Strategy (formerly MicroStrategy Incorporated) is a Nasdaq-listed business intelligence and Bitcoin treasury company founded by Michael Saylor in 1989. As the world's largest corporate holder of Bitcoin, Strategy has adopted BTC as its primary treasury reserve asset, holding over 500,000 BTC on its balance sheet. The company's high-profile Bitcoin acquisition strategy and executive visibility have made it a frequent target of impersonators, fake investment platforms, and fraudulent token offerings bearing its name and branding.
Strategy's position as the world's largest corporate Bitcoin holder and the public visibility of founder Michael Saylor make it a prime target for sophisticated impersonation schemes. Threat actors generate AI deepfake videos of Saylor promoting fake Bitcoin investment platforms, create fraudulent MSTR-branded token offerings on decentralized exchanges, and deploy phishing sites that clone Strategy's investor relations portal to harvest credentials. The company's frequent media appearances and Bitcoin acquisition announcements provide fresh material for scammers to exploit.
Deepfake Michael Saylor Bitcoin Investment Scheme
An AI-generated deepfake video of Michael Saylor was distributed across YouTube and Facebook, promoting a fraudulent Bitcoin doubling scheme under the guise of a Strategy corporate initiative. The video was professionally produced with accurate lip-syncing and used official Strategy branding. EzlaScan identified the campaign within 2 hours of going live, coordinated simultaneous takedown requests across both platforms, and worked with the hosting provider to seize the associated phishing domain. Total exposure was limited to under 340,000 views.
Fraudulent MSTR Token Offering
Scammers launched a fake 'MSTR Token' on Ethereum and Solana, using Strategy's branding, Michael Saylor's likeness, and fabricated partnership announcements to drive purchases. The token contract included a honeypot mechanism preventing resale. EzlaScan filed complaints with decentralized exchange aggregators, submitted trademark infringement reports to social media platforms hosting promotional content, and coordinated with blockchain security firms to flag the contract addresses. The token was delisted from major aggregators within 48 hours.
Phishing Attack on Investor Relations Portal
A sophisticated phishing site cloned Strategy's investor relations portal at strategy-ir[.]com, targeting institutional investors with fake quarterly earnings reports that contained malicious download links. The site ranked in Google search results for 'Strategy investor relations'. EzlaScan detected the domain through brand monitoring, immediately filed with Google Safe Browsing, submitted DMCA takedowns to the registrar, and coordinated with Strategy's IR team to issue investor alerts. The domain was seized within 8 hours.