{"id":29406,"date":"2025-02-05T00:51:34","date_gmt":"2025-02-05T00:51:34","guid":{"rendered":"https:\/\/gridinsoft.com\/blogs\/?p=29406"},"modified":"2025-02-05T01:43:59","modified_gmt":"2025-02-05T01:43:59","slug":"deepseek-scams","status":"publish","type":"post","link":"https:\/\/gridinsoft.com\/blogs\/deepseek-scams\/","title":{"rendered":"The Alarming Rise of DeepSeek Scams"},"content":{"rendered":"<p>The release of DeepSeek AI chatbot gave a push for an <strong>enormous number of DeepSeek scams<\/strong> that trick users in a variety of shady activities. Some of them just aim at charging money for services that are free by design, others try collecting users&#8217; personal information or even infect them with malware. In this article, I show my in-depth analysis of these sites, explain the risks one faces when using them, and show how to recognize them early on.<\/p>\n<h2>What are DeepSeek Scams?<\/h2>\n<p>It is hard to comprehend the sensation that was the DeepSeek R1 model on release. It has become a #1 newsletter headline for almost a week, though sometimes for its <a href=\"https:\/\/gridinsoft.com\/blogs\/deepseek-ai-data-leak\/\">security issues and database leaks<\/a>. But just a few days following the public release of the model, fraudulent actors began their attempts to earn their dirty coin on this news.<\/p>\n<figure id=\"attachment_29414\" aria-describedby=\"caption-attachment-29414\" style=\"width: 811px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" loading=\"lazy\" decoding=\"async\" src=\"https:\/\/gridinsoft.com\/blogs\/wp-content\/uploads\/2025\/02\/domain-list.webp\" alt=\"DeepSeek scams domains\" width=\"811\" height=\"736\" class=\"size-full wp-image-29414\" title=\"\" srcset=\"https:\/\/gridinsoft.com\/blogs\/wp-content\/uploads\/2025\/02\/domain-list.webp 811w, https:\/\/gridinsoft.com\/blogs\/wp-content\/uploads\/2025\/02\/domain-list-300x272.webp 300w, https:\/\/gridinsoft.com\/blogs\/wp-content\/uploads\/2025\/02\/domain-list-768x697.webp 768w\" sizes=\"auto, (max-width: 811px) 100vw, 811px\" \/><figcaption id=\"caption-attachment-29414\" class=\"wp-caption-text\">List of domains involved in DeepSeek scams<\/figcaption><\/figure>\n<p>In a snap of a finger, hundreds of websites were registered, offering pretty much the same appearance and contents. \u201cAccess world\u2019s most innovative AI model for a small fee\u201d \u2013 that is the motto that unites them all. The sole fact of some guys charging money for a thing that is available for free already makes it dubious.<\/p>\n<p>You can feel deja vu at this point, as the same exact thing happened upon the public release of ChatGPT 3, the \u201cfirst\u201d AI chatbot of them all. Similarly to modern days with DeepSeek scams, con actors were taking a free model, and offering it as a \u201cpaid\u201d GPT-4 at a corresponding price. But this time, the scope is much more extensive.<\/p>\n<div class=\"box\">Some of the past scams included <a href=\"https:\/\/gridinsoft.com\/blogs\/malicious-fake-chatgpt\/\">fake ChatGPT apps<\/a>, and fraudulent activity around DeepSeek is quite likely to take the same route.<\/div>\n<p>But what GridinSoft network security analysis team observed to the moment <strong>is over 800 domains<\/strong> registered less than a week ago, all dedicated to DeepSeek and related topics. Some offer access to the model, despite it being free, some use all the fuss to promote <a href=\"https:\/\/gridinsoft.com\/blogs\/common-cryptocurrency-scams-how-to-avoid\/\">scam crypto tokens<\/a>, and others spread outright malware. Quite a lot of them are taken down after less than a few days after being brought up online. Let\u2019s have a closer look at what they are and how they work.<\/p>\n<h2>How do DeepSeek Scams Work?<\/h2>\n<p>Two key things DeepSeek scams rely upon are users\u2019 lack of awareness about potential threats, combined with the rush to get the new technology. This is what allows even the most ridiculous tricks to work correctly. In that state, folks don\u2019t question even outright dodgy and strange things, leave alone well-designed scams.<\/p>\n<p>Scam campaigns typically start with a promotion campaign happening in social media. Fraudsters can buy ads in the media, or use spoofed accounts\/bots to post hundreds of posts, targeting as wide of an audience as possible.