$500 Scam Kit Sells Fake TSLA Presale and Drains Wallets
A $500 scam kit has been discovered on a cybercrime forum that allows anyone with minimal technical skill to set up a fake TSLA token presale and drain wallets of unsuspecting investors.
The kit, which is being sold by a user named xrep who has been active in the cybercrime underground since March 2026, includes hosting, phishing pages, a fake investment dashboard, and victim-tracking tools.
The scam starts with an 'eligibility check' that requests the visitor's X username, followed by a page displaying the real profile picture of that account to make it look like the offer was chosen for the user.
The page then creates a sense of urgency through a funding bar, countdown clock, and warnings that claim the price is about to jump. The victim is then presented with two investment options: one that links a wallet and offers a 15% bonus, and another that skips the wallet and asks for cryptocurrency to be sent to an address controlled by the operator.
The control panel of the scam kit allows the operator to see victims navigating the site, log X usernames and locations, collect recovery phrases entered on the phishing page, and inflate the balance on demand to trick users into paying more.