5 Alarming Ways Classiscam Fraudsters Use Automated Sites to Steal Your Money



Since 2015, online marketplaces in developing nations have surged in popularity as hubs for both second-hand and new products. However, this rise in digital commerce has also paved the way for advanced fraudulent schemes that target unsuspecting users.

Classiscam has become a notorious figure in this deceptive arena, employing automation technology to set up realistic, malicious sites that siphon off financial data from victims.

How Does the Classiscam Scheme Operate?

The fraud usually unfolds as scammers, posing as legitimate buyers, reach out to sellers on popular marketplace platforms. To evade the built-in security measures of these platforms, they coax sellers into moving their conversations to Telegram, where they cannot be easily monitored.

Role Distribution Within Classiscam Operations

Research conducted by Group-IB indicates that Classiscam functions like a well-oiled machine, with each scam participant playing a specific role:

  • Counterfeit support specialists who craft fake payment receipts.
  • Data operators in charge of handling stolen financial credentials.
  • Executors who produce and disseminate phishing sites using pre-set Telegram bots.

Advanced Phishing Techniques Used

Once the conversation shifts to Telegram, these fraudsters propose using a delivery service for the transaction. They then guide the seller to professionally designed phishing sites that mimic legitimate courier services, complete with believable interfaces and forms intended to capture banking details.

This infrastructure is technically robust, as seen in one analyzed phishing site where code was specifically crafted to collect and track banking information efficiently.

Spotlight on Automation and Phishing Pages

Automation plays a crucial role in the rapid and scalable deployment of these scams. For instance, the ‘Namangun Team’ utilized Telegram bots that can instantly produce phishing links tailored for specific countries and services, enhancing the deceit’s effectiveness.

The visually convincing nature of these phishing pages often includes fake customer testimonials to further gain the victim’s trust.

Protective Measures Against Classiscam Tactics

Cybersecurity specialists recommend maintaining all exchanges within the native messaging platforms of marketplaces, thoroughly verifying any external links, and never sharing sensitive financial details with unverified parties.

For more insights on how to recognize and defend against phishing and other scams, you might find our article on Cybersecurity Best Practices helpful.

Read more about Classiscam’s operations.

Related: 9,000 Files Exposed: Urgent Investigation into NSW Online Registry Data Breach

Last Updated: March 27, 2025