Mr Beast Scams - How to Identity and Protect Yourself

Common Types of MrBeast Scams

• The Discord Crypto/Casino Spam: Compromised user accounts (or direct messages from "hacked friends") send out screenshots or pings claiming MrBeast is launching a crypto casino or giving away thousands of dollars via promo codes on sketchy domains (e.g., runicwin.com, voxwin.cc).
• Deepfake Video Ads: AI-generated deepfakes of MrBeast's face and voice appear on TikTok, Facebook, and YouTube ads promising free or $2 iPhones to trick younger audiences.
• Fake Gift Card Giveaways: Unlisted or fake YouTube channels (MrBeast Promos) run sponsored ads offering gift cards, requiring users to log in through phishing pages or fill out data-harvesting surveys.

How the Technical Attack Works

1. The Hook: Victims download infected files disguised as cracked games, sketchy software mods, or Discord mini-games.
2. The Infection: The file installs an information stealer or session-token scraper (malware) that extracts browser cookies, saved passwords, and active session tokens, completely bypassing two-factor authentication (2FA).
3. The Spread: Criminals take over the victim's Discord, Instagram, or Facebook accounts and automatically blast the fake MrBeast giveaway or crypto casino scam to all of their friends and contacts.

How to Protect and Fix Your Accounts

• Never Trust Free Giveaways: Real MrBeast giveaways only occur publicly on his Official YouTube Channel and never require private messages, registration fees, or crypto wallet connections.
• Clean Your PC: If your accounts automatically sent out scam links, run a thorough security scan using trusted tools like Malwarebytes or Windows Defender to clear out active information stealers.
• Secure Your Profiles: Immediately change your passwords, enable 2FA, log out of all active sessions in your account settings, and revoke unauthorized OAuth applications.