The Lombard Rewards Scam is a deceptive phishing scheme targeting cryptocurrency users. It masquerades as a legitimate rewards program from Lombard Finance, enticing users to connect their crypto wallets under the pretense of receiving asset boosts. Once connected, the scam employs a crypto drainer to siphon funds from unsuspecting victims. This scam is particularly dangerous due to its convincing imitation of a reputable platform and the irreversible nature of cryptocurrency transactions.
Threat Overview
Attribute | Details |
---|---|
Threat Type | Phishing Scam |
Associated Domain | aiiocations-lombardfinance[.]com (uses double ‘i’ to mimic ‘allocations’) |
Detection Names | Combo Cleaner (Phishing), CyRadar (Phishing), Kaspersky (Phishing), Seclookup (Malicious) |
Symptoms of Infection | – Prompt to connect crypto wallet – Unofficial domain with misspellings – No official verification – Promises of free crypto/rewards |
Damage | – Unauthorized wallet access – Theft of crypto assets – Potential exposure of private user information |
Distribution Methods | – Social media impersonation – Malicious advertisements – Phishing emails with links to fake websites |
Danger Level | High |
Removal Tool | SpyHunter |
In-Depth Analysis
How Did I Get Infected?
Victims of the Lombard Rewards Scam are commonly lured through:
- Social Media: Posts and messages from fake profiles pretending to be affiliated with Lombard Finance.
- Phishing Emails: Emails claiming to offer crypto rewards and containing links to fake reward claim pages.
- Malicious Ads: Advertisements placed on shady websites that redirect to phishing domains.
Once the victim lands on the phishing site, they are encouraged to connect their crypto wallet. Doing so unknowingly gives the attacker control to extract funds via smart contract manipulation or direct access.
What Does It Do?
The scam is structured to:
- Clone a legitimate platform’s appearance.
- Trick users into believing they are receiving free tokens or rewards.
- Drain wallets once access is granted.
There is no real reward—only a high risk of financial theft.
Should You Be Worried for Your System?
Yes. While the primary goal of the scam is financial theft through crypto wallets, interacting with these websites can also expose your browser or system to malicious scripts. These may collect personal data or install tracking malware. Scanning your device with a reliable anti-malware tool such as SpyHunter is strongly advised.
Eliminating Crypto Scam Threats
Step 1: Identify and Report the Scam
- Gather evidence (screenshots, emails, transaction IDs).
- Report the fraud to:
- Your crypto exchange (Binance, Coinbase, Kraken, etc.).
- Law enforcement agencies like the FBI’s IC3 (ic3.gov) or the SEC (sec.gov/tcr).
- The Federal Trade Commission (reportfraud.ftc.gov).
- Blockchain explorers (like Etherscan) to check your wallet transactions.
Step 2: Uninstall Suspicious Software & Apps
- On Windows: Open Control Panel > Programs & Features → Find & Uninstall suspicious programs.
- On macOS:Go to Finder > Applications → Drag unwanted apps to Trash.
- On Android & iOS: Go to Settings > Apps → Uninstall fake crypto wallets or trading apps.
Step 3: Remove Malicious Browser Extensions
- Google Chrome:
- Open
chrome://extensions/
- Remove any unfamiliar or crypto-related suspicious add-ons.
- Open
- Firefox / Edge / Safari:
- Go to browser settings > extensions → Delete suspicious ones.
- Clear browser cache & cookies:
- Open browser settings → Privacy → Clear browsing data.
Step 4: Secure Your Accounts & Wallets
Change passwords immediately for:
- Crypto wallets
- Exchanges
- Email & social media
Enable Two-Factor Authentication (2FA):
- Use Google Authenticator, YubiKey, or Authy.
Move remaining funds to a secure wallet:
- Use a hardware wallet (Ledger, Trezor) instead of online wallets.
Step 5: Scan for Hidden Malware & Keyloggers
Your system may still have spyware, tracking your keystrokes or redirecting you to scam sites. A deep scan is essentialto detect and remove threats.
⏳ For a thorough malware check, use SpyHunter. (See Method 2 below.)
Automatic Removal with SpyHunter
If you suspect hidden malware, SpyHunter can detect and remove crypto scam-related malware, trojans, and browser hijackers.
Step 1: Download SpyHunter
Follow SpyHunter installation instructions here: SpyHunter Download Guide
Step 2: Install and Run SpyHunter
- Run the SpyHunter installer.
- Follow the on-screen installation steps.
- Launch SpyHunter after installation.
Step 3: Perform a Full Malware Scan
- Click “Start Scan Now”.
- Let SpyHunter scan for:
- Crypto-stealing malware
- Browser hijackers redirecting to fake exchanges
- Phishing-related spyware
Step 4: Remove All Detected Threats
- Click “Fix Threats” to eliminate malicious programs.
- Restart your system to complete the cleanup.
Step 5: Enable Real-Time Protection for Future Security
Activate SpyHunter’s real-time protection to:
- Block phishing & scam websites
- Prevent future infections
- Monitor system vulnerabilities
Proactive Prevention: How to Avoid Crypto Scams
- NEVER share your private keys or seed phrases – even with “support teams.”
- Always verify URLs before logging in to exchanges.
- Use only official wallet apps from trusted sources.
- Ignore unsolicited investment offers via Telegram, Discord, and social media.
- Check for HTTPS & security certificates before entering login details.
- Regularly scan your device for hidden malware and spyware.
- Store crypto in a hardware wallet (Ledger, Trezor) rather than online wallets.
Conclusion
The Lombard Rewards Scam is a calculated phishing attempt that preys on the trust and curiosity of cryptocurrency users. By masquerading as a rewards system, it manipulates victims into giving access to their crypto wallets. Because crypto transactions are irreversible, the damage from such attacks can be permanent and severe. Staying vigilant and using trusted security software is essential to preventing losses.