View Reports
Submitted: 10 hours ago
Guest
Fake Project Investment Scam
KuCoin deposit address through which stolen funds entered the exchange. This is a follow-up to a previously reported cluster (same victim, same case). Victim is an elderly person in Croatia, defrauded via a fake UK-registered brokerage "FlexFlume Ltd" (flexflumeltd.net; related domain flexflume.com). Contacted daily by at least four Serbian/Montenegrin-speaking men from a rotating block of Croatian mobile numbers (+385 97 683 XXXX). Shown fabricated trading gains up to ~EUR 850,000 and a forged PDF, then asked to pay a further EUR 50,000 for a fake "trading licence" before withdrawal — an advance-fee demand that exposed the scam. Total loss approx. EUR 158,100 (July–August 2026). Fund flow (ETH portion, 22.4 ETH / EUR 50,000 paid in cash at a Croatian exchange counter): 0x16cDA3E7463B8F05f12Eed0ec617183D8B2F4293 → 0x4713C5a2D5Bb60bB7E1D9B9cA5535cbf161D910E → 0x9A644fb6F01A43db3496bBbce0505F2F7874e4f4 (consolidation wallet, spiked to ~155 ETH from multiple sources) → 0x04C9D0d6B3D3432722043b4fac336aB3e4fc9e17 → this KuCoin deposit address. Deposit occurred 11 Sep 2026, 05:53 UTC. TXID: 0xfd716157cf4e48a68d9d5e164a9a378c95db62ab33f2b5263c4ab978de0f1120. Amount 23.55 ETH (~USD 58,000). Note: this address is part of KuCoin infrastructure and carries very high transaction volume; not all activity is related to this case. It is reported because stolen victim funds were deposited here and it maps to a KuCoin account with KYC data: 0xbb2A25A0918290C501f793eD12425b3B0854295A
Submitted: 11 hours ago
Guest
Pig Butchering Scam
Chainabuse Report Incident Type: Investment Scam / Advance-Fee Fraud / Cryptocurrency Fraud Description I am a 63-year-old senior citizen and believe I was the victim of a cryptocurrency investment fraud involving Alpha Stock Investment Training Center and Coinbridge Partners Ltd. In February 2025, I entered a 90-day investment training agreement with Alpha Stock Investment Training Center. The program provided online investment classes and cryptocurrency trading signals through a training assistant identified as Quinn Sanderson. Participants were instructed to transfer funds into the Coinbridge platform for cryptocurrency contract trading. Between February and May 2025, I transferred approximately $467,084.17 from my checking account through Coinbase and into Coinbridge accounts for investment purposes. At the conclusion of the program, Coinbridge represented that my account balance had grown to approximately $3,098,711.50. Before permitting withdrawal, I was required to pay a commission of $338,963, which I paid in full. After payment of the commission, I initiated a withdrawal of $2,861,113.27 to my Trust Wallet: 0x4B3441b11B3be6263b25becad938d5142CBA521B The withdrawal was never completed. I contacted Coinbridge customer service and was informed that I was required to pay additional "gas fees" totaling $63,180.75 before my funds could be released. This requirement was not disclosed in the investment agreement. I was instructed to send the gas fees to the following address: USDC Base Wallet 0x51f21d3ced26eb0d691826404a3384ba409149dd I paid the requested amount in three separate transactions. After payment, the withdrawal still did not occur. Coinbridge representatives then claimed that my wallet address had been altered by a hacker and changed from: 0x4B3441b11B3be6263b25becad938d5142CBA521B to 0x4B3441b11B3be6263b25becad938d5142CBA521BV The representatives stated that this alleged alteration prevented delivery of my funds. On June 26, 2025, Coinbridge customer service demanded an additional $20,000 "hacker recovery fee" to be sent to: USDC ERC-20 Wallet 0xb69f6083f40ca2c82606e4cc0085464f3e55d434 I refused to pay the additional fee. Since refusing to pay, Coinbridge has continued to block all withdrawal requests and has not released any of my funds, cryptocurrency, or account balances. I also have approximately 40.96967449 ETH reportedly held in Coinbridge custody that I cannot access. I believe this operation used false investment profits and repeated demands for additional payments to prevent withdrawal of funds and induce further transfers from victims. Associated Wallet Addresses