Million Dollar MyBTGWallet Scam

BitcoinWhosWho received multiple reports about a global bitcoin scam run by “mybtgwallet.com”. The total received by the addresses reported so far exceeds 261 BTC.

Actual accounts taken from selected scam reports

This site was listed on the official bitcoingold.org website as a wallet provider. It has since been removed…

Phished the mnemonic seed and stole many people’s coins. The site was linked from official bitcoin gold website.

Continue reading Million Dollar MyBTGWallet Scam

New Blacklisted Bitcoin Address API

We’re proud to announce the availability of two new APIs:

Blacklisted Addresses (Reported Scams)
Public Sightings (Website Appearances)

Register for a key today!

Remain fully informed about a bitcoin addresses involvement with reported scams and website appearances found by BitcoinWhosWho.com!

  • Know Your Customers
  • Manage Risk
  • Help Prevent Scams
  • Unique Forensic Analysis

http://bitcoinwhoswho.com/api

Blackmail Scam Run on Russian Wallet Matbea

BitcoinWhosWho.com started receiving reports of a mass email attempting to blackmail recipients out of bitcoin about a month ago. The hilariously worded text always closes with “sorry for misprints, I am foreign”. Rudimentary block exploring shows at least some of these scam addresses are being consolidated on the Russian wallet service Matbea.com. Continue reading Blackmail Scam Run on Russian Wallet Matbea

Are Your Bitcoins Safe? Large Bitcoin Collider Finds Another Private Key

It was supposed to be impossible to discover a bitcoin’s private key without the owners’ consent, but the Large Bitcoin Collider “LBC” pool is proving that assumption incorrect. LBC found a 14th private key a few days ago according to their website, the first since April.

A look at the blockchain shows the address, 15K1YKJMiJ4fpesTVUcByoz334rHmknxmT, was quickly emptied to 1GaZi2TSYLns8A85yAQr1Js7Rqjrn5HGZ where the BTC still resides.

The arbX Digital Ponzi Scheme Exit

We received multiple scam reports of a likely 3000 BTC ponzi exit in South Africa yesterday. Jonathan Weltman, founder of arbX Digital (@arbXdigital), informed his investors he lost all funds via email a few days after the twittersphere erupted with complaints about no redemptions or communications.

From one informant.

arbX ran a crypto fund doing mostly arbitrage. Just a few days ago the founder sent out emails to all investors explaining how he has lost all funds Continue reading The arbX Digital Ponzi Scheme Exit

The Austin Cain Facebook Scam

We received multiple reports of a bitcoin scam run by “Austin Cain” on Facebook going dark this week. It sounds like a classic ponzi scheme exit.

This is one of the “Invest Coins with Austin” addresses 1FXNLk9BVUt7fCHuu8GQtSCukR4CiyYA6D with total received balance of 39.84 BTC. The Facebook group is no longer accessible. It appears the ponzi is over and Austin is on the run. One of our informants has reported him to the Australian Cybercrime Online Reporting Network (ACORN).

You can run but it’s hard to hide forever on the Bitcoin blockchain Austin.

These are some other of his scam addresses Continue reading The Austin Cain Facebook Scam

1BTC Casascius Bitcoin Sells For USD$7,100

$7,100 “Casacius” physical bitcoin
UPDATED 6/13/17: A second 2011 first series Casascius physical bitcoin has sold on eBay for $10,100, eclipsing the previous record set last week by $3,000! This one was not in mint condition either having been “removed from the capsule only twice”. The address 16cVGhzpeNzCKNcz4q5jBoKzNJRKHds4av still shows 1 BTC.

ORIGINAL: A mint 2011 series 1 Casascius physical bitcoin sold for USD $7,100 on eBay yesterday. The address, 17xS2adEin5TYQU4xnaBYaHoQDEzHvkg6L, containing 1 BTC, attracted 14 bidders and started at $.99 on May 26th. A bidding war for the “physical” bitcoin reached $2,500 after the first day and $4,050 to start the last day June 5.

First series Casascius coins are highly sought after by collectors. During the last bitcoin price spike in 2013 many changed hands on eBay for about ~USD$3,000.

5,140 of the 11,000 first series 1 BTC Casascius coins in circulation contain the same error, a missing “s” in the watermark, according to elianite. Continue reading 1BTC Casascius Bitcoin Sells For USD$7,100

Bitcoin Ransomware Addresses

List of Bitcoin Ransomware Addresses

Ransomware Name Bitcoin Address
CryptoLocker 4.0 15sJ3pT7J6zefRs95SEsfBZMz8jAw1zAbh
CryptoLocker 1HrEqMHQVWhKuCg7a3rxo2tAFAiKquJ5iP
CryptoLocker 1EJbVfn5hXQ9JcfRyn965UKpNX4qxRW7pY
CryptoLocker 14bgivtRtTjzwiS4rRECoKGXkSZbf1Co39
CryptoTorLocker2015 1KpP1YGGxPHKTLgET82JBngcsBuifp3noW
DMALocker 1382JAg5xbQv7QNwq1svDeyw6ELtNCmujG
Bucbi 1MfVk1utxgvGjMFV3K3CzXsDRDZznj5tey
CryptoHost 18AVPLKGBamXtGpdT3kP2b5Dv3iBUDpjKv
7ev3n 1Lud76Q98VRHCUiyK7XUs7AgFofrqXeP78
TeslaCrypt 15Y2TmHrxjmRFxfNUttwb9aU4DifvDpWKM
TeslaCrypt 1NRn15kJnVRrptTSQJJnMD9KJcWkVFh1Gv
ThunderCrypt 14dqhE6XPoxkkttwwh7qTWmmSwXerWd2Ho
ThunderCrypt 18yfx86BwNK5xYKw71uaHwAxPgCGRJaqgg
ThunderCrypt 1HFY12o56xbHer3oeNxC99A7SGyXaR64hs
Trump Locker 1N82pq3XovKoJYqUmTrRiXftpNHZyu4jyv
Buddy 1AoNMLZfhw7cbMCKAhaKHiveMdwFyVUGeA
Chimera 1JHxr5sbXDoZuDsx624TmZ2MWyDdD9ag8K
CTB Locker 1Hf2vPmYNxzFYWiaURs75h8JoyCczLXCG2
CTB Locker 1E4jsfwFsKVaAVFNfrmGVgDY1HRU8qf7PV
Jigsaw 15fbyNgDnqYQR5vSHJ8PTAEJbKy4dwNBCZ

Bitcoin Ransomware Links

Evolution of Encrypting Ransomware

Ransomeware Notes

WannaCry Ransomware Extorts 39 Payments Worth 6.49 BTC – DAY 1

WannaCry Ransom Note
UPDATE: WannaCry Ransomware Attack up to 14.08007493 BTC on 92 payments as of 11:30am ET May 13. Balances more than doubled in 12 hours.

Today’s widely reported WannaCry ransomware attack is extensive, growing and has already yielded ~USD$12k in profits according to a quick analysis of the BTC addresses involved. On May 12 the 3 bitcoin addresses known to be receiving extortion payments show receipt of 6.49372428 BTC in 39 separate transactions with ransom varying between .15 to .30 BTC each. None of the balances have been moved to new bitcoin addresses since receipt.

The WannaCry Ransomware Bitcoin Addresses Continue reading WannaCry Ransomware Extorts 39 Payments Worth 6.49 BTC – DAY 1