• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to footer
  • Jobs
  • Career
    • Cyber Security Training
    • Work from Home
    • Cyber Security Analyst
    • Remote Work – Six Ways to Keep Your Data Safe When Working Remotely
  • Field Guide
  • Newsletter Signup
  • Deals
  • News
AskCyberSecurity.com

AskCyberSecurity.com

Cyber Security News & Information

  • Home
  • Data Privacy
    • Gamers
    • Government Cyber Security
      • Legislation
      • Standards
        • What are the risks of computer security?
        • Medical Cyber Security
    • Social Media
  • Security
    • Data Breaches
    • Scams
    • Malware
  • Software
    • Apps
    • Web Browsers
  • Glossary
    • Cyber Security Acronyms
  • About Ask Cyber Security
    • Authors
    • Contact Us
  • VPN
    • How Do I Know If My VPN is Working?
    • Best Free VPN iPhone
    • Why Use a VPN?
    • NordVPN vs IPVanish
    • Private Internet Access Download
    • Best VPN for Streaming
      • TikTok VPN
    • VPN Porn
    • Computer Security Software – What You Really Need
  • Tutorials
  • ChatGPT
    • Does ChatGPT Save Data?
AskCyber Home » News » Gamers » $10.1 Million XBox Gift Card Scheme: Inside Job

$10.1 Million XBox Gift Card Scheme: Inside Job

2021-07-06 by Grace Choi

xbox scheme

Ex-Microsoft Employee Uses Bug To Fund Grand Lifestyle

Volodymyr Kvashuk (Vova) was a junior Microsoft engineer who was enlisted to find bugs in Microsoft’s payment system. Using fake credit cards, Kvashuk would make purchases from Microsoft’s online store and take note of any errors. The system would detect that the purchase wasn’t real, and would not deliver the product. However, the mid-20’s engineer found a very obvious yet crucial flaw in the system and decided to monetize on his discovery.

While testing physical item purchases was mundane, Kvashuk realized that gift cards function differently. When he would “purchase” a gift card, the real 5×5 codes (ex. DD9J9-MXXXC-3Y6XD-3QH2C-PWDWZ) attached to those gift cards was actually dispensed. The young Microsoft employee was suddenly the owner of an exciting and lucrative secret. He could generate unlimited codes for free; he could create money out of thin air.

Starting small at $10 – $100 increments, Kvashuk generated XBox gift cards that added up to a very large sum over the span of two years. By the time that federal agents caught up with him, he had made $10.1 million having flipped over 152,000 XBox gift cards, and lived a comfortable life at a seven-figure lakeside home with plans to purchase a yacht and seaplane.

Gift Cards Function As Cryptocurrency

According to Bloomberg Businessweek, prosecutors claim that Kvashuk’s scheme singularly resulted in fluctuations in the re-selling value of XBox gift cards. This was evident in his ability to manipulate the value of the gift cards in order to make a larger profit. By withholding from the market, he was able to drive up the value of the cards so that he could flip them for a larger profit once the demand had risen.

Gift cards are a popular item to trade in exchange for cryptocurrency, such as bitcoin. The crypto can then be turned into cash. This is a common tools used by scam artists who often use phishing tactics to fool victims into purchasing gift cards and sending the corresponding numbers to the scammers. The scammers would then flip the cards for Bitcoin.

SEE ALSO Cryptocurrency Scams Cost Investors Millions

This case brings to light the value and risk that lies in a jumble of letters in those 5×5 codes. As was made obvious, these codes are easily manipulated and many are using this case as an argument against digital currencies. Despite the extent of his scheme, Kvashuk maintains that he has not committed a crime, because the money he had created was not “real money.” The Ukrainian native was sentenced to 9 years in prison in November 2020.

Other Gift Card-Related Scams

While Kvashuk’s work affected a tech giant worth close to $2 trillion, many gift card scammers target average people.

Victims are usually convinced to comply through scare tactics. In some cases, the scammers claim to be an investigation firm that has found that the victim’s identity has been stolen. They then proceed to tell the victim that they need to transfer as many funds as possible to gift cards to prevent identity thieves from getting their hands on their money. They are then instructed to send the gift card numbers to the scammers as a “verification measure.” The plastic card itself is worthless, the numbers give the card value. Once the scammers possess the card number, they effectively have their hands on the victim’s money.

It is important to protect yourself by keeping good internet practices. From discerning whether or not an email is a scam to router placement, there are steps you can follow to keep your family and your data safe from cyberattacks. Read more on our tips on protecting yourself here: How to Protect Yourself Against Spam Emails

Filed Under: Gamers

Primary Sidebar

Subscribe to Our Free Newsletter

We Don't Share or Sell Your Info

Web Browsers

Where Are My Saved Passwords in Chrome?

Google Removes 70 Malicious Browser Add-ons from Chrome Web Store

Firefox 75 Reports Your Browser Settings to Mozilla

Categories

Cyber Security Field Guide

Computer Security While TravelingGet Our Cyber Security Field Guide - Available on Amazon!

Recent Posts

Security Marketing Manager – Remote

Sr. Associate, Cybersecurity Architect – Pfizer

Strategic Customer Success Manager – Cybersecurity – Opportunity for Working Remotely

Top 20 Passwords Leaked on Dark Web

ISU Cybersecurity Leader Job Opening

Cyber Security News

Top 20 Passwords Leaked on Dark Web

… [Read More...] about Top 20 Passwords Leaked on Dark Web

Apple Warns of Actively Exploited Zero-Day Flaw

… [Read More...] about Apple Warns of Actively Exploited Zero-Day Flaw

IRS Stops Facial Recognition System for Online Access

… [Read More...] about IRS Stops Facial Recognition System for Online Access

National Cybersecurity Alliance Announces Data Privacy Week

… [Read More...] about National Cybersecurity Alliance Announces Data Privacy Week

More Cyber Security News

Tags

amazon Android Apple bitcoin China chrome CISA credit card DarkSide DHS DOJ Equifax Europe Facebook facial recognition FBI Firefox FTC games GDPR Google Government hacker identity theft India iPhone Iran IRS LinkedIn Microsoft North Korea PayPal phishing phishing email ransomware REvil Russia smartphone T-Mobile TikTok tutorial VPN WhatsApp WiFi Windows

Government

CBP Looks to Access Airline Passenger Data

FTC Releases Cyber Threat Video Playlist

Malware Found on US Government Funded Phones

UK NCA Reaches Out to Youth to Deter Cybercrimes

More Posts from this Category

Footer

Menu

  • Home
  • About
  • Authors
  • Newsletter Signup
  • PRIVACY POLICY

Search

Why Use a VPN?

NordVPN vs IPVanish VPN Review

NAVIGATION

  • Data Breaches
  • Data Privacy
  • Gamers
  • Scams
  • Malware

MEMBER NJCCIC

New Jersey Cybersecurity & Communications Integration Cell

STAY CONNECTED

  • Facebook
  • Instagram
  • Pinterest
  • YouTube
  • Twitter
  • RSS

Copyright © 2023 · AskCyberSecurity.com · METRONY, LLC

Go to mobile version