LEGO Website Hit by Fake Cryptocurrency Scam
The LEGO Group has reportedly taken down a scam involving a "LEGO Coin" token that briefly appeared on its website after a hacking incident on October 5.
An X user and LEGO enthusiast, known as “ZTBricks,” was among the first to identify the fraudulent token, which claimed to offer “secret rewards” for purchases. Screenshots shared on X revealed the message: “Our new LEGO Coin is officially out! Buy the LEGO Coin today and unlock secret rewards!” Clicking the “Buy Now” button led users to a phishing site.
While LEGO has not officially commented on the incident, the scam’s message and link have since been removed from the homepage. The company did inform Engadget, a consumer tech platform, that the cryptocurrency scam was only visible for a short time and confirmed that no user accounts were affected. They stated, “The issue has been resolved. No user accounts have been compromised, and customers can continue shopping as usual. The cause has been identified, and we are implementing measures to prevent this from happening again.”
READ MORE: Crypto Phishing Scams Claim Over $46 Million in September Alone
According to “mescad,” a moderator on the “lego” subreddit, the fraudulent token first appeared on LEGO’s homepage at 1:00 AM UTC and was taken down approximately 75 minutes later, coinciding with 3 AM in Billund, Denmark, where LEGO’s headquarters is located.
In March 2021, LEGO’s X account sparked speculation about entering the non-fungible token (NFT) space by hashtagging “#NFT” in a short clip featuring a 3D LEGO brick rotating in space, although the post was removed shortly after. Additionally, LEGO’s holding company, KIRKBI, invested $1 billion in Epic Games in April 2022 to bolster its Metaverse initiatives.
According to blockchain security firm Scam Sniffer, cryptocurrency scammers stole $127 million from victims in the third quarter of 2024, with $46 million taken in September alone.