SUSPECTED SCAM!

Romance Scam
+66994436077 Rita Lee

Date01/01/2024
PseudonymRita Lee
Url / Websitecoinwba.com
Scamdoc Trust Score | Contact / Whois info
Telephone+66 99 443 6077 (ou 0066994436077) (Info / Risk score)
Scam contentsI believe I fell victim to a romance scam that eventually led to Bitcoin crypto investment. I met an Asian lady by the name of Rita Lee on Facebook back in the summer of 2023. We moved our communication on Telegram where we started messaging each other back and forth for months. Her handle name is @snow2589 and phone number was +669-9443-6077. She says she is from Boston Massachusetts that works as a project manager at IDG in Boston. She introduced me to an android app called "CoinW" through a direct download. It was not from the official Android app store. She taught me to setup a Crypto account on the app and guided me to buying bitcoins and processing it through Cashapp. I made multiple deposits to this crypto exchange through the app over time. After $4k - 5k deposits later and $15,000 of of gain, when I converted BTC into USDT and tried to withdraw, I was told by customer service through the app that I was required to pay 30% of taxes before allowing to withdraw. The customer service was directed through Telegram from the app. The handle name of it was @CoinWkt. It then changed to @CoinWba
Comment / ReviewRita Lee says she also goes by her "real name" Li
FangHua.
I managed to track her IP address using a disguised link from Grabify:

Rita Lee
203.156.28.80

I found this email within JavaScript on the bogus crypto platform from CoinWba.com (probably a way to reroute: BTC funds to their email)
tieg886@gmail.com

I also managed to get the IP address from the fake customer service of CoinW using Grabify:
149.154.161.221

CoinWba.com IP address:
139.177.153.2

After using Burp, an ethnical hacker program designed for education, I found out the website uses a fake SSL in its HTML to disguise its non secure connection. Do NOT enter any personal information on this site or any website with a similar name. Login credentials are in plain sight for a man-in-the-middle attack.

The fraudulent crypto exchange uses artificial gains altered by the scammer to make you think you are actually making money but it's not, it's fake.

Other fake sites include:
CoinWba, CoinWib, CoinWch, and CoinWkt
Some of these have been deactivated now after the scammer moved on.

I sent an email to Dynadot Inc (abuse@dynadot.com), the parent registrar for the domain informing them of the fraudulent website and hope they will take it down soon.

Attachment(s)
  • Rita Lee / Li FangHua
  • Rita Lee / Li FangHua
  • Rita Lee / Li FangHua
  • Rita Lee / Li FangHua
  • More info +
    Related search(es)
    Premium services
    • Reviews and comments left by Internet users are sorted in chronological order and are not checked a priori

      • OlderDan 01/16/2024 at 04:16 PM

        Seems we encountered the same woman, or someone using the same name and story. I live close enough to Boston to be familiar with places she claimed to be, and went there after having sent far too much money to CoinW and made enough fictitious profit to believe I would be set for life and be able to make my offspring wealthy before encountering the 30% tax payment required by the fictitious CoinW customer service. In my case Rita used the phone number 949-279-4104 to message me "by mistake", and after I told her she had the wrong number she persisted in suggesting we become friends and move our conversation to telegram. That led to her teaching me to make a lot of money to help her do good things for people in need. I have to say she seemed like a very caring, kindhearted young woman. All this came at the worst possible time for me, and I was easily drawn into her web of deceit. Fortunately, I did not buy into the claim from CoinW that I needed to send them the 30% tax advance, but by that time I did not have the money to do it even if I wanted to.

        IDG Capital does not have a business presence in Boston. According to Rita they are located near Boston University, and at some point several years ago there was an IDG Ventures presence on Boylston Street, a subsidiary of IDG Capital. https://en.wikipedia.org/wiki/IDG_Ventures . The only connection between IDG Capital and BU is that a former student of BU is a high level executive of IDG Capital who donated a large sum of... Read more


        Reply
      • Good Monty 01/16/2024 at 08:27 PM

        Just recently found out about the "Inferno Drainer" malware from Singapore that was stealing crypto from customers using legitimate looking websites. Over $80 million was stolen in Nov 2022 - Nov 2023 from a cybercriminal ring in Asia. Not sure if this is related to my case, but the IP address I pinged from the fake website lead to a server in Singapore.

