- Joined
- Feb 14, 2007
- Location
- Cyberspace
We've had a wave of new registrations over the past few days, all with usernames referencing "Trocrypt", all pasting the same block of marketing copy across the board.
They clearly want attention, so here it is.
Our antivirus blocked the site as unsafe when we tried to view it. So we did some digging instead.
What we found
Owner identity hidden behind a paid WHOIS privacy service. Many low-rated websites on the same server. A registrar known for facilitating spammers and scammers. And, importantly, data-sensitive financial services running on shared hosting.
The domain is eight months old, registered in December 2025 with all owner details redacted. No company name. No jurisdiction. No directors.
The same copy is being spammed across dozens of unrelated forums worldwide — tech, finance, consumer, even a bass guitar forum. Anything with an open registration form.
The part that should worry you most
Look at the search terms these posts are written to rank for:
- "How to withdraw money with card number, CVV, and expiry date"
- "Can anyone withdraw money with ATM card number"
- "Transfer money from credit card without OTP"
Those aren't the search terms someone looking for a crypto exchange would use. Those are the search terms of someone trying to use a card that isn't theirs.
WARNING: Trocrypt.com and its variants are misleading people into handing over full card details by promising to skip security checks. Do not give them yours.