<\/p>\n<figure id=\"attachment_28749\" aria-describedby=\"caption-attachment-28749\" style=\"width: 300px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" loading=\"lazy\" decoding=\"async\" src=\"https:\/\/gridinsoft.com\/blogs\/wp-content\/uploads\/2024\/12\/acc-hijacked.png\" alt=\"Endorsement cryptoscam\" width=\"300\" height=\"197\" class=\"size-full wp-image-28749\" title=\"\"><figcaption id=\"caption-attachment-28749\" class=\"wp-caption-text\">Example of a cryptocurrency scam website endorsed through a hacked Twitter account of Apple<\/figcaption><\/figure>\n<p>Upon opening any of these shady websites, users face an offer to log in and introduce a payment to start using the service. If it is a crypto scam page we are talking about, it would most likely ask for a payment for <strong>a non-existent DeepSeek crypto token<\/strong>. In either case, money and personal information is the main focus.<\/p>\n<figure id=\"attachment_29416\" aria-describedby=\"caption-attachment-29416\" style=\"width: 631px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" loading=\"lazy\" decoding=\"async\" src=\"https:\/\/gridinsoft.com\/blogs\/wp-content\/uploads\/2025\/02\/deepseek-crypto-scam.png\" alt=\"DeepSeek cryptocurrency scam\" width=\"631\" height=\"686\" class=\"size-full wp-image-29416\" title=\"\" srcset=\"https:\/\/gridinsoft.com\/blogs\/wp-content\/uploads\/2025\/02\/deepseek-crypto-scam.png 631w, https:\/\/gridinsoft.com\/blogs\/wp-content\/uploads\/2025\/02\/deepseek-crypto-scam-276x300.png 276w\" sizes=\"auto, (max-width: 631px) 100vw, 631px\" \/><figcaption id=\"caption-attachment-29416\" class=\"wp-caption-text\">Example of a crypto scam parasiting on DeepSeek fame<\/figcaption><\/figure>\n<p>With the \u201cDeepSeek R1 access\u201d websites, the scam is not outright obvious. It may really provide access to the model, but why would one pay for a free model? Even if someone runs their local model to avoid staggeringly bad downtime of the official site, the capacity of their solution will be even lower. Setting up your own local version may just be a much more cost-efficient solution.<\/p>\n<p>For crypto scams that offer early staking in \u201cDeepSeek meme coin\u201d, things are much more straightforward. Users pay the money, hoping to get into the hype train early (probably motivated by <a href=\"https:\/\/gridinsoft.com\/blogs\/trump-airdrop-scam\/\">TrumpCoin and MelaniaCoin examples<\/a>), and get nothing in return. Websites simply shut down after a few days, with money and alleged tokens gone.<\/p>\n<p>There is also a small amount of pages that spread quite literal malware, using the trick with verification. Under different guises \u2013 from \u201cshow that you\u2019re using a correct OS\u201d to \u201cverify you are human\u201d. Upon clicking the button, a more classic <a href=\"https:\/\/gridinsoft.com\/blogs\/verify-you-are-human-scam\/\">fake captcha page<\/a> appears. The latter asks the user to open PowerShell and execute the malicious script that was copied to the clipboard as soon as they\u2019ve opened the website.<\/p>\n<p>Some of the websites also <strong>offer APK files to install<\/strong> on your Android smartphone. The very idea of running an questionable installer already has a bad smell to it. Absence of any legitimate explanation for the file adds even more suspicion, though for users eager to get their hands on the new technology, these red flags are non-existent.<\/p>\n<figure id=\"attachment_29415\" aria-describedby=\"caption-attachment-29415\" style=\"width: 1078px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" loading=\"lazy\" decoding=\"async\" src=\"https:\/\/gridinsoft.com\/blogs\/wp-content\/uploads\/2025\/02\/deepseek-site-verify.png\" alt=\"DeepSeek scams malware\" width=\"1078\" height=\"702\" class=\"size-full wp-image-29415\" title=\"\" srcset=\"https:\/\/gridinsoft.com\/blogs\/wp-content\/uploads\/2025\/02\/deepseek-site-verify.png 1078w, https:\/\/gridinsoft.com\/blogs\/wp-content\/uploads\/2025\/02\/deepseek-site-verify-300x195.png 300w, https:\/\/gridinsoft.com\/blogs\/wp-content\/uploads\/2025\/02\/deepseek-site-verify-1024x667.png 1024w, https:\/\/gridinsoft.com\/blogs\/wp-content\/uploads\/2025\/02\/deepseek-site-verify-768x500.png 768w, https:\/\/gridinsoft.com\/blogs\/wp-content\/uploads\/2025\/02\/deepseek-site-verify-860x560.png 860w\" sizes=\"auto, (max-width: 1078px) 100vw, 1078px\" \/><figcaption id=\"caption-attachment-29415\" class=\"wp-caption-text\">The site distributing malware under the guise of DeepSeek AI<\/figcaption><\/figure>\n<h2>How to recognize scam DeepSeek websites?