Reports submitted for
For investigative and security reasons, this report is currently restricted to law enforcement partners.
Law enforcement officers can request free access to related case data via TRM Deconflict, our secure collaboration platform for investigators.
Get free law enforcement access:
https://www.trmlabs.com/blockchain-intelligence-platform/deconflict
Crypto Hacks: Report and Stay Safe with Chainabuse
+ 1 more
Sextortion Scams: Learn and Report on Chainabuse
Already reported once, the btc has now been moved to above addresses with above transaction ids
Airdrop Scams: Report and Learn on Chainabuse
While I was sleeping somehow a smart contract got executed on my account, perhaps by clicking on an airdropped nft avatar but never going to the site or clicking a link. A minute later all of my ETH and BTC were both sent to two different addresses without my approval.
Crypto Hacks: Report and Stay Safe with Chainabuse
All i know is, that i bought bitcoin for 1000 euro an after a few minutes it arrived in my portfolio and the next miorning it was gone. I didnt do enything or verifyed anything.
For investigative and security reasons, this report is currently restricted to law enforcement partners.
Law enforcement officers can request free access to related case data via TRM Deconflict, our secure collaboration platform for investigators.
Get free law enforcement access:
https://www.trmlabs.com/blockchain-intelligence-platform/deconflict
Report Miscellaneous Crypto Scams with Chainabuse
+ 1 more
Crypto Hacks: Report and Stay Safe with Chainabuse
The address is a scammer address used to pool stolen funds from hundreds of individual wallets before mixing teh funds again into holding wallets, this wallet is continuously active and teh owner needs to be traced and charged with theft, fraud and money laundering
Report Miscellaneous Crypto Scams with Chainabuse: Fraudster
I logged into Denver airport public Wifi to check my xverse wallet on teh 11th august, on the 15 August I noticed my cryptocurrency had almost been fully drained out of my wallet, I believe teh fraudster was able to view my password and seedphrase through the unsecured public wifi connection, My IOS system was also pending an update which could've been another way in, I've checked for malware/viruses on my phone but nothing is showing on the scans.
I no longer use my phone for self custody as a precaution.
My xverse wallet address which was hacked is bc1p5gkvjy2ytfc7j4gw0uhtyyl87t7kkd5ta0d6u72pzlc4hm6hhvjqarx7js
The transaction ID for the hack is 2123dfcb38feddcb18d6e52c52982a822de035df467cec6566e05195a0ff1d73 but it only shows the transaction fee and not the assets that were taken for some reason( possibly because they are rune/ordinal assets which might not be visible in the memepool)
I used https://ordiscan.com/ to input my wallet and track the transfer of assets across multiple wallets ,Using the below link you will see the fraudster's current holding wallet for my assets (DOG to the moon and Bitcoin Grizzy) which you will see are valued over $6800 currently
https://ordiscan.com/address/bc1qemqxw43u7zxpfns7k932kf97nrgetdywyp7yh4/runes
+ 1 more
Fake Crypto Projects: Spot and Report Scams
On or around October 1, I downloaded a cryptocurrency-based game called Gravitium from a link on DappRadar, a site I believed to be reputable. The game (https://gravitiumgame.com/download/) was ranked #4 by volume at the time, which gave me confidence in its legitimacy. Immediately after installation, the game threw an error message. Though I ran a virus scan and saw no issues at the time, I now believe the software contained malware or a keylogger. Within days, I received a security alert from Coinbase regarding suspicious login activity. By the time I was able to access my account, I discovered that two unauthorized transactions had been initiated. Coinbase was able to freeze the second transfer in progress, but 1.317 BTC had already been stolen. Additionally, 0.59 ETH was drained from my connected wallet. Details of the Theft: AssetAmountApprox. ValueDestination Address BTC1.3170$83,137.6014D5koFhdjRvQewy9gDUz7wuiEy7ni7u6gETH0.59$1,390.000xb3c64e0e23d25818c27ce35a7e46137fb35e56faAdditional Findings:I have mapped out the stolen funds here:https://www.breadcrumbs.app/reports/18162?share=db7611fb-eb9e-4289-b535-a0652c68ed91I have been actively tracing the stolen funds and discovered that the stolen BTC was funneled through multiple addresses, eventually landing in wallets associated with known exchanges, including:KuCoin- address (294 BTC balance) : bc1q9wvygkq7h9xgcp59mc6ghzczrqlgrj9k3ey9tz ChangeNOW.io- address (12 BTC balance): 37jdMXYbvg3dKzJ4pGSYiABiXoBy4putZqMEXC Exchange- address (3 BTC balance): 33ze68qZoBE9R4uMtRQGNnvgFTYN4sPBUqThis leads me to believe the stolen funds may still be recoverable with prompt action and cooperation from these platforms. I am in the process of contacting each exchange’s compliance team and am providing them with all supporting documentation.
