A group of repeat bad actors has reportedly carried out multiple rug-pull–style schemes, profiting by several million dollars. Be cautious about following their trading calls or project promotions, as doing so could put your funds at significant risk.
In their most recent incident involving the <a href="https://x.com/search?q=%24QBS&amp;src=cashtag_click" rel="noopener noreferrer nofollow">$QBS</a> project, it is estimated that they may have taken over $500,000 USD from participants.
CA: 2BAKjB47KpQD64m3nWGWrNjC2ZTwWpumYakJVgavdXQa
In the latest <a href="https://x.com/search?q=%24QBS&amp;src=cashtag_click" rel="noopener noreferrer nofollow">$QBS</a> incident, the project team minted tokens to 301 wallets, a pattern commonly associated with questionable or manipulative practices. (More on this tactic in a separate post.)
<img src="https://academy-public.coinmarketcap.com/srd-optimized-uploads/51115069a9bf42a3acd9df6b231ec585.jpg">

Our analysis of these wallets indicates that the team may have generated over half a million dollars in net profits, which were subsequently transferred to offshore exchanges.<img src="https://academy-public.coinmarketcap.com/srd-optimized-uploads/da59965c87db4b3e855a71efa8bc8e8b.png">

Using our token analyzer helps you detect these kinds of scams early and avoid them. It also makes it possible to see whether a token is being promoted by suspicious actors, as seen in this example.
<img src="https://academy-public.coinmarketcap.com/srd-optimized-uploads/176524fe57a64927b91ff83cf8f296e8.png">
Other cases, such as <a href="https://x.com/search?q=%24XVM&amp;src=cashtag_click" rel="noopener noreferrer nofollow">$XVM</a> and <a href="https://x.com/search?q=%24BOT&amp;src=cashtag_click" rel="noopener noreferrer nofollow">$BOT</a>, show similar patterns and ultimately collapsed after the teams behind them extracted substantial funds. More information on these situations is available in our previous posts. Who are the scammers KOLs? The main individuals behind these tokens are
<a href="https://x.com/CryptoSage26" rel="noopener noreferrer nofollow">@CryptoSage26</a>
and
<a href="https://x.com/RonnieRiches" rel="noopener noreferrer nofollow">@RonnieRiches</a>
, both repeatedly linked to multiple scam-like projects. Besides them, there are multiple other accounts:
<a href="https://x.com/AaronSolanaa" rel="noopener noreferrer nofollow">@AaronSolanaa</a>
<a href="https://x.com/itsjonmelillo" rel="noopener noreferrer nofollow">@itsjonmelillo</a>
<a href="https://x.com/cryptojiggy87" rel="noopener noreferrer nofollow">@cryptojiggy87</a>
<a href="https://x.com/whoisverm" rel="noopener noreferrer nofollow">@whoisverm</a>
<a href="https://x.com/cryptologicjohn" rel="noopener noreferrer nofollow">@cryptologicjohn</a>
<a href="https://x.com/whoisverm" rel="noopener noreferrer nofollow">@whoisverm</a>
Their “GEM Hunters” community is also operated by the same group, which is why many of the tokens promoted there have been flagged as scams by on-chain analysts and users.
To help prevent future scams, we monitor a wide range of X accounts that have been repeatedly associated with suspicious activity and tag new tokens when these accounts begin promoting them. Here are a few examples from our database. If you’d like us to add additional accounts, let us know. We’re continuously expanding our list.
<img src="https://academy-public.coinmarketcap.com/srd-optimized-uploads/77c07c5771e54d4aaf6a565af7fde889.png">

Beware of These Serial Scammers

Blokiments

Other articles published on Dec 10, 2025

Join our free newsletter for daily crypto updates!