Shuffle Affiliates Running Teams + PowerShell Scam
CryptoZachLA and Zianna independently report Shuffle affiliates running Teams + PowerShell scam
Two independent reports from well-known community figures CryptoZachLA and Zianna surfaced today, detailing an identical scam involving verified Shuffle affiliates. Both described being approached by someone with a legitimate affiliate badge who initiated business discussions, then steered them toward a fake Microsoft Teams call. The scammer claimed a Teams update was needed and instructed the targets to run a PowerShell command—a classic tactic used to install malware. The fact that two unconnected accounts experienced the same method on the same day strongly suggests a coordinated effort rather than isolated incidents.
CryptoZachLA, who has an OpSec background, recognized the red flags immediately: the Teams app was freshly installed yet the scammer insisted an update was necessary. Upon feeding the PowerShell prompt to Claude AI, it was flagged as malicious. He called out the scammer and was promptly blocked. Zianna also publicly called out Shuffle for allowing affiliates to target players with such dangerous schemes, underscoring that the trustworthiness of a casino’s affiliate program is directly tied to player safety. Both victims noted the scammer held an active affiliate badge, raising serious questions about Shuffle’s screening and monitoring processes.
If you are considering playing at Shuffle, this incident should give you pause. A casino that grants affiliate badges to individuals who then attempt to plant malware on potential customers' machines is not taking security seriously. While Shuffle may address this specific breach, the pattern of trusted representatives exploiting that trust for cyberattacks indicates a systemic vulnerability. Until the casino demonstrates robust vetting and immediate response to such threats, trusting them with your personal information or funds carries significant risk.
Holy shit such an elaborate scam going around with casino's trying to onboard people. Was talking back and forth with this woman at @shufflecom for a week -her name was @anneliesewillo and somehow is an affiliate??- had prices negotiated and everything, finally decided to get on a Teams call but the teams thing wasn't "working" on her end. Told me I needed to update my teams, but I had JUST downloaded teams. So then she said, "we've been working with clients this week and they seem to have same issue, we found this work around though just put this prompt in and it should automatically download the update" First of all, I come from a big hacker/OpSec background so I knew something was immediately up when she said I needed to update my Teams, because I had JUST downloaded it. Tells me to run this prompt . I throw it into Claude and immediately it's flagged-not that I needed to throw into Claude but I was curious. Immediately blocks me after I call her out. NO Idea how this person has an affiliate badge for @shufflecom but they need to get their shit together.
gm to everyone on a timeline especially to @shufflecom for giving affiliate badges to people trying to casually scam me on telegram a powershell for a @MicrosoftTeams meeting 🤦🏽♀️ let’s do better . https://t.co/dZKy0nWuLS





