Shuffle Affiliate Badge Used in PowerShell Scam Campaign
Two high-follower accounts independently report same PowerShell scam via Shuffle affiliate
Two prominent crypto and casino community accounts, @CryptoZachLA (67k followers) and @byzianna_ (12k followers), independently reported being targeted by the same elaborate scam involving a verified Shuffle affiliate badge. The scammer, using the Telegram handle @anneliesewillo, approached both individuals, negotiated sponsorship terms over the course of a week, and then directed them to run a malicious PowerShell prompt disguised as a Microsoft Teams update.
According to @CryptoZachLA, who has a background in operational security, the scam unravelled when the Teams download failed repeatedly on the scammer's end. When he was told to run a 'workaround' PowerShell command, he immediately flagged it as suspicious, analysed it in Claude, and found it malicious. @byzianna_ similarly reported being asked to run a PowerShell for a Teams meeting, calling out Shuffle for granting affiliate badges to scammers.
Both accounts publicly called on Shuffle to vet their affiliates more rigorously, with @CryptoZachLA emphasising how the scammer had a legitimate-looking badge and had already negotiated pricing. A third account, @Lynn_Wha (1.2k followers), corroborated the reports, agreeing that affiliates need much stricter vetting.
The reports raise serious concerns about Shuffle's affiliate programme and whether players can trust the security of partnerships brokered through the casino's official channels. Until Shuffle demonstrates robust vetting and transparency, players should exercise caution when contacted by any representative, even one with a valid affiliate badge.
Holy shit such an elaborate scam going around with casino's trying to onboard people. Was talking back and forth with this woman at @shufflecom for a week -her name was @anneliesewillo and somehow is an affiliate??- had prices negotiated and everything, finally decided to get on a Teams call but the teams thing wasn't "working" on her end. Told me I needed to update my teams, but I had JUST downloaded teams. So then she said, "we've been working with clients this week and they seem to have same issue, we found this work around though just put this prompt in and it should automatically download the update" First of all, I come from a big hacker/OpSec background so I knew something was immediately up when she said I needed to update my Teams, because I had JUST downloaded it. Tells me to run this prompt . I throw it into Claude and immediately it's flagged-not that I needed to throw into Claude but I was curious. Immediately blocks me after I call her out. NO Idea how this person has an affiliate badge for @shufflecom but they need to get their shit together.
gm to everyone on a timeline especially to @shufflecom for giving affiliate badges to people trying to casually scam me on telegram a powershell for a @MicrosoftTeams meeting 🤦🏽♀️ let’s do better . https://t.co/dZKy0nWuLS
@byzianna_ @shufflecom @MicrosoftTeams yeah thats wild they gotta vet affiliates way harder





