A 48\u2011year\u2011old single mother from Denver, Colorado, had worked as a paralegal for seventeen years, carefully saving for her daughter\u2019s college tuition. She had reviewed thousands of legal documents and spotted countless forged signatures across her career. But the fraud that wiped out her savings was not a poorly written email from a stranger with bad grammar. It was run by a slick Telegram bot, a fake earning dashboard, and a \u201cmentor\u201d who remembered her daughter\u2019s name and the dance recital she had attended the previous\u00a0weekend.<\/p>\n
In early 2025, she was added to a Telegram channel called \u201cGoldenDuck AutoTrading Elite.\u201d The channel promoted a platform simply known as GoldenDuck_AutoTradingbot\u200a\u2014\u200aa Telegram\u2011based automated bot that supposedly performed high\u2011frequency crypto trades on behalf of users. The group boasted that the bot delivered daily returns of 15\u201120% with \u201czero risk,\u201d powered by an AI\u2011trained \u201cGolden Duck algorithm\u201d developed by a secretive quant\u00a0fund.<\/p>\n
The scammers built a professional\u2011looking website at goldenduck.app, which advertised itself as a platform where users could \u201cearn coins by completing various tasks, primarily focused on typing work\u201d and convert those coins into cash vouchers or cryptocurrency. The mother believed she had done her due diligence. A quick search seemed to show that \u201cGolden Duck\u201d was a legitimate brand\u200a\u2014\u200athere was even a cryptocurrency called Golden Duck (GDUCK) trading on Ethereum. She did not know that the existence of a meme coin with a similar name meant absolutely nothing, that goldenduck.app had been registered less than a month earlier, and that security platforms had already flagged the website with alarming red\u00a0flags.<\/p>\n
The same Golden Duck branding appears across a web of sketchy domains and questionable operations, including goldenduck.bet and a cryptocurrency contract called \u201cGoldenDuck\u201d on Etherscan that carries no submitted security audit. All reuse the same fake promises\u200a\u2014\u200aautomated profits, effortless earnings, and zero losses. The mother had not recognized that a simple Google search would have returned identical warnings about Telegram task\u2011scam bots weeks before she deposited a\u00a0penny.<\/p>\n
A mentor who called herself \u201cAmanda\u201d contacted her daily on Telegram. Amanda never pushed. She asked about the mother\u2019s daughter, her dance recitals, her school grades. She expressed genuine\u2011sounding concern when the daughter caught a cold. She offered \u201cexclusive training\u201d on how to maximize the bot\u2019s earnings. She refused to mention a deposit until the mother had already begun to trust her completely.<\/p>\n
The platform offered a small test withdrawal. The mother deposited 500,watchedherdashboardtickupward,thenrequestedawithdrawalof500,watchedherdashboardtickupward<\/em>,thenrequestedawithdrawalof<\/em>800. The money landed in her bank account within 48 hours\u200a\u2014\u200athe bait, paid from later victims\u2019 deposits. That successful transaction was the only evidence she needed: a working withdrawal, processed on a Wednesday morning, confirmed in her account by\u00a0Friday.<\/p>\n One Binance user, Musa, later posted a warning: \u201cBased on my advice, I lost money because of this bot. It\u2019s a scam. \u201d The mother never saw that warning. She saw only her own successful withdrawal.<\/p>\n She transferred her savings, her daughter\u2019s college fund, and a home\u2011equity draw, totalling **230,000\u2217\u2217intoherGoldenDuckAutoTradingbotaccount.Herdashboardshowedabalanceclimbingpast230,000\u2217\u2217intoherGoldenDuckA<\/em>\u200butoTradingbotaccount<\/em>.Herdashboardshowedabalanceclimbingpast<\/em>550,000 within six\u00a0weeks.<\/p>\n When she tried to withdraw 60,000forherdaughter\u2032stuitiondeposit,heraccountwasfrozen.