Douyin is enhancing its ‘Verification Assistant’ tool to combat a growing wave of phishing scams that impersonate the platform. The social media giant announced an update that now allows the assistant to verify QR codes, in addition to images, helping users distinguish between genuine Douyin official activities and fraudulent schemes.
Combating Mail-In Scams
The update comes in response to a persistent scam where fraudsters mail fake ‘prize redemption’ packages to users. These packages often contain cards or brochures designed to look like official Douyin communications, claiming to be part of platform benefits, holiday rewards, or brand collaborations. The ultimate goal is to trick users into scanning a QR code and contacting a fake ‘customer service’ representative to claim a non-existent prize.
Douyin has emphasized that it will not use postal mail, small gifts, or similar methods to encourage users to scan QR codes that lead to third-party websites for claiming benefits. The platform has compiled a list of ten types of fraudulent ‘express delivery materials’ recently encountered, noting that while the packaging themes vary, the underlying scam remains the same: mail delivery followed by QR code scanning for fraudulent conversion.
Evolving Deception Tactics
Scammers are employing various tactics to create a false sense of legitimacy. Some fake materials are branded as ‘Douyin 10th Anniversary Gift Cards,’ while others leverage holiday occasions like the ‘Dragon Boat Festival Gift’ or ‘Qixi Festival Gift’ to mimic official offerings. Seasonal themes such as ‘Douyin Summer Letter’ or ‘Douyin Cool Summer’ are also used. Additionally, fraudsters are impersonating major sales events like the ‘Douyin 618 E-commerce Carnival’ and ‘Douyin Good Product Experience Season,’ prominently featuring promises of ’50 yuan cash cards,’ ‘exclusive privileges,’ and ‘scan to receive.’ These materials often mimic Douyin’s official logos and visual designs to lower user suspicion.
The Scam Process
Once a user scans the QR code and contacts the purported ‘customer service,’ the scammers proceed to ask for personal information under the guise of identity verification, prize registration, delivery confirmation, or activation codes. This information, such as phone numbers and tracking numbers, is then used to lure victims into downloading malicious apps or visiting fraudulent websites, leading to further exploitation.
Douyin’s Advice and Verification Assistant
The Douyin Anti-Fraud Center advises users to be wary of any unsolicited mail offering ‘cash cards’ or ‘gift cards’ that require scanning QR codes for redemption. Users should also avoid clicking external links, scanning unfamiliar QR codes, or interacting with non-official customer service channels for reward claims.
To help users identify and avoid these scams, Douyin recommends using the ‘Verification Assistant’ within the Douyin app. Users can search for ‘验证助手’ (Verification Assistant) and input suspicious phone numbers, text messages, or website URLs. They can also upload images or photos of QR codes for verification against official Douyin information. The platform strongly urges users to ‘not believe easily, not download, and not share screens’ to prevent falling victim to these impersonation scams.
