Cover image for Richland Scam in Sri Lanka showing smartphone with fake Richland Gemstones website and gemstones under candlelight.
|

Richland Scam in Sri Lanka: What We Found Behind the Fake Richland Website

It started with a simple “Good morning 🌷.”
A polite message from a recruiter calling themselves Deepthi.
A few lines later came the hook:

“Work from home, earn Rs. 2,100 to 4,300 per day, only 1–2 hours daily.”

Telegram chat from the Richland Scam in Sri Lanka showing a fake recruiter offering a job opportunity.
The first Telegram message that started the Richland Scam in Sri Lanka — a friendly “Good morning” masking a fake work-from-home offer.

This is how the Richland Scam in Sri Lanka begins — subtle, believable, and perfectly timed for people just trying to make ends meet.

If you’ve ever felt tempted by those “easy job” messages on WhatsApp or Telegram, this story will hit close to home.

The Hook — How the Richland Scam in Sri Lanka Starts

The recruiter’s pitch sounded clean and realistic.
They shared a link to a website that looked stunningly professional — richland-join.com.

Logos. Charts. Ethical mining statements.
It even claimed to represent Richland Resources Ltd, a legitimate UK gemstone company.

But there was one critical difference:
🔗 The real site is richlandresourcesltd.com — not “richland-join.com.”

That’s the first red flag most people miss.

Screenshot of fake Richland Resources dashboard from the Richland Scam in Sri Lanka showing zero wallet balance and false bonus figures.
The fake Richland Resources dashboard used in the Richland Scam in Sri Lanka — showing fabricated wallet balances and commissions to build trust.

The scammer asks the target to register using an “entry code,” saying the account will be activated internally by the company team.
Everything looks normal — until money starts to move.

The “Starter Bonus” Trap

After doing a few “tasks” (simple clicks, mock orders, online confirmations), the target suddenly receives two real deposits — Rs. 2,000 and Rs. 3,000.

Then comes the illusion:
A fake Rs. 30,000 bonus displayed on the website dashboard.
It looks like your money. You can see it, but you can’t withdraw it.

That’s how the Richland Scam in Sri Lanka manipulates trust — by mixing small, real payments with fake large balances.

You start thinking:

“If they already paid me, how could this be a scam?”

Exactly what they want you to believe.

The Telegram Group — “Everyone” Seems to Be Winning

Soon after, the “recruiter” invites the target to a Telegram group.
It’s buzzing with energy.
People post screenshots of supposed payouts, cheering each other on.

Telegram group chat from the Richland Scam in Sri Lanka showing fake LKR 50,000 payment proof and scam members congratulating each other.
Inside the fake Telegram group used in the Richland Scam in Sri Lanka — scammers share false “payment proofs” to convince new members to deposit money.

But here’s the truth:
Every member in that group — except the target — is a scammer.

Each “user” has a role: one pretending to be a top earner, another acting as a mentor.
They motivate, congratulate, and subtly pressure the target to deposit Rs. 30,000 to unlock the “next level.”

The script is identical to dozens of STX-style scams that have circulated across Asia.

The Moment of Doubt

Something feels off.
The target hesitates — why do I need to pay if I’ve already been paid?

They take a step back and search on Facebook.
And there it is — other Sri Lankans posting the same screenshots, asking the same question:

“Is this real or a scam?”

That’s when the target reaches out to HackAware.

The Investigation — Exposing the Fake “Richland” Operation

HackAware traced the fake website’s domain — richland-join.com — using ICANN’s domain lookup tool.
The record showed the site was registered recently, under hidden ownership, and not connected to the legitimate company.

We compared both websites:

  • The real Richland Resources Ltd site focuses on gemstone mining transparency.
  • The fake one mimics that style but adds an “earn money” system — something no legitimate company offers.

We gathered screenshots from the recruiter’s messages, the website’s dashboard, and the Telegram group.
Then, we reported the fake domain and its operators to the registrar, attaching all proof.

The Outcome — Awareness Prevented a Loss

The target never deposited the Rs. 30,000.
They stopped before it was too late — because they asked for help and verified before acting.

Many others aren’t that lucky.

That’s why stories like this matter.
Every fake recruiter and every convincing website feeds on one human instinct — trust.
They don’t just steal your money; they steal your confidence.

And that’s exactly what HackAware fights against — by exposing these scams before they spread further.

💬 What HackAware Did

We used open-source intelligence to:

  • Identify and confirm richland-join.com as a fake domain.
  • Run a WHOIS search via ICANN Lookup.
  • Report the domain with evidence and screenshots to the registrar.
  • Publish this case to raise awareness and protect others from falling for the same script.

💡 Final Word

Not every target becomes a victim — but every victim started as a target.
You might not fall today, but the next message could look even more real.

If you ever get an offer that sounds too easy, take a breath. Verify before you trust.
We’re here to help you do that.

Know the Threat. Stop the Attack.
— DEBUGGER

Updates

2025 November 02

  • HackAware.org reported the fraudulent domain “richland-join.com” with evidence to the domain registrar.
  • Published article on the fraudulent website on HackAware.org

2025 November 04

  • Following the investigation, the registrar placed the domain under Client Hold, effectively suspending and disabling the fraudulent website.
Screenshot showing GNAME’s abuse report confirmation email (left) stating that the fraudulent domain richland-join.com has been placed under “Client Hold,” and a browser error page (right) confirming that the site is now inaccessible with the message “This site can’t be reached.”
The fraudulent domain richland-join.com, which posed as Richland Resources Ltd to trick Sri Lankans into fake “ticket investments,” has officially been taken offline.

Similar Posts

Leave a Reply

Your email address will not be published. Required fields are marked *