D-Market Scam Sri Lanka? 7 grabVIP Red Flags
HackAware investigation | 24 October 2026
Searching for D-Market scam Sri Lanka, grabVIP scam or whether d-market.site is legit? Our D-Market scam investigation examines the paid tasks, payout mathematics and claimed company identity so you can assess the risks before sending money.
BLUF — Avoid: do not deposit or recruit others
We do not consider d-market.site, branded grabVIP, a verified legitimate employment or investment opportunity. Its member area sells paid VIP access linked to fixed daily earnings, advertises three levels of recruitment commissions, and displays Northern Star Resources branding without a verified connection to the real Australian gold producer.
The first three paid plans imply 3.33% of the purchase price per day, or 1,216.67% in annual gross payouts if paid daily for 365 days. These are calculations of the advertised offer, not demonstrated earnings. The withdrawal page also applies a 15% charge labelled withdrawal tax, whose legal basis we have not established.
Do not buy a VIP tier, submit identity documents or promote this platform to friends. Our assessment is a high-risk task-deposit platform with suspected impersonation and strong Ponzi/pyramid indicators. We have not traced its bank flows, proved that new deposits fund earlier participants, or obtained a regulator’s determination specifically naming this domain. This is an evidence-based risk assessment, not a court finding.
D-Market scam warning: 7 grabVIP red flags
- Paid VIP access is tied to higher daily task earnings.
- VIP 1–3 imply 3.33% daily gross payouts.
- Three levels of referral commissions are advertised.
- Northern Star authorization remains unverified.
- The platform mixes grabVIP and Northern Star identities.
- The free trial duration conflicts across pages.
- Withdrawals carry an unexplained 15% charge labelled tax.
Brief analysis
The platform combines a free trial, shopping-style presentation, a game-like task screen, larger paid earning tiers and recruitment rewards. Home refers to grabVIP Resources Limited, while the profile footer refers to Northern Star Resources Limited. About us displays Northern Star’s logo, mining imagery and an Australian listed-company description. A real company’s existence does not authenticate this separate website.
The central question is unanswered: what independently verifiable customer activity generates enough net revenue to cover daily payouts, referral rewards and operating costs? A dashboard balance, corporate photograph or early payout would not answer that question.
1. Scope and method
We inspected an already authenticated member session corresponding to the account supplied for investigation. We reviewed Home, Product, Team, Mine, About us, Recharge, Withdraw, Grabbing and Help Center, and checked official company and regulatory sources.
We did not create an account, make a deposit, buy a plan, submit a withdrawal, add bank details, activate tasks, install software or contact promoters. Credentials and private account identifiers are excluded. Findings are a point-in-time record from 24 October 2026.
2. Who is the platform claiming to be?
| Surface | Observed presentation | Implication |
|---|---|---|
| Domain | d-market.site | Separate from the miner’s official nsrltd.com domain |
| Browser title and branding | grabVIP | Different name from the miner |
| Home footer | grabVIP Resources Limited | Legal identity not independently verified |
| Profile footer | Copyright 2024 Northern Star Resources Limited | Introduces the real miner’s name |
| About us | Northern Star logo, mining pictures, Australian gold-producer biography and ASX: NST reference | Corporate association presented; authorization unverified |
| Help Center | Northern Star group and channel labels | Corporate association repeated in support navigation |
The real Northern Star’s official About page identifies it as an Australian gold producer listed as ASX: NST, operating in Western Australia and Alaska.[1] Its official contact page identifies corporate investor-relations and share-registry channels.[2]
We found no affirmative evidence in the reviewed official material authenticating d-market.site or this VIP task offer. This is not a direct denial from Northern Star: we have not obtained one. The appropriate current classification is suspected impersonation / unverified affiliation. We do not accuse the real Northern Star company of operating this platform.
3. The advertised plans
Paid plans displayed one-year validity. VIP 4–6 were marked Open Later.
| Tier | Price LKR | Daily earnings LKR | Daily grabs | Displayed availability |
|---|---|---|---|---|
| Interns | Free | 100 | 2 | Trial; conflicting duration |
| VIP 1 | 7,500 | 250 | 5 | No Open Later label |
| VIP 2 | 26,250 | 875 | 10 | No Open Later label |
| VIP 3 | 49,500 | 1,650 | 15 | No Open Later label |
| VIP 4 | 75,750 | 2,525 | 20 | Open Later |
| VIP 5 | 125,250 | 5,845 | 35 | Open Later |
| VIP 6 | 250,500 | 584,500 | 70 | Open Later; anomalous amount |
VIP 6 displayed LKR 584,500 per day. We preserve the figure as observed rather than silently correcting it. It may be a template or data-entry error, and must not be portrayed as an available, tested earning offer.
