The chain scam behind Binance's "high yield" activity: how chat groups, Google Forms, and "AI projects" conspire to harvest users.

CN
3 hours ago

Recently, a meticulously designed series of scams surrounding Binance high-yield financial products, prediction markets, and AI projects has rapidly spread within the Chinese community. On the surface, this information is highly "aligned" with popular platform activities and trending Web3 projects, but in reality, it leads users step by step into a financial black hole through a combination of disguised group chats, phishing links, Google forms, and third-party platforms. Multiple victims have reported to the community that they were guided to complete multiple on-chain transfers in a short period, with funds disappearing without a trace. This article outlines the complete path of the scammers, their script templates, and risk signals to help users identify this new type of scam packaged under "high yield + official language + AI concepts."

Scam Path Breakdown: From "Welfare Groups" to "Project Private Placements"

Entry Disguise: Attracting Traffic with Hot Topics
- Scammers often use banners like “Binance high-yield financial products,” “certain platform airdrop bonuses,” “AI concept leading projects” to cast a wide net through social media comment sections, unofficial communities, and private messages.
- Recently, victims reported entering the scam loop through a “welfare group link + friend forwarding” dual endorsement, mistakenly believing it was an extension group of Binance or mainstream communities.
- The traffic attraction phase deliberately embeds phrases like “limited time, internal testing, only for old users” to induce users to rush without deep thinking.

Community Packaging: Simulating Official, Consensus, and FOMO Atmosphere
- Scam groups are often named “Binance internal testing group/quantitative strategy group/AI ecosystem discussion group,” and elements like platform logos, K-line charts, and screenshots of official activities appear in group avatars and announcements.
- Within the group, multiple “shills” will take turns displaying “profit screenshots, withdrawal records, customer service replies,” creating the illusion that the project is already operational and just waiting for you to join.
- Some cases show that scammers will repurpose real official activity copy, secretly embedding their own phishing links or third-party forms, making it difficult for ordinary users to discern authenticity at a glance.

Information Collection: Google Forms + Web Forms Harvesting Privacy and Asset Information
- A common aspect of the scam is pushing users to fill out so-called “whitelist registration, risk control review, financial quota application” via Google forms or web forms.
- The forms will require users to fill in: exchange UID, on-chain address, contact information, and even induce them to provide “screenshots of recharge records and asset scale ranges for risk detection convenience.”
- Some victims mentioned that the forms included questions like “Do you have assets on other platforms that can be used for linked strategies,” which essentially set the stage for the next step of migrating more funds.

Disguised Customer Service and Risk Control: Advancing Transfers Under the Pretense of “Review,” “Risk Control,” and “Quota Unlocking”
- After filling out the form, users are usually added one-on-one by “customer service” or “risk control specialists,” whose avatars, nicknames, and scripts exhibit obvious “official” characteristics.
- The script focuses on:
- “Your account was misjudged by the system, and you need to go through an on-chain verification process”;
- “To activate high-yield financial products/strategy permissions, you need to transfer to a designated address for fund proof”;
- “Funds will be returned immediately after verification, this is just a system record.”
- These statements are completely inconsistent with normal platform risk control processes, but under the combination of “high yield + urgency + official language,” many investors let their guard down.

Multiple Rounds of Fund Transfers: From Small Amounts to Full Transfers in a “Boiling Frog” Approach
- Scammers typically do not ask users to make large transfers right away; instead:
- They first have users transfer a small amount of funds, completing a “return” on-chain to create a sense of “controllable and refundable” safety;
- Then, they require larger amounts under the pretext of “quota not activated, profits not unlocked, risk control not passed”;
- After users invest a significant amount, they delay with “the system is being liquidated, please be patient,” ultimately going completely dark.
- This multi-round transfer structure psychologically pushes users toward “since I’ve already invested, I’ll add another amount to complete the process,” leading to exponentially larger losses.

AI, Prediction Markets, and “New Narratives” as New Tools for Scam Packaging
- In some scam cases, scammers claim to be participating in a certain “AI reasoning project, prediction market platform, on-chain research DAO,” asserting that this is the “next wave of trends.”
- They display some AI-generated project white paper pages, simulated trading interfaces, or prediction event lists, creating a professional image of doing “in-depth strategies.”
- The reality is that these “projects” either do not exist at all or are merely a simulated site that can be shut down at any time, with all “profits” and “odds” being backend values, ultimately leading to the only path: transferring your real money into the scammer's controlled wallet.

Risk Signals and Defense Points: How to Identify Inconsistencies Between Chat Groups, Forms, and “Official” Sources

Check Entry Sources: Everything Starts with “Who Invited You to the Group”
- Official activities, products, and risk control notifications are usually communicated through:
- Platform in-app messages, announcement boards;
- Platform official websites, verified social media accounts;
- Activity pages disclosed by partners.
- If you were invited through:
- Messages from strangers;
- Links to “welfare groups” or “internal testing quotas” forwarded by group friends;
- Unfamiliar “customer service QR codes/personal WeChat
leading you to participate in so-called “Binance-related activities,” you should be highly cautious.

Self-Check Form Logic: Legitimate Risk Control Will Not Require You to “Self-Report” to Third Parties
- Any request for you to fill out on Google forms or unofficial web pages:
- Account UID;
- Asset scale, recharge records;
- Asset distribution on other platforms;
- Personal contact information (WeChat, phone, email)
and claiming to be directly related to “Binance risk control, quota application, high-yield whitelist” should be assumed to be suspicious of fraud.
- Real platform risk control and quota management will not be conducted through such third-party forms + private chats, nor will they require you to make large on-chain transfers under the pretext of filling out forms.

