About a week ago, friends became victim to a scam and sent tens of thousands of IOST coins to scammers. It started with a mass distribution on Telegram claiming to test the IOST mainnet network and offering a type of airdrop: when a transaction is made at a specific time, the exchange would increase the transfer amount by 3%. Users were assured that the transfer was between their own accounts on exchanges (in reality, scammers registered their address with an ID chosen by the user and requested transfers to it), so they believed it and tried it. The first three transactions went smoothly, but the fourth one somehow failed to go through 🙂. Here's an example of how it looks in the block explorer:
https://www.iostscan.com/account/sachoker
The scammers added 3% several times and eventually took 121599.21014613 IOST coins to their MEXC account. You can conveniently see all those caught on one page here: https://www.iostscan.com/account/netwiost
But this post is more about MEXC's customer support. I advised my acquaintances to contact them, and later communicated with them on their behalf. Understandably, scammers don't leave stolen funds on the exchange and withdraw them immediately, making it unrealistic to recover anything. However, for some reason, MEXC staff refused to prevent such incidents with their other users. One of them even transferred coins to scammers worth more than $70k USDT: https://www.iostscan.com/account/pro0891
Not only did the correspondence last for several days, but within two hours, I asked the exchange to block the withdrawal of IOST for this user when it became clear that he would lose a considerable sum. The result was only repetitive responses akin to those of bots (or were they indeed bots?) 🔥️️
MEXC Elvin 15May 16:05 GMT+7
Quote
Dear user,
The account is frozen for 48 hours until a request is made and the corresponding application is submitted
We sincerely understand your feelings and just as much as such a situation is not pleasant, however, due to the fact that such information will be a disclosure of information about the accounts of 3 persons, it is necessary for us to submit an application for this.
After this, we will check everything and also cooperate with law enforcement agencies, therefore we ask you to send a request as soon as possible.
Best regards, MEXC team
The account is frozen for 48 hours until a request is made and the corresponding application is submitted
We sincerely understand your feelings and just as much as such a situation is not pleasant, however, due to the fact that such information will be a disclosure of information about the accounts of 3 persons, it is necessary for us to submit an application for this.
After this, we will check everything and also cooperate with law enforcement agencies, therefore we ask you to send a request as soon as possible.
Best regards, MEXC team
Me 15may 19:22 GMT+7 #ticket #20240515000097#, #ticket #20240515000091##
Quote
Hello, Elvin.
I have no any hope of returning funds, but may be you can help other people.
Look plz to this IOST account:
https://www.iostscan.com/account/netwiost
Here you can see "auth.iost::signUp" transactions for registration of new "mainnet testers". For example other victim (not me): https://www.iostscan.com/tx/9SfkEF75QoEW6o67bgaFhe42j2t2X1zxxejYJrQFgS7T
Then go to page of user: https://www.iostscan.com/account/azizdautov
These transactions have stolen coins:
https://www.iostscan.com/tx/F5ZC9NknWhZyhUiTCwPKVz5JtTYLWM3jy6Za9VCvuyhR
https://www.iostscan.com/tx/24NWGHsiShUtqP3k7C8E1LycFZVys9WhNMESMn62boB7
https://www.iostscan.com/tx/AFASPHZxp9PjbPfJNzfejG4eVdJiaPmE2tQ4mLZyqr2A
So, you can check all accounts at https://www.iostscan.com/account/netwiost and localize all malicious MEXC accounts.
https://www.iostscan.com/account/netwiost?activetab=1&listtab=0&page=1&rowsPerPage=20
I have no any hope of returning funds, but may be you can help other people.
Look plz to this IOST account:
https://www.iostscan.com/account/netwiost
Here you can see "auth.iost::signUp" transactions for registration of new "mainnet testers". For example other victim (not me): https://www.iostscan.com/tx/9SfkEF75QoEW6o67bgaFhe42j2t2X1zxxejYJrQFgS7T
Then go to page of user: https://www.iostscan.com/account/azizdautov
These transactions have stolen coins:
https://www.iostscan.com/tx/F5ZC9NknWhZyhUiTCwPKVz5JtTYLWM3jy6Za9VCvuyhR
https://www.iostscan.com/tx/24NWGHsiShUtqP3k7C8E1LycFZVys9WhNMESMn62boB7
https://www.iostscan.com/tx/AFASPHZxp9PjbPfJNzfejG4eVdJiaPmE2tQ4mLZyqr2A
So, you can check all accounts at https://www.iostscan.com/account/netwiost and localize all malicious MEXC accounts.
https://www.iostscan.com/account/netwiost?activetab=1&listtab=0&page=1&rowsPerPage=20
MEXC Dilan 15May 23:20 GMT+7
Quote
Hello,
The account to which the funds were received has been restricted for 48 hours.
