{“lastseen”:”2025-10-15T18:53:46″,”description”:”This scam starts in your TikTok DMs. A brand-new account drops a melodramatic message\u2014terminal illness, last goodbye, \u201cI left you some assets.\u201d At the bottom: a ready-made username and password for a crypto site you\u2019ve never used. It\u2019s designed to feel urgent and personal so you tap before you think. The whole funnel is built for phones: big tap targets, short copy, sticky chat bubbles\u2014perfect for someone arriving straight from TikTok.\\n\\n\\n\\nThanks to our community for spotting this one. This exact scam was shared on our Malwarebytes subreddit by user Ok-Internal-2110, who posted a warning for TikTok users after encountering it firsthand.\\n\\nI walked through the flow so you don\u2019t have to.\\n\\n## **What the site shows vs. what actually exists**\\n\\n**The illusion:** \\nThe moment you log in with the credentials from that TikTok DM, a glossy, mobile-friendly dashboard flashes a huge balance. There\u2019s motion (numbers \u201cupdate\u201d), a believable \u201chistory,\u201d and a big **Withdraw** button right where your thumb expects it. On a small screen, it looks like a real account with real money.\\n\\n \\n\\n**The trap:** \\nWhen you try to send that balance to your own wallet, the site asks for a withdrawal key belonging to the original account holder\u2014the one from the DM. You don\u2019t have that key, and support won\u2019t give it to you. External withdrawals are a dead end by design.\\n\\n\\n\\n**The detour they push you to take:** \\nSupport suggests using **Internal Transfer** instead. Conveniently, they also offer to help you create a new user \u201cin seconds,\u201d and this new account _will_ have its own key (because you created it). That makes it feel like you\u2019re finally doing something legitimate: \u201cI\u2019ll just transfer the funds to my new account and then withdraw.\u201d\\n\\n\\n\\n**The paywall you only meet once you\u2019re invested:** \\nInternal transfers only work on \u201cVIP\u201d accounts. To upgrade to VIP, you must pay for a membership. Many victims pay here, assuming it\u2019s a one-time hurdle before they can finally withdraw.\\n\\n\\n\\n**Why nothing real ever leaves the site:** \\nAfter you upgrade and attempt the internal transfer, the site can:\\n\\n * demand another fee (a \u201climit lift,\u201d \u201ctax,\u201d or \u201csecurity key\u201d),\\n * fail silently and push you to support, or\\n * \u201ccomplete\u201d the transfer inside the fake ledger while still blocking any external withdrawal.\\n\\n\\n\\nVictims end up **paying for the privilege of moving fake numbers between fake accounts** \u2014then paying again to \u201cunlock\u201d a withdrawal that never happens.\\n\\n## The scam in a nutshell\\n\\nThis scam is built for volume. DMs and comments via a huge platform like TikTok seed the same gift-inheritance story to thousands of people at once. \\n\\nTwo things do the heavy lifting:\\n\\n * **Shock value** : That huge, unexpected number on the dashboard delivers a little jolt of surprise mixed with excitement, which lowers skepticism and pushes you into fast, emotional decision-making.\\n * **Foot-in-the-door** : Small steps (log in \\u003e try withdraw \\u003e hit a roadblock \\u003e \u201cjust upgrade to VIP\u201d) nudge you toward paying a fee that now feels reasonable.\\n\\n\\n\\nWith borrowed authenticity from a big on-screen balance, the scammers sell you VIP access to move that fake balance around internally while keeping you forever one step away from a real, on-chain withdrawal.\\n\\n### Why do people keep paying up? \\n\\n * The balance _looks_ real, so every new hurdle feels like bureaucracy, not fraud.\\n * Paying once creates sunk cost: \u201cI\u2019ve already invested\u2014one more step and I\u2019m done.\u201d\\n * Internal movements inside their dashboard mimic progress, even though no on-chain transfer ever occurs.\\n * A mobile flow encourages momentum\u2014it\u2019s always \u201cone more tap\u201d to finish.\\n\\n\\n\\nAny system that makes you **pay to receive money that allegedly already belongs to you** is likely to be a scam.