Here is an interesting scam that I had not seen before; nor googling about it found much information. So posting here to see if others have seen it.
Got an SMS from an unknown number providing me a code on skymemo.org. When I type that code in; it shows a letter saying they have lots of bitcoin and they are giving away 10 BTC to 10 random people. So far, typical scam email. It did pique my interest though. I created some new notes on skymemo and the site seems to work as advertised. I have written a program to cycle through possible codes to see if I can find other notes on this site. Been running for about a week now and have not found a single other valid code. I can't see any security features on the site and if a 6 letter code is all that is needed; I would have thought I would have accidently hit another code by now.
The note in skymemo gave me the username and password of a coinmace account. I logged in and changed the password. I also set up 2FA which worked in sending codes to my throwaway SIM. In the account I can see 10 BTC. I tried to withdraw them to my wallet; and it said I could only withdraw 0.0001 in first instance. I withdrew that amount (~$A7) and it appeared in my wallet immediately. I tried to withdraw the remaining 9.9999 and then it says; minimum I can withdraw is 10.01076 BTC. This is where the scam is. I need to put in 0.1 BTC in order to withdraw the rest. I reckon I will never see the 0.01076 BTC if I did that.
Playing around the coinmace site; it looks fully functional. I could create new accounts; could change user details. I can see transaction history, etc. Couldn't find any details about who Coinmace are in their About section or by googling.
I am impressed by how sophisticated this scam is - very very realistic and I can see how people can be tempted to pay a bit to try and get a lot.
Has anyone else seen this scam?