Intended withdrawal address: 0x4B3441b11B3be6263b25becad938d5142CBA521B Allegedly altered address: 0x4B3441b11B3be6263b25becad938d5142CBA521BV Gas fee wallet: 0x51f21d3ced26eb0d691826404a3384ba409149dd Recovery fee wallet: 0xb69f6083f40ca2c82606e4cc0085464f3e55d434 Estimated Loss Initial investment deposits: $467,084.17 Commission payment: $338,963.00 Gas fee payments: $63,180.75 Additional inaccessible crypto assets: 40.96967449 ETH Total direct losses exceed $870,000, with reported account balances and digital assets remaining inaccessible. Requested Action I request that blockchain investigators, exchanges, compliance teams, and law enforcement review and trace the wallet addresses identified above, identify any connected entities or exchange accounts, and assist with recovery efforts where possible.
Submitted: 12 hours ago
Guest
Other Hacking Scam
I am reporting this address 0x5723168bfdf49d832b3a09fd028c3b03ec7bfd52 as the recipient of funds stolen from my wallet, not as a confirmed phishing website. My wallet: 0x9e66504a892fa84705c24a4bd41e67b6be581c65 (prostoxleb.eth). On 9 September 2026 at 05:12:59 UTC, 58.044144 USDT was transferred from my wallet to the reported address without my authorization. Transaction: https://etherscan.io/tx/0xf680de61175b2b14b58d7f04685a30ba92f0da19caabbcd958b4b27d2460b249 The method of compromise and the identity of the operator are unknown. Please review the transaction and consider flagging the recipient address. There also drain cases in other chains. Total lose 1500$+
Submitted: 12 hours ago
Guest
Sextortion Scam
This information about this scmaer Telegram is 8466793910
Submitted: 18 hours ago
Guest
Fake Project Investment Scam
Scam address
Submitted: 21 hours ago
Guest
NFT Airdrop Scam
I joined the beat cryptocurrency telegram group. I received a message from the group administrator to deposit airdrop and 307 airdrops were deposited in Usdz. And then I had to add some money to my wallet to cash out the airdrop and I deposited about $540 in a few days but my wallet suddenly became empty. To this address 0x49f9b4e8440f67fd7308a6fd49e657f94aa7447e
Submitted: 1 day ago
Guest
Impersonation Scam
I was defrauded by an online store operating as "gycpeptides.co" (support email info@gycpeptides.co, replies signed "Lisa — GYC Support"). I placed and paid for several orders of peptides and received nothing — no goods, no tracking, no refund. I paid in three ETH transfers from my wallet to the scammer's wallet (0x7fc4669b3c26aA20e10f3Ca0ad441f848c975aD4): - 0.124655 ETH on 2026-08-31 - 0.100635 ETH on 2026-09-01 - 0.170784 ETH on 2026-09-03 Total ≈ 0.396 ETH (≈ 959 USD at the time). After payment, the seller's support stopped giving real answers. It alternated between two contradictory claims from the same address — that the orders were "confirmed paid and merged into one parcel, ready to ship", and that "nothing has been charged" and the orders were "awaiting payment". It never provided a tracking number or a refund. The behaviour is consistent with an automated system with no human able to resolve anything. The site impersonates the "GYC" peptide brand. The legitimate GYC has publicly warned that scammers impersonate it via fake websites and states its only official email is info@gbpeptides.com — a different domain from this seller. I traced the funds on-chain: - The scammer's wallet (0x7fc4669b3c26aA20e10f3Ca0ad441f848c975aD4) was set up ~23 days ago, funded via a wallet (0x7EBf0FBB7EE5e4A0A02c260D94a53B00f4613fD4) that was itself funded through the Simplex fiat-to-crypto on-ramp (i.e. a card payment, which carries KYC). - The scammer's wallet received ~160+ inbound transfers in ~3 weeks, several from Binance, Bitpanda and Paxos withdrawals — indicating many victims across multiple platforms. - About 6 days ago the wallet consolidated 6.48 ETH to a pass-through address (0x51612f8d1471282d3cE7C58E3ccEB0b5C8DD2ED4), which on the same day forwarded it to Kraken (Kraken: Hot Wallet 2, 0xf30ba13e4b04Ce5dC4D254Ae5FA95477800F0EB0). The stolen funds therefore ended up deposited at Kraken, which holds the KYC identity of the receiving account. Kraken and the Simplex funding transaction are the two points where the operator can be identified.
