LIVE · cybersecurity feed
Live wire
security

Fake TikTok rewards promise cash you’ll never get

Users are being targeted by fraudulent TikTok-branded reward pages that promise substantial cash payouts for daily check-ins, completing simple tasks, and referring friends. These sites, designed to mimic mobile shopping or loyalty applications, display a TikTok logo, a welcome message, and a tracker for daily check-ins, tasks, and referrals. They often present users with a rapidly…

ZeroDay News ·

Source: Malwarebytes Labs

Users are being targeted by fraudulent TikTok-branded reward pages that promise substantial cash payouts for daily check-ins, completing simple tasks, and referring friends. These sites, designed to mimic mobile shopping or loyalty applications, display a TikTok logo, a welcome message, and a tracker for daily check-ins, tasks, and referrals. They often present users with a rapidly accumulating points balance, which is then converted into a large cash sum, sometimes in the thousands, along with a countdown timer suggesting the balance is about to expire.

However, attempts to withdraw the promised funds are consistently met with new requirements. Users are typically asked to refer more friends, watch additional videos, complete sponsored offers through affiliate networks, or download a separate application for identity verification. The primary objective of these scams appears to be generating revenue for the operators through affiliate and cost-per-action (CPA) programs, where they earn money when users click ads, sign up for services, or install applications, regardless of whether the user ever receives a payout.

The on-screen balances and countdown timers are fabricated, designed to create a sense of urgency and investment, making it difficult for users to disengage. The promised cash and points do not reflect any real ledger or connection to TikTok's actual systems. The scam aims to keep users engaged in a continuous loop of tasks, always just one step away from a payout that never materializes.

While TikTok does operate a legitimate Creator Rewards Program, it functions differently from these fraudulent schemes. The official program is exclusively for eligible creators in specific countries who meet certain criteria and earn rewards for original videos, not for daily check-ins or tasks on external websites. Users are advised to verify any reward claims directly within the official TikTok platform.

To avoid falling victim, users should refrain from entering banking details, card numbers, or identification information on unverified TikTok-branded sites. If prompted to download an app outside of TikTok itself, it should not be installed. If an app has already been installed, it should be uninstalled, and a security scan should be run on the device. Users should also avoid referring friends or family to these sites, as this only perpetuates the scam. This type of "reward-mill" scam is not unique to TikTok and has been observed using other brand names, employing the same method of promising rewards to keep users engaged in a cycle of tasks.

ShareXLinkedInWhatsAppFacebook

More News

view all →
security

Canadian cybersecurity executive arrested in federal extortion case

A Canadian cybersecurity executive was arrested in Pennsylvania on Thursday, facing federal charges of conspiracy to commit extortion. Edward Dubrovsky, 54, a co-founder and former Chief Operating Officer of CYPFER, a firm specializing in ransomware negotiation, is charged with conspiring to threaten the confidentiality of information for extortion and conspiring to commit Hobbs Act extortion,…

breach

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

AI SPERA, the company behind the cyber threat intelligence platform Criminal IP, has announced AITEM (AI-Powered Threat Exposure Management), an expansion of its Attack Surface Management (ASM) offerings. AITEM aims to move beyond traditional asset discovery to provide a more comprehensive approach to understanding, prioritizing, and responding to security exposures. The platform is scheduled…

ai

AI Is Getting Really Good at Messing With Cybercriminals

Anti-cybercrime initiatives are increasingly deploying artificial intelligence to disrupt scammers by engaging them with lifelike bots, which the criminals mistake for genuine victims. This strategy aims to waste scammers' time and resources while gathering intelligence on their operations.

ransomware

FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe

The Federal Bureau of Investigation (FBI) has reportedly arrested Edward Dubrovsky, a co-founder of the ransomware negotiation firm Cypfer and currently associated with CyberSteward. The arrest is said to be part of the ongoing ShinyHunters investigation, specifically in connection with an incident involving FBI job applicant data.

ai

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

A new report highlights a significant blind spot in enterprise security architectures concerning the proliferation of third-party AI agents. The forthcoming 2026 State of Agent Security Report indicates that current security models, often designed to protect AI systems directly chosen and deployed by an organization, frequently fail to account for AI capabilities embedded within third-party…

security

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison

A former core infrastructure engineer has been sentenced to prison for an attempted cyber extortion plot against an industrial firm. The engineer reportedly deleted administrative accounts and reset hundreds of user passwords, subsequently demanding a ransom of 20 Bitcoin to prevent further disruption to the company's servers.