**Scam Campaign Report: Chinese Task Scam Network Targeting Instagram Users**
This cybersecurity investigation has identified a connected scam network comprising three entities that have been reported together by consumers: two domains (elsbbook.sgesge.com and chainabuse.com) and one payday loan company (The Money Company). The domain elsbbook.sgesge.com was registered through DYNADOT LLC with a registration date of February 20, 2026, while chainabuse.com was registered through Cloudflare, Inc. on March 24, 2021. These entities are linked through four cross-entity relationships, all with reported_together connection types and confidence levels of 0.20.
The primary threat vector appears to be a Chinese shuadan task scam operating through the domain elsbbook.sgesge.com. Community reports reveal that scammers are running paid Instagram advertisements that impersonate the legitimate booking platform Booking.com to distribute unsolicited job offers. Multiple victims have reported receiving these fraudulent employment opportunities through Instagram direct messages, with the highest-rated community report receiving 2 upvotes describing the scheme as "Chinese shuadan task scam running paid IG ads impersonating Booking.com." The scammers are specifically targeting social media users with fake work-from-home opportunities that likely involve fraudulent product rating manipulation tasks.
Consumer impact data shows that The Money Company has generated 2 complaints filed with the Consumer Financial Protection Bureau (CFPB) in the payday loan industry sector. The connection between this payday loan entity and the Instagram-based scam domains suggests a broader network of financial fraud operations that may be targeting consumers through multiple channels, combining social media deception with predatory lending practices.
To protect against this campaign, consumers should verify any unsolicited job offers by independently researching the company through official channels rather than clicking provided links. If contacted through Instagram or other social media platforms with employment opportunities, hang up on phone calls and do not click on suspicious links or advertisements. Report all fraudulent contact attempts to the Federal Trade Commission at reportfraud.ftc.gov or file complaints with the Federal Communications Commission for telecommunications fraud. Before engaging with any online opportunity, consumers can verify the safety of domains and phone numbers through cybersecurity databases and consumer protection websites.
This scam network presents a moderate threat level due to its active use of paid social media advertising and impersonation of legitimate businesses. Recommended next steps include continued monitoring of the connected entities, consumer education about shuadan task scam tactics, and coordination with social media platforms to remove fraudulent advertisements impersonating established brands like Booking.com.