Crypto

Hounax scam: Hongkongers who lost HK$120 million to cryptocurrency platform say watchdog warning came too late

Published

1 year ago

November 27, 2023

Hounax scam: Hongkongers who lost HK0 million to cryptocurrency platform say watchdog warning came too late

Some Hong Kong residents caught up in an alleged HK$120 million (US$15.4 million) cryptocurrency scam have said the platform’s listing as suspicious by the securities watchdog this month came too late as their money had already been locked in by an “investment deal”.

One of the more than 130 alleged victims said he had lowered his guard because cryptocurrency platform Hounax appeared to have been recognised by international authorities. The man, surnamed Ng, 50, said the scam was well-executed and had been months in the making.

Lawmakers on Monday also called on the government to close a legal loophole that limited the Securities and Futures Commission’s ability to respond to unlicensed-but-not-banned platforms, allowing the latter to continue trading within an “unregulated vacuum”.

Do you have questions about the biggest topics and trends from around the world? Get the answers with SCMP Knowledge, our new platform of curated content with explainers, FAQs, analyses and infographics brought to you by our award-winning team.

Hounax platform allegedly scams 131 Hongkongers out of nearly HK$120 million

Police on Saturday revealed they had received 88 reports from 131 people who said they had lost nearly HK$120 million. A 69-year-old retired woman allegedly suffered the biggest loss of HK$12 million among the victims, who were aged from 19 to 78.

The Securities and Futures Commission added Hounax to its alert list of suspicious virtual asset trading platforms on November 1.

The watchdog on Monday said it had received 15 complaints so far concerning the platform. The cases had also been filed with police, it added.

Ng, a maintenance worker, said he was cheated out of HK$150,000 and reported his case to police as early as November 14 but had not heard anything back since. He only learned about other cases involving the platform upon finding a related Facebook group almost a week later.

He said he first got involved with the scammers who posed as “financial experts” on Facebook in April, and subsequently joined their WhatsApp chat group that provided investment advice on stocks and allowed the fraudsters to build trust.

By August, the stocks were not performing well and the “experts” in the WhatsApp group recommended trading cryptocurrencies on the Hounax platform.

Ng said, looking back, he realised that most of those in the group of 50-60 people were in on the swindle, with a handful of members being cheated.

The accomplices would all say they could retrieve cash from the platform and even showed their account transactions to create an illusion of legitimacy.

“They were using methods like that, to make sure you couldn’t tell who was who, so you couldn’t verify information,” he said.

Ng said the SFC’s move on November 1 came too late – as a lot of customers’ money was already tied up by then.

In September, the platform had a Mid-Autumn Festival buy-one-get-one-free deal on cryptocurrency coins, on the condition customers could not withdraw them until November 12.

Binance guilty plea complicates Hong Kong affiliate’s crypto licence application

In light of an about HK$1.6 billion financial scandal surrounding another cryptocurrency platform, JPEX, Ng initially took a very cautious approach to Hounax, depositing a smaller amount of HK$20,000.

He let his guard down after successfully retrieving his money from the platform in September.

He relaxed further when he found out that Hounax was listed in a business registry in Canada and that a search of Hong Kong police’s CyberDefender website – which flags online scams – did not yield any results.

“I only dared to invest because of these checks. Who knew it was still a scam after so many checks,” he said.

Another victim, an accountant surnamed Wong, told the Post that the official warning had come too late and she had ended up losing about HK$100,000 in the scam.

Wong, who is in her forties, said she was lured in by a scammer-run YouTube channel offering financial advice and had joined a WhatsApp chat group in June after following a link left on the video-sharing platform.

The scammers then shared quizzes on the group and established trust with the accountant by awarding her HK$1,000 in prize money the first time around. After two more wins, she was convinced to set up a Hounax account to collect the cash.

Wong said she had let her guard down after discovering the company was registered as a “money services business” in the US and Canada, adding that she had managed to make two successful withdrawals before mid-September.

HTX and another crypto platform linked to Justin Sun lose millions in hacks

But she felt suspicious about some details of the business’ operational model, including the serious miscalculation of handling fees and scammers offering to loan her large sums of money in August and September.

She refused to borrow the money and left her account inactive, only reporting the case to police on November 13 after the platform refused to let her withdraw any money, she said.

Wong said she later realised most of the people in the WhatsApp group were involved in the scam as their profiles all disappeared, alongside the company’s social media accounts, on November 19 when it became clear the cash could not be withdrawn.

“The warning to the public was too late in this whole incident,” she said. “These scams are nothing new, but the planning and execution were done so meticulously.”

