Scam Alert / Alerta de Estafa: Medellin & Bello Romance/Fraud Network
Gerson BucaramangaScam Alert / Alerta de Estafa: Medellin & Bello Romance/Fraud Network
Overview
This public intelligence advisory exposes a coordinated digital fraud, catfishing, and romance scam network operating out of the Medellin and Bello regions of Antioquia, Colombia. The operators rely on stolen alternative-model imagery, emotional manipulation, and rapid handle rotation to target individuals and evade platform enforcement.
Because native platform reporting channels (such as Meta's automated Trust & Safety review) have systematically failed to action these accounts, this public record serves as an index-poisoning firewall to ensure targets searching for these handles discover the truth before engaging.
1. Core Operators & Primary Alias Hubs
The individuals behind this infrastructure use multiple rotating accounts, secondary lookalikes, and alias hubs to separate their personal lives from their fraudulent operations:
Santiago Builes Cifuentes — Primary operator, tracked across handles including @santy_builes (main personal account) and alias hub @sombrakn (Lust k'n) and @pineapplecz49
Alternate Operational Identities: Associated with dark aesthetic/vamp vocabulary accounts such as @corpsevmp____ (CRISS) and crps.vmp.
The Associate / "Disciple" Node: Jose Davila Lopez (also known as Angel Yahir), tracked via rotating and high-churn proxy handles including @tururu_v and @a.n.g.e.l01011. And disciple @larry.usuga
2. Active Burner Handles & Proxy Variants
The network frequently deploys lookalike accounts, numeric spacing, and surrogate prefixes to instantly spin up replacement profiles when old ones are flagged:
@santy_builes_ (Gothic font display variant)
@sikas_cadavid350 (Alternate prefix and surname integration)
@san_24builes10 (Heavily structured numeric spacing variant)
@eternal_stille & associated rotation variants (@still_e.a.z.y_e, @still_eternal, @still.eternal)
Associate alias accounts (@tururu_v, @a.n.g.e.l01011)
3. Telltale Operational Patterns & Vocabulary
If you are interacting with an account originating from Colombia that uses these specific markers, exercise extreme caution:
Naming Conventions: Heavy use of the "kun" suffix, Leet-speak digit substitutions (e.g., using 0 for o, 3 for e), and vowel-stretching or double-vowel patterns (ooo).
Subcultural Camouflage: The network heavily embeds itself within regional Colombian trap, gothic, emo, and alternative subcultures, displaying crew tags like #LGVNG, #DBT, and #RR to build false rapport.
Stolen Imagery: Profiles often cycle through aesthetic or alternative model photos while keeping low post counts and lopsided follower-to-following ratios.
4. Defensive Action & Verification
1. Do Not Engage: If you receive outreach, friend requests, or financial solicitations from any of the handles listed above, cease communication immediately.
2. Preserve Evidence: Capture native full-screen screenshots of profiles, chat logs, and URLs immediately before accounts are purged or renamed.
3. Check the Index: Share this advisory or search specific handles alongside terms like "Scam" or "Alerta" to ensure others are protected from falling into the same operational trap.