The biggest cryptocurrency scams in history (Part 3) - PlusToken

2020-07-28 |

Plus Token maintained an illusion of sustainable business by pretending the funds are used to develop cryptocurrency-related products such as the Plus Token Wallet and Exchange.

Scams are all too common in the cryptocurrency world — in addition to the monetary losses sustained by affected individuals, scams paint a negative picture of the industry and may scare off potential participants as well. However, in the case of one notable 2019 scam, the consequences may go beyond the direct victims. It seems that 2019 will also be remembered as the year of the uncovering of PlusToken, a cryptocurrency Ponzi scheme that allegedly took roughly $2.9 billion from investors.

What is the PlusToken and how did it work?

“Plus Token” was a cryptocurrency Ponzi scheme disguised as a high-yield investment program. Based in China, PlusToken presented itself as a cryptocurrency wallet that would reward users with high rates of return if they purchased the wallet’s associated PLUS cryptocurrency tokens with Bitcoin or Ethereum. The owners claimed those returns would be generated by “exchange profit, mining income, and referral benefits.” PlusToken would go on to be listed on several Chinese exchanges and hit a peak price of $350 USD, raking in investments from millions of people. PlusToken had a major following in Korea and China — especially among investors not familiar with cryptocurrencies. The scheme offered 9% to 18% monthly returns on investment.

PlusToken became popular by relying on conferences and meetups to promote the token, like the one shown in these videos.


Plus Token maintained an illusion of sustainable business by pretending the funds are used to develop cryptocurrency-related products such as the Plus Token Wallet and Exchange. However, returns are generated by dividing more recent investments to pay off older members. The illusion of a sustainable business is what classifies this as a Ponzi Scheme — victims believed that they were investing in a business that generates high returns. Additionally, had a strong referral element, which gave huge bonuses to any member who referred friends and family into the scheme. Investors were divided into 4 “tiers”, according to how much they invested and how many other referrals they can make. This meant the more a member referred, the exponentially higher the return.

Many of the transactions were conducted through mixers like Wasabi Wallet, which utilizes the CoinJoin protocol to make it more difficult to trace the path of funds. Here’s an example in the form of a graph below, courtesy of Chainanalysis Reactor.

Image for post

The scammers also utilized peel chains and other complex movements to obfuscate the path of funds. This is an example for the scammers’ obfuscation attempts.

Image for post

Where did the money go?

Rumors that PlusToken has something shady going on had an impact on the funds sent to the platform: blockchain analytics firm Elementus showed “a sudden halt in deposits near block 8,040,000 (June 27th), which, incidentally, is the same day that several members of the PlusToken team were reportedly arrested in Vanuatu.”

Image for post

The report, which analyzed the ETH tokens that flowed out from PlusToken, said that indeed, “of the 9.9 million ETH collected by PlusToken, 9.2 million ETH has already been sent out” to “248k different addresses.” The vast majority of the ETH that left the platform was highly concentrated in a handful of addresses.

“It is unclear whether these addresses truly represent users at the top of the pyramid, or a PlusToken exit scam disguised as user withdrawals.” — stated Elementus.

Did the PlusToken scam liquidations bring down the price of Bitcoin?

So far, the PlusToken scammers have cashed out at least $185,000,000 worth of stolen Bitcoin, so analysts say that large liquidations generally tend to depress the price of Bitcoin.

Image for post

It can’t be said for sure that Bitcoin price drops are caused by PlusToken cashouts, since it’s possible that price drops follow the cashouts by coincidence but are in fact caused by something else. However, those cashouts cause increased volatility in Bitcoin’s price, and that they correlate significantly with Bitcoin price drops.

Timeline for the eventual downfall of the scammers

  • payments stopped on June 30, 2019 — users started reporting delays in fund withdraws. Some took to complain on the Chinese social media site “Weibo” citing that they were unable to receive funds despite writing for 35 hours after submitting withdrawal requests. Ring Leaders tried to convince the community that Plus Token will come back.


  • scammers decided to leave — when the funds finally began moving, one of the transactions carried the note “Sorry, we have run” as a comment to the transaction.

Image for post

  • arrests and extradition back to China — Law enforcement were able to arrest 6 of the suspects involved with Plus token in Vanatu on the 29th of June 2019. They were detained and extradited back to China to face trial.


Image for post


  • ring leader prosecuted in Jiansu — Chinese media stated that one of the PlusToken ring leaders named Zhou is being prosecuted by the People’s Procuratorate of Jianhu County in the city of Yancheng, Jiangsu Province. Zhou had registered 4 different accounts on the PlusToken phone app and had recruited over 1.9 million members, involving a total amount of about 14 million yuan (equivalent to USD$1.96 million).


  • is Plus Token still scamming users? — On 29th April 2020, there were screenshots of the PlusToken app circulating on Chinese social media of a supposed notice announcing that version 3.0 beta of the app is now online.


Image for post


  • last of PlusToken funds moved to exchanges — on 22nd June 2020, Twitter user Whale Alert found over 26 million EOS (worth over USD$67mil) had been transferred from a wallet associated with PlusToken to an unknown wallet, prompting cryptocurrency traders to go on high alert for potential downward price movement for EOS. These funds were then further split into multiple unknown addresses of varying amounts.

Image for post


What are exchanges doing to deter scammers?

Those behind Plustoken rely on cryptocurrency Exchanges to dispose of their scammed funds. Cryptocurrency exchanges do have Know Your Customer (KYC) measures in place, however these events demonstrate that their KYC measures were ineffective in stopping them in that instance. Since the previous selloff, exchanges have stepped up their standards: Huobi has launched Star Atlas, an on-chain analytics tool to identify problematic activities such as fraud and money laundering, and, peer-to-peer exchange Paxful has partnered with Chainalysis so that the exchange’s transactions can be monitored in real time.


Enjoy reading? Please share:

Get the latest crypto news, updates and reports by subscribing to our free newsletter!