Short note before the bulk of this post: I clearly mark any section of my writing that was completed with a language model or AI, as well as any section of text which was assisted with it. All other text is completely self-written. I believe transparency is important in the content of my writing to make sure that it's tasken seriously and understood which parts had more effort put in than others, especially since I do heavily use LLMs and similar tools as my primary work equipment in development. They are not bad as tools for helping us, but using them without also indicating they've been used definitely is.
While that site is a scam (in the family of the discasino scams, another more sophisticated version which uses more AI and more varied designs), it is not the same scam as in the OP's post.
Firstly, this is a very long and exhaustive post I wrote after finding new critical information. Originally I was going to share my list of these sites (thousands of them), but that's not really that effective, because rarely do I see the same site twice anyway, as dozens are put up every day it seems.
Hi everyone, if you don't know me I am Ruby, a staff admin and developer of a website for verifying provable fairness as well as the lead community manager of our discord community which is fairly large as far as the gambling discord world goes. I won't name it directly here because that's not the point of my post. I want to share a load of information I've come across in investigating these sites. To note, I try to focus on expressing facts and objective information I am able to find, rather than opinions and theories. If I am giving my opinion, I will usually say as much and qualify the claim with that. All other direct claims of facts or accusations I make I have evidence for saved which I can show at any time.
NTTS (no text to speech, the youtuber) did a video on these sites. But he
didn't go deep enough and his investigation was inherently flawed, by pointing out how bad the scam was, rather than finding any meaningful source of it.
I have gone much further and I know the sources + the methodology used as well as the scripting and documentation. This is a well-designed and effortful scam which is meant to target western users in particular, and gamblers/risk-unaware users especially.
I ran across these scams (which I will now be calling 'GP Scams', as I'll explain later) in 2024 as well. People frequently come into our community and state they won millions of dollars, and then ask if we've heard of some random casino. Then I look at it, and it's the distinctive design with the logos that they all have, and the mr beast or other fake sponsorships.
I have compiled a list of 2500 of these sites using their shared indicators, and using urlscan.io. I think the only way to stop this scam is awareness, and so that any time it's seen (both the bots/hijacked accounts that spam it) as well as making sure everyone informed warns and is adamant to anyone who is about to fall for it that it is a scam and they have lost money. I've had people argue with me on this because they were so hopeful, and it really breaks my heart seeing how intently some folks want to be scammed, because the possibility that it's not a scam is disproportionately meaningful to them in these tough times.
Don't shame or blame anyone for almost falling for these, as obvious as they are, they simply need to be told the truth and encouraged for asking and taking the warning, and encouraged to warn others. These are intended to scam; and they are crafted carefully and sold to do so.
There are actually effectively an unlimited number of them. So no amount or list of these sites will ever be enough. Therefore, I want to, more fully than NTTS was able to in his video, explain the origin and source of these scam sites.
I think it is unfair to call these 'MrBeast scams' or anything related to the fake sponsors they put on the websites- those fake sponsors have nothing to do with these scams, whether they are good people or not.
I will be unofficially titling these as '
GP Scams', after one of the prop-up websites that led me to finding their documentation, where they self-identify as Gambler-Partners (Gambler Panel is the gitbook I will be referencing from later). You can find these backend api sites by hunting through the source code of the casinos and finding where they host their api. These sites vary in their domain name but they are very consistent in design.
What these sites really are: they are deployed by a Russian-based scammer/phishing group on various hacker/scammer CIS-based webforums using a Telegram Bot which generates casino phishing scams in this format. That's kind of a mouthful isn't it. Slightly more technical add-in explaniation for those who know what this means: They are made and deployed out of docker containers by a customer who orders it and they earn a portion of the sales, so these are easily duplicated, cheap, and effectively cannot be stopped. It is likely there is not even a single group doing this; it's probably multiple resellers, or other small teams who copied and are selling the same project setup, as is common in scammer environments.
I believe I found at least two different bots in my short search last night which made these. This is sort of like a self-contained, easy to deploy scam that takes minutes to deploy, 2-3 domains to spin up and set up your api/websocket and cdn requests, and they know full well that people fall for it, and that gamblers are willing to take risks.
Some gamblers I know would be fully willing to dump hundreds of dollars into a place just in case maybe it is real. It's unbelievable, and it comes from the idea that 'all casinos are scams'.