High Yield + Urgency + Third-Party Addresses: A Typical Scam Triangle Structure
- When the following three points appear simultaneously, it can almost be directly determined as high risk:
- Promising high yields or scarce quotas (for example, using phrases like “far exceeding market average” to imply excessive returns);
- Reminding “limited spots, time is tight, if you don’t grab it, it will be gone”;
- Requiring you to transfer funds to a non-verified, non-platform custodial wallet address or unfamiliar contract.
- No matter how the other party explains “this is a risk control address/liquidation address/strategy pool address,” as long as it does not appear in official verifiable paths of the platform, you should not transfer funds.

“Customer Service/Risk Control Specialist” Verification: Only Recognize Official Tickets and In-App Channels
- Scammers often disguise themselves by:
- Using platform logos and official nickname formats;
- Including terms like “Support/Helpdesk/VIP Service” in their nicknames;
- Actively adding users, claiming to be “special risk control for your recent trading behavior.”
- Self-protection principles:
- Do not click any login links or download packages sent in chat software;
- Do not log in or enter verification codes on unofficial websites or apps;
- If you have doubts about the authenticity of the message, you should verify directly through the platform app/official website ticket or online customer service entrance, rather than continuing communication in external chat software.

AI, Prediction Markets, New On-Chain Narratives: Do Not Substitute “Sounds Cutting-Edge” for Verification
- New narratives and concepts are indeed the norm in Web3, but before making any transfer actions, you can quickly self-check:
- Does the project have public audit reports, clear team information, long-term traceable contracts and addresses;
- Have multiple authoritative media and research institutions conducted independent evaluations of it, rather than just screenshots and word of mouth;
- Can its contracts, liquidity, and historical transactions be found in mainstream blockchain explorers and DeFi aggregation tools?
- If the information is highly asymmetric—i.e., the other party strongly pushes you to “get on board quickly,” but you can hardly find reliable third-party information, it should be understood as a high-risk signal.

This is Not an Isolated Incident: The Deep Logic of Scams Resonating with Industry Hotspots

The reason this series of scams was able to densely reach a large number of users in a short time is not coincidental, but resonates with the current environment of the entire cryptocurrency market: on one hand, as market activity increases, various high-yield products, on-chain strategies, AI concept projects frequently emerge, amplifying investors' greed and FOMO emotions; on the other hand, compliance pressures and regulatory uncertainties have made many platforms more cautious in external communications, allowing scammers to take advantage of the “information vacuum period” to infiltrate users under the guise of “insider information, internal testing, quotas.” In this environment, many people have gradually become accustomed to obtaining project information through communities, recommendations from acquaintances, and screenshot dissemination, rather than returning to official platforms and public data for verification, providing the most fertile ground for scams.

Bullish and Bearish Perspectives: User Education Strengthens, but Scam Iterations Are Also Accelerating

● Optimistic/Supportive View: Seeing it as an opportunity for safety education and compliance advancement
- A large number of users have personally felt the dangers of “chat screenshots, welfare groups, form links” during this incident, becoming more sensitive to “any transfer requests from unofficial paths.”
- Trading platforms, media, and security teams are also beginning to focus more on producing anti-fraud materials, from in-app pop-ups, announcements, to community presentations, with overall security awareness expected to rise a notch.
- Some believe that with the popularization of real-name systems, compliance reviews, and on-chain tracking tools, such large-scale, long-term operating scam groups will find it harder to survive in the long run.

● Pessimistic/Opposing View: Worrying that scams will continue to “chase hotspots” and upgrade iterations
- Scam models have evolved from early “phishing websites + fake recharge screenshots” to now being deeply tied to high-yield financial products, AI projects, prediction markets, and other hot tracks, significantly enhancing their deceptive nature.
- In an environment where profit expectations are continuously raised, there will always be people willing to “bet once for double returns,” and scammers only need to replicate a set of script templates, combined with new hot narratives to restart a new round of harvesting.
- Some security researchers point out that even if platforms and media continue to promote safety awareness, as long as users remain accustomed to “listening to what others say rather than verifying for themselves,” scams will reappear in different forms.

Outlook: Making “Official Path Verification” a Habit of Operation, Not a Post-Event Remediation

In the short term, the market will continue to focus on several key nodes: first, how leading platforms can make anti-fraud tips, official verification paths, and risk control explanations more intuitive within the app, so that users can immediately think of risks when they see combinations like “high yield + forms + third-party customer service”; second, whether media and communities can continuously disseminate real cases and executable self-checklists, rather than only “summarizing lessons” after the fact; third, whether users themselves are willing to make “asking one more question in advance, checking once more” a rigid step, rather than relying on the hope of “whether they can recover if scammed.” Only when a new balance is formed between high yield temptations and safety verification habits can similar shell scams disguised as “Binance activities,” “AI projects,” and “prediction markets” truly lose their space for survival.

Join our community to discuss and become stronger together!
Official Telegram community: https://t.me/aicoincn
AiCoin Chinese Twitter: https://x.com/AiCoinzh

OKX Welfare Group: https://aicoin.com/link/chat?cid=l61eM4owQ
Binance Welfare Group: https://aicoin.com/link/chat?cid=ynr7d1P6Z

免责声明:本文章仅代表作者个人观点,不代表本平台的立场和观点。本文章仅供信息分享,不构成对任何人的任何投资建议。用户与作者之间的任何争议,与本平台无关。如网页中刊载的文章或图片涉及侵权,请提供相关的权利证明和身份证明发送邮件到support@aicoin.com,本平台相关工作人员将会进行核查。

Share To
APP

X

Telegram

Facebook

Reddit

CopyLink