Scammers use job posting platforms to lure people into their schemes. Over the past weeks, our Support Team has received a few emails regarding suspicious job postings on Upwork, Freelancer.com, Twago.com, etc. They turned out to be associated with identity theft. Our company’s name was mentioned there.
The listings by scammers, which we’ve managed to see, were posted on Upwork, Freelancer.com, Twago, and Coinality. Some projects involved “e-wallet development”, database management, or setting up a website with Bitcoin payments enabled. Other postings advertised an online support job.
Not long ago, we have received an email from a freelancer at Upwork. He told us the following:
“2 days ago there was a job post at Upwork for web administrators. Here is the link: https://www.upwork.com/jobs/_~01d591a239e18c7946/
The person who posted this has verified payment method and looked legit. I applied for it and got accepted for interviewing. Later he was asking me to send my ID/Passport/bank statement for address verification. He told me to email them at [email protected] Cubiits.com was registered just a few days ago. So this was all planned probably for identity theft.”
The author of the email said he was a Bitcoin trader, so he contacted us as the scammers used our company’s name. The job post itself was deleted shortly.
Scammers request online ID verification
Another type of scammers were trying to use IDnow (our ID verification partner) to complete financial transactions. In all these fake job postings, employers would require their potential employees to verify their identity through IDnow. They would explain it either as security measures or as specifics of a particular job (e.g. online verification of transactions).
We have received an email from a team of freelancers from Eastern Europe who were lured into the scheme. Their employers found them through Upwork and introduced themselves as Douglas Wever (Skype: dwv1001) and David Ready (Skype: worldatop). They had French phone numbers.
The job was to “work as live support officers”, which included completing ID verification using the IDnow app. The hourly rate was unusually high ($50 USD). The client (“Douglas” or “David”) would send a code, and the employees would use it in the verification process while presenting their documents. In the end, the freelancers suspected fraud, Upwork blocked the scammers’ accounts, and there was no contact with either employer.
Below are the screenshots of the mentioned projects:
The scheme goes as follows: the scammers would hire people to verify their ID, so that transactions can be completed at Cubits from the scammer’s account. We believe that stolen credit cards information is used in such scams. We have identified a number of transactions conducted in such way and blocked the accounts associated with scammers.
After we have made a warning on our social media accounts, we received another story from a Facebook user Christof D. He wrote, “Last night I had the honour of getting to know these scammers. They posted an IT project under https://www.twago.de”
The project was removed from Twago, so, thanks to Christof, we are citing it below:
“The Cubits Wallet offers secure Bitcoin storage and easy Bitcoin transfers and payments. We work in tandem with Credit Card providers,Onlinebanktransfer.com, Sofort, OK Pay, Dotpay, SEPA and Swift to offer our customers a fast and easy buy and sell process. Cubits’ flexible API allows merchants to accept Bitcoin immediately, offering various shopping cart plugins including Shopify, WordPress, Magento, Shopware or osCommerce.
With the heavy influx of users, we require the services of a dedicated team of professionals for database management.”
Below is the rest of the story and a script of the Skype conversation which were kindly provided to us by Christof.
“I applied to their offer. It took just a few hours and “Antonio from France” tried to contact me on Skype and via mobile phone +33975186008. His argument was that I would need to identify with passport and mobile phone in order to get access to Cubits backend and get an insight into the range of the project, they might outsource to my company. He heavily pushed me to immediate action and said that he’d leave for vacation next day. I invited CTO of my company and we had the following interesting dialogue on Skype. His Skype name was “cubiitslive”.
Cubits LLC: Good to have you here
Alex: nice to meet you
Cubits LLC: You will both require access to the remote server for technical detailing then we can discuss further.
Cubits LLC: The video verification will take only about 3 minutes each. But 5 stages of authentication in all. Kindly let me know when you have your passports ready
Alex: maybe you’ll just show us over screensharing?
Cubits LLC: not done that way. You will be given access accounts into our local machine for actual tests
Cubits LLC: that’s how we do it
Cubits LLC: Chris, Kindly give him details of my previous explanations
Cubits LLC: I will be waiting
Cubits LLC: We need you understudy how our databases are administered and see how to simply the task with automated systems. This is where the software development comes in. We spend so much on managers, and a non-human solution would be just nice. Some bigger companies do that already, and that’s our aim
Cubits LLC: *to
Cubits LLC: *simplify
Cubits LLC: sorry for the errors, almost switching shift
Alex: is Russian passport ok?
Cubits LLC: I think so. Not my unit, but we can surely try
Chris: I’m ready to start
Cubits LLC: ok
Cubits LLC: what kind of smart phone do you have?
Cubits LLC: android or ios?
Cubits LLC: ok
Cubits LLC: do you have the idnow app installed?
Chris: what is it good for?
Cubits LLC: but you have a good cam on phone both sides, right?
Cubits LLC: that’s an app accepted by compliance, communication is not public like here on skype
Cubits LLC: get it running on both devices and notify me
Cubits LLC: ‘idnow’
Cubits LLC: available on playstore
Alex: the app asks for full access to sending paid SMS and to the filesystem – why does it need that?
Cubits LLC: phone number verification
Cubits LLC: and accessing your cam
Chris: I installed it successfully
Alex: me too
Cubits LLC: ok
Cubits LLC: asking for ID code right?
Cubits LLC: Let me start with chris
Cubits LLC: What password would you like in your test profile
Cubits LLC: ok
Cubits LLC: and your full name as appear on passport?
Cubits LLC: ok
Cubits LLC: please hold
Cubits LLC: for Chris, your test profile email is: [email protected] (void) use that when asked by compliance.
Cubits LLC: EYQ-JWVMX
Cubits LLC: use this on app to connect and present your passport when prompted
Cubits LLC: Alex, Could you provide your full name and choice password?
Cubits LLC: hello?
Chris: We are faced with the threat that you are a scammer, Antonio.
Cubits LLC: not
Cubits LLC: I don’t get you
Cubits LLC: trust me
Alex: how would you explain this then: https://www.facebook.com/CubitsBTC/posts/831673923633536
The end of the story was as follows:
“After this Antonio just vanished away! Thanks god for your warning here in FB.”
We are extremely grateful to those who have reported all these fraudulent jobs to us directly and to the administration of the respective job posting platform.
Cubits Team would like to emphasize that we do not hire anyone through Upwork, Freelancer, Twago, or similar services. If you ever see our name featured in similar job postings, please be aware: this is likely a scam. In order to be certain, please contact us to receive information about the existing job positions with Cubits.