<\/h2>\n<p>For now, at the beginning of February 2025, there are no other official pages of DeepSeek other than deepseek.com. There are also no mobile applications for any platform, though I am sure they will appear in future akin to how <a href=\"https:\/\/openai.com\/index\/introducing-the-chatgpt-app-for-ios\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">OpenAI made their app for ChatGPT<\/a>. Same is true for crypto tokens: DeepSeek as a company never announced the release of any cryptocurrency projects.<\/p>\n<p>With all that being said, one can make a simple conclusion: any pages other than the said official site that offer any services are fraudulent to a certain extent. To verify whether the app or a service is real, visit their website and check the blog: there will be information about a service shall it be real and legit.<\/p>\n<p>Though, it may sometimes be problematic to find this news, especially when a website posts lots of new content. To simplify the searching, consider using <a href=\"https:\/\/gridinsoft.com\/website-reputation-checker\">GridinSoft Website Reputation Checker<\/a>: this free tool will return you a verdict about the website\u2019s legitimacy in less than 30 seconds.<\/p>\n<p style=\"padding-top:15px;padding-bottom:15px;\"><a href=\"\/download\/antimalware\" rel=\"nofollow\"><img loading=\"lazy\" loading=\"lazy\" decoding=\"async\" src=\"\/blogs\/wp-content\/uploads\/2022\/07\/env02.webp\" alt=\"The Alarming Rise of DeepSeek Scams\" width=\"798\" height=\"336\" class=\"aligncenter size-full\" title=\"\"><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The release of DeepSeek AI chatbot gave a push for an enormous number of DeepSeek scams that trick users in a variety of shady activities. Some of them just aim at charging money for services that are free by design, others try collecting users&#8217; personal information or even infect them with malware. In this article, [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":29431,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"content-type":"","_sitemap_exclude":false,"_sitemap_priority":"","_sitemap_frequency":"","footnotes":""},"categories":[17,15],"tags":[444,619,826],"class_list":{"0":"post-29406","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-labs","8":"category-security-news","9":"tag-ai","10":"tag-cybersecurity","11":"tag-scam"},"featured_image_src":"https:\/\/gridinsoft.com\/blogs\/wp-content\/uploads\/2025\/02\/DeepSeek-Scams.webp","author_info":{"display_name":"Stephanie Adlam","author_link":"https:\/\/gridinsoft.com\/blogs\/author\/adlam\/"},"_links":{"self":[{"href":"https:\/\/gridinsoft.com\/blogs\/wp-json\/wp\/v2\/posts\/29406","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gridinsoft.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gridinsoft.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gridinsoft.com\/blogs\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/gridinsoft.com\/blogs\/wp-json\/wp\/v2\/comments?post=29406"}],"version-history":[{"count":8,"href":"https:\/\/gridinsoft.com\/blogs\/wp-json\/wp\/v2\/posts\/29406\/revisions"}],"predecessor-version":[{"id":29433,"href":"https:\/\/gridinsoft.com\/blogs\/wp-json\/wp\/v2\/posts\/29406\/revisions\/29433"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/gridinsoft.com\/blogs\/wp-json\/wp\/v2\/media\/29431"}],"wp:attachment":[{"href":"https:\/\/gridinsoft.com\/blogs\/wp-json\/wp\/v2\/media?parent=29406"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gridinsoft.com\/blogs\/wp-json\/wp\/v2\/categories?post=29406"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gridinsoft.com\/blogs\/wp-json\/wp\/v2\/tags?post=29406"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}