Archive LiveRead-only public record · No ads · No tracking
CASE / THEPROJECT SCAM EMPIRE
[REDACTED]: Inside a $10M Scam Mentorship Empire
The Enablers Registry·Editorial mirror·/theproject-scam-empire
Public record copy. Brand names withheld, public accreditation numbers preserved. If the body below says “we”, that means the original publisher, not this mirror. TER only preserves, redacts, and re-contextualizes.
$10M+ Claimed Revenue5,000+ Members Trained730+ Scammer Usernames Leaked
$10M+
Claimed Revenue
0
Members Trained
0
Scammer Usernames Leaked
0
OFEDREX Victims
The Scam University Model
[REDACTED] is not a tool. It is not a panel. It is not a single scam operation. It is a school — a structured, hierarchical mentorship organization that has been training scammers at industrial scale since 2021. Where other investigations expose a product, this one exposes the factory that produces the producers.
The operation claims $10M+ in total revenue and 5,000+ trained members. These are not empty boasts. A verified deposit of ₽1M on [REDACTED] — the Russian-language cybercrime marketplace — confirms they operate at serious financial scale. Their recruitment thread ([REDACTED]/threads/4826265/) runs openly, advertising mentorship packages to aspiring scammers.
The Hierarchy
Administrators
Top-level operators who control infrastructure, finances, and strategic direction. They manage the platform, set training curricula, and collect the largest share of revenue from all downstream operations.
Mentors
Experienced scammers who train new recruits. Each mentor manages a cohort of workers, provides operational guidance, and takes a percentage cut of every scam their trainees execute. They are the force multiplier.
Workers (Affiliates)
Trained recruits deployed into the field. They run the fake casino sites, manage victim interactions, and process deposits. Revenue flows upward — workers keep a fraction while mentors and admins take the rest.
Victims
End targets across 30+ countries, with India accounting for 20.1% of confirmed victims. Victims encounter fake casino platforms, rigged verification deposits, and social-engineered investment traps.
Why This Matters
Most scam investigations focus on a single tool or panel. [REDACTED] is different — it is the upstream producer. When you dismantle a Gambler Panel node or shut down a LuxardGambling domain, [REDACTED] simply trains new affiliates and deploys them with fresh infrastructure. You cannot stop the downstream without cutting the supply at the source.
The Casino Pipeline: OFEDREX & WinSystems
[REDACTED]'s casino arm operates under the codenames OFEDREX and WinSystems — a fake casino panel infrastructure that has been directly linked to 383 confirmed victims across 22 domains. This is not speculation. THE ENABLERS REGISTRY obtained the victim database.
OFEDREX by the Numbers
383 Confirmed Victims
Extracted from leaked databases. Each record includes deposit amounts, geographic origin, and the promo code used to lure them. India leads at 20.1% of total victims, followed by targets across 30+ nations.
22 Active Domains
A rotating fleet of fake casino domains designed to evade takedowns. When one goes down, the infrastructure spawns replacements. All trace back to the same [REDACTED] administrative layer.
Promo Code Tracking
[REDACTED] uses promo codes to track which mentor or affiliate drove each victim. Two codes stand out in the leaked data:
DREAM — 115 victims attributed. Highest-performing affiliate code in the dataset.
LRX774 — 61 victims attributed. Linked to a specific mentor cohort operating out of [REDACTED] channels.
SQL Injection Vulnerability
During investigation, THE ENABLERS REGISTRY discovered a SQL injection vulnerability in [REDACTED]'s platform infrastructure. This vulnerability exposed internal database structures and confirmed the authenticity of the leaked victim data. The finding demonstrates that [REDACTED]'s own operational security is built on the same cheap, rushed code they teach their affiliates to deploy.
Leaked Credentials
Administrative credentials recovered from the investigation:
[REDACTED]'s recruitment pipeline operates in the open. Their primary recruitment thread on [REDACTED] (threads/4826265/) advertises mentorship packages with the confidence of a legitimate SaaS business. The ₽1M verified deposit on the platform serves as social proof — a signal to potential recruits that this operation generates real money.
Recruitment Flow
Step 1: Recruitment
New members find [REDACTED] through [REDACTED] threads, [REDACTED] channels, and word-of-mouth in Russian-language cybercrime forums. The [REDACTED] bot @TheProject_inbot (ID: 7291050577) handles initial onboarding and verification.
Step 2: Training
Recruits are assigned to a mentor who teaches them the full scam lifecycle: domain setup, victim acquisition through social engineering, deposit manipulation, and fund extraction. Training materials are structured and standardized.
Step 3: Deployment
Trained affiliates receive access to panel infrastructure (OFEDREX, WinSystems, or external panels like Gambler and Olympus). They launch their own operations under mentor supervision, with revenue sharing enforced through the platform.
Step 4: Profit Extraction
Revenue flows upward through the hierarchy. Workers keep a fraction. Mentors take their cut. Administrators collect from every active operation. The Google Spreadsheet database tracks all financial flows, victim counts, and affiliate performance metrics.
@TheProject_inbot (ID: 7291050577) — handles onboarding, verification, and basic support for new recruits entering the mentorship pipeline.
Operations Tracking
[REDACTED] uses a Google Spreadsheet database to track affiliate performance, victim counts, revenue attribution, and mentor payouts. Centralized, auditable, and damning.
Scale of Operations
With 5,000+ claimed members and a ₽1M verified [REDACTED] deposit, [REDACTED] operates at a scale that dwarfs most individual scam panels. This is organized crime with a corporate structure — recruitment pipelines, training curricula, performance tracking, and revenue sharing agreements.
Downstream Operations: The Training Pipeline
[REDACTED] does not just run scams — it produces scammers. THE ENABLERS REGISTRY's investigation identified [REDACTED] as the upstream producer for multiple well-known scam panel ecosystems. Affiliates trained by [REDACTED] mentors go on to operate:
Gambler Panel — The largest fake casino panel network, with 1,200+ domains tracked by THE ENABLERS REGISTRY. [REDACTED]-trained operators represent a significant portion of Gambler's affiliate base.
LuxardGambling — A premium-branded fake casino operation. Shared infrastructure and credential overlaps trace directly back to [REDACTED]'s training pipeline.
Olympus Panel — Another downstream panel whose operators were trained through [REDACTED]'s mentorship system. Overlapping domain patterns and shared promo codes confirm the connection.
730+ Scammer Usernames Leaked
THE ENABLERS REGISTRY's investigation recovered a database of 730+ unique scammer usernames associated with [REDACTED] operations. This dataset includes [REDACTED] handles, [REDACTED] accounts, and internal platform identifiers. It represents one of the largest single leaks of scam affiliate identities ever documented.
The Connection Map
The evidence chain is clear: [REDACTED] trains affiliates. Those affiliates deploy on Gambler, LuxardGambling, and Olympus panels. Shared credentials (lancerbuy777@project.com), overlapping domains, and leaked databases prove these operations are not independent — they are downstream products of [REDACTED]'s training pipeline. Shut down a Gambler node and [REDACTED] deploys ten more graduates.
"They built a school that teaches thousands how to steal."
All findings in this investigation are backed by primary source evidence preserved in THE ENABLERS REGISTRY's ScamIntelLogs repository. The following indicators of compromise (IOCs) and evidence artifacts are publicly available for verification.
[REDACTED] is not a single threat — it is the training ground that produces threats at scale. Shutting down individual panels without dismantling the mentorship pipeline is a losing strategy. The evidence is public. The affiliates are identified. The infrastructure is mapped.
![[REDACTED] Scam Empire](/_mirror/redacted-logo.svg){kind=logo}