If you’ve come across picotoken.com, be aware that it’s been identified as part of a fraudulent investment scheme targeting cryptocurrency users. Promising high returns on USDC investments, the platform instead directs funds into illicitly controlled wallets. Here’s what our OSINT investigation has uncovered.

The domain picotoken.com was registered on June 22, 2010, via Gname.com Pte. Ltd., with its most recent update on April 21, 2024. While the long registration history might inspire confidence, it is currently being exploited for malicious purposes. The registrant is listed as being based in California, USA, though further details are obscured.

Victims have been instructed to transfer USDC to the following Ethereum addresses:

0x087e74FE48977776D8f903a33f7E1338F8E9B483
0xc7e5C5c96Fd1A6e2D5897C4df2EEb8de4b6f7D0C
0xef4ca150624bc916f158ce163bcca9b10d2576ca
0x775f46afe672575f3bf7558dcd691857efee711e
0x4df2446ef1af7b9b310278acbfed74dc1d76772f
To date, the total confirmed loss amounts to $126,347.00, transferred to these wallets under the false pretense of investment opportunities. The network appears sophisticated, leveraging multiple addresses and obscured ownership to evade detection.

If you have additional information about picotoken.com such as other wallet addresses, communication methods, or associated platforms your input could be critical in piecing together the full extent of this operation. Every detail helps to track the movement of stolen funds and identify the operators behind this scheme.

By sharing knowledge and collaborating, we can disrupt these scams and protect others from falling victim. If you have relevant information, please contribute to this thread.