Claims
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached.
These are not independently verified facts.
pig butchering
INVOLVES
WhatsApp
Scammers move dating-platform conversations to WhatsApp and use the channel to groom victims.
Explicit
Confidence 98%
· Ronnie Tokazowski
EP 141
Details
“they’ll move you up to WhatsApp and then from there they’ll start grooming the person”
Ronnie Tokazowski ·
offsets 3752–3837
pig butchering
INVOLVES
crypto.com
The described scam made its fake investment application appear to operate within the legitimate crypto.com application.
Explicit
Confidence 98%
· Jack Rhysider
EP 141
Details
“they made it look like it was using a legitimate exchange. In this case, crypto.com”
Jack Rhysider ·
offsets 8280–8363
romance scam
INVOLVES
money muling
Romance-scam victims can be used as money mules to receive and wire funds for BEC scams.
Explicit
Confidence 99%
· Ronnie Tokazowski
EP 141
Details
“they will use those romance scam victims as a money-muling network to send money for these scams”
Ronnie Tokazowski ·
offsets 32668–32764
Jack Rhysider
REFERENCES
Rolling Stone article on pandemic fraud
Jack says he is reading a Rolling Stone article about pandemic-fraud losses.
Explicit
Confidence 99%
· Jack Rhysider
EP 141
Details
“this Rolling Stone article I’m reading right now says it’s more like $1 trillion was stolen”
Jack Rhysider ·
offsets 54866–54957
Business E-mail Compromise
USES
typosquatting
BEC operators may register a domain one letter away from a legitimate business domain to impersonate a trusted party.
Explicit
Confidence 97%
· Jack Rhysider
EP 141
Details
“register a domain that’s one letter off from the real one”
Jack Rhysider ·
offsets 34757–34814
Black Axe
USES
Business E-mail Compromise
Ronnie says BEC activity is tied, from an attribution perspective, to groups such as Black Axe.
Attributed
Confidence 88%
· Ronnie Tokazowski
EP 141
Details
“from an attribution perspective, this ties back to groups such as Black Axe”
Ronnie Tokazowski ·
offsets 40132–40207
Scattered Canary
USES
Business E-mail Compromise
Ronnie identifies Scattered Canary as a mostly Nigerian cyber-fraud group engaging in BEC since 2018.
Explicit
Confidence 99%
· Ronnie Tokazowski
EP 141
Details
“Scattered Canary was a mostly-Nigerian cyber-fraud group that we found back in 2018 that was engaging in business e-mail compromise”
Ronnie Tokazowski ·
offsets 49812–49943
Scattered Canary
USES
romance scam
Ronnie says Scattered Canary was involved in romance scams as well as BEC and unemployment fraud.
Explicit
Direction flagged
Confidence 98%
· Ronnie Tokazowski
EP 141
Details
“we know they were doing romance scams. We know they were doing unemployment fraud”
Ronnie Tokazowski ·
offsets 51718–51799
Yahoo Boy
USES
Yahoo Messenger
Jack says Yahoo Boys received their name because they initially used Yahoo Messenger to conduct scams.
Explicit
Confidence 97%
· Jack Rhysider
EP 141
Details
“they started out using Yahoo Messenger to conduct their scams over”
Jack Rhysider ·
offsets 45440–45506
Ronnie Tokazowski
USES
Business E-mail Compromise
Ronnie says he has spent eight years fighting business e-mail compromise.
Explicit
Confidence 99%
· Ronnie Tokazowski
EP 141
Details
“I’ve been fighting business e-mail compromise for the last eight years now”
Ronnie Tokazowski ·
offsets 3242–3316
Business E-mail Compromise
USES
Credential phishing
Ronnie says that, in some BEC cases, attackers harvest e-mail credentials and passwords through credential phishing.
Explicit
Confidence 97%
· Ronnie Tokazowski
EP 141
Details
“At most they will do credential phishing where they’ll try and harvest the e-mail credentials and e-mail passwords”
Ronnie Tokazowski ·
offsets 30243–30357
Bay Town University
ASSOCIATED_WITH
Clear-text password storage
The fake school website stored account passwords in clear text and provided them to call-center staff.
