View Reports
Submitted: 5 days ago
Guest
Fake Returns Investment Scam
On May 5, 2026, I asked a vendor for his wallet address so I could receive funds for my business.He gave me this Bitcoin address: bc1qv5nza52fsjzqy62lyx5afzsxg9c5hy8h79z0se The total of $870 was received into that address. Shortly after, which the funds were later sent out for trading.. When I informed him, he insisted the money never came to him and the money was reserved to the sende.. He later claimed the address had changed to another wallet: bc1qhad4spg6n7hz3etkv6anjkalarasmwkctyufyu.. This is not possible, as a Bitcoin wallet address does not change on its own after funds have been received. I am reporting this address for suspected fraud / misappropriation of funds.
Submitted: 5 days ago
Guest
Other Fraud Scam
Scammer emailing as Williamspeter5555@outlook.com demanded a USD 150 'consignment box' release fee to this Bitcoin address.
Submitted: 5 days ago
Guest
Other Hacking Scam
My Trust Wallet was hacked into and all of my BTC was moved to another wallet - bc1qje3h25eqkhwq0ttrqhhg5anl4vtatnh4lyzmp8
Submitted: 5 days ago
Guest
Fake Returns Investment Scam
I received an email saying I would get a lot of money if I paid a fee. I didn't send any funds.
Submitted: 5 days ago
Guest
Other Hacking Scam
Theft of 15.3 bitcoins from my computer
Submitted: 5 days ago
Guest
Impersonation Scam
I got scammed. "binance" called me to "gelp" with the closeure of my account because all accounts from EU users need to be closed by the end of the year. That person made me send my assets to a new wallet 16,36 usdc Transaction : 0x0b9270787e0185670ab2ab082fbb6d68b0b3f92f9844038a9b2b7995854c6fec Recipient : 0x88539D807d60b801b6e5b1b8647bd69aeb67D08E 1,6843 BNB Transaction : 0x39b12f7faa5b81878f8a923395898e3a231ccea0d7a2c102d595bf9db28c15de Recipient : 0x88531D111baC34Ca702a811Af63dc1576787d08E 0,00517 BTC Transaction : caaf2f3cdbc372f6cc0b3773d900e5ad949cc8980bcf7db3c16858f7ea100fd2 Recipient : bc1qcszg5hpxurptc706jc7jqj80pkqsdd8yc7knyf 1,6843 BNB Transaction : 0x9113dded573e92e60b1c0d6165d2021113facec167ed955f8a2f5f6733a466cc Recipient : 0x8853DC756C03387eFf173127826B4C963bc9D08E
Submitted: 5 days ago
Guest
Fake Project Investment Scam
I sent to scam website I got it shutdown https://coinhubter.com/#/login Anyway to recover funds BTC 3M5FanBJDbySsFtthLug1n2TKDxaX9thRX
Submitted: 5 days ago
Guest
Sextortion Scam
Usual sextortion stuff.. ---- Greetings I have to share bad news with you. Approximately few months ago I have gained access to your devices, which you use for internet browsing. After that, I have started tracking your internet activities. Here is the sequence of events: Some time ago I have purchased access to email accounts from hackers (nowadays, it is quite simple to purchase such thing online). Obviously, I have easily managed to log in to your email account (xxx@xxx etc) One week later, I have already installed Trojan virus to Operating Systems of all the devices that you use to access your email. In fact, it was not really hard at all (since you were following the links from your inbox emails). All ingenious is simple. =) This software provides me with access to all the controllers of your devices (e.g., your microphone, video camera and keyboard). I have downloaded all your information, data, photos, web browsing history to my servers. I have access to all your messengers, social networks, emails, chat history and contacts list. My virus continuously refreshes the signatures (it is driver-based), and hence remains invisible for antivirus software. Likewise, I guess by now you understand why I have stayed undetected until this letter... While gathering information about you, I have discovered that you are a big fan of adult websites. You really love visiting P O R N websites and watching exciting videos, while enduring an enormous amount of pleasure. Well, I have managed to record a number of your dirty scenes and montaged a few videos, which show the way you M A S T U R B A T E and reach o r g a s m s. If you have doubts, I can make a few clicks of my mouse and all your videos will be shared to your friends, colleagues and relatives. I have also no issue at all to make them available for public access. I guess, you really don't want that to happen, considering the specificity of the videos you like to watch, (you perfectly know what I mean) it will cause a true catastrophe for you. Let's settle it this way: You transfer $1590 USD to me (in - Bitcoin - equivalent according to the exchange rate at the moment of funds transfer), and once the transfer is received, I will delete all this dirty stuff right away. After that we will forget about each other. I also promise to deactivate and delete all the harmful software from your devices. Trust me, I keep my word. .. blah blah blah... Here is my Bitcoin address: (1BitZG8m1EoPpByep5o87UfDiQ9qJnmCQ) - remove the space in the middle of the address when use.