Submitted: 1 day ago
Guest
Investment Scam
J’ai ouvert un compte est versé 40€ Mais il ne sont pas dessus apparement il ont été crédité sur un autre comptes
Submitted: 1 day ago
Guest
Pig Butchering Scam
I was taught how to invest in cryptocurrency by this person who introduced himself to me as Kobe (34 y/o), with Chinese name of Lin Jia Hao, who I met through a dating app (Bumble). We started talking on 08/15/26 up to present. At first, we were having good conversation, updating each other as to how our days went, until he asked if I have the time to learn about trading and I said yes. He made me download a trading app (Bitget Wallet) and mentioned this trading site he was using, www.bxact.vip. Initially, he asked me to start with 100USDT (~PHP7000) which gave me a return of 15% for 60s short term placement. He even taught me how to withdraw the amount, which consequently was reflected back to my wallet so I thought it was a legitimate thing. The succeeding days, he was so persistent of making me increase my capital up to 5000USDT but I don't have the means to do it. So he transferred the 5000USDT himself, while I was able to deposit 2500USDT only. I tried withdrawing 200USDT on 09/07/26 because I was already having second thoughts, and fortunately it came back to my account. My remaining 2300USDT is still in the platform, tried withdrawing 800USDT to check if it will push through but it is still under review as of the moment. Evidence Attached (Zip File): 1.Proof of sending of 602 USDT on 08/30/26 to 0x4EdD341f11dB82637d9A45760B65109b13Ba7774 (recipient address) 2. Proof of sending of 791.51 USDT on 09/01/26 to 0x4EdD341f11dB82637d9A45760B65109b13Ba7774 (recipient address) 3. Proof of sending of 789.81 USDT on 09/02/26 to 0x4EdD341f11dB82637d9A45760B65109b13Ba7774 (recipient address) 4. Proof of sending of 315.17 USDT on 09/04/26 to 0x4EdD341f11dB82637d9A45760B65109b13Ba7774 (recipient address) 5. Alleged photos of the scammer6. Phone number (Malaysia) used in Whatsapp to communicate and give instructions 7. Trading platform homepage (www.bxact.vip) and asset dashboard 8. Screenshot of Conversations between victim and perpetrator 9. Transaction Hash ID
Submitted: 1 day ago
Guest
Other Hacking Scam
I am reporting my cryptocurrency wallet address as compromised. I believe my wallet has been compromised because unauthorized transactions have occurred without my permission. My funds/tokens were automatically transferred from my wallet to an address that I did not authorize. Compromised wallet address: 0x12e3Fbc94763B7d2d2f09C21c3b9eFBeaC6626Ca Observed destination address: 0x7777FF8eA1FEd0baDCE1149A9b433D708Cd27777 Description: The wallet appears to have been compromised. When I transferred or received funds, unauthorized transactions occurred and funds were automatically sent to the destination address listed above.
