The BBB warns of a rising ghost-tap scam exploiting tap-to-pay cards and mobile wallets. How attackers use NFC proximity tricks.
The post Ghost-Tap Scam Makes Payments Scarier appeared first on Security Boulevard.
The U.S. Department of Justice (DOJ) has taken down a web domain linked to a major crypto investment scam operating out of Burma, targeting people in the United States.
The site, tickmilleas(dot)com, was allegedly run by operators inside the Tai Chang scam compound, also known as Casino Kosai, in the village of Kyaukhat.
Investigators say the website pretended to be a legitimate trading platform but instead pulled victims into a coordinated and highly deceptive crypto scheme.
An affidavit supporting the seizure links the Tai Chang compound to the Democratic Karen Benevolent Army and the Trans Asia International Holding Group Thailand Company Limited.
Justice Department Announces Seizure of Tai Chang Scam Compound Domain Used in Cryptocurrency Investment Fraud https://t.co/VcpnUrjpyb
— Criminal Division (@DOJCrimDiv) December 3, 2025
The department said both groups were sanctioned last year for ties to Chinese organized crime and their involvement in setting up scam centers across Southeast Asia.
The domain seizure follows the recent launch of the District of Columbia’s Scam Center Strike Force and the takedown of two other domains tied to the same operation.
Victims told the FBI that the tickmilleas(dot)com platform showed fake profits, staged deposits, and other fabricated data meant to make it look like their trades were performing well.
Scammers reportedly walked victims through these fake trades to build trust, even though the entire system was controlled behind the scenes.
Although the domain was only registered in early November 2025, investigators have already identified several victims who lost money within weeks.
The DOJ has since replaced the site with a notice telling visitors the domain has been seized.
The affidavit also says the domain directed people to download scam mobile apps from Google Play and the Apple App Store.
After receiving warnings from the FBI, both companies removed several apps linked to the operation.
Meta also took down more than 2,000 connected accounts after receiving information about the Tai Chang network.
Federal officials say these actions reflect growing concern about crypto-related investment scams, which remain one of the most damaging categories of online crime in the United States.
In 2024, the FBI’s Internet Crime Complaint Center recorded more than 41,000 complaints tied to crypto investment fraud, totaling an estimated $5.8 billion in losses.
The action comes during a period of intense federal activity against crypto-related crime.
On November 20, prosecutors unsealed charges against former Olympic snowboarder Ryan Wedding, accusing him of running a Tether-based laundering network for drug money and allegedly ordering the murder of a federal witness in Colombia earlier this year.
— Cryptonews.com (@cryptonews) November 21, 2025
Former Olympic snowboarder Ryan Wedding is facing criminal charges in an international crypto-related scheme.#RyanWedding #DOJhttps://t.co/SIbcmvuL4j
A few days earlier, on November 14, the DOJ announced the sentencing of Travis Ford, the CEO of Wolf Capital Crypto Trading, who received a five-year prison sentence for running a $9.4 million investment scam advertised as offering daily returns of up to two percent.
Federal investigators also moved to seize more than $15 million in USDT connected to North Korea’s APT38 hacking unit, which they say carried out several major crypto exchange breaches in 2023.
— Cryptonews.com (@cryptonews) November 16, 2025
The US DOJ is seeking to seize over $15 million in USDT tied to North Korean state-backed hacking unit APT38.#NorthKorea #Cryptohttps://t.co/LdPBVFKOhG
The FBI seized the funds in March 2025 and is now asking a court for permission to return the assets to the victims.
In a separate case, prosecutors secured guilty pleas from five people accused of helping North Korean IT workers secretly obtain jobs in U.S. companies.
Other recent enforcement steps include a civil forfeiture case tied to $584,741 in USDT linked to an Iranian national accused of supporting the Islamic Revolutionary Guard Corps’ drone program.
Additionally, in September, the DOJ sanctioned 19 entities in Myanmar and Cambodia for running forced-labor scam compounds used to operate large-scale crypto fraud networks.
The post DOJ Seizes Burma Crypto Scam Domain After Victims Lost Millions in Fake Trading Scheme appeared first on Cryptonews.
The day after Google filed a lawsuit to end text scams primarily targeting Americans, the criminal network behind the phishing scams was “disrupted,” a Google spokesperson told Ars.
According to messages that the “ringleader” of the so-called “Lighthouse enterprise” posted on his Telegram channel, the phishing gang’s cloud server was “blocked due to malicious complaints.”
“We will restore it as soon as possible!” the leader posted on the channel—which Google’s lawsuit noted helps over 2,500 members coordinate phishing attacks that have resulted in losses of “over a billion dollars.”
© mathisworks | DigitalVision Vectors
Switzerland’s NCSC warns iPhone users of a new scam exploiting lost devices to steal Apple ID credentials through fake Find My messages.
The post Lost Your iPhone? Beware Fake ‘Find My’ Messages Aiming to Steal Your Apple ID appeared first on TechRepublic.
Switzerland’s NCSC warns iPhone users of a new scam exploiting lost devices to steal Apple ID credentials through fake Find My messages.
The post Lost Your iPhone? Beware Fake ‘Find My’ Messages Aiming to Steal Your Apple ID appeared first on TechRepublic.
Login