A cluster of BSC tokens uses visually-indistinguishable Unicode substitutes for BTC, USDT, USDC and other major tickers — the displayed names collapse to the real ticker under TR39 skeleton analysis while every underlying character is from a different script — confirmed live on-chain by an automated 7-day scan (17,482 tokens, 85 TR39 hits, 4 verified letter-substitution cases); the `...8888` deployer account shows vanity-address generation indicating automated, repeatable deployment tooling, with no sanctions match or named individual established on primary evidence.
Risk is how damaging this would be if the concerns hold. Confidence is how firmly the evidence supports that verdict — a high-risk call can still be high-confidence. Evidence coverage is how much of the risk surface we could evaluate with public evidence.
Could not update — please try again.
Get alerted by email when this token’s on-chain risk profile changes — we monitor the deployer and top-holder (‘whale’) wallets for movement, plus liquidity/LP, domain and trading-volume signals. Beta monitoring feature; consumer-protection information, not investment advice.
Why this report, and not just a scam-scanner score. Standard token-security APIs check the contract (honeypot logic, mint functions, ownership), not the name. This research applies the Unicode TR39 skeleton algorithm — mapping each character through the confusables.txt table, NFD-normalising and lowercasing — to systematically identify tokens whose displayed name collapses to a known ticker while containing zero Latin characters. The 7-day automated scan (17,482 tokens, 201,600 BSC blocks) provides population-scale evidence rather than a single-case observation. Fact / inference / assumption are labelled throughout (T1–T4 tier system). No interaction with any target contract. Source code and full methodology: https://github.com/proofofscamofficial-eng/unicode-homoglyph-crypto-impersonation. Archived: Zenodo DOI 10.5281/zenodo.23668387.
Each finding links to its source. A red flag is a documented risk signal, not a court verdict.
Pattern: unicode-homoglyph-ticker-impersonation · Verifiable external revenue: NO
No licence/registration found · Authority: This is consumer-protection / educational research, not a regulated-entity filing. No regulator warning or enforcement naming any of these contracts or the deployer address was found as of 2026-10-26.
No sanctions match for the deployer account (GoPlus address_security, 2026-10-25). No connection to any named real-world person or entity established on primary evidence. This research does not allege criminal conduct by any named individual. The contracts are on BSC mainnet and are publicly verifiable.
| Key claim | Watchdog-dependent? | Independent source | Tier |
|---|---|---|---|
| Mathematical Bold Unicode substitutes all 26 Latin capitals — including D and G, previously thought 'safe'; `𝗨𝗦𝗗𝗖` is a live on-chain example | No | On-chain BSC scan (T1) + unicode.org confusables.txt (T1) | T1 |
| 4-script USDT impersonation (`ՍЅᎠТ`): Armenian + Cyrillic + Cherokee + ASCII, TR39 skeleton = 'usdt' — mixed-script combinations can impersonate any ticker | No | On-chain BSC scan (T1) | T1 |
| Both Lisu-BTC contracts deployed by the same account (0xad379b8573fafa0af22a7dbadcb45105b0e48707) via Flap launchpad; vanity ...8888 suffix on both indicates automated tooling | No | GoPlus deployer field (T1) — tooling inference is T4 | T1 |
| All live homoglyph cases pass GoPlus standard contract checks — contract-level scanners cannot detect name-based impersonation | No | GoPlus token_security API (T1) | T1 |
| 26% of newly-minted BSC tokens in the 7-day window contain non-ASCII characters; the genuinely deceptive letter-substitution subset is small (4 verified cases out of 85 TR39 hits) | No | On-chain BSC scan (T1) | T1 |
| # | Claim | Method | Result | Tier |
|---|---|---|---|---|
| V1 | 𝗨𝗦𝗗𝗖 (Mathematical Bold) — TR39 skeleton 'usdc', zero Latin characters | On-chain scan + TR39 skeleton computation against confusables.txt | VERIFIED — contract 0xeb068c0aaec6b838a90cd8446fa68607237bffff (BSC); name bytes confirmed non-Latin | T1 |
| V2 | ՍЅᎠТ (4-script) — TR39 skeleton 'usdt', four different scripts, zero Latin | On-chain scan + TR39 skeleton computation; per-codepoint script identification | VERIFIED — contract 0xfd865a1488152eb60e76e1557c956ddde2d98888 (BSC); each character from a distinct script confirmed | T1 |
