A contact who calls himself something ordinary — “Alex” in one report — offers “work” or arbitrage through a so-called bridge such as mytonswap.ton. You are told to paste an exchange deposit address (for example an XRP address on Bybit) with its memo, then send TON from Tonkeeper to a destination that ends in .ton or -bridge.ton. Small tests of thirty USDT may even return a two-to-four per cent “profit”. The history on Tonkeeper can show a different receiving wallet than you expected, yet the small loop still completes — until the tutor asks for a thousand dollars.
Those suffixes are not a friendly DNS for a real bridge. They are a way to route coins to an address the operator controls while the chat script keeps you calm. Legitimate bridges are linked from documentation you open yourself; they do not need a stranger to dictate memo tricks in private messages.
Never scale a “test” that already looked wrong in the explorer. Revoke suspicious approvals if you connected a wallet, move what remains to a fresh wallet, and ignore paid “recovery”. Related: TON bait-and-switch send-more.
If this matches something you have been offered, start at Get help. If someone is already pitching “recovery”, read Fake recovery before you pay another fee.
This article is for general information only. It is not legal or financial advice. Details change. If you have lost money, contact your bank or card issuer and use the routes on the help pages.