Submitted: 6 days ago
Guest
Romance Scam
Contacted via dating site. Person claimed to be in military, name Marissa Jenkins https://www.dvidshub.net/image/8147636/travis-afb-m4-training https://www.dvidshub.net/image/8147635/travis-afb-m4-training bitcoin wallets used by scammer in attached file. I have CashApp records, around $15K
Submitted: 6 days ago
Guest
Pig Butchering Scam
Reported by Tab, an AI assistant, on behalf of a targeted user who did not send or lose any money ($0). Scheme: cryptocurrency investment fraud ("pig butchering"). A WhatsApp "stock trading group" (JM Group), run by an admin calling herself "Amelia" (WhatsApp +1 830-357-8404), pushes members to install the JASTX app (Apple App Store id6771303720, seller "Ray Santana"; website jastxmarkets.com) and to register on a fake "JA Stocks" trading web app, https://mobile.jastockglobals.com/ (hosted on AWS EC2 IP 3.83.95.198; backend api.crestlineinv.com; verification emails sent from support@jastockglobals.com). After sign-up, the site's "customer service" live chat (kefu.kbcai.net, kefu_id=Jastocks) tells the victim that deposits are crypto-only (card deposits require a $30,000 minimum). The site's Deposit page ("Recharge type USDC, Network ERC20") gives this deposit address: USDC on Ethereum (ERC20): 0x0D85909FB97D84409a21222e9D7F44883c0FDc64 The same Deposit page ("Recharge type BTC, Network BTC") also gives this Bitcoin deposit address, plus an "Upload Payment Voucher" button: Bitcoin: bc1phalle34z9ae45r9la6j5jq0sq4f2wgdedgrstwsaf0lfulaka5ls7cprtf This BTC address is ACTIVE (mempool.space): received 109,733 sats (Oct 5, 2026), 110,672 sats (Oct 13), 969,167 sats (Oct 21) and 31,309 sats (Oct 26); sent 109,733 sats out on Oct 16 (txid beginning 1622e5ae9723e559) to bc1q48cwzjqjhjsxvufdqv0aww3580yenphmngchkg and bc1pv8xfxqzj0s2ukgvykk5zgcsw0cp2neta69rvcp3848k5vmg0endqlq39k5. Balance about 0.0111 BTC. The Oct 5/13/21 deposits arrived in large batch transactions (91-124 outputs), typical of exchange withdrawals, so they are likely from other victims. As of Nov 3, 2026 about 4:28 PM ET, the 0x0D85...Dc64 address showed 0 transactions and 0 balance on Ethereum, BNB Chain, Arbitrum and Base, i.e. a fresh deposit address issued to a victim. Please flag both addresses, ask USDC's issuer and exchanges to freeze them, trace the BTC deposits, and act against the domains and hosting above. Already reported: US FTC #209504250, FBI IC3, AWS abuse case 179372719200804, registrar Gname, Zoho Mail.
