (i.e., click "Block", "Block Notifications", etc.). Treat incoming emails and other messages with vigilance; do not open attachments or links present in dubious/irrelevant mail.

Download only from official/trustworthy sources and approach installations cautiously (e.g., study terms and options, use "Custom/Advanced" settings, and opt out of additional apps, extensions, etc.) – to prevent bundled/hazardous software (like adware) from infiltrating the device.

If your computer is already infected, we recommend running a scan with Combo Cleaner Antivirus for Windows to automatically eliminate all threats.

Screenshot of the spam email promoting the "Binance Bitcoin Payout" scam:

Text presented in this email:

Subject: Your account is currently being verified. We have written out a percentage of profitability of 0.35260 BTC for you today. We ask you to confirm your application. You don't have much time left. Log in to your account to verify your identity

Your request for funds transfer has been completed. The password for legal access is pass nikolas1718. Enter it on the service. Good luck.

Screenshot of the file attached to this spam email:

Instant automatic malware removal: Manual threat removal might be a lengthy and complicated process that requires advanced IT skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:
▼ DOWNLOAD Combo Cleaner By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Quick menu:

• What is "Binance Bitcoin Payout" scam website?
• How to identify a pop-up scam?
• How do pop-up scams work?
• How to remove fake pop-ups?
• How to prevent fake pop-ups?
• What to do if you fell for a pop-up scam?

How to identify a pop-up scam?

Pop-up windows with various fake messages are a common type of lures cybercriminals use. They collect sensitive personal data, trick Internet users into calling fake tech support numbers, subscribe to useless online services, invest in shady cryptocurrency schemes, etc.

While in the majority of cases these pop-ups don't infect users' devices with malware, they can cause direct monetary loss or could result in identity theft.

Cybercriminals strive to create their rogue pop-up windows to look trustworthy, however, scams typically have the following characteristics:

• Spelling mistakes and non-professional images - Closely inspect the information displayed in a pop-up. Spelling mistakes and unprofessional images could be a sign of a scam.
• Sense of urgency - Countdown timer with a couple of minutes on it, asking you to enter your personal information or subscribe to some online service.
• Statements that you won something - If you haven't participated in a lottery, online competition, etc., and you see a pop-up window stating that you won.
• Computer or mobile device scan - A pop-up window that scans your device and informs of detected issues - is undoubtedly a scam; webpages cannot perform such actions.
• Exclusivity - Pop-up windows stating that only you are given secret access to a financial scheme that can quickly make you rich.

Example of a pop-up scam:

How do pop-up scams work?

Cybercriminals and deceptive marketers usually use various advertising networks, search engine poisoning techniques, and shady websites to generate traffic to their pop-ups. Users land on their online lures after clicking on fake download buttons, using a torrent website, or simply clicking on an Internet search engine result.

Based on users' location and device information, they are presented with a scam pop-up. Lures presented in such pop-ups range from get-rich-quick schemes to fake virus scans.

How to remove fake pop-ups?

In most cases, pop-up scams do not infect users' devices with malware. If you encountered a scam pop-up, simply closing it should be enough. In some cases scam, pop-ups may be hard to close; in such cases - close your Internet browser and restart it.

In extremely rare cases, you might need to reset your Internet browser. For this, use our instructions explaining how to reset Internet browser settings.

How to prevent fake pop-ups?

To prevent seeing pop-up scams, you should visit only reputable websites. Torrent, Crack, free online movie streaming, YouTube video download, and other websites of similar reputation commonly redirect Internet users to pop-up scams.

To minimize the risk of encountering pop-up scams, you should keep your Internet browsers up-to-date and use reputable anti-malware application. For this purpose, we recommend Combo Cleaner Antivirus for Windows.

What to do if you fell for a pop-up scam?

This depends on the type of scam that you fell for. Most commonly, pop-up scams try to trick users into sending money, giving away personal information, or giving access to one's device.

• If you sent money to scammers: You should contact your financial institution and explain that you were scammed. If informed promptly, there's a chance to get your money back.
• If you gave away your personal information: You should change your passwords and enable two-factor authentication in all online services that you use. Visit Federal Trade Commission to report identity theft and get personalized recovery steps.
• If you let scammers connect to your device: You should scan your computer with reputable anti-malware (we recommend Combo Cleaner Antivirus for Windows) - cyber criminals could have planted trojans, keyloggers, and other malware, don't use your computer until removing possible threats.
• Help other Internet users: report Internet scams to Federal Trade Commission.

Frequently Asked Questions (FAQ)

What is an online scam?

Online scams are a type of deceptive content promoted on the Web; it aims to trick users into performing specific actions. For example, victims can be lured into disclosing sensitive information, connecting digital wallets to crypto drainers, making monetary transactions, buying products, subscribing to services, downloading/installing programs, calling fake support lines, and so on.

What is the purpose of online scams?

Profit is the end goal of all scams. Cyber criminals primarily generate revenue by selling/abusing vulnerable information, promoting content (e.g., websites, products, services, etc.), obtaining funds through deception, and spreading malware.

I have provided my personal information when tricked by an online scam, what should I do?

If you have disclosed your log-in credentials – immediately change the password/passphrases of all possibly exposed accounts and inform their official support. However, if the disclosed information was of a different personal nature (e.g., ID card details, passport scans, credit card numbers, etc.) – contact the appropriate authorities without delay.

I have lost digital assets to an online scam, can I get my money back?

Cryptocurrency transactions are irreversible because of their nearly untraceable nature. Hence, victims of scams that target these digital currencies cannot recover the stolen funds.

Why do I encounter online scams?

This "Binance Bitcoin Payout" scam has been endorsed through spam emails. Other promotional methods are not unlikely. Generally, online scams promoted via various types of spam (e.g., emails, DMs/PMs, SMSes, social media/ forum posts, browser notifications, etc.), sites using rogue advertising networks, intrusive ads (malvertising), misspelled URLs (typosquatting), and adware.

Will Combo Cleaner protect me from online scams?

Combo Cleaner is designed to scan visited websites for deceptive/malicious content. Hence, should you happen upon such a page – you will be immediately warned, and further access to it will be blocked.

▼ Show Discussion