CRYPTO & CBDC SCAMS

Fake digital yuan (e-CNY) scam 2026: wallet apps, red-packet airdrops, and promoter schemes

As China accelerates its e-CNY central-bank digital currency, scammers are cloning the official wallet, faking "free digital-yuan" airdrops, and recruiting "promoters" into pyramid schemes. Here is how to tell the real thing from the trap.

SB

SafeBrowz Threat Research Security ResearchJune 17, 20268 min read

Why fake digital yuan scams are surging right now

China's e-CNY, the digital version of the renminbi issued by the People's Bank of China (PBOC), is no longer a pilot curiosity. It is rolling out at scale, and in late 2025 the regulators themselves started raising the alarm about fraud riding on the back of that rollout. The PBOC Shanghai head office and Shanghai financial regulators issued a public risk alert in December 2025, warning about fraud using the digital RMB as bait, and on December 19, 2025, the state news agency Xinhua published a consumer warning of its own as the so-called "e-CNY 2.0" phase, under which wallet balances begin earning interest from January 1, 2026, accelerates adoption.

That interest feature is exactly the kind of news a scammer loves. The moment a government currency starts paying interest, "earn more digital yuan" becomes a plausible-sounding hook, and the criminals move first. The pattern is the same one the US authorities describe for every new payment rail: the Federal Trade Commission's standing guidance on cryptocurrency and scams notes that fraudsters latch onto any novel, official-sounding money product because most people do not yet know how it is supposed to work. A brand-new central-bank currency, by definition, is unfamiliar to almost everyone, which is precisely why the impersonation works.

This is also not only a domestic-China problem. Across the overseas Chinese diaspora and among English-speaking investors, searches for "digital yuan scam" and "how to buy digital yuan" have climbed, and a parallel wave of fake "invest in the digital yuan before it launches" pitches targets people who will never see the official app at all. If you are reading this in English, you are very likely in that second group, and the same three traps apply.

The three ways the digital yuan is being abused

The PBOC and Xinhua warnings, taken together, describe three distinct scam shapes. They look different on the surface, but each one ends the same way: with your money or your credentials in someone else's hands.

1. Counterfeit "digital yuan wallet" apps

The most direct attack is a fake wallet. Scammers clone the look of the official e-CNY app, complete with the real logo, color scheme, and "PBOC" branding, then distribute it through a texted link, a QR code, a third-party download page, or an unofficial app store. Install it and the app does exactly one useful thing: it harvests. It asks you to "bind" your bank card, "verify" your identity with your ID number, and log in with credentials it then steals. Some variants slip in malware that intercepts the SMS one-time codes your real bank sends, so the thief can drain the actual account behind the fake wallet.

2. Fake "claim your digital-yuan red packet" airdrops

The red packet, or hongbao, is a deeply familiar way to send money in China, which makes it the perfect disguise. The scam version arrives as a message: "Claim your government digital-yuan red packet" or "e-CNY launch airdrop, limited spots." The link leads to a phishing page that asks for your bank card number, login, and SMS code "to receive the funds," or it charges a small "activation" or "tax" fee to unlock a balance that does not exist. No real central bank distributes money to the public this way. A genuine government e-CNY giveaway, where they have happened in pilot cities, is administered through the official app and official channels, never through a link a stranger texted you.

3. "Promoter recruitment" and "high-interest exchange" pyramid schemes

The third shape dresses fraud up as opportunity. You are invited to become an official digital-yuan "promoter" or "node operator," paying a joining fee and earning commissions for every friend you recruit, or you are offered a "guaranteed high-interest" digital-RMB exchange or staking product. This is a pyramid or Ponzi scheme wearing a CBDC costume. The PBOC does not run affiliate recruitment, does not sell "promoter" memberships, and does not offer guaranteed-return investment products in the digital yuan. The interest in the real e-CNY 2.0 is a policy feature of holding the currency, not a referral-commission business you can buy into.

What the fake links and pages look like

The dangerous part is almost always a link, and the link is built to look almost-official on a phone screen. The string crams in "ecny," "digital-yuan," or "rmb" plus a word like "claim," "wallet," "hongbao," or "airdrop," and then it lands on a free hosting platform that no central bank would ever use. The examples below are illustrative lookalikes - the real e-CNY app comes only from official app stores. Tap any of them to run a live scan in the checker below:

• ecny-hongbao.vercel.app
• digital-yuan-claim.pages.dev
• ecny-wallet-cn.netlify.app

Notice the structure. The words "ecny," "hongbao," "wallet," and "cn" all appear, but the actual registrable domain is a free hosting service (vercel.app, pages.dev, netlify.app) that hands out subdomains to anyone for free. A real central-bank service is not hosted on a free developer platform. The People's Bank of China publishes from its own official domain, pbc.gov.cn, and the genuine wallet is delivered through vetted, official app stores, not a web link that prompts a download. If the place you are being sent to is a free-hosting subdomain or a generic download page rather than your phone's official app store, that single fact settles it.

