# TreasureNFT Scam

Introduction in their own words

> TreasureNFT is the world's first comprehensive NFT trading platform based on algorithmic trading. NFT assets are given a new vitality through the innovative algorithmic trading model that uses automatic price quotations based on an algorithm to automatically maintain liquidity, thus creating a new and exciting precedent in the NFT industry.

*Copied from the [Instruction manual](https://treasurenft.gitbook.io/copy-of-treasurenft-instruction-manual/).*

## YouTube Videos

Linking some videos for those who don't want to read:

* https://www.youtube.com/watch?v=8mXVi8LP9fQ
* https://www.youtube.com/watch?v=jbo7QqJUOQg
* https://www.youtube.com/watch?v=JBPbUblzn8Q (important to watch if you use SafePal)

## Minor Red Flags

### Dummy/Invalid Content

#### Dummy Testimonials

Let's begin by highlighting some notable errors they have made, including leaving placeholder content on another domain controlled by the reputable company.

Domain: [treasurenft.space](https://treasurenft.space/)

To verify my claim, visit the official site, scroll down to the bottom, click on the "Download App" section, and scan the QR code for the APK.


Scanned URL: https://treasurenft.space/download0213

Interestingly, even the APK download link isn't working, yet it still appears on the website—talk about utmost professionalism. Moving on to the homepage, you'll find a straightforward testimonials section:


"John Doe" and "Jane Smith" are generic placeholder names often used as fake or dummy names. Why would a legitimate company include such generic names in their testimonials?

#### Google Form

On the main site, there's an "Artist Application Form" link in the footer that directs you to a Google Form (https://forms.gle/78WE4Vd6qh3NTAkW7). However, when you try to access the page, you encounter the following message:


This again highlights two important things:

* Google has disabled the form because they were clearly violating Google's Terms. But why does a company dealing with thousands of USD every single day use a Google Form to sign up new artists?
* Since the form is down, and there's no indication of when (or if) it will be restored, the company isn't receiving new applications. Yet, they haven't updated the website with a new form or alternative.

Both these points indicate that they don't care about the artists. The form was just a placeholder to create the appearance of a legitimate platform. Now that they've grown bigger and their user base is less focused on artists, they don't seem willing to invest the time to implement a new form or switch from a third-party service like Google Forms.

### Multiple Domains

The domains that I have found so far:

* [treasurenft.xyz](treasurenft.xyz)
* [treasuresnft.com](treasuresnft.com)
* [treasurenft.space](treasurenft.space)
* [treasurenftsvip.com](treasurenftsvip.com) (for mails)
* [treasures-net.com](treasures-net.com) (for mails)
* [treasurenft.vip](treasurenft.vip) (for mails)

There could be many more domains used by the scammers for various activities. You can easily check the usage of different domains by resending any email verification mail (as I did).

Using different domains and TLDs is a common technique in many scams so that even if one domain goes down, the scam operation can continue. They don't mess around with these things like Google Forms.

### Development Subdomain

If you open the JavaScript file: https://treasurenft.xyz/js/app-eed542cc.9cc555f6.js and have a basic understanding of coding, you can notice another domain mentioned at the very bottom: [devsdf34refg.treasurenft.xyz](https://devsdf34refg.treasurenft.xyz).

This is an active subdomain, presumably intended for use by the development team. Having both production and development sites accessible on the same primary domain is, to say the least, highly unprofessional.

The database connected to this subdomain appears to be outdated—it does not include newer accounts, which means it's missing recent referral codes.

## Major Red Flags

### X (Twitter)


Vietnam Grand Opening:

* https://x.com/Treasurenft_xyz/status/1680529500122017792
* https://youtu.be/2FhwrxbrLCw

They have also tweeted a campaign (https://soquest.xyz/space/TreasureNFT/campaign/bQ2iTjfuvi) where they were offering points to users for following and interacting with their tweets, as well as visiting the website:


This suggests that without such campaigns, they wouldn't have such numbers on their X account.

This highlights another issue with these "businesses." It wouldn't be surprising if they ran similar campaigns to generate positive Play Store and App Store reviews—a common tactic in scams.

Another interesting point is that their X tweets promote "pumping" various crypto tokens, which they also discuss on their Telegram channel. This could be interpreted as a market manipulation strategy: encouraging their followers to buy tokens in order to drive up the price. Unsurprisingly, during these scheduled pumps, it would not be shocking if some Chinese operatives made a fortune by selling their own tokens.

### California, USA

Their X handle claims they're based in California, USA. The first piece of evidence I found supporting that was a certificate featured in their Vietnam grand opening video (YT): https://youtu.be/2FhwrxbrLCw?t=25

HOWEVER, pay attention to what's stated under the "Type of Business":


Don't be fooled by "General Stock Corporation"—this designation doesn't mean they're involved in stocks, forex, or trading. A General Stock Corporation is simply a type of business entity owned by shareholders who hold stock in the company. This structure allows the corporation to raise capital by issuing shares to investors. Shareholders enjoy limited liability, meaning they are not personally responsible for the company's debts beyond their investment.

Don't just take my word for it. Visit [https://bizfileonline.sos.ca.gov/search/business](https://bizfileonline.sos.ca.gov/search/business) and search by **4768930** (the entity number) to view the document and previous records. These reveal that the company was originally named **RESET TECHNOLOGY CROP**—yes, "CROP", which appears to have been a typo—before being corrected to **RESET TECHNOLOGY CORP**.

