Don Krypto/Elite Dm scammer

[Bill Bill]

This is going to be a very long report to take care of this scammer once and for all
Some parts of this report will be made private for obvious purposes

I thank the staff member(s) that deal(s) with this in advance for reading through all of this.

Previous reports:
Don Krypto / Jaysue Poor practices
[Resolved]
Business partner turned scammer. "Lavas fc"

Don Krypto is known for deleting all his messages on discord 24/7, why would an innocent person do this? (Proof of this in various of the other older reports)

1)
PRIVATE

2)
Allowing notorious scammers back in his cc, ranking them, allowing them to scam huge amounts in game and not covering the scammed amount

As seen in this previous report, Don Krypto's friend "Identify_rs", used his trust/rank within the CC to scam 40B 07
Don Krypto / Jaysue Poor practices

Yirru had already warned Don Krypto about Identify scamming 2b (in their cc, as a rank) before, can be seen in Yirru's post

Don Krypto chose to ignore this warning saying he trusts identify and would cover any scams by him.

Identify was banned for scamming 40b off a user known as "Davido" (proof in Yirru's report)

Fast forward about 3-4 weeks, Identify is allowed back into the cc by Don Krypto, as a rank, AGAIN!

Identify does a 20b dm for one of his viewers against another user of the cc "weltmacht"
45682172844-offset-9728

Weltmacht wins and gets scammed for 40b, this scam is performed by Identify, who Don Krypto let back in his cc and gave a trusted rank

As seen before Don Krypto said he trusts identify and would cover any scams by him, can be seen in one of the earlier reports

Allegedly weltmacht was refunded 20b by Don Krypto (however 40b should have been paid)

This is 80b+ scammed by a user who was vouched for by the owner, Don Krypto, as far as the public is aware davido got paid 2b out of 40b and weltmacht got paid 20b out of 40b
It is very likely Krypto received a split of these scams

3)
PRIVATE: Blackhat activity


4)
PRIVATE: Blackhat activity

5)
PRIVATE: Blackhat activity

6)
PRIVATE: Scamming

7)
Don Krypto uses a discord extension called "savecord"
Screenshot - 45a2ffeac45b0c84807a0bfe8d330e7a - Gyazo

To enter his discord (elite dm) you have to verify yourself with this extension
Screenshot - db9f31b95202e4427932876900a82dc9 - Gyazo

When verifying, the extension gives a warning saying it gives access to a part of your discord account (Username, being able to join discords on your behalf...)
Screen capture - a939664421cbe39cc23c4a631497cb51 - Gyazo
It does however not give a warning that verifying through this extension gives the owner of the discord more personal information such as IP addresses and your registered email

Here’s an example of output of this discord bot
Screenshot - d9b1317c5a4142fb8efdd4546d8ecf38 - Gyazo

This is a MASSIVE security/privacy breach, Don Krypto has current ip addresses and emails of thousands of players

He is involved in Blackhat activity, we can only imagine what he already did and will do in the future with this information

Users should be made aware to change their personal information as soon as possible

Don Krypto has already ddosed multiple people and none of them knew how he got their ips, this is the explanation

8)
PRIVATE: Scamming/ban evading

9)
PRIVATE

 

@Don Krypto @Jaysue For what reason do you use the discord plugin to grab ips/emails? Is it for your security?

 

[Don Krypto]

@Don Krypto @Jaysue For what reason do you use the discord plugin to grab ips/emails? Is it for your security?

It doesn't grab emails, and the ip function is for alt detection/bot prevention (I've suggested to the developer to hash the ips instead of plaintext). The reason I use the bot though, apart from basic verification/bot prevention is you can pull everyone who has given permission to a new server in the event you discord server is deleted.

 

@Don Krypto and @Jaysue has been DNT'd for "blackhat" activity (ip grabbing) the bot in the discord mentions nothing of gathering others information to which you could use for however you feel. Feel free to Request a Pardon or Dispute a Ban, DNT or TWC if you feel this is the incorrect judgement.

 

I'll post some clarification here since this seems to have caused some issues:

There is a reasonable expectation that a website you visit will record certain information about you (IP address, location, etc.) and users can opt in or out of this through VPN usage or by not visiting certain sites at all.

The difference here is that this same warning was not provided to users that engaged with this Discord bot, leading to personal information being collected without knowledge or consent. If you're going to collect information on your users in this way they must be informed that you are collecting it beforehand so they are free to choose whether or not they consent.

I'm going to reduce the ban/DNT here to a TWC for bad trading practices as there is no evidence of this being used maliciously. To anyone else collecting user information like this, you have a week to ensure your users/customers are warned beforehand or you'll be given a TWC as well if reported.

The evidence submitted for the other points of this report is not well-substantiated enough to be actionable.