Red flags that give it away every time

You do not need to know the mechanics of CBDC policy to spot this. The tells are structural, and any one of them is enough.

• The app did not come from the official app store. The real e-CNY wallet is distributed only through official, vetted app stores. A texted link, a QR code, or a third-party "download" page is not an app store, no matter how official the page looks.
• It offers free digital yuan. Central banks do not airdrop their currency to the public through links. A "claim your free e-CNY red packet" message is a phishing hook, full stop.
• It charges a fee to receive money. Any "activation fee," "tax," "gas fee," or "deposit" required before you can withdraw a balance is the oldest trick in fraud. Real money does not require you to pay to receive it.
• It recruits you as a paid promoter. The PBOC does not sell "promoter," "agent," or "node" memberships, and it does not pay referral commissions. Pay-to-join plus recruit-your-friends is a pyramid scheme.
• It promises guaranteed high interest or returns. The e-CNY 2.0 interest is a policy feature of the official wallet, not a private investment product with guaranteed returns. "Guaranteed" plus "high yield" is a red flag in any currency.
• It asks for your bank card, login, ID number, or SMS code. A page or app that wants your full card details and the one-time code your bank texts you is harvesting credentials. The real wallet binds your card through your bank's own verified flow, not a web form.
• The link is a free-hosting subdomain, not pbc.gov.cn. Anything on vercel.app, pages.dev, netlify.app, or a random .com or .xyz claiming to be the central bank is not the central bank, even if "ecny" or "rmb" is in the address.

The overseas and diaspora angle

If you are searching for the digital yuan from outside mainland China, in English, the most common pitch you will meet is not the wallet clone at all. It is the "get in early on the digital yuan" investment scam: a slick site or a messaging-app "investment mentor" claiming you can buy, pre-order, or stake digital yuan and ride its launch to a fortune. There is no public pre-sale of the e-CNY. It is a sovereign currency issued by a central bank, not a token you can buy on an exchange before everyone else. Anyone offering you a way to "invest in the digital yuan" or "buy e-CNY before it goes global" is running a crypto-investment scam that has simply borrowed the CBDC's name for credibility. The FTC's cryptocurrency-scam guidance and the FBI's Internet Crime Complaint Center at ic3.gov both track this exact pattern under romance, investment, and "pig-butchering" fraud.

What SafeBrowz sees on the network

When the SafeBrowz engine examines a fake digital-yuan page, the structure of the attack is consistent enough to read across all three detection layers, even before any human reads the Chinese or English text on the page.

First, the host is wrong. The destination behind an e-CNY scam is almost always a free-hosting subdomain (vercel.app, pages.dev, netlify.app, github.io) or a brand-new cheap-TLD domain registered within the last few weeks. A genuine central-bank service does not live on a free developer platform and is not days old. Host and domain-age signals alone flag a large share of these before the page even renders.

Second, the structure is a brand-keyword sandwich. The string carries "ecny," "digital-yuan," "rmb," or "hongbao" plus a transactional word ("claim," "wallet," "airdrop," "activate"), sitting on a host that has nothing to do with pbc.gov.cn. A central-bank brand keyword living anywhere except the official registrable domain is itself the signal, independent of language.

Third, the page content gives itself away. A PBOC logo, a "claim your red packet" headline, a card-binding form, and a countdown timer, all served from a non-official host, is a textbook brand-impersonation profile. Content-level analysis catches the impersonation even when the domain is brand new and absent from every blocklist, and it works the same whether the page is written in Chinese, English, or both.

How SafeBrowz blocks this threat

SafeBrowz runs a 3-layer detection architecture: Local + APIs + AI.

• Layer 1 - Local detection: 60+ URL patterns + 550+ brand-specific signatures (including Cyrillic and Punycode homograph variants) + community whitelist/blacklist, all running directly in the extension before the page renders. It catches brand-impersonation keyword patterns on free-hosting and cheap-TLD hosts instantly.
• Layer 2 - API checks: aggregates Google Safe Browsing, PhishTank, URLhaus, ScamAdviser, plus domain-age lookup (most e-CNY scam destinations are less than 30 days old) and 30+ scam TLDs.
• Layer 3 - AI deep scan: content-aware brand-impersonation analysis in 100+ languages, so a brand-new digital-yuan lookalike written in Chinese is recognized just as readily as one in English, even if no blocklist has seen it yet.