**This document and others can be accessed by visiting: [https://drive.proton.me/urls/2R1YPV3TX4#JoiBGaRn0G3d](https://drive.proton.me/urls/2R1YPV3TX4#JoiBGaRn0G3d)**

#### KE&ASSOCIATES CONSULTING INC

This is the consulting company responsible for managing the business finances and documents. The entire team consists of Chinese individuals—is this merely a coincidence? I don't really think so.


Screenshot from: https://www.kecpausa.com/#comp-ifwf47tv

Archive: https://web.archive.org/web/20250317221549/https://www.kecpausa.com/

### Canadian MSB License

The company boasts about obtaining a Money Services Business (MSB) license in Canada in a Medium post: https://medium.com/@Treasurenft_xyz/treasurenft-successfully-obtains-canadian-msb-license-expanding-into-global-compliance-markets-aae29d260635

You can verify the MSB license by visiting https://fintrac-canafe.canada.ca/msb-esm/reg-eng and searching for **"M20525019"**, which will provide you with the relevant licensing information.

> Legal Name: CAPPO FX INC., Operating Name: CAPPO FX INC.

A couple of points that may be overlooked:

1. MSB License is only applicable within the Canadian jurisdiction. It does not validate or justify the company's activities outside Canada. Essentially, the company could be conducting entirely different types of business in Canada under this license. Moreover, even a business solely involved in simple currency exchange or money transfer services can obtain this license. It doesn't have any special relation to their global operations or their crypto/NFT activities—just like in the US, where the company is registered as a Software Development firm.
2. The company appears to obscure its history by not emphasizing its previous names. It was formerly known as ONEBT STAR INC. (from 2020-09-13 to 2023-02-20) and then as Cappo FX Inc. (from 2023-02-20 to 2024-10-11). In 2024-10-11, the company once again rebranded to TREASUREMETA CORPORATION (current name). This rebranding coincided with their MSB registration, suggesting that they may be trying to downplay or hide their earlier identities. For details, see: https://federalcorporation.ca/corporation/12337941

#### Addresses

The address mentioned in the MSB license on the official website is: **53 CAPTAIN FRANCIS DR, MARKHAM, Ontario, Canada, L3R9C9**

Google Maps: https://maps.app.goo.gl/Pkn2WdqNiMQmmF636

Screenshot:


Another address that frequently appears on various Canadian company data sites is: **9255 Woodbine Avenue, Markham ON L6C 1Y9, Canada**

Google Maps: https://maps.app.goo.gl/dFrJQerihksCf2jdA

Screenshot:


The second address becomes even more intriguing when you explore it using street view. You'll notice multiple businesses featuring Chinese language signage and names in that area, suggesting that the location might be a central hub for Chinese activity in the region.

### Exposed NFTs

They primarily offer 8 collectible collections, which can be accessed using the following links:

* https://treasurenft.xyz/gateway/app/explore/artist/detail?artistId=ART00C13L&name=&page=1&size=1000
* https://treasurenft.xyz/gateway/app/explore/artist/detail?artistId=ART03AO97&name=&page=1&size=1000
* https://treasurenft.xyz/gateway/app/explore/artist/detail?artistId=ART05DQ59&name=&page=1&size=1000
* https://treasurenft.xyz/gateway/app/explore/artist/detail?artistId=ART06051K&name=&page=1&size=1000
* https://treasurenft.xyz/gateway/app/explore/artist/detail?artistId=ART08WF70&name=&page=1&size=1000
* https://treasurenft.xyz/gateway/app/explore/artist/detail?artistId=ART0E0E64&name=&page=1&size=1000
* https://treasurenft.xyz/gateway/app/explore/artist/detail?artistId=ART0FA96F&name=&page=1&size=1000
* https://treasurenft.xyz/gateway/app/explore/artist/detail?artistId=ART0M0WSF&name=&page=1&size=1000

Similar links are available for other NFTs too, example: https://treasurenft.xyz/gateway/app/explore/artist/detail?artistId=ART02R777&name=&page=1&size=1000

Anyone with basic programming skills (or simply the know-how to use AI chatbots) can craft an automation script to download every NFT from the website within a few hours (or days depending on how fast the website can deliver them without crashing).

This undermines the "NFT trading platform" claim that these scammers make. While they might implement some form of authentication to address this issue once it's widely known, it's important to note that this vulnerability has existed for years.

**You may also notice Chinese characters in the file names when accessing these links.**

### Comments Written in Chinese

Additionally, many JavaScript files on their website include comments written in Chinese, as demonstrated in the examples below:

* https://treasurenft.xyz/js/app-eed542cc.9cc555f6.js
* https://treasurenft.xyz/js/4202.1a23ab36.js
* https://treasurenft.xyz/js/3625.6c16a29d.js
* https://treasurenft.xyz/js/6170.86416b78.js
* https://treasurenft.xyz/js/6812.7deb65ea.js

There are several other files that contain the same or similar comments.

### MLM nature:

This is how the company promotes MLM: right after I created a new (fake) account, I received an in-site notification with promotional content, and the file name even featured Chinese characters:


Translation:

Google Translate: https://translate.google.com/?sl=auto&tl=en&text=%E7%A4%BE%E5%8C%BA%E4%B8%93%E5%B1%9E%E6%8E%A8%E8%8D%90%E5%A5%96%E5%8A%B1_%E8%8B%B1%E6%96%87&op=translate

Image Link: https://treasurenft.xyz/userdata/img/20250318055915_%E7%A4%BE%E5%8C%BA%E4%B8%93%E5%B1%9E%E6%8E%A8%E8%8D%90%E5%A5%96%E5%8A%B1_%E8%8B%B1%E6%96%87_compre.jpg