Balance.FOR.PAYMENTS.0.7495.Bitcoin (The Harry Potter Scammers Return)

Scam Number:

Scammer’s Website or Email:

  1. Just a moment...
  2. bitfinbon.site/offbitbonus_1120/

Additional information about this scam:
Quarter-or-less-assed email with a PDF attachment.
The first page of the PDF attachment actually looks somewhat legit. However, the other 8 pages or so are a complete mess with passages from the Harry Potter books copied seemingly at random.

Email Body:


Your account already has 13.999$

So anyway,


First page:

The entire page is a link to the scam site.

Next page:

The other nine pages of the pdf are like this, a complete mess. I suppose the Harry Potter passages help to skew spam filters that do text analysis or something? You would think it would be easier and better just to have one page full of tiny text with the passages.

URLScan: crypto025.online - urlscan.io

The link redirects to crypto025.online which displays a fake captcha. It then redirects you on to bitfinbon.site/offbitbonus_1120/ which is the real scam site, pretending to be a cloud mining site where you left some bitcoin. It then tries to get you to pay a transfer fee in order to send you the bitcoin, which is a scam.