Victims have described the planning and execution behind the latest scam as “meticulous”. Photo: Shutterstock

Meanwhile, lawmakers Doreen Kong Yuk-foon and Johnny Ng Kit-chong slammed the Securities and Futures Commission’s efforts to warn the public as insufficient.

“There are hundreds of firms listed as ‘suspicious’ by the SFC,” Kong said. “They can’t say ‘we have already informed you of that’.

“It’s like saying ‘best of luck’ to the public. If they thought the platform was suspicious, why couldn’t more be done? Their actions are very passive now.”

The lawmaker also highlighted loopholes in the existing regulatory mechanism that prevented the watchdog from responding proactively to unlicensed platforms, since the latter were not banned and existed in a legal grey zone.

“In a developed society such as Hong Kong, these things should not be happening,” she said. “The SFC cannot hide behind such an excuse.”

Forget crypto: Hong Kong Web3 events focus on what’s next for blockchain

Ng, who also serves as convenor for an anti-deception alliance, said the watchdog could have issued a warning far sooner.

On Saturday, police said fraudsters had provided quick returns on victims’ investments to build trust, but the numbers were meaningless and made up by the scammers, who had already transferred the deposited money.

The force said that, when victims tried to withdraw their money later, the platform’s “investment managers” would reject the requests using different excuses or charge them a “verification” fee of up to 80 per cent of their initial funds, claiming it was a requirement of an international anti-money-laundering organisation.

The platform, which claimed to be run by a Singaporean company, started operating early this year and appeared to target Hong Kong investors, according to police.

More from South China Morning Post:

Crypto

Warning Crypto Investors—This Malicious Code Could Empty Your Wallet

Published

7 hours ago

December 19, 2024

Press Room

Warning Crypto Investors—This Malicious Code Could Empty Your Wallet

Bitcoin emblem over a graph.

getty

Recent reports have uncovered a series of malicious extensions in the Visual Studio Code, or VSCode, marketplace, targeting software developers and cryptocurrency enthusiasts with sophisticated attacks designed to compromise their systems and steal sensitive data. VSCode is a popular code editor used by millions of developers worldwide.

Security researcher Amit Assaraf recently revealed how attackers are exploiting the VSCode marketplace. Assaraf uncovered extensions that appeared to offer valuable features but were, in fact, Trojan horses for malware. One extension, masquerading as an official Zoom integration, seemed legitimate, boasting numerous installs and positive reviews. However, upon installation, the extension downloaded a malicious script from a Russian server, executing unauthorized commands on victims’ machines.

The attackers had carefully crafted their extensions to look authentic. They used fake reviews, linked to reputable repositories, and inflated download counts to make the tools appear credible—practices that can lull even experienced developers into a false sense of security.

Crypto in the VSCode Crosshairs

Further investigations revealed that this malicious activity is part of a broader campaign targeting developers working in blockchain and cryptocurrency environments. Reporting from BleepingComputer noted that some of these extensions claimed to support Ethereum development or blockchain toolkits. They also provided the following list of ones that were submitted to the VSCode marketplace:

EVM.Blockchain-Toolkit
VoiceMod.VoiceMod
ZoomVideoCommunications.Zoom
ZoomINC.Zoom-Workplace
Ethereum.SoliditySupport
ZoomWorkspace.Zoom (three versions)
ethereumorg.Solidity-Language-for-Ethereum
VitalikButerin.Solidity-Ethereum (two versions)
SolidityFoundation.Solidity-Ethereum
EthereumFoundation.Solidity-Language-for-Ethereum (two versions)
SOLIDITY.Solidity-Language
GavinWood.SolidityLang (two versions)
EthereumFoundation.Solidity-for-Ethereum-Language

Adding to these findings, researchers at ReversingLabs uncovered how the VSCode campaign overlaps with similar malicious activity in the npm package repository. An npm package is a piece of reusable code that can be easily shared, distributed and integrated into software projects. These packages are used to build applications faster by reusing common functionalities, rather than writing everything from scratch. In their report, ReversingLabs explained how attackers often use multiple platforms to spread their malware, creating a more extensive attack surface that targets developers across ecosystems.

The Vulnerabilities Of The VSCode Ecosystem

While VSCode is celebrated for its versatility and user-friendly extension system, these same features make it a prime target for attackers. The issues stem from several vulnerabilities within the extension ecosystem:

Unverified Publishers: Most of the extensions in the VSCode marketplace come from unverified publishers. This leaves developers with little assurance about an extension’s authenticity.
Trust in Metrics: Developers often rely on install counts and reviews to gauge an extension’s credibility. Attackers exploit this trust by inflating these metrics and posting fake reviews.
Limited Oversight: Despite Microsoft’s efforts to monitor and remove malicious extensions, the sheer volume of offerings in the marketplace makes it challenging to detect threats promptly.

