The “Royal Mint” Investment Scam in Sri Lanka
IIt began, like most scams do today, with a Telegram message from a stranger.
No company name. No logo. No warning signs — just a short, exciting message that read:
“Work from home — earn Rs. 5,000 per hour! No experience required. Limited slots available.”
That was it.
No brand mention, no “Royal Mint” reference — just an irresistible promise of quick income.
We may never know how the scammers got the number — maybe scraped from social media, Telegram groups, or old databases — but the target was clear: ordinary Sri Lankans searching for remote work or side income.
When the victim replied, the “recruiter” replied instantly with instructions and a link to register on a site that looked surprisingly legitimate.

That link led to theroyalmint-bidding.com — a sleek imitation of the Royal Canadian Mint’s website, complete with maple leaves, red-white branding, and even a “Canada’s Silver Summer” banner.
🕵️ Stage 1: Registration and the Rs. 25,000 Starter Credit

Upon signing up, users were credited with a Rs. 25,000 “starter bonus.”
It looked like free money — a welcome reward for joining.
That Rs. 25,000 couldn’t be withdrawn, but it could be used for internal “bidding” tasks.
After completing a few simple rounds, users were even allowed to withdraw a small real amount to their bank accounts — usually a few thousand rupees.
It worked.
And because it worked, trust was born.
Then came the next instruction:
“To continue earning, please deposit Rs. 25,000 into your account to activate your work.”
This time, the dashboard showed a total of around Rs. 60,000 — but only Rs. 35,000 could be withdrawn.
The rest — Rs. 25,000 — had to remain in the account as “working capital.”
In reality, the user’s profit was only Rs. 10,000.
But on-screen, it looked like they had doubled their money.
✅ Psychological hook: Early, believable profit builds emotional trust — victims feel smart, not scammed.

💎 Stage 2: Diamond Bid & Gift Box Tasks
Once the victim’s confidence was built, the recruiter introduced advanced “Diamond Bid” and “Gift Box” tasks — supposedly premium investment operations.
Each promised to multiply the user’s balance by roughly three times after completion.
The interface showed exciting visuals and countdowns, reinforcing the idea of exclusive, limited-time deals.
But what users didn’t know was that these tasks actually deducted real money from their accounts.
Each “bid” or “box” pushed the account further into the negative, as the system quietly tallied their real deposits.
There was no algorithm or adjustment — it was the victim’s own money being drained in real-time.

👥 Stage 3: The Telegram Group Illusion
After a few “profitable” rounds, the victim was added to a Telegram group with about 30 members.
At first glance, it looked like an active investment community.
But in reality, only one person was real — the victim.
The other “members” were fake — either controlled by the scammers or automated scripts designed to simulate engagement.
Every few minutes, messages appeared:
“Got paid! 💸 Thank you admin!”
“Withdrawal successful 🙏”
“Safety deposit refunded — 100% legit!”
Fake screenshots of bank transfers flooded the chat.
Some “members” even reached out privately to reassure the victim that it was real.
✅ Group manipulation: Seeing others get paid kills skepticism. The fake community becomes the ultimate psychological trap.
⚙️ Stage 4: The Negative Balance Loop
When the victim finally tried to withdraw, the system flashed an alert:
“Negative Balance Rs. 55,000 — please clear to proceed.”
After paying, the balance appeared corrected.
Then, moments later, a new negative appeared.
Rs. 70,000 → Rs. 120,000 → Rs. 160,000 — always “just one last adjustment.”
Each payment felt like progress.
Each screen showed the victim was “almost there.”
And that hope became the engine that powered the scam.
✅ Psychological manipulation: Hope loop — the false sense of forward movement keeps victims chasing recovery indefinitely.

🏦 Stage 5: The Safety Deposit Trap — The Main Bait
Once the negative balance loop ended, the “Finance Officer” entered the chat:
“Your current balance is Rs. 3.8 million.
To ensure transaction safety and avoid system errors, please deposit 50% as a refundable safety deposit.
Payment must be made within one hour.”
That “50%” meant Rs. 1.9 million.
The message sounded professional, the tone urgent.
Screenshots of “successful withdrawals” from others in the group added more pressure.
The victim paid — hoping it was the final step.
But no withdrawal ever came.
✅ Sunk-cost fallacy: After investing so much, stopping now feels like losing everything.

🧾 Stage 6: The Final Blow — Fake Tax Demand
When the victim hesitated, the scammers pulled out their last weapon — a forged Progressive Tax Calculation (E-Tax) document.
It claimed a final Rs. 1.8 million tax payment was required to “release” the Rs. 3.8M balance.
The table was neatly formatted and used real government-style headings.
Some victims complied, believing this was the last barrier to cashing out.
After payment, the group vanished, and the website quietly stayed online for the next wave.

🧠 Why This Scam Works
- Group Psychology: Seeing “others” succeed kills skepticism.
- Incremental Investment: Starts with Rs. 25,000 and a small real withdrawal, scaling to millions.
- Hope Loop: Negative-balance cycles simulate progress and reward persistence.
- Authority Imitation: Certificates, tax tables, and professional UX mimic genuine institutions.
- Urgency & Fear: “Pay within one hour” suppresses rational thinking.
💡 The Aftermath
The victim lost over Rs. 3 million, with another Rs. 1.8 million demanded as “tax.”
No funds were ever released.
The Certificate of Incorporation (PV00222830) dated 22 July 2025 could not be verified through official ROC records.
As of this report, theroyalmint-bidding.com remains active and accessible, continuing to operate under the guise of legitimacy — while similar clones have also begun to surface under alternate domain names.
The investigation suggests the same operator group may be replicating the platform’s layout, task system, and Telegram support channels under new brand identities to avoid detection.
🚨 Protect Yourself
- Never pay to “unlock” withdrawals.
- Avoid Telegram-only investment offers.
- Verify companies at roc.gov.lk.
- Genuine Royal Mint websites: royalmint.com and mint.ca.
- If you’ve been affected: preserve evidence, report to CERT Sri Lanka, CID Cybercrime Division, and notify your bank immediately.
⚠️ Disclaimer
The real Royal Mint (UK) and Royal Canadian Mint are legitimate institutions.
This report exposes an impersonation scam that illegally used their names, logos, and branding for deception.
HackAware.org makes no accusation toward these entities — this article exists solely to raise public awareness and protect others from financial harm.
HackAware.org — Know the Threat. Stop the Attack.



Super website