Explicit
Confidence 99%
· Fazal
EP 142
Details
“that password was stored in clear text and given to me”
Fazal ·
offsets 12221–12275
Axact
ASSOCIATED_WITH
Pakistan Electronic Media Regulatory Authority
PEMRA revoked or affected Bol’s broadcasting license after Shoaib’s legal troubles; the exact conditions are unclear in the episode.
Uncertain
Confidence 86%
· Jack Rhysider
EP 142
Details
“the Pakistan Electronic Media Regulatory Authority revoked the broadcasting license that Bol had”
Jack Rhysider ·
offsets 45417–45513
Axact degree mill scam
ASSOCIATED_WITH
Saleem Qureshi
Saleem Qureshi was associated with the Belford litigation as the person who claimed responsibility for creating the website; later, the FIA reportedly found that Axact paid him to take the fall.
Uncertain
Confidence 92%
· Jack Rhysider
EP 142
Details
“He admitted that Axact had paid him to take the fall.”
Jack Rhysider ·
offsets 42053–42106
Axact degree mill scam
ATTRIBUTED_TO
Pakistan
The episode frames the operation as a Pakistani-company scandal and describes Pakistani authorities prosecuting it, but does not claim that Pakistan as a state operated the scam.
Attributed
Confidence 78%
· Jack Rhysider
EP 142
Details
“It looked really bad for a Pakistani company to be so scammy”
Jack Rhysider ·
offsets 39499–39559
Baytownuniversity.com
DEVELOPED_BY
Axact
The Bay Town University website was created by an Axact team, according to Fazal’s account.
Explicit
Confidence 98%
· Fazal
EP 142
Details
“This was something that Axact created from thin air.”
Fazal ·
offsets 9501–9553
Newford University
DEVELOPED_BY
Axact
Newford University is described as a fake university created by Axact.
Explicit
Confidence 99%
· Fazal
EP 142
Details
“Newford University, a fake university created by Axact.”
Fazal ·
offsets 22620–22680
Drewmont University
DEVELOPED_BY
Axact
Drewmont University is described as a fake university created by Axact.
Explicit
Confidence 99%
· Jack Rhysider
EP 142
Details
“Drewmont University, a fake university created by Axact.”
Jack Rhysider ·
offsets 23542–23598
Bol
DEVELOPED_BY
Shoaib Ahmed Shaikh
Bol was started by Shoaib Ahmed Shaikh.
Explicit
Confidence 98%
· Jack Rhysider
EP 142
Details
“started a TV network called Bol”
Jack Rhysider ·
offsets 33451–33482
Axact
DEVELOPED_BY
Shoaib Ahmed Shaikh
Jack says Axact was founded by Shoaib Ahmed Shaikh.
Explicit
Confidence 99%
· Jack Rhysider
EP 142
Details
“Axact was found by a guy named Shoaib Ahmed Shaikh.”
Jack Rhysider ·
offsets 32856–32907
Axact degree mill scam
DISCOVERED_BY
Declan Walsh
Jack presents Declan Walsh’s investigation as exposing the Axact operation.
Explicit
Confidence 98%
· Jack Rhysider
EP 142
Details
“published a really good article in the New York Times exposing all the shenanigans that Axact was getting up to”
Jack Rhysider ·
offsets 38960–39071
Axact degree mill scam
INVOLVES
Declan Walsh
Declan Walsh investigated and documented the Axact scam through reporting.
Explicit
Confidence 99%
· Jack Rhysider
EP 142
Details
“he spent two years investigating this story”
Jack Rhysider ·
offsets 38690–38733
Axact degree mill scam
INVOLVES
Axact
The degree-mill scam involved Axact as the company operating the scheme.
Explicit
Confidence 99%
· Fazal
EP 142
Details
“Axact created from thin air. There was no real university.”
Fazal ·
offsets 9525–9583
Axact degree mill scam
INVOLVES
FIA
The FIA investigated Axact, raided its offices, and gathered evidence for criminal proceedings.
Explicit
Confidence 99%
· Jack Rhysider
EP 142
Details
“the FIA was investigating Axact, and yeah, they found enough evidence to open a case”
Jack Rhysider ·
offsets 39903–39987
Umair Hamid
MEMBER_OF
Axact
Umair Hamid was the vice president of Axact.
Explicit
Confidence 99%
· Jack Rhysider
EP 142
Details
“He was the vice president of Axact”
Jack Rhysider ·
offsets 44219–44253