\\n\\nThe part most people miss is that you\u2019re also handing over personal data. Even if you never send crypto, the site and the chat funnel collect a surprising amount of information, including your name, email, and phone number.\\n\\nThat data is valuable on its own and makes follow-up scams easier. Phishing that references the earlier \u201caccount,\u201d extortion threats, fake \u201crefund\u201d offers that ask for remote access, SIM-swap attempts tied to your number, or simple resale of your details to other crews\u2014and sadly, getting hooked once increases the odds you\u2019ll be targeted again.\\n\\n### How to recognize this family of scams\\n\\n * You\u2019re asked to log into a site with credentials someone else gave you.\\n * A big balance appears instantly, but external withdrawals require a mystery key or never complete.\\n * You\u2019re told internal transfers are possible only after buying VIP or a membership.\\n * The support bubble is quick to reply about upgrades and silent about on-chain withdrawals.\\n * Any \u201cproof\u201d of funds exists only inside their dashboard\u2014no public ledger, no small test withdrawal.\\n\\n\\n\\n## How to stay safe \\n\\nThere are safer ways to test claims (without losing money):\\n\\n 1. **Never pay to \u201cunlock\u201d money.** If funds are yours, you don\u2019t buy permission to move them.\\n 2. **Ask for on-chain proof.** Real balances live on a public ledger. If they can\u2019t show it, it doesn\u2019t exist.\\n 3. **Attempt a tiny withdrawal first** to a wallet you control\u2014on legitimate platforms, that\u2019s routine after verifying your identity (know you customer, or KYC) and enabling two-factor authentication (2FA).\\n 4. **Search the flow, not just the brand.** Scam kits change names and domains, but the \u201cVIP to withdraw\u201d mechanic stays the same.\\n\\n\\n\\nWhat to do if you already engaged:\\n\\n * **Stop sending funds.** The next fee is not the last fee.\\n * **Lock down accounts:** change passwords, enable 2FA, reset app passwords, and review recovery phone\/email.\\n * **Reduce future targeting:** consider a new email\/number for financial accounts and remove your number from public profiles.\\n * **Document everything** (screenshots, timestamps, any wallet addresses or TXIDs if you paid).\\n * **Report** the TikTok account and the website, and file with your local cybercrime or consumer-protection channel.\\n * **Tell someone close to you.** Shame keeps people quiet; silence helps the scammers.\\n\\n\\n\\nIf a platform says there\u2019s a pile of crypto waiting for you but you must buy VIP to touch it, you\u2019re not withdrawing funds; you\u2019re buying a story. TikTok brings you in on your phone; the mobile UI keeps you tapping. Close the tab, report the DM, and remember: dashboards can be faked, public ledgers can\u2019t.\\n\\n* * *\\n\\n**We don ‘t just report on scams\u2014we help detect them**\\n\\nCybersecurity risks should never spread beyond a headline. If something looks dodgy to you, check if it’s a scam using Malwarebytes Scam Guard, a feature of our mobile protection products. Submit a screenshot, paste suspicious content, or share a text or phone number, and we\u2019ll tell you if it’s a scam or legit. Download Malwarebytes Mobile Security for iOS or Android and try it today!”,”published”:”2025-10-15T16:18:06″,”modified”:”2025-10-15T16:18:06″,”type”:”malwarebytes”,”title”:”TikTok scam sells you access to your own fake money”,”source”:””,”references”:””,”id”:”MALWAREBYTES:64B4FFB7DE16F2A67A89627E801576C2″,”bulletinFamily”:”blog”,”cwe”:null,”cvelist”:[],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.malwarebytes.com\/blog\/news\/2025\/10\/tiktok-scam-sells-you-access-to-your-own-fake-money”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-10-15T18:53:46″,”description”:”This scam starts in your TikTok DMs. A brand-new account drops a melodramatic message\u2014terminal illness, last goodbye, \u201cI left you some assets.\u201d At the bottom:…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,115,13,33,7,11,5],"class_list":["post-21950","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-malwarebytes","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n