🛑 The Scammer's Digital Identity (The "Blacklist")

If you are currently in contact with anyone matching these details, BLOCK THEM IMMEDIATELY. They are verified scammers.

Personal Aliases & Names Used

• Amos (Often refers to himself as "Investor Amos")

• Shaibu Amos (Name associated with Binance/Email)

• Prof. Ayodeji Blessing (Name used on WhatsApp business profiles)

• "Prof Coker" (The fake persona used to delay delivery)

Business Names

• Legit Tech Services (Facebook Page & WhatsApp Group)

• Turnitin Student Account Services

Contact Information (Harvested from Evidence)

• Primary WhatsApp: +234 902 552 5113 (Nigeria)

• Secondary WhatsApp: +234 814 829 8036 (Nigeria)

• Binance Email: shaibuamos100@gmail.com

• Binance User ID: 285428581

• Impersonated University Email: ayodejicoker@futminna.edu.ng

  • Note: They use this email to appear legitimate, leveraging the reputation of the Federal University of Technology, Minna.

Facebook & Social Links

• Facebook Group: Legit Tech Services's post

• WhatsApp Group Invite: https://chat.whatsapp.com/LD195BTao486FvrQMQqgyt?mode=gi_t

🕵️‍♂️ The Anatomy of the Scam: How They Steal Your Money

Based on verified victim reports and screenshot evidence, this is the exact step-by-step "Modus Operandi" (M.O.) these scammers use.

Phase 1: The "Limited Offer" Trap (SEO & Social Bait)

They operate heavily on Facebook, posting high-quality graphics advertising "Private Turnitin Student Accounts" with features that are highly desirable but technically impossible to offer cheaply:

• "2 Years Subscription"

• "No Repository (No Rep)"

• "AI Detection Included"

• "Instant Similarity Report"

🚩 Red Flag: They create urgency with phrases like "LIMITED OFFER," "Limited slots available," and "Order now!" to bypass your critical thinking.

Phase 2: The Social Engineering (Building Trust)

Once you click their WhatsApp link, you are greeted by a "professional" profile (often "Prof. Ayodeji Blessing").

• They may show you screenshots of a "successful" dashboard or fake reviews.

• They are extremely responsive (replying instantly) to give you a false sense of security.

Phase 3: The Payment (Crypto & Nigerian Banks)

They steer you away from protected payment methods (like PayPal or Credit Card) and demand irreversible payments:

• USDT (Tether) / Crypto: They will ask for payment to a Binance ID (e.g., 285428581).

• Direct Bank Transfer: If you are in Nigeria or using an app like OPay/PalmPay.

• Evidence: In our case study, the victim paid 95 USDT (approx. $95 USD).

Phase 4: The "Professor" Delay Tactic (The Ghosting)

This is the most critical phase. The moment they confirm receipt of your money ("Received.."), their behavior changes.

• The Excuse: They will claim they cannot generate the account themselves. They say, "Waiting for Prof Coker to come online" or "Let me quickly contact Prof."

• The Stall: They will keep you waiting for hours, claiming the "instructor is not activated yet" or "sorry am in the office currently."

• The Gaslighting: If you ask for an update, they reply with one-word answers or ignore you completely.

Phase 5: The Double-Scam (Refund Fraud)

When you finally realize you've been scammed and ask for a refund, they may try to steal more money.

• They might claim the refund failed because of a "Pay ID vs. Address" error.

• They might ask for a "processing fee" to release the refund.

• Fact: Refund payments never require a fee. This is a secondary scam.

🔍 Technical Analysis: The "Prof. Coker" Connection

One of the most dangerous aspects of this scam is the use of the email address ayodejicoker@futminna.edu.ng.

1. Domain Analysis: The domain @futminna.edu.ng belongs to the Federal University of Technology, Minna in Nigeria.

2. The Implications: The scammer is likely:

   • A compromised student/staff member at this university.

   • An impostor spoofing the university's email system to gain trust.

   • Someone named "Ayodeji Coker" who is misusing their academic privileges to defraud international students.

3. Trust Signal Abuse: By using an .edu.ng email, they try to convince victims that they have "backend access" to Turnitin, making the 2-year subscription claim seem plausible.

🛡️ How to Protect Yourself (SEO Safety Tips)

If you are searching for "Buy Turnitin Account," "Turnitin Reseller," or "Cheap Turnitin," follow these strict rules:

1. Never Pay via Crypto for Software

Legitimate software resellers (SaaS) use Stripe, PayPal, or LemonSqueezy. If a vendor asks for USDT, Bitcoin, or Binance Pay, it is 99% a scam. You have zero recourse if they run away.

2. Verify the Phone Number Country Code

Turnitin is a US/UK-based company. If your "support agent" is using a generic WhatsApp number with a +234 (Nigeria), +92 (Pakistan), or +880 (Bangladesh) code, proceed with extreme caution. While freelancers exist everywhere, "Official Resellers" will not use personal WhatsApp numbers from these regions.

3. "2-Year Accounts" Do Not Exist

Turnitin does not sell "2-Year Student Accounts" to individuals. They sell licenses to institutions. Any "private account" sold to you is likely a stolen or hacked instructor account that will be shut down within weeks, even if they initially deliver it.

📢 Call to Action: Report These Scammers

Help us de-index and ban these fraudsters. Take the following actions immediately:

1. Report to Binance:

   • Open a support ticket with Binance.

   • Provide the Scammer's ID: 285428581.

   • Provide the Email: shaibuamos100@gmail.com.

   • Attach your payment screenshots.

2. Report the Facebook Group:

   • Go to "Legit Tech Services."

   • Click the three dots (...) -> "Report Page" -> "Fraud or Scam."

3. Report the WhatsApp Number:

   • Open the chat with +234 902 552 5113.

   • Tap the contact name -> Scroll down -> "Report Contact."

Spread the word. Share this blog post on Reddit, Twitter, and academic forums. If you have been scammed by "Amos" or "Legit Tech Services," drop a comment below with your experience to help others avoid the same fate.

📍 TECHNICAL EVIDENCE: IP & Location Tracking

We have successfully tracked the digital footprint of this scammer. This evidence confirms their location matches their phone number origin, debunking any claims of being a "US/UK Reseller."

• Confirmed IP Address: 105.112.109.197

• Physical Location: Benin City, Nigeria

• Device Used: Apple iPhone (iOS 26.1) running Chrome Browser

Why this matters: Legitimate software resellers for companies like Turnitin (based in Oakland, California) do not operate from residential IP addresses in Benin City using personal iPhones to process payments. This is definitive proof of a localized fraud operation.