| V3 | Βitcoin / ΒTC (Greek Beta) — TR39 skeleton 'bitcoin' / 'btc' | On-chain scan + TR39 skeleton computation | VERIFIED — contract 0x64386a96497651c88728ed59aad5317e83a78888 (BSC) | T1 |
| V4 | ꓐꓔꓚ (pure Lisu BTC) — two contracts, same deployer, TR39 skeleton 'btc' | On-chain scan + GoPlus token_security (deployer, launchpad, honeypot, ownership) | VERIFIED — contracts 0x5a8c128be2d1e986cce9e46bba8f8eb530ed8888 and 0xf84dafd17c4c51495c4e522a2fac3f80e9ba8888; deployer 0xad379b8573fafa0af22a7dbadcb45105b0e48707 via Flap; both pass GoPlus clean-contract check | T1 |
| V5 | No sanctions match for the deployer account | GoPlus address_security, chain_id 56 | CONFIRMED (negative) — no malicious-history flags, no match in known scam-cluster records as of 2026-10-26 | T1 |
Our sourced review assigns CRITICAL risk (confidence: high). A cluster of BSC tokens uses visually-indistinguishable Unicode substitutes for BTC, USDT, USDC and other major tickers — the displayed names collapse to the real ticker under TR39 skeleton analysis while every underlying character is from a different script — confirmed live on-chain by an automated 7-day scan (17,482 tokens, 85 TR39 hits, 4 verified letter-substitution cases); the `...8888` deployer account shows vanity-address generation indicating automated, repeatable deployment tooling, with no sanctions match or named individual established on primary evidence. A red flag is not proven fraud — every claim above links to its source; you decide.
The decisive test looks at the source of payouts, not whether a product exists. Finding: n/a No verifiable external revenue was found.
No licence/registration was found. Relevant authority: This is consumer-protection / educational research, not a regulated-entity filing. No regulator warning or enforcement naming any of these contracts or the deployer address was found as of 2026-10-26.. No sanctions match for the deployer account (GoPlus address_security, 2026-10-25). No connection to any named real-world person or entity established on primary evidence. This research does not allege criminal conduct by any named individual. The contracts are on BSC mainnet and are publicly verifiable.
Do not interact with any token whose displayed name or ticker looks like BTC, USDT, USDC, or another major asset unless you have verified the contract address character-by-character against the issuer's official documentation. The single reliable defence is: check the contract address directly. A displayed ticker, a green GoPlus scan result, and a listed volume are all consistent with a homoglyph impersonator. For developers and security tools: implement TR39 skeleton matching against confusables.txt on token name/symbol fields at the aggregator and wallet layer, not only at the contract layer. Mixed-script names (flagged by a TR39 mixed-script check) and Mathematical Bold / Fullwidth names warrant heightened scrutiny. This is consumer-protection and educational research — NOT investment advice, not an offer, and not a legal accusation. Attribution status: VERIFIED (T1) means supported by on-chain primary evidence; CANDIDATE means consistent pattern without independent deployer confirmation; NOT ESTABLISHED means investigated and not confirmed. Named on-chain addresses are published as factual observations.
When a later, more thorough investigation supersedes an earlier one, we keep the previous assessment. A project can drift toward fraud — or clear up — and only an objective version history makes that change auditable.
This is the first recorded version of this assessment.
Other offers we vetted — several share operators, infrastructure or a rebrand chain.
BMIC (BMIC.ai) is an open-ended presale/ICO built around a 'quantum-resistant wallet' and a 'Quantum Meta-Cloud' AI narrative that shows a…
Blockchain Sports (Atleta Network / $ATLA) is not a legitimate sports-blockchain project — on the available open sources it shows the hallm…
Minotaurus ($MTAUR) is a BNB Smart Chain crypto PRESALE running since May 2024, built around a 'labyrinth' mobile GameFi game; the token it…
Get a free, sourced Quick Scan — verdict with receipts, before you invest.
Get my free scan → Full Dossier — lineage & entity map