Submitted: 1 day ago
Guest
Pig Butchering Scam
Pig-butchering investment scam via the fake trading platform veltrixfx.trade. Contact was made through the dating app Hinge in early September 2026 and moved to WhatsApp (+44 7462 201219, using the names "Vixy" and "Victoria"). After several days of rapport building she introduced short-term crypto trading and on 07 Sep 2026 sent the link https://veltrixfx.trade, instructing me to open it inside MetaMask under "Explore" and presenting it falsely as MetaMask's own "trading area". I bought ETH on Kraken, moved it to my own MetaMask wallet and sent it to the deposit address shown on the platform: 0.4344 ETH on 06 Sep 2026 22:16:11 UTC (tx 0x4dd37631a4a36ffb7498b96a89428b5edb6e9f682630c1b841a5c6766104a486) and 1.397 ETH on 08 Sep 2026 19:51:23 UTC (tx 0x55d1518d8d7ea82fd590c4c7081995d19210398f8e495c869037c3779a7d20cc). The site showed fake 60-second BTC/USDT futures trades with a claimed 10 percent profit each. After the first round a bait payout of 0.48338619 ETH was actually returned to my wallet (tx 0x76dbb4c98c96abafbf36398ab240f187fed854cbcc6e3bddc8b5dd4f501996bf). On-chain the bait was funded directly out of my own deposit: the deposit address sent 0.49 ETH to the payout wallet in block 25921864 and the payout wallet paid me 0.48338619 ETH in block 25921868, four blocks later. After the second round the site displayed 3,940.9112 USDT and my withdrawal of 1.58675183 ETH stayed permanently on PENDING. No payout was ever received. Total loss approx. EUR 3,000. Operator structure: deposit address 0x4B84C58B17E0a29CD0B4359072ee6d5599835Eb1 distributed roughly 39.4 ETH across four downstream wallets in 14 days, so there are many victims. Main path: 0xBeFE4c67557b2C9E9C9B3f3f4eF16D3DEBbCa869 then 0x9d271D2eb2734832f094E4aa0F8e8C9DbED2bfF4, which held 3.8 ETH with no outgoing transfers as of 10 Sep 2026. Second path: payout wallet 0x63457b1862b65f9bFa634C20aF430f6cf1b97fC3, which sends to 0xeb2766dC04b5835c3fD086375D7E043a0B7EcA44. That wallet is labelled on Etherscan as funded by the OKX deposit address 0x536c4921D1aAfDE6a5cda882fb5cA046f3601c65, which sent it 1.5 ETH on 09 Sep 2026 18:54:23 UTC (tx 0x54635dd902e3c8a2457785899c4cbf5b2837ff796ada31374e509b490c6bb791). Note that "Veltrix" is a recurring brand used for several scam platforms. Reported to German police (Kriminalpolizeidirektion Ulm, case ST/1763987/2026), IC3, Kraken, MetaMask and Etherscan.