+ 5 more
Impersonation Scams: Protect Yourself on Chainabuse
Scam of an elderly pretending to be coinhako, trezor being drained, including 2.3 BTC and 6 ETH. Wallet traced to whitebit.com and also some big wallets holding BTC.
37jdMXYbvg3dKzJ4pGSYiABiXoBy4putZq bc1q7d9xafnxksc9uy96ehf25cc964w342wlp656nd
+ 22 more
Blackmail Scams: Report and Learn on Chainabuse
Hotmail account was hacked as my girlfriend inadvertently changed the password to one that was earlier leaked in a dataleak years ago. Soon after, most of her social media accounts were hacked by simply changing the password. The email inbox emptied except for a concept email stating she had been hacked. The e-mail claimed there was a remote access trojan with the ability to cause mayhem on her computer, sextortion and various other forms of blackmail.
Transferred the requested funds (500 USD in BTC) to the address in the e-mail (bc1qtyhhyavsj65qej0m5hqgnghkydvratzymwlln5) with the intent of tracking the payment.
The amount was soon forwarded to 35G2ywSqnR6FhDm5Ed3tKVBajvBhoP4fcQ which then (only action that took place on this address) forwarded the same amount again to 37jdMXYbvg3dKzJ4pGSYiABiXoBy4putZq.
This address frequently receives many small sums via similar routes and then every few hours or so sends a much larger amount to 3BGYoBi4LbdMC6FVMNZ4vxN9jVPEUUWJjM.
From here the money is ultimately deposited to Binance on address 1KF6FsQ42VmBHTt7tJQoJHuXwuWUPTaWo2
Fake Return Scams: Secure Your Crypto Investments
On 2 Jan 2025, Ms Bertha Wang contacted me via Twitter, posing as a London-based businesswoman with Bawei Cosmetics Guangzhou, claiming to live at 86 Kensington Park Rd, London W11 2PL, UK, as told via WhatsApp. After ~3 weeks of WhatsApp exchanges and video calls, she offered to teach me BTC/USDT options trading, leading to a scam via "m.uphold.top" (not uphold.com).
I lost 104,000 € from my Coinbase Wallet in four transfers:
22 Jan 2025: 0.0292 BTC (hash: 1b6d7acea7b7790bfbd332125262b0937cecc4b6f43d8741b5ec45ef028765cb; from bc1qh0fg92vw8mps8cd0methtqwa6t9hv7lwrz7tvk → 31wNbhYXJfMVpimfaup1zfvg2SLAttK1f8 → bc1q7w8lsl8dnp5h4cs3eqkt99tcgda45lurpnk59e → bc1qdfl3dfnwwvlqa5jpckh0ccwpjczh5y566c4g76 [134.757 BTC] → bc1q8pmuc2v0cku2ty0rfxp2jyvrhv6lpsjzq9y6s8 [27.229 BTC]).
