Bitcoin/Crypto 419 scam

Hi,

There's an advance fee scam going on and circulating through various discords regarding receiving "free bitcoin". Users get direct messages on discord to register on a certain website (https://nivbit.com/, https://zelbit.exchange/ and others) and activate a code in order to receive their free BTC. The websites are technologically very well done, while the "operators" and discord spammers are either Russians or from Eastern Asia so their English is pretty bad.

After you register and enter the code you get 0.71 BTC on your account (note that your "account" doesn't have a hash or an address so you can't check your balance on any blockchain explorer). You can exchange the currencies and everything is very well done from website tech perspective, but when you try to withdraw the amount you received you get a message popup that you have to deposit 0.05 BTC ($600) in order to be verified. The website doesn't offer your wallet address (since you don't have one), but rather the scammer's address. Their addresses or wallets are "clean" and without past transactions, so that if you were to check on a blockchain explorer, you'd think it's your wallet on that website, but it isn't and they change deposit addresses regularly.

When you click withdraw and get that message you will receive an email from the scammer that goes like this:

"Please finish your verification. You need to make 0.05 BTC deposit on a special address which I will give you. For more information please email me.

Best Regards
NivBit Team"

They're quick to reply and will pretend it's not a scam even though it obviously is. Some of their operators are from Yekaterinburg area in Russia (websites' servers are located in Moscow) even though they insist that they're called nivBIT Financial Company OÜ based in Estonia disregarding the fact that that company doesn't exist and there are no addresses or locations on any of the websites.

Operator's Email: William Hosten <[email protected] - Russian guy, pretty bad English, from Yekaterinburg area judging by the timestamp on his signature (which is in Cyrillic lmao), he could be the only guy doing this scam though, since the email says "please email me" instead of "us" as it would be if they were a real company.

Some of their wallets used for depositing (you bet those are gonna get changed as soon as they scam someone, or see this)

BTC - 3NB4ZTPuE1zoZSynCbXQFnVedsAS4UowLX
ETH - 0xB0a2059fA82d8507c19cC400Bed5b36EbDD91BF0
LTC - M85yQEr8aTWCJMTscytEFJ7pjk9SDSxpRr

They don't accept any other cryptocurrencies like other altcoins as they're too volatile and could drop in value, even though the buttons exist on the website albeit they're greyed out.

Reddit thread regarding this scam
https://www.reddit.com/r/Scams/comments/hy8otu/received_071_bitcoin_randomly/

Cheers!

Found another one of their websites https://bovbit.com/ (registered 2 days ago). Same layout, virtually identical as everything else. Turns out “William Hosten” is the sole guy pulling this scam as he’s the only one who contacts potential victims. Turns out he did manage to scam someone into sending BTC. This is his wallet address he uses to send to victims as verification (12u1ri1xCZh8nXyCFLRBjtxjfzHGevfQTX), while this one is probably his personal wallet (37nD218xKaUbQ7SPLUXHoLeVdVcuPV4zqT).

Several of their wallet addresses listed on various websites of theirs.

ltc - M9g3emAkvDhfGtAC7KFDGTWkMkTpf1kyHh
eth - 0x44BF927fB801762462874ce2eE3aAD5c85532738
btc - 34pMTSAQHdpxSWwaH9u8cbcJ3qf5i8CvoC

btc - 3QXiWX71jr42RA9XGgpSXt7HUji3AGZ8AG
ltc - M9eTWHUoLph6RtKEgavwfjSFbHQwcEyKhY
eth - 0x7e952711fFC4eb1BE2a76d5C61Eda23A97518d73

btc - 34K3uCRbcbQ5dfqYLYatpLDkvmuxSGsWyv
eth - 0x8F9280E064317D237D14A5aAF9ACECA9BEF6288F
ltc - MAfPevB6jRHcZTo5gKKaykfNXRT8UHgxHp

More domains of theirs;

https://tocbit.com/
https://kavbit.com/

All seem to be clones of https://whitebit.com/, an actual exchange for cryptocurrencies based in Estonia, run by russians as well.

New domain: https://tovbit.com/

New domain: https://tozbit.com/

New domain: https://rixbit.com/

New domain: https://vigbit.com/

New domain: https://diubit.com/