Thanks for your comments. In fact I didn't mention this in my post: there is some kind of technical bug in Android smartphone web browsers, that would automatically insert only part of the account name, while selecting the bot from your recent transfers list. That's where the whole issue is coming from, and those scam accounts are well using this glitch to abuse users and increase their profits