Submitted: 1 day ago
Guest
Other Hacking Scam
On September 10, 2026, I discovered multiple unauthorized transactions from my MetaMask wallet. I did not initiate, approve, or sign these transactions. MetaMask Support reviewed the available logs and informed me that the unauthorized transactions were not initiated from my device. They advised me to treat the Secret Recovery Phrase/private keys associated with this wallet as compromised and to migrate any remaining assets to a newly created wallet. Compromised victim address: 0xc1f9fbF9c8420B38f1BbEB06d61017A4c5f3beb9 The primary unauthorized transaction transferred 1,461,719.552178622756022428 ROAR (1R0R) tokens from my compromised wallet to the following address: Primary recipient address: 0x0814705Be6E5b1fFE6Da791A8e4032D12D2e48EC Etherscan displayed the value of this ROAR transfer at approximately $843.87. I did not authorize or sign this transfer. In addition to the stolen ROAR, I identified other unauthorized transactions involving crypto assets/tokens across Ethereum and BNB Smart Chain. Unauthorized transaction hashes identified so far: 0xd3c4f15ee7a46ff05aad8f2e8f0d528939c35d9f290b913bb42c0a0c5dc73f87 0x40aa2326e58f54361c56cabd9d4e66ae1d949139866eca739021fcb4bd497e21 0x418192e8184e4bd2986f7d2706ad196bfdab966f5352d0e74547b63faa27199e 0x632ff683394706fdfde0c0f0020f95801ed8cb6c100594279f8826e6b3fc800b 0x9c87c025ccce43dba3f23128b009f6d3c4202961a83d68586544e9993717d563 0x05e2150092a07f32af512b175e8bb6e0d6144bbb1d66263a556913401ae7f5e7 0xa1ad4d2350986d74c3bc64db88ec917a831c64025b338ef6d633dfff4e898229 0x35b37af9055f17edc55f0af18d8906d31354b7035021cf659118cbd5e08c8edf After the theft, I observed additional unauthorized activity involving the same recipient address. The address 0x0814705Be6E5b1fFE6Da791A8e4032D12D2e48EC sent approximately 0.004 ETH to my compromised wallet. Shortly afterward, approximately 0.00395 ETH was transferred from my compromised wallet back to the same address without my authorization. The related transaction hashes are: 0x438c398bd7148d3d3c185cfbe470e1be44d2a560f12b2cce014c892ea016c4c3 0x896724e0e969402b6194b82a5631426f07c985d0baee0fda6c904e365582b04e This demonstrates that the address 0x0814705Be6E5b1fFE6Da791A8e4032D12D2e48EC directly received the main stolen ROAR transfer and was also involved in subsequent unauthorized activity with my compromised wallet. I still have NFTs and other assets associated with the compromised wallet and am currently taking emergency steps to secure my other wallets and assets. I am reporting this incident as cryptocurrency theft and unauthorized wallet access. I request assistance in tracing the stolen funds from the primary recipient address, identifying any subsequent destination addresses, swaps, bridges, or centralized exchanges, and preserving this report for potential law-enforcement and exchange compliance requests. If the stolen assets reach a centralized exchange or other identifiable service, I would appreciate any available guidance that may help me contact the appropriate compliance or law-enforcement channels as quickly as possible. I can provide Etherscan screenshots showing the unauthorized transfer of 1,461,719.5521786 ROAR, the subsequent ETH transactions involving the same recipient address, MetaMask transaction records, correspondence with MetaMask Support, and any additional transaction information required.
Submitted: 1 day ago
Guest
Ransomware Scam
MODIFIED BY UNAUTHORIZED USER - IDOR CONFIRMED
Submitted: 2 days ago
Guest
Other Hacking Scam
I believe my self-custody cryptocurrency wallet was compromised after I downloaded and executed a malicious executable from a fraudulent website impersonating MEGA. The download was presented as a ZIP file containing a PDF, but the ZIP contained an executable file, which I mistakenly ran on my Windows 11 computer. Shortly afterwards, I noticed unauthorized activity on my Discord account, including a message that I did not send. Microsoft Defender subsequently detected a threat on the computer identified as “Trojan:JS/Redirector.ATKB!MTB”. Although that specific detection was located in a Flashpoint Legacy directory, I cannot confirm whether it was directly related to the wallet compromise. I subsequently discovered that the cryptocurrency assets in my self-custody wallet had been transferred without my authorization. The stolen funds were sent to the following address: 0xa9bd95c0da8fd8c552789abc70e39e0ec8ca50de I did not authorize these transactions and did not provide my seed phrase or private key to anyone. I have secured my accounts and am investigating the compromised computer. I am reporting this incident so that the receiving address and subsequent movement of the stolen funds can be investigated and flagged if appropriate. I can provide the relevant transaction hashes, wallet addresses, timestamps, screenshots, the malicious URL, and other evidence upon request.
Submitted: 2 days ago
Guest
Phishing Scam
Phishing attempt targeting DeFi wallet holders