VSCode: A Secondary Threat

Cryptocurrency wallets, whether stored on a computer or secured with a hardware wallet, are critical tools for managing digital assets. While these wallets are designed to protect private keys and transactions, the surrounding software environment—such as VSCode—can introduce vulnerabilities that put funds at risk, especially for wallets stored on a computer. Recent discoveries of malicious VSCode extensions demonstrate how a compromised development environment can lead to significant crypto losses, even for those who believe their wallets are secure.

The VSCode Threat to Computer Wallets

For users storing cryptocurrency on a desktop wallet, the risks posed by malicious VSCode extensions are immediate and direct. Here’s how it can happen:

Keystroke Logging: A malicious VSCode extension, installed unknowingly, can quietly monitor and log every keystroke. If a user types in their wallet password, private keys or recovery phrases, this sensitive information is captured and sent to the attacker. Even the most secure desktop wallet becomes vulnerable if its credentials are exposed.
Clipboard Hijacking: During transactions, users often copy and paste wallet addresses to avoid manual errors. Malware embedded in a VSCode extension can intercept clipboard activity, replacing the intended wallet address with the attacker’s. Without double-checking the address, the user may unknowingly send funds directly to the hacker.
Fake Prompts or Interfaces: Some malicious extensions inject phishing-style prompts into the software environment, asking users to “verify” their wallet credentials or seed phrases. These prompts appear legitimate, but the data entered is captured by the attacker.
Manipulated Transactions: For developers working with blockchain APIs, malicious extensions can intercept and alter transaction details. For instance, if a wallet is used to send funds programmatically, an attacker could change the destination address or transaction parameters without the user noticing.

Imagine a blockchain developer using VSCode to build an app that integrates with their desktop wallet for testing purposes. They install an extension claiming to simplify Ethereum contract deployment. Unbeknownst to them, the extension is malicious. It begins logging keystrokes and steals the wallet password. When the developer initiates a test transaction, the extension intercepts the API call and replaces the intended recipient address with one controlled by the attacker. The funds are irretrievably sent to the wrong destination.

These revelations are a wake-up call for developers and platform administrators alike. The trust users place in extension marketplaces is being weaponized. Relying on trust metrics alone—such as download counts or reviews—is not sufficient. Developers must remain vigilant and take proactive measures to protect their environments and their cryptocurrency.

Crypto

Bitcoin Retreats From Record High After Fed Cools Risk Appetite

Published

14 hours ago

December 18, 2024

Press Room

Bitcoin Retreats From Record High After Fed Cools Risk Appetite

Bitcoin fell for the first time in four days with speculative bets being pared across financial markets after Federal Reserve officials suggested greater caution over how quickly they can continue reducing borrowing costs.

The original cryptocurrency fell as much as 5.3% to $100,752, a day after climbing above $108,000 for the first time in what’s been a record-breaking rally this year. The seven largest digital tokens as measured by market value were all lower, data compiled by Bloomberg show.

Crypto

Navigating the Rise of Cryptocurrency in Latin America

Published

22 hours ago

December 18, 2024

Press Room

Navigating the Rise of Cryptocurrency in Latin America

Cryptocurrency adoption in Latin America is
experiencing explosive growth, driven by a mix of factors in the area like
economic instability, financial innovation, and regulatory evolution. Countries
like Brazil, Argentina, and Mexico are emerging as global leaders in
cryptocurrency usage, offering a fertile ground for both individuals and
businesses to explore digital assets as practical solutions for real-world
financial challenges.

To learn more about Latin America’s rapidly
evolving crypto market, download our whitepaper, “Unlock the Potential of Latin
America’s Booming Crypto Market.”

Read the report on the Latam’s blooming cryptocurrency market.

The rising wave of crypto in Latin
America

Cryptocurrency adoption in Latin America is
accelerating, fueled by inflation and currency devaluation. In Argentina, where
inflation has devastated the peso, Bitcoin and stablecoins have played an
important role in protecting savings. Around 15% of the population uses crypto
regularly, finding it a critical hedge against inflation.

In Brazil, crypto is even being integrated
into mainstream finance. The country was one of the first to approve
cryptocurrency exchange-traded funds (ETFs), and by 2023, the value of USDT
transactions was equivalent to $55 billion, more than 80% of its crypto volume.
This makes Brazil a key player in the global crypto market.

