I am not a victim and lost no money. I placed a test order to document the payment mechanism and did not pay. I am reporting a network of fraudulent online tobacco stores and the cryptocurrency addresses they use to collect payment. WEBSITES heat-tobacco.com tobaccobase.com cigsmoker.com cigarettesroad.com COLLECTION ADDRESSES USDT (TRC20): TC27nGjYFbxRehEQAojRBT8HTkdh1wEZ6R Bitcoin: 1P7WEgF8sZmcQ7cwiUNSV8gdP57XrYZzJv The BTC address has received 0.12697152 BTC across 161 transactions and holds a zero balance; funds are swept immediately on receipt. The TRC20 address shows 477 transactions and 373 token transfers with a near-zero balance. Outgoing USDT is sent to TDqSquXBgUCLYvYC4XZgrprLK589dkhSCf, which appears to be a Binance deposit address. Outgoing BTC is sent to bc1qgzrva028eym96uax90j28qj3aqhh3dy8gk6qvp. HOW THE FRAUD WORKS The sites sell cigarettes, IQOS and HEETS products and nicotine pouches at prices far below any lawful retail level. Until recently the published payment policy accepted only two methods: Amazon eGift Card codes, which buyers were told to email to the operator, and cryptocurrency. The gift card option has since been removed from checkout, leaving cryptocurrency as the only method. No card, PayPal or any other reversible payment method is offered. tobaccobase.com states in its payment policy that a reduced risk of payment disputes and chargebacks is a benefit of the payment method it requires. All four sites claim falsely that Visa, Mastercard and PayPal prohibit online tobacco payments industry-wide, in order to present the absence of reversible payment as an external constraint. On 10 September 2026 I placed test order #60786 on heat-tobacco.com for CAD 974.99 using fictitious details and made no payment. The order confirmation page returned the two wallet addresses above with instructions to send the exact amount and supply a transaction ID. The order is described as reserved for 24 hours pending payment. Public complaints describe buyers who paid and received no goods, in several cases after being sent tracking numbers matching no real shipment. FALSIFIED LICENSING The sites display scanned tobacco licences from 33 U.S. states presented as their own. Three that I examined in full (Arkansas permit #22890-01, New York certificate 88-3729738, Wisconsin account 411-1031149993-02) are all issued to LA Vapor Wholesale Inc, 8725 Golden Spike Ln, Houston TX 77086, a company with no apparent connection to these sites. Two of the three permits had already expired and all state that they are non-transferable. The pages invite visitors to verify the licences at ttb.gov and cdtfa.ca.gov, neither of which issued them. I have notified the company and Arkansas Tobacco Control. SINGLE OPERATOR All four domains publish an identical Brevo account verification record in their DNS TXT data (brevo-code:0504db1c71325643d8d64ea9ec9b19a0), route mail through the same provider, use the same nameserver pair, and are registered through the same registrar. Three are hosted on the same autonomous system, AS213373. I can provide screenshots, archived page copies and full technical records on request.