\u201cAmanda\u201ddemandeda60,000forherdaughter<\/em>\u2032stuitiondeposit<\/em>,heraccountwasfrozen<\/em>.\u201cAmanda<\/em>\u201ddemandeda<\/em>16,000 \u201cliquidity activation fee.\u201d She paid. Then a 24,000\u201ccomplianceverificationfee.\u201dShepaidagain.Finally,a24,000\u201ccomplianceverificationfee<\/em>.\u201dShepaidagain<\/em>.Finally<\/em>,a<\/em>35,000 \u201ctax clearance prepayment\u201d was demanded. When she refused, Amanda stopped answering. The Telegram channel was deleted overnight. The dashboard remained online, but the withdrawal button had been disabled.<\/p>\n Security platforms had already issued warnings. Scam\u2011Detector gave goldenduck.app a trust score of only 16.9\/100, tagging it as \u201cControversial\u201d and \u201cHigh\u2011Risk\u201d with flags for phishing and spam activity. A Trustindex reviewer later reported: \u201cCancelled our account after releasing it was a scam almost 2 years ago, now they\u2019ve started to try and take payment from our account completely randomly after all this time.\u201d The mother had not seen any of these warnings because she had not searched for\u00a0them.<\/p>\n Domain: goldenduck.app (currently active) Phase 1\u200a\u2014\u200aThe fake task\u2011scam website as bait. The scammers built goldenduck.app to look like a legitimate \u201cearn\u2011by\u2011typing\u201d platform, promising users they could earn coins by completing tasks such as installing apps, visiting websites, and registering for services. This lowered suspicion\u200a\u2014\u200ait looked like harmless side income, not an investment scheme. The mother had not realized that \u201cearn money by typing\u201d platforms have been a known scam template for\u00a0years.<\/p>\n Phase 2\u200a\u2014\u200aThe small\u2011test hook that worked. The 800withdrawalwasbait,paidfromothervictims\u2032funds.AdetailedanalysisofTelegrammoney\u2011botscamsexplains:\u201c\u2217\u2217Thebotstartedpayingmelegitsmallamounts\u200a\u2014\u200a800withdrawalwasbait<\/em>,paidfromothervictims<\/em>\u2032funds<\/em>.AdetailedanalysisofTelegrammoney<\/em>\u2011botscamsexplains<\/em>:\u201c\u2217\u2217Thebotstartedpayingmelegitsmallamounts<\/em>\u200a\u2014\u200a10\u201120 that actually showed up in my account. Builds trust, right? After three weeks of steady payments, my \u2018earnings\u2019 suddenly jumped to hundreds of dollars. When I went to withdraw, they hit me with some \u2018tax verification\u2019 BS\u200a\u2014\u200ahad to deposit 20% of my earnings first.** \u201d The first successful withdrawal is always bait. The only test that matters\u200a\u2014\u200awithdrawing a large sum after a large deposit\u200a\u2014\u200anever\u00a0works.<\/p>\n Phase 3\u200a\u2014\u200aEmotional grooming. \u201cAmanda\u201d learned her daughter\u2019s name, her dance recital schedule, and her dream of becoming a nurse. She asked about her grades and offered to send \u201cgood luck\u201d messages before exams. That manufactured empathy was the scam\u2019s most effective persuasion tool.<\/p>\n Phase 4\u200a\u2014\u200aArtificial urgency. Amanda insisted that the \u201cGolden Duck AutoTrading Beta Phase\u201d would close for new funding at the end of the month. The mother deposited larger and larger sums before she could verify the platform\u2019s legitimacy.<\/p>\n Phase 5\u200a\u2014\u200aThe bait withdrawal from other victims\u2019 funds. An $800 withdrawal was honoured, paid directly from later victims\u2019 deposits. The first successful withdrawal is always\u00a0bait.<\/p>\n Phase 6\u200a\u2014\u200aThe fake dashboard. The interface showed precise, consistent daily growth: no losses, no platform downtime, no red candles. A trading dashboard that never loses money is not an \u201cAI quant bot\u201d\u200a\u2014\u200ait is a video\u00a0game.<\/p>\n Phase 7\u200a\u2014\u200aThe fee\u2011escalation ladder. After the large deposit, every withdrawal request was blocked. The platform demanded three fabricated fees: \u201cliquidity activation fee,\u201d \u201ccompliance verification fee,\u201d and \u201ctax clearance prepayment.