Ukrainian police dismantled a gang in Kyiv that stole cryptocurrency wallets, with a monthly turnover reaching up to 1 million USD

On Tuesday, the Ukrainian National Police and Security Service announced the dismantling of a fake investment platform network based in Kyiv. This gang stole cryptocurrency from users in over 20 countries through built-in wallet theft tools. Investigators have currently confirmed 62 victims, including citizens from Germany, Poland, Lithuania, Latvia, Spain, France, the UK, Canada, and Israel. The organizers recruited more than 46 Ukrainians, operating multiple offices in Kyiv and surrounding areas, where developers were responsible for building the fake platform and resisting bans, while other members handled customer service and security.

According to the Ukrainian Security Service, the organizer is a 25-year-old IT expert, and the gang's peak monthly revenue reached up to $1 million. The scam began with advertisements for cryptocurrency investment projects on Telegram. After users registered, they connected their wallets and invested funds, while gang members manually forged transactions to show a continuously increasing balance in the user backend. When users requested withdrawals, the platform required them to connect their main wallet and approve a small "test" transaction under the pretext of verification. This authorization immediately triggered the built-in theft tool on the website, transferring assets to wallets controlled by the gang and locking the victims' accounts.

Investigators tracked down server equipment storing the gang's database in the Netherlands, which recorded victim information, wallet addresses, stolen amounts, internal communications, and platform operation data, as well as user passports, phone numbers, emails, login passwords, and photos. Police executed 34 searches in Kyiv and surrounding areas, seizing over 100 computers, more than 100 mobile phones, 79 SIM cards, one GSM gateway, cash, and 15 vehicles.