11 Feb 2025: 0.621 BTC (hash: 16a94fa3ed9d70f18cfdf858a7905dc4dce7b74ad6cd5e4a6f512d3fb6874a64; from bc1qh5e7vvj27tg7csuyr9dun2yysawflwq9wfu27u → 3DbbaK92QfGLj5AKZtwGofM6HvwdWhPWuE → 1LwW3uGiwC4zF8PAu7WGD79dVKBw8fg5WG → 3GiK2CG5kfEfJvq37NmAKPRwcWymmS3iXp → 37jdMXYbvg3dKzJ4pGSYiABiXoBy4putZq).
17 Feb 2025: 0.426 BTC (hash: 0b66bbc69939569be3a995e8a1f6f56f515db749bd1e031a4d612bf22654a29a; from bc1qcv7hpyanusgzfqufhk7cle8uver9fghz4cw3h9 → 3DbbaK92QfGLj5AKZtwGofM6HvwdWhPWuE → 1LwW3uGiwC4zF8PAu7WGD79dVKBw8fg5WG → 32Vyfrv3VSz6BDJcnRVMb9uJLbbvwrUMHR → 37jdMXYbvg3dKzJ4pGSYiABiXoBy4putZq).
18 Feb 2025: 0.3701 ETH (hash: 0x7d3de2218862049edab5245d327a621027eb5dc8c80fd3c6f9743f6c5997ce70; from 0x2505dae3683bfb339163791ec36d8bfdb6e27d4c → 0xba8c59b0a5a1bcf54d5409871a78c9247f4d41ec → 0x03f34be1bf910116595db1b11e9d1b2ca5d59659 → 0x8d90113a1e286a5ab3e496fbd1853f265e5913c6 → 0x1334c337bb8680e2becd36cc5183f1f28cd12a6b [683.62 ETH]).
My first withdrawal request in Mar 2025 for ~15,500 € and 1.14 ETH was blocked, citing the fictitious "International Financial Anti-Money Laundering Center." A "Wellfare Uphold" WhatsApp account was involved.
This scam misuses Uphold’s name. I request further investigation, especially tracing the large BTC (134.757, 27.229) and ETH (683.62) wallets, and verifying Ms Wang’s address. I’ve reported to German police/BKA, Europol, and IC3, and notified Coinbase & Uphold.
+ 11 more
Impersonation Scams: Protect Yourself on Chainabuse
This address is connected to a serious cryptocurrency scam.
On March 23, 2025, I was manipulated by a fake “Bybit Support” contact on WhatsApp into transferring my entire Bitcoin balance to this wallet.
This was a classic case of social engineering and impersonation, involving fake KYC verification claims.
The funds were later split and moved across multiple addresses to obfuscate the trail.
I have filed an official report with the police.
Please flag this and the related addresses as fraudulent to protect others from falling victim.
+ 15 more
Crypto Hacks: Report and Stay Safe with Chainabuse
My btc (2.1) was stolen on Oct 8th last year (my work involves remotely accessing my computer, and I opened my port at home, and someone hacked into my computer). I also reported to the FBI on Oct 9th but never heard back from them.
I tracked where it went, and it looks like it ended up in some "tornado cash" address: 37jdMXYbvg3dKzJ4pGSYiABiXoBy4putZq (see the attached image)
I understand most likely I'd never get my btc back, but I want to share my findings with you and others, hopefully to expose this suspicious address.
Crypto Hacks: Report and Stay Safe with Chainabuse
A business partner was hacked and sent a file I ran. Looks like it hacked Exodus and transferred all coins out (BTC,ETH,LTC,TRX,SOL). Just figured out that it happened (1.5 months after).
I have tracked 3 aggregated hot wallets (TRX,SOL,ETH) were my stonen crypto were transfered after 3 hops. I see many transactions from exchanges there. Is there any way to understand what kind of wallet they and escalate to owner? BTC is mixed with few more steps but also have a hot wallet after.
+ 2 more
Impersonation Scams: Protect Yourself on Chainabuse
This person who scammed was impersonating the person who I know personally, used telegram with the same user name and picture of this person.
Enter your email
Chainabuse: Home