Venom's lack of transfer fees means no fraud protection—as at least one scammer, "Andy Mai," has discovered.