A few of these emails made it through my various spam filters. I’m in the UK, the Daily Mirror page mentioned was very convincing (unless you’re paranoid, like me)…:
[…] Victims receive a text message informing them of a news report about a lucrative new investment scheme. The message contains a URL supposedly pointing to a well-known media outlet. In fact, it is a unique short link to a redirect page. This page uses the short link to look up extensive personal data about the victim, including their name, phone number, and occasionally an email address.
The page sends this data when redirecting the victim to a fake news website tailored to look like a legitimate news site. The scammers even fake different news properties depending on the victim’s location. UK residents are taken to a spoofed page from the Daily Mirror, for example.
The fake news story describes the cryptocurrency investment scheme, misleading the victim by attaching a celebrity to the story and claiming that they had made lots of money with it. All links in the article would take the victim to a site for the investment fraud. Links are customized with the victim’s personal information as parameters, which the investment page uses to populate a registration form.
This would leave the victims with little to do other than click the submit button, at which point they are told they will be contacted via phone by a representative. They are also asked to fill their account with a minimum of 0.03 bitcoins.