CryptoRom

CryptoRom is the name researchers gave to a specific fraud campaign — now understood as a variant of sha zhu pan — in which victims are recruited through legitimate dating platforms, moved to encrypted messaging apps, and then guided to install fraudulent cryptocurrency trading applications. These apps are distributed via Apple TestFlight, enterprise certificates, or Android sideloading to bypass official app-store review.

The fake trading app displays convincing charts and fabricated balances. Victims can make small withdrawals initially to build confidence, but larger withdrawals trigger demands for tax payments, insurance deposits, or compliance fees. After extracting maximum funds, operators shut down the app and disappear.

CryptoRom targets smartphone users globally; the technical delivery method — abusing legitimate app distribution mechanisms — is a distinguishing feature. Only install financial apps from official stores and independently verify any platform before depositing funds.