The Interns trial showed one year on Home but two days on Product. This is a material inconsistency in the terms shown to participants.
4. D-Market scam analysis: can the payout mathematics work?
For VIP 1–3, daily advertised payout divided by price is 1/30. The table uses simple multiplication, no compounding, and assumes all 365 payouts occur. It does not assume a separate repayment of the purchase price; no principal-return entitlement was verified.
| Tier | Daily payout / price | 365-day gross payout LKR | Gross payout / price | Payout less initial price LKR |
|---|---|---|---|---|
| VIP 1 | 3.33% | 91,250 | 12.17 times | 83,750 |
| VIP 2 | 3.33% | 319,375 | 12.17 times | 293,125 |
| VIP 3 | 3.33% | 602,250 | 12.17 times | 552,750 |
| VIP 4 — locked | 3.33% | 921,625 | 12.17 times | 845,875 |
| VIP 5 — locked | 4.67% | 2,133,425 | 17.03 times | 2,008,175 |
The first three paid tiers imply 1,216.67% annual gross payouts, or 1,116.67% after subtracting price, before deductions and other conditions. Nominal gross break-even is 30 paid days.
If the displayed 15% deduction applies to every payout, VIP 1’s LKR 250 becomes LKR 212.50. Recovering LKR 7,500 would require about 35.3 paid days, or 36 whole daily payouts. This is arithmetic, not a promise that withdrawals work.
A real-world funding example
Suppose 1,000 people buy VIP 1. The platform collects LKR 7.5 million but advertises LKR 250,000 per day in payouts. Thirty days exhaust the entire intake. A full year requires LKR 91.25 million, which is LKR 83.75 million beyond the original intake, before referral rewards and operating costs.
Even with a 15% deduction throughout, annual participant receipts would total LKR 77,562,500. That deduction does not resolve the funding gap.
A genuine business can pay workers from real customer revenue. A deposit, however, is not business profit. The reviewed pages did not establish paying commercial customers, fulfilled orders, verified net margins or independently verified outside revenue sufficient for these liabilities. Without enough outside revenue, continued payouts require additional funding. Whether that funding comes from new participants is a critical unresolved question.
5. Recruitment commissions: 7%, 3% and 2%
| Level | Rate | Displayed context |
|---|---|---|
| First | 7% | Explicitly labelled Recharge Commission |
| Second | 3% | Commission rate beside team recharge statistics |
| Third | 2% | Commission rate beside team recharge statistics |
Home described a 7% reward for successful registration, while Team used recharge commission. Precise eligibility, triggering and settlement rules were not verified. Do not assume that every free registration actually produces a payment.
If all three percentages applied to the same LKR 7,500 recharge, total upline rewards would be LKR 900 (12%). That is a conditional illustration, not a tested payment.
CBSL explains that prohibited pyramid structures involve benefits primarily dependent on increasing participants or their contributions; it also warns about promotion and facilitation.[3] This platform’s deposit-linked commission presentation warrants investigation against that framework. We have not established a CBSL designation specifically naming d-market.site.
6. grabVIP scam concerns: tasks and apparent commercial activity
Grabbing used the heading Grabbed Tool, showed an Interns status and available/completed counters, and instructed users to pull a lever to start. We observed the screen without activating it.
A game-like interface does not establish real merchant demand or genuine fulfilled orders. Higher paid tiers are linked to higher daily earnings.
The FTC describes task scams in which platforms show supposed commissions and later demand users’ own deposits. Small initial payments may build trust without proving a sustainable business.[4] This provides a relevant comparison, not proof that every subsequent tactic has already happened on this particular platform.
7. Deposit and withdrawal conditions
Recharge offered amounts matching VIP prices. Its payment selector displayed DIALOG FINANCE, Cargill’s Bank, LB Finace and HNB. These are the site’s labels, including its spelling. They do not establish partnerships, approval or endorsement by those institutions.
Recharge rules told users to contact support if credit did not arrive within half an hour, send payment proof and avoid reusing a previous receiving account. No beneficiary account or merchant relationship was verified because no recharge was initiated.
Withdraw displayed a 9 a.m.–5 p.m. window, a 15% withdrawal tax, arrival within 1–72 hours, and a requirement for valid withdrawal-account details. No timezone was established. The setup prompt was not completed.
We have not verified that withdrawals work, any minimum amount, or whether further conditions appear later. We also have no verified basis to describe the charge as an official government tax.
