Crypto Scammers Target TikTok Shop Users in Sophisticated Phishing Campaign

Cybersecurity firm CTM360 has uncovered a sprawling "ClickTok" campaign exploiting TikTok Shop's growing user base. Over 10,000 fraudulent domains now mimic the platform's interface, deploying credential-harvesting phishing pages and malware-laced apps. The operation spans beyond TikTok Shop's 17 supported countries, indicating global ambitions.

Scammers employ AI-generated videos impersonating influencers and counterfeit Meta ads to funnel victims toward fake storefronts. These fronts advertise heavily discounted products exclusively payable in cryptocurrency—a red flag for financial fraud. The scheme specifically targets participants in TikTok's Affiliate Program through WhatsApp and Telegram-based social engineering.

While no specific cryptocurrencies are named in the fraudulent transactions, the demand for crypto payments suggests scammers may be leveraging privacy coins or mixing services to obscure fund trails. The absence of exchange mentions implies these operations occur outside regulated platforms, complicating recovery efforts for victims.