What Is the Fake MrBeast Crypto Casino Scam?
The fake MrBeast crypto casino scam is a large-scale fraud operation in which criminals create hundreds of polished online gambling websites, promote them through social media ads and Discord spam using MrBeast's name and likeness, and steal cryptocurrency from victims who are tricked into making "verification deposits" to withdraw fake winnings.
According to an investigation by KrebsOnSecurity published in July 2025, the network comprises more than 1,200 individual scam sites sharing common infrastructure — the same API keys, the same game templates, and the same withdrawal-trap mechanism. Sites like Gozawin, Havawin, GamblerBeast, and hundreds of others are all part of the same criminal enterprise.
The scam exploits the fact that MrBeast (Jimmy Donaldson), the most-subscribed individual on YouTube, launched a real gaming business called Beast Games. By associating their fake casinos with MrBeast's actual brand, the scammers add a layer of credibility that makes the sites harder to dismiss as obvious fraud.
How the Scam Spreads: Discord, Threads, and Social Media
The scam's distribution channels are as industrialized as the sites themselves. The KrebsOnSecurity investigation traced the promotional spam to compromised and purchased Discord accounts that flood server channels with links to the fake casinos. A 17-year-old Discord server operator who investigated the network found that the spam came from accounts that had been hacked or bought in bulk, not from real users.
Beyond Discord, the scam ads appear on virtually every major social platform: Instagram, TikTok, Threads, Facebook, YouTube comments, and Reddit. The ads typically feature an image of MrBeast alongside text like "MrBeast is giving away $2,500 in crypto — use promo code BEAST to claim yours!" Some variants use other celebrities — Drake, Kai Cenat, and others — but MrBeast is the most commonly impersonated figure.
The ads are designed to bypass platform moderation by rotating domains frequently. When one site gets reported and taken down, the same ad redirects to a new domain with identical functionality. This whack-a-mole approach makes it difficult for platforms to block the scam at the source.
The Withdrawal Trap: Why Victims Lose Money
The core of the scam is the withdrawal trap, and understanding it is the key to protecting yourself. Here's how it works in detail:
When you create an account and use the promo code, the site credits your balance with a large amount — $2,500, $5,000, or more. You can play games with this balance. The games work, and your balance grows. This is the bait: it creates the psychological impression that you have real money sitting in an account.
The moment you attempt to withdraw, the trap springs. The site displays a message saying you must make a "verification deposit" — a small cryptocurrency payment, usually around $100 — to verify your wallet address before withdrawals can be processed. This deposit, the site claims, is fully refundable and will be added to your withdrawal.
It is not refundable. The moment your cryptocurrency hits their wallet, it is gone. If you deposit, the site will then invent additional requirements: a "KYC verification fee," a "tax payment," a "minimum balance requirement." Each new demand is smaller than the total you've already deposited, which makes it feel like a reasonable investment to unlock your funds. This is the sunk-cost fallacy weaponized against you.
Some victims lose $100. Others lose thousands, chasing the withdrawal that will never come. The "winnings" on the screen were never real — they were programmed numbers designed to create the illusion of value worth chasing.
The Technical Fingerprints: How Researchers Mapped the Network
The KrebsOnSecurity investigation, aided by the Discord researcher known as "Thereallo," identified the scam network through shared technical fingerprints. All 1,200+ sites invoked the same API key for an online chatbot — a key that appears to be custom-made or in very limited use. Scanning for that single API key across the internet revealed the full extent of the network.
The sites also share identical game code, identical withdrawal-trap flows, and overlapping domain registration patterns. Many were registered through the same registrars within days of each other, using privacy proxies to hide the registrants' identities. The cryptocurrency wallets used for deposits also cluster — multiple sites route deposits to the same wallet addresses, confirming they are operated by the same criminal group.
This matters for you because it means the scam is not a collection of individual bad actors. It is a centralized criminal enterprise with a scalable playbook. If you've been targeted by one variant, the same group is behind hundreds of others — and they will create new ones as old domains are reported and taken down.
All the Celebrity Names Being Used
While MrBeast is the primary face of this scam network, the criminals rotate through multiple celebrities to maximize reach. Known impersonated figures include:
MrBeast (Jimmy Donaldson) — the most common variant, exploiting his real Beast Games launch. Promo codes like "BEAST," "BEAST5000," or "MRBEAST" are used across hundreds of sites.
Drake — used in variants targeting hip-hop audiences, often with promo codes referencing the artist's brand or cryptocurrency associations.
Kai Cenat — a popular Twitch streamer whose name is used in Discord-targeted variants, particularly in gaming-focused servers.
Other influencers and celebrities — the network adapts to whoever is trending. If a celebrity is in the news and has a young, crypto-curious audience, they may be impersonated next.
The key principle: no celebrity is giving you free cryptocurrency through a promo code on a gambling site. If you see this pattern, it is a scam regardless of which celebrity's name is attached. For more on celebrity impersonation tactics, read our guide on AI deepfake voice scams.
How to Protect Yourself and Your Family
This scam disproportionately targets younger users — teenagers and young adults who follow MrBeast and other creators and may be less experienced with cryptocurrency. If you have children or younger family members who use Discord, TikTok, or Instagram, talk to them about this scam specifically.
Here are the practical steps to stay safe:
1. Never trust a gambling or crypto site you discovered through a social media ad or Discord message. Legitimate platforms are found through search, app stores, and direct recommendations from trusted sources — not spam.
2. Never pay a fee to withdraw money. No legitimate financial platform — casino, exchange, bank, or otherwise — requires you to deposit money to unlock a withdrawal. This is the universal red flag of advance-fee fraud.
3. Treat all "free credit" and "promo code" offers with extreme suspicion. If someone is giving away money, they don't need you to send them money first.
4. Verify the domain before engaging. Check the domain age, look for licensing information, and search the site name + "scam" on Google. Or paste the URL into Scam Detective for an instant risk assessment.
5. Educate your family. Share this article with anyone who uses Discord, TikTok, or Instagram and might encounter these ads. Awareness is the most effective defense against social engineering. For a broader overview of current scam trends, read our guide on AI cryptocurrency investment scams.