Inside MetaMax: The Watch-and-Earn Ponzi That Left 15,000 Victims and a Bombing in Cyprus

MetaMax marketed itself as an easy path to passive income: watch advertisements, rate content, get paid. Operating across countries including the Philippines, Afghanistan and Cyprus, the platform drew in an estimated 15,000 users before collapsing into what investigators and online commentators describe as a Ponzi scheme fronted by apparently AI-generated executives.

How the scheme was structured

Signing up cost nothing. From there, MetaMax steered users toward tiered "Star" membership plans, starting at 90 USDT for entry-level "1 Star" status and rising to 12,000 USDT for the top "7 Star" tier. Members were told their job was simply to watch videos, like posts and leave comments, in exchange for daily payouts — 3 USDT per day at the bottom tier, up to 400 USDT per day at the top. A referral program layered on top offered up to 10% commission on whatever a recruit invested. MetaMax also sold fixed-term products, the flagship being a 60-day plan advertising 1.5% in daily returns — around 400% over two months. The platform told members these payouts were funded by unnamed clients paying to "manipulate social media metrics," a cover story that outside observers viewed as implausible on its face and symptomatic of a scheme funded purely by incoming deposits.

Cracks appear

On June 25, 2024, the Philippines Securities and Exchange Commission issued an advisory flagging MetaMax Asian Inc. as a likely Ponzi operation. Four days later, a YouTube channel called BinanceStuff posted a video bluntly titled "Metamax is officially a Ponzi scheme," which is what first brought the case to the attention of the online investigator known as Crypto Rug Muncher. The following day, MetaMax deleted its X account. Crypto Rug Muncher kept digging, scrutinizing footage from an alleged "MetaMax Asia Branch Opening Ceremony" said to have been held in the Philippines, which some viewers suspected featured paid actors or synthetic media. Among the figures flagged as likely AI-generated was a purported male chief executive introduced under the name Olivia Jenkins.

Around the same period, members in MetaMax's Telegram groups began reporting they could no longer log in or withdraw funds. The company attributed the disruption to vague "financial problems" and, in at least one instance, responded to a pushing-back user with a threat: "don't try to provoke MetaMax. MetaMax has all your detailed information, and I believe you understand what I mean." The platform's website reportedly began suffering frequent outages — a delay tactic consistent with other exit scams, buying time while users held out hope of recovering their money. Social platforms that MetaMax had used to recruit members, including TikTok, Instagram and Facebook, filled with complaints and warnings in place of the earlier promotional testimonials. By the time the dust settled, an estimated 15,000 victims across multiple countries had been identified.

Arrests and an explosion

Cypriot police arrested a 54-year-old former police officer suspected of acting as MetaMax's representative in Cyprus and of promoting investment through videos; the man reportedly claims to be a victim himself. Authorities intend to examine his bank accounts and are pursuing European investigation orders along with judicial assistance requests to at least two other countries. The case has since widened to include two more suspects: a 63-year-old retired police officer currently at large, and a 48-year-old self-employed Greek Cypriot man for whom a judicial arrest warrant has been issued.

In an unusual turn, a bomb detonated outside a property in Mazotos, Cyprus, previously rented by the arrested former officer. With victims located across Cyprus, the Philippines and elsewhere, Interpol's Athens office has joined an ongoing investigation by Cypriot authorities. Observers have also linked the same operators to possible follow-up schemes referred to as "Traffic Ad" and "Meta Quest".

A Tron-based wallet, TQapkNSEX1rdDKwwZZpdUfV2U8cf2xJs1N, is suspected of having received deposits tied to the scheme; further addresses shared by a victim have been compiled on Reddit for anyone looking to trace fund flows.

Why it worked

Analysts point to a familiar mix of factors: the pull of promised high returns, social proof from other apparent earners, and a layer of technical complexity that discouraged closer scrutiny. As Crypto Rug Muncher put it, "The worst part about the MetaMax scam is that they took advantage of people from some of the most economically disadvantaged countries on Earth. It's the lowest of the low."

The case underscores how Ponzi operators are adapting to the current moment, combining synthetic media, polished production and social-platform recruitment to build a convincing veneer of legitimacy. Cases like this one often escape notice from formal security researchers, leaving independent investigators and victims themselves to raise the alarm — and, in this instance, to keep tracking the people behind it even after the platform went dark.