MalwareTips: andiotwatches.net is a fake Andiot dealer pushing Telegram crypto payments
MalwareTips says andiotwatches.net is a fake Andiot dealer that pushes Telegram crypto payments via @Li_contact. The operator lists andiotwatches.vip as its official site.
- First reported
- Reports
- 1
Source: malwaretips.com · published
What happened
On 5 November 2026 MalwareTips published an investigation describing andiotwatches.net as a fake Andiot dealer. According to MalwareTips, the .net site presents a polished watch catalog under the Andiot name, but the operator that publicly lists Andiot's official site as andiotwatches.vip (with andiotwatches.com redirecting there) warns about impersonators. MalwareTips says the .net homepage's Telegram button points to @Li_contact, which is not either of the Telegram usernames listed by the .vip operator.
How the scam works
MalwareTips says the risk follows the payment route. The .net payment page encourages cryptocurrency and directs buyers toward Telegram for payment details, while other methods such as card or PayPal are said to require contacting staff. A public buyer report describes an undelivered order paid through Telegram; MalwareTips treats that report as an allegation, not an independently verified transaction history.
The investigation stresses that recognising the Andiot name is not the same as confirming who controls the site, and that a browser padlock only encrypts the connection. Discounts advertised on the page, including a sitewide percentage off and a separate cryptocurrency discount, cannot resolve the identity conflict. MalwareTips' firmer reason to avoid the domain is the operator's own impersonation warning. This report concerns andiotwatches.net and the Telegram handle @Li_contact; andiotwatches.vip and andiotwatches.com are described as the operator's own listed sites, not as the flagged scam identifiers. These are MalwareTips' findings and have not been verified by scammers.com.
Dealer-impersonation sites thrive where buyers already accept that specialised channels and Telegram contacts are part of the trade. That familiarity can make a wrong domain ending feel like a minor detail. MalwareTips' investigation separates the quality of any watch from the identity of the seller: even a buyer who wants a particular model still needs to pay the party the named dealer actually endorses. When the operator's own site warns about impersonators, the .net address is the wrong place to send crypto.
Source
MalwareTips, investigation of andiotwatches.net, 5 November 2026. Not independently verified by scammers.com.
Red flags
- A dealer domain that is not the official address listed by the named seller.
- A Telegram payment contact that does not match the operator's published usernames.
- Pressure to pay by cryptocurrency or through Telegram chat.
- Deep discounts that discourage checking who actually runs the site.
- A polished catalog that copies a known dealer's branding.
If you were targeted
- 1Do not buy from andiotwatches.net; confirm the dealer on the address the operator itself lists.
- 2Do not send crypto or pay via an unverified Telegram handle.
- 3If you already paid, keep records and contact your payment provider about a dispute where possible.
- 4Treat lookalike dealer domains as high risk until independently verified.
- 5Report impersonation sites to the named dealer and to your national fraud service.