8. Technical evidence register
| ID | Member page / source | Observation | Limit |
|---|---|---|---|
| DM-01 | /home | Prices, income, recruitment promotion, grabVIP footer | Advertisements; not verified payments |
| DM-02 | /vip | Plans, locked tiers, two-day trial | Purchase fulfillment untested |
| DM-03 | /my-team | 7%, 3%, 2% hierarchy | Detailed triggering rules untested |
| DM-04 | /profile | Northern Star footer | Authorization unverified |
| DM-05 | /about | Northern Star logo, pictures and biography | Visual content does not authenticate operator |
| DM-06 | /deposit | Payment labels and recharge rules | No transaction or beneficiary verified |
| DM-07 | /withdraw | 15% charge and timing rules | No withdrawal attempted |
| DM-08 | /fund | Lever-style task interface | Tasks not activated |
| DM-09 | /service | Northern Star group/channel labels | Ownership unverified |
| DM-10 | Official company sources [1–2] | Real miner’s identity, domain and contacts | No direct company response obtained |
A working login and corporate imagery do not prove who controls a domain. HTTPS and an ASX ticker would not establish authorization or financial soundness.
Third-party reputation reports also flag the domain.[5][6] They are supporting leads, not our verdict’s foundation. They report registration on 8 August 2026, but their relative ages and check dates are inconsistent; registry data was not independently verified. Their scores are not regulator rulings, conclusive malware findings or proof of operator identity. Registrar choice, privacy protection and shared hosting alone do not prove fraud.
We did not obtain authoritative DNS/RDAP records, analyze an APK, identify beneficial controllers or establish shared ownership with another scam. A Download App option existed; no app was installed or assessed.
9. Comparison with legitimate activity and other schemes
| Question | Legitimate activity needs to establish | Observation here |
|---|---|---|
| Who pays? | Identifiable customer-funded work or real investment income | Participants pay for earning tiers |
| What funds returns? | Verified revenue and sufficient margins | Fixed daily schedule; funding unverified |
| Who operates it? | Consistent identity and corporate authorization | grabVIP and Northern Star identities mixed |
| Why recruit? | Transparent rewards tied to genuine business value | Multilevel rates beside team recharge |
| Are balances real? | Settled funds and verifiable transactions | Interface balances; withdrawal untested |
Related reading: HackAware’s AGM investigation and Flipkart impersonation investigation. These illustrate relevant patterns; they do not establish that the operators are connected. We make no common-ownership claim.
10. What would substantiate this offer?
The operator would need independently verifiable Northern Star authorization through official channels, a consistent legal identity, lawful payment arrangements, clear contracts and risk disclosures, a verified basis for charges, and audited evidence that outside revenue can sustain the payouts.
A registration certificate, promoter testimonial, selected receipt or copied annual report cannot by itself authenticate this website or prove that its obligations are funded. Our recommendation remains to avoid it unless material evidence changes the assessment.
11. If you have already paid
Stop additional payments and recruitment. Preserve referral messages, chats, plan terms, receipts, transaction references, beneficiary details and withdrawal responses. Contact your bank or payment provider promptly, explain the suspected fraud and ask what recovery or reporting options remain. Recovery is not guaranteed.
Report suspected fraud to the police. CBSL’s public pyramid-scheme page also identifies its Financial Consumer Relations Department as a reporting contact.[3] Do not pay additional release fees or supposed recovery charges to unlock money.
If the platform password was reused elsewhere, change it on those other services. Do not provide OTPs, banking logins or remote access. Share redacted evidence through HackAware’s report page.
D-Market scam Sri Lanka: frequently asked questions
Is D-Market legit or a scam in Sri Lanka?
Our D-Market scam investigation recommends avoiding deposits and recruitment. We observed extreme daily payout claims, referral commissions and an unverified corporate association. Operator identity and fund flows remain unconfirmed.
Is grabVIP connected to Northern Star Resources?
No verified connection was established in the official sources we reviewed. Corporate images and an ASX ticker do not authenticate d-market.site.
Does a successful withdrawal prove the platform is safe?
No. An early payment alone does not establish sustainable revenue or guarantee future withdrawals. We did not test withdrawals during this investigation.
References
- Northern Star — official About Us: actual company identity and listing.
- Northern Star — official Contact Us: official investor-relations and registry contacts.
- CBSL — Prohibited Pyramid Schemes in Sri Lanka: general framework and reporting guidance; not a domain-specific determination.
- FTC — How to spot and avoid task scams: general scam pattern.
- Gridinsoft — d-market.site report: secondary automated assessment, subject to metadata caveats above.
- ScamAdviser — d-market.site review: secondary automated assessment, not independent proof of fraud.
- Member pages inspected on 24 October 2026: d-market.site/home and paths /vip, /my-team, /profile, /about, /deposit, /withdraw, /fund and /service. These are evidence locations, not registration recommendations.