\u201d None of these exist in any regulated market. As one community discussion noted: \u201cThese Telegram money bots are pyramid schemes dressed up with fancy tech. Here\u2019s their playbook: They hook you with small \u2018free\u2019 earnings first. Click buttons, watch ads, refer friends\u200a\u2014\u200ayour fake dashboard keeps climbing. Then they spring the trap. Want to withdraw? Pay a \u2018processing fee\u2019\u00a0first.\u201d<\/p>\n Phase 8\u200a\u2014\u200aGhost withdrawal attempts post\u2011closure. Months after she stopped using GoldenDuck_AutoTradingbot, the same criminals continued trying to withdraw money from her bank account using her saved payment details. A Trustindex reviewer warned: \u201cnow they\u2019ve started to try and take payment from our account completely randomly after all this time.\u201d The scammers do not delete victim data; they store it for exploitation years\u00a0later.<\/p>\n The paralegal had spent nearly two decades catching document fraud in a law firm. But the GoldenDuck scam used three weapons that no legal audit could have anticipated.<\/p>\n The legitimate\u2011sounding brand name. The scammers chose a name\u200a\u2014\u200a\u201cGolden Duck\u201d\u200a\u2014\u200athat sounded professional and trustworthy. A separate cryptocurrency called Golden Duck (GDUCK) actually existed on the Ethereum blockchain, creating the illusion that the platform was part of a legitimate crypto ecosystem. The mother searched \u201cGolden Duck,\u201d found a real token, and concluded the platform was legitimate. She did not know that absolutely anyone can create a meme coin and that its existence proves\u00a0nothing.<\/p>\n The tiny trust score she never checked. Scam\u2011Detector had already analyzed goldenduck.app and given it a low trust score of 16.9, flagging it as \u201cControversial, High\u2011Risk\u201d and warning of phishing and spam activity. The mother had never visited Scam\u2011Detector before depositing her money. The small\u2011test hook that worked. The $800 withdrawal was bait, paid from other victims\u2019 funds. The first successful withdrawal is always bait. As one victim wrote: \u201cThey\u2019re using new victims\u2019 money to pay earlier ones\u200a\u2014\u200aclassic Ponzi\u00a0setup.\u201d<\/p>\n Emotional grooming. \u201cAmanda\u201d learned her daughter\u2019s name, her dance recital schedule, and her dream of becoming a nurse. She asked about her grades and offered to send \u201cgood luck\u201d messages. That manufactured empathy was the scam\u2019s most effective persuasion tool.<\/p>\n Artificial urgency. Amanda insisted that the \u201cGolden Duck AutoTrading Beta Phase\u201d would close for new funding at the end of the month. The mother deposited larger and larger sums before she could verify the platform\u2019s legitimacy.<\/p>\n Sunk\u2011cost fallacy. After she had wired 230,000,shewasterrifiedoflosingeverything.Thatfeardrovehertopaythefirsttwofees.Onlywhenthethirddemandreached230,000,shewasterrifiedoflosingeverything<\/em>.Thatfeardrovehertopaythefirsttwofees<\/em>.Onlywhenthethirddemandreached<\/em>35,000 did she finally\u00a0stop.<\/p>\n A meme coin with a similar name proves nothing. The existence of a Golden Duck cryptocurrency (GDUCK) on Ethereum does not validate the GoldenDuck_AutoTradingbot platform. Anyone can create a token in\u00a0minutes.No contract audit. The GoldenDuck Ethereum contract at 0x059b49ccee35d47be40213d2ba1a7037eb46bae4 had no security audit submitted\u200a\u2014\u200aa critical red flag for any project handling user\u00a0funds.A domain age of less than one month. A platform that claims to be an established trading operation does not register its website weeks before\u00a0launch.A security score of 16.9\/100. Scam\u2011Detector flagged the website as \u201cControversial, High\u2011Risk\u201d with warnings of phishing and spam activity.The classic Telegram task\u2011scam pattern. As one community discussion perfectly summarized: \u201cThey hook you with small \u2018free\u2019 earnings first. Click buttons, watch ads, refer friends\u200a\u2014\u200ayour fake dashboard keeps climbing. Then they spring the trap. Want to withdraw? Pay a \u2018processing fee\u2019\u00a0first.