That is not true in the way we are talking about them! There are levels to this. Is gambling a scam? Probably at a fundamental level, yes. Are these websites scams? Yes. Is Stake, or someother major website a scam? Probably. Are they
the same level of scam? NO! As Isaac Asimov once wrote, "
When people thought the Earth was flat, they were wrong. When people thought the Earth was spherical, they were wrong. But if you think that thinking the Earth is spherical is just as wrong as thinking the Earth is flat, then your view is wronger than both of them put together."
My point is: You can still be safe when navigating online casinos, and there are ways to ensure that you're getting as fair a deal as possible, while still accounting for the always-existant house edge, without also lumping every casino into the same scam category, thereby nullifying any protection you have against worse scams where you have no chance of ever getting a dollar out of them, let alone a fair bet.
How do I know they are CIS-based and am I generalizing or stereotyping CIS users?
When I say CIS I mean: the 'Commonwealth of Independent States', aka regions of Eastern Europe which were formerly members of the USSR and are now distinct national entities, such as Ukraine, Russia, Kazakhstan, etc.
I found this information on a Russian-language hacker/phishing marketplace webforum, where I found specific screenshots of these exact GP Scams being advertised as package scam deals.
From the FAQ of one of their reseller websites:
And, if you VPN to Russia and attempt to go one one of the sites, you will find this to be the case:
View attachment 217484
These sites are very sophisticated and have keyed-in on what they know people will find
believable who are in their target demographic: less informed, risk-on gamblers who try every site they see. They know that most people will ignore it; you're not the ones who will deposit $15 anyway. The amount they ask for varies based on the reseller and whatever parameters they decide. I think somewhere around $100 is probably the median for believability. Too little and it's suspicious that they care at all, and too much is obviously a scam.
Simply asking for payment is not enough for a website to be a scam: there are many cases where they need you to first make a payment to hook up with your bank or payment provider, or as a way to manage risk associated with bonus abusers and alt abusers. That's why this scam does work on some people who may otherwise be risk-averse; it's not unheard of to require a small payment. RTG sites do this frequently, and people regularly defend them, because they do pay out. These sites will never pay out- they are outright scams.
I have found the detailed documentation that shows
how these work, how they are set up, and the instructions by the developers for doing so, plus how they see us and how they built the scam originally. However, while I believe in freedom of information, I also know that information can be dangerous if given without discretion. Because much of these documents are instructions and guides to effective scamming, fraud, crypto draining, and psychological manipulation, I will only be including a certain amount of information within this post.
If any admins want to discuss further how to better disseminate some of this information to community leaders so that they can be more informed, feel free to DM me or email me at [email protected].
Here's a short explainer on what I found in how they describe the fundamentals of their scam:
(the following was taken and translated to English from Russian language text using an LLM. Bolded text was emphasized by me, not the original text):
These are not simple, half-baked scams, they are crafted with intention and made to deceive us, as gamblers, using our vulnerabilities and weaknesses.
As an additional set of evidence, a while back someone shared a website called Noroxbet in our community. I investigated it and it was clearly the same scam. However, funny enough, they had actually hooked up an AI chatbot with an LLM to the support agent using an API service called Mammouth AI. (I reported them to mammouth and got no reply.) I prompt injected and convinced the LLM to tell me the system prompt, and then roleplayed with it for a while, screenshots:
, it was a very funny night, as I was showing my community in realtime as it happened, and many have never seen a support bot get exploited in that way. After extracting the system prompt, I proceeded to ask it to max out its token limits and then eventually hit the quota, and the site was taken down in hours by the owner. I call that a successful counter, but these are truly unlimited and so easy to re-deploy to a new domain, my effort was mostly meaningless. However, in the documentation I found, all the information I got from that system prompt is corroborated in the 'official' guides for setting these up.
I will most likely do another more in-depth and technical blogpost so that I can share it with some tech influencers and maybe get some greater awareness on this scam and the sources of it.
Sorry this was such a long post, but I'm very excited I was able to find more information about these scams. Please be safe, everyone, and if it's too good to be true, it usually is. Don't even trust your friends to have good judgment about casino sites: they usually won't if they're sharing casinsos with you to begin with, so always get second and third opinions, run it through urlscan.io, ask here or in other well-informed communities.