Mexico has carved out a niche in crypto
remittances, with Bitso processing over $3.3 billion in cross-border payments
in 2022. Crypto is emerging as a more efficient solution for these
transactions, benefiting millions of families reliant on remittances.

Regulatory evolution driving market growth

The regulatory environment across Latin
America is evolving, creating opportunities for businesses to expand. For example,
El Salvador made history by becoming the first country to adopt Bitcoin as
legal tender, with further initiatives like Bitcoin-backed bonds and a
government-sponsored crypto wallet. This bold experiment has positioned El
Salvador as a global trailblazer for cryptocurrency adoption, even as its
long-term effects are being evaluated.

Meanwhile, Mexico’s fintech law from 2018
recognized cryptocurrencies as virtual assets, establishing a clear regulatory
pathway for businesses. This clarity has helped companies like Bitso thrive. Meanwhile,
Colombia’s regulatory sandbox has promoted crypto experimentation in a
controlled environment, attracting fintechs and positioning the country as a
future hub for innovation.

Argentina, while still working on a
comprehensive regulatory framework, has seen increased interest in crypto
regulation under its new pro-crypto government. Colombia’s sandbox model is
providing fintechs with a controlled environment to test their offerings,
positioning the country as an emerging leader in the digital asset space as
well.

Emerging opportunities

Despite infrastructure and regulatory
challenges, Latin America offers immense opportunities for crypto growth.
Argentina and Venezuela, with their hyperinflationary economies, continue to
see widespread crypto adoption as citizens seek alternatives to their unstable
currencies. Stablecoins like USDT and USDC can help individuals and businesses
in these countries by providing greater financial stability.

Mexico’s growing role in crypto remittances
and Colombia’s fintech-friendly environment highlight the region’s potential
for further expansion. Tokenization is another area of growth, with Brazil’s
agricultural commodity token project, Agrotoken, revolutionizing access to
credit for small farmers. Brazil’s Drex initiative also highlights the
country’s commitment to developing a fully digital economy and integrating
blockchain technology into mainstream financial systems.

Latin America’s complex economic landscape,
combined with its openness to crypto solutions, makes it an exciting market for
businesses seeking to leverage digital assets. By addressing regulatory and
payment infrastructure challenges, companies can unlock the full potential of
this rapidly evolving crypto market.

The role of payment solutions in this evolving
market

Cross-border payments and regulatory
complexities are significant hurdles for businesses expanding into the Latin
American crypto market. The region’s rising demand for remittances, along with
fragmented payment infrastructures, means businesses must navigate
multi-currency transactions. Additionally, evolving regulatory landscapes
require businesses to stay compliant while managing operational risks.

Paysafe addresses these challenges by
offering solutions that streamline cross-border payments, supporting multiple
currencies and reducing transaction costs. With strong integration into key
local systems, Paysafe helps businesses deliver the seamless payment options
customers expect.

Furthermore, Paysafe’s regulatory expertise
ensures businesses remain compliant across diverse markets, while its advanced
security features protect against fraud, providing businesses with the trust
and reliability they need to thrive in the region’s fast-growing crypto
ecosystem.

Conclusion

Latin America is a prime market for
cryptocurrency adoption and its growth shows no sign of slowing down. From the
pioneering efforts of El Salvador to the sophisticated regulatory framework in
Brazil, the region offers diverse use cases for businesses looking to enter or
expand their crypto operations. Our whitepaper highlights that despite
challenges like regulatory fragmentation and cultural nuances, Latin America
presents tremendous opportunities for growth.

For more detailed insights and strategies,
download our whitepaper, “Unlock the Potential of Latin America’s Booming
Crypto Market.”

Read the report on the Latam’s blooming cryptocurrency market.

By leveraging Paysafe’s comprehensive
payment solutions, businesses can seamlessly navigate the complexities of the Latin
American crypto landscape, unlocking the full potential of one of the world’s
fastest-growing markets.

Disclaimer:

This article is not intended to be
financial, investment or trading advice. This article is for information and
solely for education purposes. It does not protect against any financial loss,
risk or fraud.

Why Paysafe

Paysafe supports Latin American businesses
with over 25 years of experience, offering top-tier fraud, risk, and compliance
support. Their solutions streamline cross-border payments, support multiple
currencies, and reduce transaction costs, enabling confident expansion in the
crypto market.

To learn more about Latin America’s rapidly
evolving crypto market, download our whitepaper, “Unlock the Potential of Latin
America’s Booming Crypto Market.”

Read the report on the Latam’s blooming cryptocurrency market.