\u201dA small withdrawal that works. The first payout is always bait. It proves\u00a0nothing.Fees that keep moving. \u201cLiquidity activation fee,\u201d \u201ccompliance verification fee,\u201d \u201ctax clearance prepayment\u201d\u200a\u2014\u200anone of these exist in any regulated market. Scammers often demand you deposit a percentage of your supposed earnings to \u201cunlock\u201d your withdrawal.Customer support that disappeared when she stopped paying. Amanda was responsive only while money was being wired. When the mother refused the third fee, she and the Telegram channel vanished permanently.Ghost\u2011withdrawal attempts. The same criminals may still try to take payments from your account months after closure, using stored banking\u00a0details.Public warnings were already there. A Binance user named Musa had explicitly warned: \u201cBased on my advice, I lost money because of this bot. It\u2019s a scam.\u201d A simple search before depositing could have saved $230,000.<\/p>\n After weeks of sleepless nights\u200a\u2014\u200aafter cancelling her daughter\u2019s college enrollment deposit and borrowing money from her elderly mother\u200a\u2014\u200athe victim contacted AYRLP, a UK\u2011based blockchain forensic firm certified by the Financial Conduct Authority (FCA).<\/p>\n AYRLP\u2019s investigators:<\/p>\n traced the $230,000 across the blockchain through the network of wallet addresses linked to the GoldenDuck scheme,identified exchange touchpoints where the scammers had moved the funds toward cash\u2011out,and worked with international authorities, including the FBI and FinCEN\u2019s enforcement division, to freeze a portion of the assets before they could be fully laundered.<\/p>\n Through AYRLP, the mother recovered 35% of her loss\u200a\u2014\u200aapproximately $80,500.<\/p>\n \u201cI had already started drafting the email to my daughter telling her that we couldn\u2019t afford her college textbooks. I thought I would lose her education and my home in the same phone call. AYRLP got back more than $80,000\u200a\u2014\u200aenough to keep her enrolled for two years and still have something left for the\u00a0future.\u201d<\/em><\/p>\n The GoldenDuck_AutoTradingbot scam did not need a sophisticated website. The criminals used a brand\u2011new domain, a fake task\u2011scam landing page, and a Telegram bot with a friendly name. The mother believed she was dealing with a legitimate automated trading platform. She was not. The brand was invented. The AI was fake. The regulatory oversight was\u00a0zero.<\/p>\n As Kaspersky researchers have noted, Telegram bots are increasingly used for phishing and scams precisely because they lower barriers to entry: \u201cIt\u2019s much easier to lure potential victims this way; it\u2019s far harder to create and maintain a full\u2011fledged phishing\u00a0site.\u201d<\/p>\n A cryptocurrency exchange warning echoed the same message: \u201cSome platforms claim to provide automatic trading robots that can perform high\u2011frequency trading and make high profits through algorithms, but this is most likely a scam. The scammers want your \u2018investment\u2019 and they will take all the funds.\u00a0\u201d<\/p>\n Before you trust any Telegram\u2011based auto\u2011trading bot:<\/p>\n Never trust a test withdrawal. A successful small withdrawal is bait, paid from other victims\u2019 deposits. The only reliable test is whether the platform honors a large withdrawal without demanding additional fees.Check the domain age using a WHOIS tool. A platform that claims advanced technology with a domain registered less than a month ago is a definitive scam.Run the website through Scam\u2011Detector or Scamadviser before depositing anything. goldenduck.app had a trust score of 16.9 and clear \u201cHigh\u2011Risk\u201d tags.Search the exact phrase \u201cTelegram auto trading bot scam\u201d before you trust any claim. The results will show identical warning patterns.Be skeptical of any platform that demands upfront fees to withdraw your funds\u200a\u2014\u200aespecially \u201cliquidity activation,\u201d \u201ccompliance verification,\u201d or \u201ctax clearance prepayment.