Repeat Scam Targets Recovering Investors; Law Enforcement Cracks Down on Multi-Phase Fraud
Crypto scammers who initially stole millions from Russian-speaking investors now appear to have contacted the same victims weeks later, falsely promising assistance in recovering their losses.
On October 14, Brooklyn prosecutors revealed the fraud following an international enforcement action that disrupted 112 servers and 241 websites supporting a cryptocurrency investment scheme allegedly stealing tens of millions of dollars from victims across the United States.
The operation, carried out with FBI assistance, targeted the infrastructure used to run fraudulent investment platforms and retain communication with victims. Investigators recaptured data confirming the same criminal network re-established contact with people who had already lost money in the original scheme.
District Attorney Eric Gonzalez explained that scammers had initially targeted Russian-speaking Americans through an elaborate investment operation before attempting to extract additional payments by offering to retrieve stolen cryptocurrency.
The investigation, spanning three years, identified a cluster of victims in Brooklyn—home to a large Russian-speaking population. According to prosecutors, some victims lost their entire life savings.
Recovered information also illuminated how the fraudsters sustained relationships with victims beyond the primary theft, creating opportunities to solicit extra payments once their fraudulent investment platforms ceased processing withdrawals.
Prosecutors Target Servers Behind Repeat Crypto Scam
Investigators traced the operation to Russian-language Facebook advertisements promoting cryptocurrency investment opportunities.
Individuals who responded to the ads received phone calls from persons posing as Russian-speaking investment advisers. Those advisers guided recipients to cryptocurrency trading websites, assisted them in opening accounts, and instructed them to purchase digital assets.
Victims subsequently transferred cryptocurrency to wallet addresses linked to the investment platforms, convinced their funds were being deployed in legitimate investments.
The deception usually surfaced weeks or months later when investors attempted to withdraw their proceeds. Some discovered their accounts were frozen, while others were told they needed to pay extra fees or taxes before the criminals could release their money.
The criminals subsequently capitalized on the losses they had engineered.
Prosecutors stated that recovered server data demonstrated the operators approached victims several weeks after the initial scam, claiming they could recover the missing assets.
The second phase enabled the network to leverage data gathered during the investment fraud to target individuals already suffering significant financial setbacks.
Authorities did not disclose how many victims received these recovery proposals or whether any made supplementary payments.
Findings reflect a broader pattern identified by the FBI, warning that fraudulent cryptocurrency recovery services frequently target people who have already lost funds to investment scams.
What Is Moving Crypto.
Such enterprises may require upfront contributions, present misleading asset-tracing reports, or falsely assert connections with law enforcement to coerce victims into sending more money.
In the Brooklyn case, investigators focused on dismantling the infrastructure that empowered the criminal network to sustain its websites and continually reach out to victims.
The District Attorney’s Virtual Currency Unit had previously seized or disrupted roughly 400 domains associated with cryptocurrency investment fraud. Nonetheless, replacement sites emerged rapidly, permitting fraudulent activities to persist despite enforcement measures.
That spurred investigators to extend their scope beyond the web pages themselves.
Over a three‑time‑zone operation completed last week, prosecutors issued search warrants and coordinated the disruption of cloud‑based servers hosted by firms in Eastern Europe and the United States.
The criminal network relied on infrastructure and Internet addressing in Ukraine and other Eastern European states to conduct its business, per the District Attorney’s Office.
By striking at the servers, investigators aimed to deny the operators access to software, website archives, and victim records essential for ongoing fraudulent activity.
Additionally, this effort sought to impede the scammers’ ability to swiftly relaunch websites and repurpose stored client information to engage existing victims with renewed recovery proposals.
The enforcement initiative involved coordination from the FBI and private‑sector partners, including Shadowserver, Coeus, and UltaHost.
Despite the magnitude of disruption achieved, recovering the stolen cryptocurrency remains a distinct obstacle.
Related Reading
Prosecutors estimate the scheme appropriated tens of millions of dollars, though seized crypto assets total only about $300,000 thus far.
The District Attorney’s Office has not indicated whether any victims have regained their funds or published a timeline for restitution. The announcement likewise omitted identifying the alleged perpetrators or announcing detentions.
Investigators continue pursuing asset recovery, yet the majority of money taken in the cross‑border operation remains unrecovered.
Also Read
- US Retail Sales Rise 0.8%, but Spending Excluding Gasoline Barely Grows
- Bitcoin’s AI-driven rally faces a hidden danger if the machines get richer but workers don’t
- October 15: Cedi sells at GHS12.30 on forex market, GHS11.68 on BoG interbank – Modern Ghana
- Brooklyn Prosecutors Take Down 112 Servers Behind Crypto Scam Targeting Russian Speakers