Detection signatures are derived from threat-intelligence research and our internal brand database, not from user browsing data. SafeBrowz does not store per-user browsing history.

For people who do not want to install anything, the same engine powers the free public URL checker. Paste any digital-yuan link and get a verdict in seconds.

What to do right now

If a digital-yuan offer just landed, here is the whole correct response.

1. Do not tap the link, scan the QR code, or install the app. The link and the sideloaded app are the entire attack surface.
2. Get the real wallet only from an official app store. If you genuinely want the e-CNY wallet, find it inside your phone's official, vetted app store, not from a web link. Verify the publisher before installing.
3. Verify any "PBOC" claim at the source. Open a new browser tab and go to the official central-bank site, pbc.gov.cn, yourself. Real announcements live there, not in a forwarded message.
4. Never pay a fee to receive money, and never join a "promoter" plan. No legitimate currency requires an upfront fee to claim a balance, and no central bank pays referral commissions.
5. Report it. Outside China, file with the FTC at reportfraud.ftc.gov and the FBI's Internet Crime Complaint Center at ic3.gov. In China, report to the local public-security anti-fraud channel.

If you already installed a fake wallet or entered details: uninstall the app immediately, and from a different, trusted device contact your bank using the number on the back of your card to freeze or lock the card and watch for unauthorized charges. Change any password you typed and, where possible, the SMS-code settings on the account. Our full "I got scammed, what to do right now" walkthrough covers the first-hour playbook in detail.

The one rule that settles every case

Strip away the wallet clone, the red packet, and the promoter pitch, and a single rule answers all of them. The real digital-yuan app comes only from official, vetted app stores, and the central bank never airdrops red packets or runs "promoter" recruitment through a texted link. The PBOC does not pay you to refer friends, does not require a fee to "activate" a balance, and does not sell guaranteed-return e-CNY investments. If what you are looking at involves any of those, the source is fake, no matter how official the logo looks. When in doubt, go to pbc.gov.cn yourself or paste the link into the checker above before you do anything else.

Frequently asked questions

Is the free digital-yuan red packet real or a scam?

It is a scam. The People's Bank of China does not airdrop digital-yuan red packets to the public through links you are texted or sent on social media. A page that asks for your bank card, login, SMS code, or an "activation fee" to release a balance is phishing. Genuine e-CNY giveaways in pilot cities were run through the official app, never through a stranger's link.

How do I get the real digital yuan (e-CNY) wallet?

The official e-CNY wallet is distributed only through official, vetted app stores. Do not install it from a texted link, a QR code, or a third-party download page. Verify the publisher in the app store before installing, and confirm announcements at the central bank's own site, pbc.gov.cn.

Can I invest in or buy the digital yuan before it launches?

No. The e-CNY is a sovereign currency issued by China's central bank, not a token sold in a pre-sale or on an exchange. Anyone offering you a way to "invest in," "pre-order," or "stake" the digital yuan for guaranteed returns is running a crypto-investment scam that has borrowed the currency's name. There is no public pre-sale.

Is the digital-yuan "promoter recruitment" opportunity legitimate?

No. The PBOC does not sell "promoter," "agent," or "node" memberships and does not pay referral commissions. A scheme where you pay a joining fee and earn money for recruiting friends is a pyramid scheme wearing a CBDC costume. The interest in e-CNY 2.0 is a feature of holding the official wallet, not a business you buy into.

I installed a digital-yuan app from a link. What now?

Uninstall it immediately. From a separate trusted device, call your bank using the number on your card to freeze or lock any card you bound, and watch your statements. Change any password you entered. If you shared your ID number or other personal details, monitor your accounts closely and report the fraud to the relevant authority.

What is the real central-bank website for digital yuan information?

The People's Bank of China publishes from pbc.gov.cn. Real e-CNY announcements and guidance live on that official .gov.cn site, not on free-hosting subdomains like vercel.app, pages.dev, or netlify.app, and not on generic .com or .xyz pages that merely contain the words "ecny" or "rmb."

Install SafeBrowz free

Add the browser extension that runs every check in this article automatically, on every page, before it renders. Free forever.

Add to Chrome Add to Firefox Add to Edge