For further consideration, you need to submit a statement by contacting law enforcement agencies. After that, law enforcement agencies should fill out the form on the website: https://www.mexc.com/support/requests/legal
Guidelines for law enforcement personnel: https://www.mexc.com/support/articles/4403594593434
The account to which the funds were received has been restricted for 48 hours.
For further consideration, you need to submit a statement by contacting law enforcement agencies. After that, law enforcement agencies should fill out the form on the website: https://www.mexc.com/support/requests/legal
Guidelines for law enforcement personnel: https://www.mexc.com/support/articles/4403594593434
Me 15may 23:11 GMT+7 #ticket #20240515000097#, #ticket #20240515000091##
Quote
Ok I see, that account is frozen.
So, now scammers use okex for sell IOST coins
https://www.iostscan.com/account/fedor2020
I think now you know enough information, but stop them can be not easy
So, now scammers use okex for sell IOST coins
https://www.iostscan.com/account/fedor2020I think now you know enough information, but stop them can be not easy
Me 17may 00:55 GMT+7 #ticket #20240515000097#, #ticket #20240515000091##
Quote
Can I talk with somebody from security department? I understand that I can’t return funds, but maybe you can help stop scammers?
Forward this information to security department:
https://www.iostscan.com/account/pro0891
Need cancel IOST withdrawals for user who made transaction https://www.iostscan.com/tx/4UyvqBT2bES6NAFbSkNAeMLstpMh8R6GPHkuJnC7Qj62
And contact him through email, say him stop do IOST widthdrawals to scammers address? Can you make this? Or need try to publish information that MEXC help scammers steal users funds???
Forward this information to security department:
https://www.iostscan.com/account/pro0891
Need cancel IOST withdrawals for user who made transaction https://www.iostscan.com/tx/4UyvqBT2bES6NAFbSkNAeMLstpMh8R6GPHkuJnC7Qj62
And contact him through email, say him stop do IOST widthdrawals to scammers address? Can you make this? Or need try to publish information that MEXC help scammers steal users funds???
MEXC Bela 17May 01:09 GMT+7
Quote
For further consideration, you need to submit a statement by contacting law enforcement agencies. After that, law enforcement agencies should fill out the form on the website: https://www.mexc.com/support/requests/legal
Guidelines for law enforcement personnel: https://www.mexc.com/support/articles/4403594593434
Guidelines for law enforcement personnel: https://www.mexc.com/support/articles/4403594593434
Me 17may 01:53 GMT+7 #ticket #20240515000097#, #ticket #20240515000091##
Quote
LOCK WITHDRAWALS PLEASE! User can lose a big money, more than $15000.
Forward this information to security department:
https://www.iostscan.com/account/pro0891
Need cancel IOST withdrawals for user who made transaction https://www.iostscan.com/tx/4UyvqBT2bES6NAFbSkNAeMLstpMh8R6GPHkuJnC7Qj62
Forward this information to security department:
https://www.iostscan.com/account/pro0891
Need cancel IOST withdrawals for user who made transaction https://www.iostscan.com/tx/4UyvqBT2bES6NAFbSkNAeMLstpMh8R6GPHkuJnC7Qj62
Me 17may 03:25 GMT+7 #ticket #20240515000097#, #ticket #20240515000091##
Quote
I ask you locking withdrawals for another user. Now he sent scammers 5622145.82 IOST ($50200). https://www.iostscan.com/tx/HWAMKwXyFNUfhdWw32k2rKyFWgs1iyqwGctLpuj7yNRD
Now they start selling coins.. on MEXC) https://www.iostscan.com/tx/BkRVZYqpUDTfV9YBkizWMFhuAawGVraCAkeFQpU6WjWd
Their drop account has IOST deposit address mxctomoon:113098.
But I think you like scammers more, than your customers, so need publish all conversation, a lot of people must know what is MEXC support.
Now they start selling coins.. on MEXC
) https://www.iostscan.com/tx/BkRVZYqpUDTfV9YBkizWMFhuAawGVraCAkeFQpU6WjWdTheir drop account has IOST deposit address mxctomoon:113098.
But I think you like scammers more, than your customers, so need publish all conversation, a lot of people must know what is MEXC support.
MEXC Dilan 17May 04:34 GMT+7
Quote
Dear user, to process your request, you need to follow the instructions that we previously sent to you.
Sincerely, MEXC Support Team
Sincerely, MEXC Support Team
You can correlate the time of correspondence and transactions in the block explorer. If a user contacts customer support, they will also be directed to the police. But if they find out that the exchange knew about the scheme for several days and were asked to block the withdrawal just 3 hours before the funds were sent, how do you think they will feel? 🙂