New AI Coin Master Scams Target US Players
Cybersecurity experts warn of a massive surge in sophisticated, AI-driven ‘free coin’ scams targeting American Coin Master players this October.
Millions of Americans play Coin Master daily, spinning virtual slot machines to build their villages and raid their friends. But a dangerous new threat is targeting these players. Cybersecurity researchers are warning that cybercriminals are deploying cutting-edge artificial intelligence to steal accounts and cash through highly convincing “free coin” promotions.
According to a report released on Wednesday by digital security firm Vigilant Labs, these scams have surged dramatically since the beginning of October 2026. The hackers are using generative AI to trick players at an unprecedented scale.
How the AI-Powered Scams Work
Scammers are no longer relying on crude text links or poorly written emails. Instead, they are leveraging advanced generative AI to create hyper-realistic deepfake videos. These clips often feature realistic, computer-generated avatars of popular gaming influencers or even clone the voices of top executives from Moon Active, the game’s actual developer.
“The level of realism is unprecedented,” said Marcus Vance, lead threat analyst at Vigilant Labs. “They use cloned voices that sound identical to well-known streamers. They promise millions of free spins and coins if you just click a link. To the average player, especially younger gamers, it looks entirely legitimate.”
The Trap and the Damage
Once a player clicks the malicious ad, they are redirected to a convincing clone of the official Coin Master portal. Here, they are prompted to log in using their Facebook credentials, which is the primary way most players save their game progress.
For other victims, the trap is a “verification” screen. Users are asked to enter credit card details to prove they are adults before claiming their virtual rewards.
The fallout has been severe. Vigilant Labs tracked a 340% spike in these malicious links during the first two weeks of October. So far, an estimated 45,000 American players have compromised their accounts. Total financial losses from unauthorized credit card charges linked to the scam have already topped $2.1 million.
Automated and Targeted Campaigns
Apex Cyber Defense, another security firm tracking the campaign, noted that the scammers are using automated algorithms to target victims on TikTok, Instagram, and Facebook. They specifically look for users who follow Coin Master groups or actively post about the game.
“This isn’t a random dragnet,” explained Sarah Jenkins, a security researcher at Apex. “It’s a highly targeted, automated campaign. The AI constantly tests different ad designs and video styles to see which ones get the most clicks, then automatically boosts the successful ones.”
How to Keep Your Account Safe
Moon Active has repeatedly urged players to remain vigilant. The developer stresses that they never ask for login credentials or credit card information outside the official mobile application.
“We only distribute free spins and coins through our verified social media channels, marked with the blue checkmark, or directly inside the game,” Moon Active said in a brief statement. “Any website asking you to log in to claim a prize is a scam.”
Security experts recommend several steps to protect yourself:
- Enable two-factor authentication on Facebook to shield your linked Coin Master account.
- Avoid clicking on sponsored links promoting freebies outside the official game app.
- Verify that any social media page offering rewards has an official verification badge.
If you have already entered your information on a suspicious site, experts say you must act immediately. Change your Facebook password, disconnect any unauthorized apps in your security settings, and contact your bank to freeze any compromised cards.