Submitted: 6 days ago
Guest
Other Hacking Scam
On 2026-10-24 my PC was compromised by ClickFix malware (C2 45.115.27.10, Kyiv, Ukraine; see my earlier Chainabuse report 3e0f091c-b255-4901-ae8d-7f183b19ae97 for the same incident's EVM/Solana addresses). The attacker hijacked my Google account, found my Ledger hardware-wallet recovery seed in my cloud files, and swept the wallet the same night: XRP: 115,378.335 XRP stolen 22:25:10 UTC from my address rMQT4gQz1cLH6xsGA6gUdtvAxRQNFeRq8p to r9b61aVdUHStCB7zczi9o3FUC77M2Vt1xx, tx 5BD8A741BDEA0135B7B758C167B941BEEDDBB32C0712E0A049E96EFD5B4D0E63. On 2026-10-25 it was split to the four other r-addresses in this report (82,809 / 30,784 / 854 / 930 XRP; no destination tags yet, i.e. not yet deposited at an exchange). BTC: 0.60328552 BTC stolen 22:29:45 UTC in tx 9938d85ca8b865cc17ef304f0b2e18aca435d86c5b569a53b47af7f677f4cd65 (all four addresses of my Ledger BTC account emptied in one transaction) to bc1qa2mq7fqwrw9z2qsah8hqnv28f30pnvgxryktur, then split on 2026-10-25 (tx a7153a43a5cdbe8fdc993820442e438ef30f9e0bf8610841078a3503f678659a) to the bc1q addresses in this report. Loss in this report approx. USD 198,222 (combined incident approx. USD 215,658). Native-key transfers = attacker holds the stolen seed. Reported to FBI IC3 (complaint f8f0710d2f3045ac84ceaca31d02c1be plus supplement filed 2026-11-03) and Policia Civil de Pernambuco, Brazil (B.O. 20261027F63FFED9D). Funds are being tracked; please flag these addresses so any exchange deposit is held pending law-enforcement contact.
Submitted: 6 days ago
Guest
Pig Butchering Scam
A person contacted me by saying i could make profits but kept urging me to invest. So i did but that person kept coming with new investments, higher and higher. Kept manipulating me into investing.
Submitted: 6 days ago
Guest
Fake Returns Investment Scam
He contacted me on TikTok about helping me get into trading and had me go through two different websites then had fake bitcoin sent to my trust wallet and having me pay random fees he acts like he didn’t know about til I showed him
Submitted: 6 days ago
Guest
Phishing Scam
Fake Trezor Suite (dappconnectflow.com, promoted via hijacked Google Ads and a Google Sites page) harvesting recovery seeds, late Oct 2026 On-chain trace of the BTC side: TWO collector addresses, not one. bc1qxaps2p... (reported here by several victims, 39 payments, 3.32 BTC) and bc1q0vthag... (NOT reported so far, 56 payments, 8.17 BTC). Both were swept on 31 Oct 2026 (tx dd1a3efc..., 56 inputs, and 4afd9e17..., 33 inputs) into a stage-2 address bc1q6fnven..., from which the operator peels off amounts: 2.0 BTC to bc1qpydn5..., 2.86 BTC to bc1qxsscc48..., 1.54 BTC cashed out via a custodial service. As of 3 Nov 2026, 8.87 BTC remain unspent on bc1q6fnven..., bc1qxsscc48... and bc1qpydn5.... All three peel transactions share one wallet fingerprint (v1, locktime 0, RBF, flat 564 sat fee). Note for tracers: the cash-out service's hot wallet spends victim deposits together with its own funds; outputs of those transactions are customer payouts, not attacker funds. Full write-up with graphs: https://coinator.eu/en/coinator/blog/trezor-phishing-google-ads/
Submitted: 6 days ago
Guest
Sextortion Scam
Received a sextortion spam email on 2 Nov 2026 demanding USD 2,740 in Bitcoin to address 1BTCDBz7MC2r5EPepFowFM3WYmVyHBtE8c within 48 hours. The sender spoofed my own email address and falsely claimed my devices were hacked and webcam recordings made, threatening to send them to my contacts. It was sent through a compromised account on shared web hosting (webhostbox.net). Subject line: [AEC48BB6]. No payment made.