[✔ Soufian ✔]

So many of you might know about this design flaw of prnt.sc in which you can try random chars to get random uploaded images by users.
So you will come across a many images uploaded by users who have no clue others can see it.

However, a small group of scammers discovered this design flaw as well and decided to abuse it. Because... when you scam thieves, it's a double win, right?


So I tried different combo's to see what's gonna pop up, and this is just a very very small list of the many similar pictures I have found:
https://prnt.sc/u6iw9l
https://prnt.sc/u6iw9e
https://prnt.sc/u6iw9o
https://prnt.sc/u6iw9q
https://prnt.sc/u6iw9r
https://prnt.sc/u6iw9s
https://prnt.sc/u6iwtw

It contains convo's like this:


Or it contains fake password reset emails.

So basically their trick is, to give as little info as possible, yet enough info for "thieves" who know about this design flaw as well to fall for the bait.
All these screenshots contain at least an url, username and password.

When you login to these specific sites, you'll see a wallet with a bunch of money, and the 2FA of the account is "disabled".
First thing in your malicious mind is "Woah, Jackpot! I'll withdraw this right away!".



But once you try to withdraw, it throws you a message telling you you have to verify yourself before you can withdraw the balance.
It will ask you to verify yourself by sending $200 (varies sometimes) to a specific wallet in order to start withdrawing. <<< As you can guess, this is the scam.



I think the concept is smart and funny

(Btw. screenshots DO NOT CONTAIN REAL PERSONAL INFO, IT'S ALL A SCAM. So don't cry about "personal info" being exposed. These fake accounts are generated on these fake sites by these scammers just for this specific scam.)

[WHG-1.0]

Very unique way of scamming. May god save people from these scammers.

[Neon™]

Yep, I discovered this scam few months ago by doing the same as you. At first I was like: "WTF this can't be real", but when I opened the site and saw the shitty design I immediately knew it's a scam lol. I have to agree it's a creative scam method, I wonder if people fall for it.

[Maradonnie]

Lol tried this, got this:

https://prnt.sc/usdafs
https://www.reddit.com/r/CryptoMarkets/c...real_site/
https://prnt.sc/rjfkss

[SpOoKyHaCkA]

wsp nerd send bytes or i will steal your dinner

[Cooligan]

I tried this but all I could find is a picture of some super thicc chick.

https://prnt.sc/ddfjhg

edit: Lol, just found another pretty interesting one:
https://prnt.sc/seserx

[Smexy]

https://prnt.sc/u6iwta this is the actual same scam but a different website xd

[siddy357]

So many of you might know about this design flaw of prnt.sc in which you can try random chars to get random uploaded images by users.
So you will come across a many images uploaded by users who have no clue others can see it.

However, a small group of scammers discovered this design flaw as well and decided to abuse it. Because... when you scam thieves, it's a double win, right?


So I tried different combo's to see what's gonna pop up, and this is just a very very small list of the many similar pictures I have found:
https://prnt.sc/u6iw9l
https://prnt.sc/u6iw9e
https://prnt.sc/u6iw9o
https://prnt.sc/u6iw9q
https://prnt.sc/u6iw9r
https://prnt.sc/u6iw9s
https://prnt.sc/u6iwtw

It contains convo's like this:


Or it contains fake password reset emails.

So basically their trick is, to give as little info as possible, yet enough info for "thieves" who know about this design flaw as well to fall for the bait.
All these screenshots contain at least an url, username and password.

When you login to these specific sites, you'll see a wallet with a bunch of money, and the 2FA of the account is "disabled".
First thing in your malicious mind is "Woah, Jackpot! I'll withdraw this right away!".



But once you try to withdraw, it throws you a message telling you you have to verify yourself before you can withdraw the balance.
It will ask you to verify yourself by sending $200 (varies sometimes) to a specific wallet in order to start withdrawing. <<< As you can guess, this is the scam.



I think the concept is smart and funny

(Btw. screenshots DO NOT CONTAIN REAL PERSONAL INFO, IT'S ALL A SCAM. So don't cry about "personal info" being exposed. These fake accounts are generated on these fake sites by these scammers just for this specific scam.)

I see these kind of screens shared by OP's from Prnt.sc once in a while some are funny but some a kind of make us think what wew are sharing on the internet without our knowledge of who are going to see that.
Anyway good find op.

[Doom]

Never seen anything like this before, thanks for the share OP.

[rSM-]

My buddy used to run this exact scam around 2018. VERY profitable if you know anything about SEO. He set up a fake phone number reverse search website and SEO'd it to a front page of google. Was a completely legit reverse search site until he decided one day that his donation credentials would get "hacked" and exposed on the front page of his site with a fake error, and in a week he made roughly $12000 from these thieves. Many of which happened to be kids who got REAL upset and threatened to report him and the site. Funny thing is, he would change the domain and host of the bank every few months and would do this multiple times under multiple different domains.

[FL3XC0RE]

So many of you might know about this design flaw of prnt.sc in which you can try random chars to get random uploaded images by users.
So you will come across a many images uploaded by users who have no clue others can see it.

However, a small group of scammers discovered this design flaw as well and decided to abuse it. Because... when you scam thieves, it's a double win, right?


So I tried different combo's to see what's gonna pop up, and this is just a very very small list of the many similar pictures I have found:
https://prnt.sc/u6iw9l
https://prnt.sc/u6iw9e
https://prnt.sc/u6iw9o
https://prnt.sc/u6iw9q
https://prnt.sc/u6iw9r
https://prnt.sc/u6iw9s
https://prnt.sc/u6iwtw

It contains convo's like this:


Or it contains fake password reset emails.

So basically their trick is, to give as little info as possible, yet enough info for "thieves" who know about this design flaw as well to fall for the bait.
All these screenshots contain at least an url, username and password.

When you login to these specific sites, you'll see a wallet with a bunch of money, and the 2FA of the account is "disabled".
First thing in your malicious mind is "Woah, Jackpot! I'll withdraw this right away!".



But once you try to withdraw, it throws you a message telling you you have to verify yourself before you can withdraw the balance.
It will ask you to verify yourself by sending $200 (varies sometimes) to a specific wallet in order to start withdrawing. <<< As you can guess, this is the scam.



I think the concept is smart and funny

(Btw. screenshots DO NOT CONTAIN REAL PERSONAL INFO, IT'S ALL A SCAM. So don't cry about "personal info" being exposed. These fake accounts are generated on these fake sites by these scammers just for this specific scam.)

Wow that is quite the method people really do put some time into these things. Glad I know about this now. Thank you.

[Mr. Atlas]

it's funny, how did you find this lmao

[Vitaly]

They do this on google too.

They'll create random sites for literally the most random searches and when you click on the website it'll appear broken (to make you think its a glitch) and has email:pass cleartext, you login and obv it asks for $$$$ to withdraw

[Bastille]

Once I found a screenshot of a convo with two people talking about cryptocurrencies, sending login and password, first I thought this was real, so I started to write an email to the associated one on the screenshot, then I looked over the internet for this address and was actually a scam

Even if they scam scammers, they still are scammers. I'm not sure they do this for "justice" or something like that, they just found another way to scam

Pretty smart tho, even people who know the IT field can be fooled

[Exalted]

A long time ago, I started seeing so-called conversation logs on Pastebin with the exact type of scam going on. It's funny and quite smart.