Claims

Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.

pig butchering INVOLVES WhatsApp

Scammers move dating-platform conversations to WhatsApp and use the channel to groom victims.

Explicit Confidence 98% · Ronnie Tokazowski EP 141 Details

“they’ll move you up to WhatsApp and then from there they’ll start grooming the person”

Ronnie Tokazowski · offsets 3752–3837

pig butchering INVOLVES crypto.com

The described scam made its fake investment application appear to operate within the legitimate crypto.com application.

Explicit Confidence 98% · Jack Rhysider EP 141 Details

“they made it look like it was using a legitimate exchange. In this case, crypto.com”

Jack Rhysider · offsets 8280–8363

romance scam INVOLVES money muling

Romance-scam victims can be used as money mules to receive and wire funds for BEC scams.

Explicit Confidence 99% · Ronnie Tokazowski EP 141 Details

“they will use those romance scam victims as a money-muling network to send money for these scams”

Ronnie Tokazowski · offsets 32668–32764

Jack Rhysider REFERENCES Rolling Stone article on pandemic fraud

Jack says he is reading a Rolling Stone article about pandemic-fraud losses.

Explicit Confidence 99% · Jack Rhysider EP 141 Details

“this Rolling Stone article I’m reading right now says it’s more like $1 trillion was stolen”

Jack Rhysider · offsets 54866–54957

Business E-mail Compromise USES typosquatting

BEC operators may register a domain one letter away from a legitimate business domain to impersonate a trusted party.

Explicit Confidence 97% · Jack Rhysider EP 141 Details

“register a domain that’s one letter off from the real one”

Jack Rhysider · offsets 34757–34814

Black Axe USES Business E-mail Compromise

Ronnie says BEC activity is tied, from an attribution perspective, to groups such as Black Axe.

Attributed Confidence 88% · Ronnie Tokazowski EP 141 Details

“from an attribution perspective, this ties back to groups such as Black Axe”

Ronnie Tokazowski · offsets 40132–40207

Scattered Canary USES Business E-mail Compromise

Ronnie identifies Scattered Canary as a mostly Nigerian cyber-fraud group engaging in BEC since 2018.

Explicit Confidence 99% · Ronnie Tokazowski EP 141 Details

“Scattered Canary was a mostly-Nigerian cyber-fraud group that we found back in 2018 that was engaging in business e-mail compromise”

Ronnie Tokazowski · offsets 49812–49943

Scattered Canary USES romance scam

Ronnie says Scattered Canary was involved in romance scams as well as BEC and unemployment fraud.

Explicit Direction flagged Confidence 98% · Ronnie Tokazowski EP 141 Details

“we know they were doing romance scams. We know they were doing unemployment fraud”

Ronnie Tokazowski · offsets 51718–51799

Yahoo Boy USES Yahoo Messenger

Jack says Yahoo Boys received their name because they initially used Yahoo Messenger to conduct scams.

Explicit Confidence 97% · Jack Rhysider EP 141 Details

“they started out using Yahoo Messenger to conduct their scams over”

Jack Rhysider · offsets 45440–45506

Ronnie Tokazowski USES Business E-mail Compromise

Ronnie says he has spent eight years fighting business e-mail compromise.

Explicit Confidence 99% · Ronnie Tokazowski EP 141 Details

“I’ve been fighting business e-mail compromise for the last eight years now”

Ronnie Tokazowski · offsets 3242–3316

Business E-mail Compromise USES Credential phishing

Ronnie says that, in some BEC cases, attackers harvest e-mail credentials and passwords through credential phishing.

Explicit Confidence 97% · Ronnie Tokazowski EP 141 Details

“At most they will do credential phishing where they’ll try and harvest the e-mail credentials and e-mail passwords”

Ronnie Tokazowski · offsets 30243–30357

Bay Town University ASSOCIATED_WITH Clear-text password storage

The fake school website stored account passwords in clear text and provided them to call-center staff.

