BitcoinWhosWho.com started receiving reports of a mass email attempting to blackmail recipients out of bitcoin about a month ago. The hilariously worded text always closes with “sorry for misprints, I am foreign”. Rudimentary block exploring shows at least some of these scam addresses are being consolidated on the Russian wallet service Matbea.com.

The most successful two addresses identified with this email scam (16FqwvZdty3H3B5hjHK268YvDoDFaUxBhY,
1FoR6263co7SA9BAA3qrrH4sT7qSFnMMBG) sent their balances to;

1LFYZfbBQnTpWT8aitzCy3byex81JEQ9Ya
and
13F8hUekfccZq4J7dpiPY11ooriECtNKLy

which belong to Matbea wallets.

Known Addresses That Appear In Versions of This Email

16FqwvZdty3H3B5hjHK268YvDoDFaUxBhY
1FoR6263co7SA9BAA3qrrH4sT7qSFnMMBG
14r4WEjfCYFSqX1DkQgV9gDqjMCuUT6Pzb
1AE2cBJDn4cuLCR6RPESpqdaDXdZwhgUya
1E4Bvzhj82u8M22y7sGJskd62ZLhtNvj63
1NW3zSGDXbvcZgfTxRdkaC4PMmBCfaMmX3
146VbDSrJqNuVDPwTMH86Zv4Y7Yft54GRc
1DyphQnmq3rPDvcvkhoX5cSQU8cGURNYQi
17iXuYKgHv4weVmU3Qm6ry1hz1QmYfZhrJ
1ALLCkbjXfnKEFLSxVisVMbrAYZWocfVk2
1LpaCV4Peq2px2JbFqESpMaeei9fuCnQ5i
19KQpdXBtjAuzP6D8Tn21jdZ82PVkWk8XK
193rUViP2jKkqn7ZD2SxfrdD4uf6toZMid
1HAKmdQNDGAuCEW3QbW7ijbo2eKMUpNH7c
1M27sreqSwmxCgy6jbuEKPfv9gLjRVfchW
1qxnya7yCFj3ypAYvFFD3UaKK7PaXHvAV
13xjRFEbQNn8Ut6Jkxv9w5dDcD23ymZhuw
15oWsEQ8N2zN72X3UmenwuP3CSdwqnf8bp
16xaTT2AaPmaiaAYn9wwbjVLwmzozPckJw
19erHb7FxesMTjSm3QB9bKAscpPw46fcSe
1KHjvZJBrQyffWKEqjFAcCXcfLKV3fRxxM
1NK6NyMHnAuiYh3TMr8ADtca5wTHzora3u
1sdVjarp83LgB8ogxPg3ZavURd8tE36Mo
16NqZUQSH8VbJSzn8Hj1W7dU3geSQ7AehM
17VEVEzRNYgmFeqiPwDH8mmEUisRixNqG9
18c84hdnjHvV3jbeEqMz4ERB1DC6c3fWV4
1GxJFBeok1yinq69kcBRszDpcYcGyJfE3L
1MvqFK9TVbZyF18UbyKiXgYQ4wHN5ChVBw
1P2Udy325s2WfHCXYhftJj1SRPBRopbc29

1BbW3RMzNjxHAtrWf8QgjWqsKpHACfQuEJ
1Gn1gaw3pn1CuS81t9ff77LhDjW7ie8eHZ
13DMmVeV6ZV5fWj4jDEKr3CfPRwVaHM9uj
16UYZnQUTPZ8ek2ZbuU6wEZX47M6gbnfMm
16oooMVEjvdbmMRXJip8PPBewKh2PPkxmm
16rbS4dG2AdhxY7dBhyiFd6iVp3Eqs3PNt
1FZHqtz9i7yjXPFJmff6uqZt1n1QedPTP

The Bitcoin Scam Blackmail Email Text

I do not want to judge anyone, but in sum of few cases, we have touchpoint from now. I do not think that caress oneself is very ill, but when all your acquaintances see it- its obviously bad.

So, closer to the point. You visited the website with porn, which I’ve adjusted with the deleterious soft. After you chose video, virus started working and your device became acting as rdp since that moment. Naturally, all cams and screen started recording instantly and then my soft collected all contacts from your device.

I text you on this e-mail address, cuz I’ve collected it with my soft, and I think you for sure check this work e-mail.

The most interesting point that I created video, on one side it shows your screen record, on second your cams record. Its very amusingly. But it wasn’t so easy .

All in all- if you want me to erase all this compromising evidence, here is my BTC wallet address- [] (it should be without «spaces» or « aquo;,check
it). If you do not know how to make btc transactions, you can ask google or youtube for advice- its very easy. I suggest, that 340 usd will finish our problem and will destroy our point of contact in perpetuity. You have one day after reading this letter(I put special pixel in it, ill know when you open it). If you do not able to finish transaction, ill share the compromising with all contacts I’
ve collected from you.

I do not think that cops can find me for only one day(not even 10 days), so think twice, you can lose your honor. Sorry for misprints, I am foreign.