Blacklisted Mystery Box Sites in 2026
All mystery box sites you should avoid at all cost – in one place.
We’ve opened enough mystery boxes to spot a scam from a mile away. This page collects the worst offenders, breaks down what they did, and gives you a blueprint for staying safe.
TL;DR – Why This List Exists
We love a thrilling unbox, but we hate blacklist‑worthy nonsense even more. When a site:
- Fakes “provably fair” RNG
- Won’t ship wins (or sends Dollar‑Tree knock‑offs)
- Ignores payout requests or deletes your account
- Buries fine print that lets them void legit wins
- Payment fraud using confusing gateways under different companies not disclosed on the site in the terms of use
- …it earns a permanent spot here. This list shines a flashlight on those dark corners so you don’t get burned.
Mystery Box Sites You Should Avoid Currently
Below is the running list of mystery‑box platforms you should avoid like last week’s sushi. We’ll update this table whenever a new scammer pops up.
| Site | Status | Biggest Red Flag | One-Line Verdict |
|---|---|---|---|
| Hapabox Review | ❌ Blacklisted | Redirects to third-party payment gateways | High payment-fraud risk |
| MysteryOpening Review | ⚠️ Not recommended | Pretty much a dead site — no PvP action or community whatsoever | Dead site — not worth the money |
| DrakeMall Review | ⛔ Closed / Archived | Site shut down in May 2024; user balances frozen | Dead platform — zero value today |
| Hybe Review | ⛔ Closed / Archived | Shuttered 31 Dec 2024 after months of KYC freezes & shipping-fee pain | Closed — once legit, now offline |
| MysteryBoxBrand Review | ⚠️ Caution | Hidden odds, WHOIS-private operator; shipping can wipe out cheap wins | Legit-ish but math is secret — rip for fun, not profit |
| Hypeloot Review | ⚠️ Caution | Crypto-only cash-outs and frequent withdrawal delays | Slick features, cash-out pain — tread lightly |
*Status key: ❌ Blacklisted (do not use), ⚠️ Not recommended (suspicious activity reported)
Need a deeper dive? Jump to the Red Flags & Receipts section below for screenshots and user reports.
How a Site Gets Blacklisted
Transparency check: we don’t nuke a platform on a single angry tweet. Each blacklist entry survives a three‑stage investigation:
Two or more independent complaints hit our inbox or community within 30 days.
We place real orders, track shipping, test drop‑rate code, and log the whole thing.
We weigh the evidence against our Policy (shipping integrity, odds disclosure, payout behaviour, customer support).
If the site fails any critical checkpoint, the ban hammer drops – and stays dropped until they prove a full fix with receipts.
Accepted evidence sources:
- Timestamped tracking logs or payment screenshots
- On‑chain transaction proofs (for crypto drops)
- Unedited screen recordings of box openings
- Third‑party RNG or code audits
Think we missed a bad actor? Scroll to “How to Report a New Scam Box” and send us the receipts.
Red Flags & Receipts
Below you’ll find the receipts that landed each platform on the blacklist. We archive screenshots, order numbers, and other proof so you can see the mess for yourself.
Hapabox – What Went Down
- Payment redirection scam: PayPal deposits bounced to a checkout page owned by Hapaboxe.com, while card payments were routed through hapastore.com. Two different businesses, zero disclosure – chargeback chaos waiting to happen.
Evidence on file:
- Screen recording of PayPal redirect displaying “merchant: Hapaboxe.com.”
- Screenshot sequence of card gateway switching to hapastore.com with mismatched SSL certificate.
MysteryOpening – What Went Down
- Anon payment processor: We pushed a $10 PayPal deposit and it cleared, but the receipt listed no merchant name we could trace back to MysteryOpening – red flag city.
- Ghost‑town activity: Drop feed is dead – no Battles, no Tournaments, zero live winners. Feels like hitting a PVE script, not a real marketplace.
- No shipping logs: Any “wins” we claimed never generated valid tracking numbers; support shrugged.
Evidence on file:
- PayPal receipt screenshot with blank merchant field (transaction ID redacted).
- 24‑hour timelapse capture of inactive “Recent Drops” feed.
Already Deposited? Here’s Your Damage‑Control Checklist
Made a deposit before spotting this blacklist? Don’t panic—follow these steps to claw back cash and lock down your details.
Remove any saved cards or billing agreements from your account (if the dashboard lets you).