Explicit Confidence 99% · Fazal EP 142 Details

“that password was stored in clear text and given to me”

Fazal · offsets 12221–12275

Axact ASSOCIATED_WITH Pakistan Electronic Media Regulatory Authority

PEMRA revoked or affected Bol’s broadcasting license after Shoaib’s legal troubles; the exact conditions are unclear in the episode.

Uncertain Confidence 86% · Jack Rhysider EP 142 Details

“the Pakistan Electronic Media Regulatory Authority revoked the broadcasting license that Bol had”

Jack Rhysider · offsets 45417–45513

Axact degree mill scam ASSOCIATED_WITH Saleem Qureshi

Saleem Qureshi was associated with the Belford litigation as the person who claimed responsibility for creating the website; later, the FIA reportedly found that Axact paid him to take the fall.

Uncertain Confidence 92% · Jack Rhysider EP 142 Details

“He admitted that Axact had paid him to take the fall.”

Jack Rhysider · offsets 42053–42106

Axact degree mill scam ATTRIBUTED_TO Pakistan

The episode frames the operation as a Pakistani-company scandal and describes Pakistani authorities prosecuting it, but does not claim that Pakistan as a state operated the scam.

Attributed Confidence 78% · Jack Rhysider EP 142 Details

“It looked really bad for a Pakistani company to be so scammy”

Jack Rhysider · offsets 39499–39559

Baytownuniversity.com DEVELOPED_BY Axact

The Bay Town University website was created by an Axact team, according to Fazal’s account.

Explicit Confidence 98% · Fazal EP 142 Details

“This was something that Axact created from thin air.”

Fazal · offsets 9501–9553

Newford University DEVELOPED_BY Axact

Newford University is described as a fake university created by Axact.

Explicit Confidence 99% · Fazal EP 142 Details

“Newford University, a fake university created by Axact.”

Fazal · offsets 22620–22680

Drewmont University DEVELOPED_BY Axact

Drewmont University is described as a fake university created by Axact.

Explicit Confidence 99% · Jack Rhysider EP 142 Details

“Drewmont University, a fake university created by Axact.”

Jack Rhysider · offsets 23542–23598

Bol DEVELOPED_BY Shoaib Ahmed Shaikh

Bol was started by Shoaib Ahmed Shaikh.

Explicit Confidence 98% · Jack Rhysider EP 142 Details

“started a TV network called Bol”

Jack Rhysider · offsets 33451–33482

Axact DEVELOPED_BY Shoaib Ahmed Shaikh

Jack says Axact was founded by Shoaib Ahmed Shaikh.

Explicit Confidence 99% · Jack Rhysider EP 142 Details

“Axact was found by a guy named Shoaib Ahmed Shaikh.”

Jack Rhysider · offsets 32856–32907

Axact degree mill scam DISCOVERED_BY Declan Walsh

Jack presents Declan Walsh’s investigation as exposing the Axact operation.

Explicit Confidence 98% · Jack Rhysider EP 142 Details

“published a really good article in the New York Times exposing all the shenanigans that Axact was getting up to”

Jack Rhysider · offsets 38960–39071

Axact degree mill scam INVOLVES Declan Walsh

Declan Walsh investigated and documented the Axact scam through reporting.

Explicit Confidence 99% · Jack Rhysider EP 142 Details

“he spent two years investigating this story”

Jack Rhysider · offsets 38690–38733

Axact degree mill scam INVOLVES Axact

The degree-mill scam involved Axact as the company operating the scheme.

Explicit Confidence 99% · Fazal EP 142 Details

“Axact created from thin air. There was no real university.”

Fazal · offsets 9525–9583

Axact degree mill scam INVOLVES FIA

The FIA investigated Axact, raided its offices, and gathered evidence for criminal proceedings.

Explicit Confidence 99% · Jack Rhysider EP 142 Details

“the FIA was investigating Axact, and yeah, they found enough evidence to open a case”

Jack Rhysider · offsets 39903–39987

Umair Hamid MEMBER_OF Axact

Umair Hamid was the vice president of Axact.

Explicit Confidence 99% · Jack Rhysider EP 142 Details

“He was the vice president of Axact”

Jack Rhysider · offsets 44219–44253