Inside The Scam: How 'Pinay Gold Medallist' Viral Video Links Steal Your Data

Every Olympic season captures hearts with heroes, headlines, and national pride. However, it also attracts undesirable attention—scams.

With millions seeking information on medals, highlights, and emerging sports stars, cybercriminals identify an opportunity. They follow traffic, set traps, and this year, a name unexpectedly gained traction across social media.

Zyan Cabrera.

Posts misleadingly branded her as a Pinay gold medallist and claimed to have a leaked video, yet there is no verified record of her participation as an athlete. Posts on Facebook, Instagram, X, and Telegram shared a supposed leaked video, but the links led users to suspicious or phishing sites rather than to genuine footage.

Thumbnails appeared dramatic, headlines promised exclusive content, and links urged users to view the full video. However, the story diverged from sports; it was a scam. Beneath the viral hype lay a calculated phishing campaign, intended to steal data, not disseminate news.

A Viral Athlete Who Does Not Exist

The posts initially seemed credible. The text mimicked a sports columnist's style, and the images depicted triumph. Scammers seemed to have added the Olympic label to drive clicks, as there is no documented link between her and any Olympic or professional athletic event.

Upon verifying basic facts, discrepancies emerged. No evidence connects her with any Olympic statistics, federations, medal counts, or proof of an athletic career. Reports suggest she is primarily recognised as a Filipino social media creator, and her images were misappropriated without proof of any athletic achievement.

Cybersecurity experts note that scammers frequently misuse authentic images with fabricated achievements to gain trust and lure users to phishing or malware sites.

How the Links Turn Curiosity Into Theft

By clicking these links, users are often redirected to unfamiliar websites instead of legitimate video platforms. This marks the beginning of the trap. Some links mimic social media login pages to capture credentials, while others trigger downloads that might install malware or spyware.

Phishing links may prompt downloads that install malware or spyware, compromising device performance and user privacy. The damage transpires swiftly, usually unnoticed until much later; by the time users realise a crime has occurred, their passwords are often compromised. Criminals exploit impulsivity and sensationalism, fostering an environment where decreased caution heightens risk; even a single careless click could lead to losing your computer, personal data, credit cards, financial records, and more.

Why the Olympics Provide Perfect Cover

Cybersecurity analysts note that scammers often exploit heightened search interest during major events, such as the Winter Olympics, to increase the visibility of fraudulent links in search and social media feeds. Search traffic spikes during significant global events, and trending keywords may lead to misleading or unverified links surfacing alongside authentic coverage.

By integrating phrases like gold medallist or Olympic winner, scammers aim to boost fraudulent links in search results, a tactic known as search poisoning. They craft fake articles related to major global events and elevate them in search and social feeds ('search poisoning'); this is how they cloak fake stories amid genuine news reports.

Reports indicate that posts circulated during the height of the Winter Olympics interest, suggesting scammers aimed to exploit increased search traffic. In reality, when crowds are searching simultaneously, it's easier for scammers to evade detection, even with blatantly counterfeit articles.

The Real Harm Behind the Headlines

Experts warn of phishing and credential theft risks, but no verified evidence suggests that any real video exists or that there are confirmed data breaches directly linked to this specific scam. Deceitful posts can harm reputations as they lack verification of any video's existence or her status as a medalist. Real individuals' identities appear to have been utilised without consent, exposing them to reputational damage and online harassment.

Even after scams vanish, screenshots endure. Digital misinformation rarely evaporates completely. An initial clickbait headline can have lasting personal repercussions for those named.