Call your bank or use your card app to block further charges immediately.
PayPal: File a “Significantly Not as Described” claim (you’ve got 180 days).
Credit/Debit Card: Ask your issuer for a chargeback citing “merchant misrepresentation.” Most providers give you up to 120 days.
Screenshots: checkout redirects, blank receipts, missing tracking numbers.
Emails or chat logs where support ghosts or stonewalls you.
Swap credentials on the box site and anywhere else you reused that password (no shame – we’ve all done it).
Look for weird micro‑charges over the next few weeks – common test‑payments by shady processors.
FTC → reportfraud.ftc.gov (US) or your local consumer‑protection agency.
Tag us on X @MysteryBoxWatch with your case number – helps us build the paper trail.
Heads‑up: We’re not your lawyer or bank. Use this checklist as guidance and confirm any legal or financial steps with a professional.
How to Report a New Scam Box
Think you’ve uncovered another shady mystery‑box vendor? Do the squad a solid—send us proof and we’ll swing the ban‑hammer if it checks out.
Evidence We Need
- Payment proof – Screenshot or PDF of the transaction (showing amount, date, and whatever merchant name – or lack of one – appears).
- Order ID + timestamp – From your dashboard or the confirmation email.
- Video or GIF of the sketchy moment – Unedited screen‑capture of the glitch, redirect, or empty “win.”
- Comms receipts – Any email or live‑chat thread where support ghosts or contradicts itself.
- Shipping trail (optional) – Tracking stub that stalled or proved fake.
How to Submit
- Secure upload form: Drop files at unpacked.gg/blacklist‑report (max 100 MB, auto‑encrypts).
- Email: Send everything to blacklist@unpacked.gg with the subject line New Scam Box Report – [Site Name].
What Happens Next
- 72‑hour triage – We verify evidence, cross‑check user complaints, and log the case.
- Under Review board – If the claim has legs, the site moves to our public “Under Review” list while we dig deeper.
- Blacklist verdict – Three unique, verified proofs = permanent Blacklist status.
Privacy note: We redact personal info and never share raw files outside the review team.
Help us keep the community L‑free – your screenshots could save someone a paycheck.
Our Verification Workflow (Nerd Corner)
Wondering how a rumor turns into a full‑blown ban? Below is the entire pipeline we run on every suspect platform before stamping it ❌ Blacklisted.
Complaint tracker: Every user report lands in Jira with timestamp, region, and evidence type.
Sentiment crawler: A Python bot scrapes Reddit, X/Twitter, Discord, and Trustpilot daily for new mentions.
Anomaly alert: Sudden spike in negative chatter (🔺 >150% week‑over‑week) triggers an investigation ticket.
Payment receipts: Cross‑check transaction IDs, gateways, and merchant names (or missing ones).
Screen recordings: Verify drop odds, UI glitches, and redirect URLs.
Log overlap: Match user complaints against each other for consistent patterns.
Small‑value deposit: We load ≥ $10 via two payment methods (card + PayPal/crypto) to replicate user experience.
Forced withdrawal: Attempt cash‑out or prize claim within 24 h; note delays or doc requests.
Shipping check: Order a physical item and track carrier scan events.
Terms audit: Dig into ToS for ownership shell games, forced arbitration, or vanish‑clauses.
Jurisdiction match: Compare business address vs. payment processor country vs. domain WHOIS.
Scoring matrix: Each red flag gets weighted (0–5). Score ≥ 12 = instant blacklist.
Public post: Write‑up with receipts, publish, notify payment processors and consumer‑protection forums.
Continuous review: Sites can appeal quarterly; we re‑test if they fix every failing checkpoint.
“Status” column on the Quick‑Glance table shows either ❌ Blacklisted or ⚠️ Not Recommended.
Responsible Spending Reminder
Mystery boxes belong in the fun‑money column – like sneakers or a weekend festival, never your rent or bills. Keep the thrill healthy with these quick rules:
- Set a hard cap. Decide your max monthly unbox budget before you log in.
- Track your total. Keep screenshots/receipts or use a budgeting app so costs don’t creep.
- Take cool‑off breaks. If you’re chasing a loss or the rush feels more stressful than fun, step away.
- Talk it out. If you’re worried about habits, chat with a friend or a support line—no shame in a reset.
18+ Only. Budget first, unbox second. Fun stops? Stop too.