        Reply
      • Soksvania 01/17/2024 at 08:26 AM

        This was my Rita Lee/Li Fanghua, the project manager from Boston. I luckily didn't send any money or give any banking info when she brought up "investment opportunities." She was very convincing though.


        Reply
      • Lalo 01/17/2024 at 06:02 PM

        This comment is written in a different language than the report. It is hidden for comfort reasons
        Click here to view it anyway...

        • Soksvania 01/17/2024 at 10:07 PM

          Give it time. She'll talk to you for a few days, then as soon as anything remotely close to that subject comes up she'll start hyping it up. She even wanted me to ask my family and friends for money to invest. She's very convincing so keep your guard up. Communications between us started to slow down after I told her I had too many obligations to take care of before I could start investing and told her I didn't want to be pressured into it. Eventually she stopped reading or responding to any telegram messages I sent her. I did a Google search on her after that and realized that she almost got me.

        Reply
      • SimploiDurak 01/21/2024 at 10:40 PM

        I, too, have been having a romance with the same girl OlderDan is being romanced by. At least it's the same picture and names. Is it all the same girl, or are there a number of woman using a number of stock photos. This isn't the first one I've encountered. There were two (maybe make that three) others just prior to Rita reaching out to me via SMS text. Damn shame. I was emotionally hooked.

        Reply
      • OlderDan 01/22/2024 at 05:22 PM

        My initial encounter had nothing to do with romance. Rita did talk about some bad experiences she had with former boyfriends, including one who had scammed her out of a substantial sum of money. It was easy to believe she was just looking for a trusting friend. it was long after she had made a case for being a caring person who was using her substantial profits to help her mother back in China and some elderly lonely people here in the US that a few mildly suggestive pictures appeared. They were so tame they were easily mistaken as being innocent offerings from a somewhat naive and lonely young woman. it was only when the fake CoinW Customer Service demanded the tax payment and refused to release any funds from my account that her demeanor suddenly changed and her true colors appeared. i sure did not see that coming until it was too late.

        Reply
      • Serg 01/25/2024 at 03:41 AM

        I got a match on Facebook dating saying that she was looking for a man for her sister. She sent her telegram @Rita883lee so we can talk. She said she was a project manager at IDG Capital and she does charity work for the homeless back in China. It was normal conversations for 3 days but I was still skeptical if she was real, so i asked to video call. We video called and she was real but she was asking questions that she should've known from our chats. On day 5 she brought up crypto and how she can teach me how to get rich so we can be together. She didn't send me to CoinW or any other fake sites but to crypto.com. I stopped messaging after that. Here's some pictures I got.


        • Good Monty 01/25/2024 at 04:20 AM

          With different pictures posted by other users I believe our scammer is communicating through a fake call center in Thailand.

        • SimploiDurak 05/19/2024 at 05:44 PM

          That middle picture kind of looks like the first scammer that contacted me via SMS or Facebook. She called herself Jessica Thompson, and said that she lived in Atlanta, but was working for a Singapore company. But was on an assignment in the Bahamas. She was a big fan of golf. She said she had parents living in Louisville. She dropped out of contact in December.

        • Sparky 06/30/2024 at 03:12 AM

          i have been talking to same girl in these picture now going by Rose ,Yuxin Zhang. same MO


        Reply
      • Mojo 05/19/2024 at 12:24 PM

        She is still at it so beware! based on my experience, you will never be able to withdraw from the platform - which changes:
        coinwba.com, coinweh.com, coinwxe.com
        she will work you every day and evening, and when I told her I didn't think she lived in Boston or worked at IDG Capital, she tried to tell me she was forced to do this, lived in Thailand with fighting going on and was trying to get out...

        Reply
      • Mojo84 05/19/2024 at 02:21 PM

        some more fake photos to watch out for


        Reply
      • keithelovejoy 06/19/2024 at 11:35 AM

        Also works as Andy Grace on a platform called CEXCC.com

        Reply
    • Group created on - 0 Members

      To view the contents of this private group or request to join it, you must create an account or login.