Wuffy Scam and Ransomware Payments Reveal Hidden Money Trails

Summary
The article connects a network of 250+ fake AI-toy stores, estimated to process $50 million annually, with a reported $40 million CNA Financial ransom traced by UK investigators through illicit financial networks. It offers practical scam-prevention advice.
Key points
- Mastercard investigators linked more than 250 look-alike Wuffy toy stores to an estimated $50 million in annual transactions; the article says the full scale may be larger.
- The stores reportedly used similar ratings and discounts, while payment records showed a Lithuanian company despite a US address listed on the site.
- Journalist Geoff White describes a reported $40 million CNA Financial ransomware payment and says the UK National Crime Agency traced portions of the money to accounts linked to Ekaterina Zhdanova.
- The NCA says Zhdanova offered UK drug gangs an exchange of cash for cryptocurrency; the article also describes reported links to moving funds for Russian interests and spy rings.
- The article recommends avoiding implausibly attractive deals, independently verifying banks and vendors, and discussing scams at home and work.
Article Details
- Topic
- Online retail scam payments and ransomware proceeds laundering
People
Vendors
Countries
Lithuaniasupport that answered fast and in detail. But the payment record showed a company headquartered in Lithuania while the site listed a US address, and the store had 250 look-alikes that all carried a 4.7-star ratingRussiaThe money trail keeps branching. When Russia invaded Ukraine, Russians with frozen money wanted funds in the UK to buy property or pay school fees. Reportedly, they paid Zhdanova in rubles, and she freed up the same
