TikTok Shops Under Threat: A Look at How Scammers Steal Identities and Drain Cryptocurrency through Duplicate Sites

TikTok Shops Under Threat: A Look at How Scammers Steal Identities and Drain Cryptocurrency through Duplicate Sites

A sophisticated fraud campaign, known as FraudOnTok, is preying on TikTok Shop users by impersonating the platform and using a combination of AI-generated content, phishing sites, malware, and off-platform social engineering to steal credentials and siphon funds.

Key Components of the FraudOnTok Scam

1. AI-Generated Content: Fraudsters create realistic AI-generated promo videos and influencer lookalikes that simulate real creators or official brand ambassadors. These are used in paid social media ads to funnel victims to fake TikTok Shop sites or messaging apps where urgency and pressure tactics increase risky user actions.
2. Phishing Sites and Clone Domains: Over 15,000 impersonating domains, often using suspicious top-level domains like .top, .shop, and .icu, host phishing pages virtually identical to TikTok Shop. These pages steal login credentials or push malware-download prompts disguised as legitimate TikTok Shop apps.
3. Malware Infection: The scam spreads a trojanized "TikTok Shop" app embedded with spyware called SparkKitty, designed to infiltrate victim devices. SparkKitty can access photo galleries, screenshots, and other sensitive data, including cryptocurrency wallet credentials, enabling the attackers to drain digital funds.
4. Off-Platform Social Engineering: After initial contact via paid ads and AI-generated promos, victims are redirected to communication channels like WhatsApp or Telegram. There, scammers use social engineering tactics exploiting urgency and trust to coax victims into submitting credentials, installing malware, or making irreversible cryptocurrency payments.
5. Monetization Methods: The stolen information and access are monetized through crypto-only checkout processes, affiliate "top-up" frauds, resale of compromised accounts, and misuse of ad accounts for further scams. Victims pay for fake discounted products or deposit funds in counterfeit crypto wallets.

Protecting Against FraudOnTok

To protect against FraudOnTok, experts recommend:

• Installing apps only from official app stores
• Enabling passkeys or two-factor authentication (2FA)
• Setting strict payout and account policies for creators and affiliates
• Monitoring and reporting suspicious clones or impersonation efforts promptly
• Platforms tightening review and brand-protection controls on commerce-related keywords and ads to reduce spoof distribution

In summary, FraudOnTok is an industrial-scale scam that leverages AI-generated influencer mimicry, fake TikTok Shop clones, malware trojans like SparkKitty, and off-platform social engineering to steal user credentials and cryptocurrency funds from TikTok Shop shoppers, creators, and brands globally.

Read also:

• Preparations Underway for the 2022 FIFA World Cup: Impact on Sports Betting Industry
• Health Risk Warning: The Harmful Effects of Sitting Too Much, Exploring Sedentary Lifestyles
• Corporate concerns predominantly revolve around AI security, prompting increased spending in this area
• Telecommunications company issues warning about deceptive practices