Google Coin / Fake Gemini AI Chatbot Presale Scam
Summary
In February 2026, Malwarebytes researcher Stefan Dasic documented a live fraudulent cryptocurrency presale site promoting a non-existent token called 'Google Coin.' The operation deployed a custom AI chatbot impersonating Google's Gemini assistant — using its sparkle icon, green 'Online' indicator, and name — to deliver scripted investment pitches, fabricated institutional endorsements from OpenAI, Binance, Coinbase, Squarespace, and SpaceX, and personalized return projections (e.g. $395 presale investment projected to become $2,755 at listing). Victims were directed to send irreversible cryptocurrency payments to six wallets spanning Bitcoin, Ethereum, Solana, TRON, and XRP Ledger. Google has never issued a cryptocurrency; the token, the chatbot persona, and all associated endorsements were entirely fabricated.
Connected Entities
5 entities · 10 linked investigations- 98388xymWKS6EgYSC9baFuQkCpE8rYsnScV4L5Vu8jt→mentioned with→Google Coin / Fake Gemini AI Chatbot Presale Scam(50%)
- DHyDmJdr9hjDUH5kcNjeyfzonyeBt19g6G→mentioned with→Google Coin / Fake Gemini AI Chatbot Presale Scam(50%)
- TWqzJ9sF1w9aWwMevq4b15KkJgAFTfH5im→mentioned with→Google Coin / Fake Gemini AI Chatbot Presale Scam(50%)
- r9BHQMUdSgM8iFKXaGiZ3hhXz5SyLDxupY→mentioned with→Google Coin / Fake Gemini AI Chatbot Presale Scam(50%)
Connected Through
1 shared actor · 1 investigationDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- ◇98388x…u8jtwallet
Timeline(5 events)
2026-01-14
Chainalysis published its 2026 Crypto Crime Report documenting 1,400% year-over-year growth in impersonation scams and approximately $17 billion in total crypto scam losses for 2025, establishing the broad industry context for the Google Coin operation.
CoinDesk / Chainalysis2026-02-18
Malwarebytes researcher Stefan Dasic published analysis of the live Google Coin presale site operating a fake Gemini AI chatbot. The site itself displayed February 18 as its advertised token listing deadline. Six cryptocurrency wallet addresses across Ethereum, Solana, Bitcoin, TRON, and XRP Ledger were identified as indicators of compromise.
Malwarebytes Labs2026-02-19
Consumer Affairs published a consumer advisory warning about the Google Coin scam and directing potential victims to file reports with the FTC and FBI IC3.
Consumer Affairs2026-02-19
Dark Reading and TechRepublic published secondary coverage of the Malwarebytes findings, amplifying security community awareness of the fraud pattern.
Dark Reading / TechRepublic2026-03-09
Fox News published broader consumer-facing coverage of the scam, noting that Google did not respond to a request for comment before the publication deadline.
Fox NewsDecision Log
- hash: 6r5huAKtffF5sbEd4BtzruYBsGHcEeTkwdP1A2Q8oaPA
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-code-investigator
generated: 6/3/2026, 1:37:42 AM
last updated: 6/3/2026, 1:37:47 AM
avoid.net — verified advice for a post-truth world