\u201d These fees do not exist in any regulated market.If a Telegram bot asks you to pay a fee to \u201cunlock\u201d your earnings, block it immediately. As one scam survivor noted: \u201cNo real platform pays hundreds for clicking stuff. If it sounds too good to be true and promises crazy returns for zero effort, it\u2019s always a\u00a0scam.\u201dIf you or someone you know has been victimized by GoldenDuck_AutoTradingbot, goldenduck.app, or any similar Telegram bot scheme: Contact the FBI\u2019s IC3 (ic3.gov), your state securities regulator, and a reputable blockchain forensic firm like AYRLP immediately.<\/p>\n The Denver mother eventually recovered 80,500ofher80,500ofher<\/em>230,000 loss. Her daughter is now in community college, with plans to transfer to a four\u2011year university. But every day, thousands of new users join the same Telegram channels, click the same fake buttons, and watch the same fabricated dashboards\u200a\u2014\u200abelieving they have found an easy path to\u00a0wealth.<\/p>\n There is no easy path. There is only your money and their vanishing act. Do not become the next\u00a0victim.<\/p>\n GoldenDuck_AutoTradingbot Scam: The Fake Telegram Bot That Uses Task Scams and a Vanished Mentor<\/a> was originally published in Coinmonks<\/a> on Medium, where people are continuing the conversation by highlighting and responding to this story.<\/p>","protected":false},"excerpt":{"rendered":" A 48\u2011year\u2011old single mother from Denver, Colorado, had worked as a paralegal for seventeen years, carefully saving for her daughter\u2019s college tuition. She had reviewed thousands of legal documents and spotted countless forged signatures across her career. But the fraud that wiped out her savings was not a poorly written email from a stranger with […]<\/p>\n","protected":false},"author":0,"featured_media":163629,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-163628","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-interesting"],"_links":{"self":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/163628"}],"collection":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=163628"}],"version-history":[{"count":0,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/163628\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/media\/163629"}],"wp:attachment":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=163628"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=163628"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=163628"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
Deceptive tie\u2011ins: Golden Duck cryptocurrency (GDUCK)\u200a\u2014\u200aa genuine but worthless meme coin that scammers use to create brand confusion
Smart contract: 0x059b49ccee35d47be40213d2ba1a7037eb46bae4\u200a\u2014\u200ano security audit submitted
Security scores: Scam\u2011Detector 16.9\/100\u200a\u2014\u200aControversial, High\u2011Risk
Domain age: Less than one month at time of victim\u2019s deposit
Total lost:\u00a0$230,000<\/p>\nHow the Fraud\u00a0Worked<\/h3>\n
Why She Fell for the\u00a0Trap<\/h3>\n
The brand\u2011new domain. goldenduck.app had been registered less than one month before the mother\u2019s deposit. A platform claiming advanced trading technology and years of development does not register its website weeks before\u00a0launch.<\/p>\nRed Flags the Mother Missed (and You Shouldn\u2019t)<\/h3>\n
How AYRLP Helped Recover 35% of the\u00a0Loss<\/h3>\n
Final Warning: A Cute Name Is Not a Licence\u200a\u2014\u200aand a Test Withdrawal Is the Most Dangerous Signal<\/h3>\n