victims

According to The Block, the UK's Financial Conduct Authority (FCA) has obtained a court order requiring two individuals involved in a fraudulent cryptocurrency investment scheme to jointly repay £851,402, with plans to return the funds to the victims.At least 65 investors have collectively lost £1.54 million, and the amount being recovered is approximately half of that.

According to monitoring by the head of Galaxy Research, the COLDCARD Seed Entropy theft incident has resulted in 1,830 BTC being stolen, involving three rounds of attacks and over 30 smaller related signs.A total of 256 victims have reported their situations to GLXY Research, with a median loss of 1.1 BTC, and the tracking of the attackers is still ongoing.

On September 14, blockchain intelligence company TRM Labs released a report revealing that fake YouTube tutorials lured 224 victims into deploying and funding malicious smart contracts under the guise of building AI-based crypto arbitrage bots, resulting in the theft of 274.6 ETH. TRM identified a total of 234 contracts deployed by the victims, with funds ultimately flowing into six collection addresses controlled by the operators. The stolen ETH was worth approximately $517,000 at the time of the transfer, with a median loss of 1 ETH per incident.Unlike common wallet theft attacks, this scam did not involve phishing links, spoofed domains, or malicious authorization prompts. Victims chose the tutorials themselves, copied the code, deployed the contracts, and funded them from their own wallets, with each step authorized by the victims themselves. As a result, wallet security warnings and phishing blacklists could not be triggered. TRM discovered nine nearly identical YouTube tutorials disguised as different creators, using AI-generated virtual hosts and voiceovers, promising to build fully automated crypto trading bots with Claude, and guiding victims to a compiler website controlled by the operators, some of which mimicked the commonly used Remix development environment.In one variant analyzed by TRM, a backend script would discard the source code pasted by the victims and retrieve another contract from the operator's server, with the clean code displayed on the screen never being on-chain. The replaced contract accepted deposits and transferred any balance over 0.05 ETH to the operators when the victims pressed Start or Withdraw, with no arbitrage logic or AI functionality included in the contract.

On-chain investigator ZachXBT posted on X accusing user "Mr Austin Fine" (account "@xmrfine") of exchanging the stolen cryptocurrency assets of victim Malone for luxury goods in exchange for fees, stating that he "may be a whistleblower." ZachXBT indicated that until the victim is compensated, he will consider him "disassociated," which will negatively impact all current and future brand collaborations.ZachXBT later added that he has traced part of the funds on-chain flowing through Monero to purchase cars from the luxury car dealer TBTFW in Los Angeles.

On-chain analyst Specter revealed that a series of address poisoning attacks occurred on the Tron network over the past 4 weeks, resulting in a total loss of approximately $9.4 million for 15 victims. Among them, two victims had $2.5 million stolen each, while another lost $2 million.After the attackers succeeded, they quickly exchanged all the stolen assets for the stablecoin USDD and transferred them to a collection address, where all the funds remain. Specter urges Tron ecosystem wallet service providers to take interception measures as soon as possible and reminds users to carefully verify addresses when making transfers.

The Arizona Attorney General Kris Mayes' office assisted 35 cryptocurrency ATM scam victims in obtaining full refunds totaling $171,332. The related funds stemmed from scam-induced transactions, and the refunds covered all fees.According to Arizona law, only new customers who have been dissatisfied with an ATM operator for less than 10 days are eligible for a mandatory full refund. Victims must contact the operator and law enforcement or the Attorney General's office within 30 days of the transaction date and submit an official report confirming the scam. FBI data shows that in 2025, there were 460 complaints related to cryptocurrency kiosks in Arizona, with adjusted losses of $14.53 million; nationwide, there were 13,460 related complaints, with adjusted losses exceeding $388.98 million, of which individuals aged 50 and above lost over $302 million.

According to the monitoring by the head of Galaxy Research, it has communicated with over 190 victims of Coldcard vulnerability attacks and has asked victims who have not yet contacted them to reach out via private message so that they can provide tracking information and assist in reporting losses to the relevant authorities.Since August 6, no new attack incidents have been confirmed, but this does not mean that new attacks will not occur, and vigilance is required.

FlashRescue co-founder @DarcyAri posted on the X platform that on July 28, 2026, the funding project ODY targeting victims in China issued an additional 10 billion tokens and absconded with approximately 15 million USDT from the trading pool. Currently, it is known that there are over 10,000 victims, and the case has been accepted and is under investigation.Including subsequent transfers and transaction fees, ODY has aggregated at least 15,669,118 USDT. Further tracking revealed that the same main aggregation address previously received 5,383,428 USDT transferred from the KXG wallet, confirming that ODY and KXG share a common fund pool.

According to SBS, the Financial Supervisory Service (FSS) of South Korea has begun a comprehensive reform of its system to address compensation issues related to financial fraud, including voice phishing involving virtual assets. The FSS launched the "Financial Fraud Loss Compensation System Improvement Project" on August 6. This project aims to reform the existing compensation calculation system centered on the Korean won, in preparation for including virtual asset losses in the compensation scope starting in October this year.The current system primarily calculates compensation amounts based on losses valued in Korean won, but after the reform, a compensation ratio will be adopted, taking into account the type and quantity of virtual assets involved. Additionally, during payment suspensions, the Korean won exchange value of virtual assets will also be included in the calculations.

According to a post by Galaxy Research, as of now, approximately 1719 BTC have been confirmed stolen in the Coldcard hardware wallet vulnerability attack, valued at around 111 million USD. Several other transactions are still under verification, and the total loss is expected to exceed 130 million USD. If the unverified portion is ultimately confirmed, the scale of theft could reach over 2300 BTC. In addition, collaborating researchers have received reports from more than 250 victims. Based on the loss situation from the first three waves, most victims are ordinary Bitcoin holders rather than whales.Galaxy Research stated that it is currently tracking over 25 independent attack patterns, including the previous first to third waves, indicating that multiple different threat actors are actively exploiting the vulnerability. All addresses corresponding to the stolen coins were created after the affected firmware was released on March 17, 2021. There is currently no evidence that the vulnerability affects other signing devices or wallets outside of the Coldcard Mk3, Mk4, Mk5, and Q series firmware released after that date.

The Galaxy research director posted on platform X, stating that please continue to share your victim experiences with him via private message. His private messages are full, with over 200 Coldcard victims having contacted him. He is categorizing them using clanker and will eventually reply to everyone.He stated, "You will get through this, Bitcoin will get through this, we will not leave."

Galaxy Research Research Director Alex Thorn tweeted that among a Coldcard attack victim holding nearly 30 BTC, 17 BTC were split and converted to ETH via THORChain, and then deposited into the offshore betting platform Duel.com.Upon tracking, this portion of funds corresponds to approximately 229.72 ETH (worth about $445,000). The victim and the research team have emailed all known addresses of Duel.com, providing all transaction and deposit information and requesting to freeze the funds, but the response stated that the victim should have the police contact them, even though the platform's anti-money laundering policy claims it implements KYC and complies with relevant laws.Thorn stated that this response is unacceptable, and most of the Western regions have passed midnight, meaning the police report cannot be advanced until at least Monday; he believes that if the platform refuses to freeze the funds after receiving notification that they originated from an ongoing cyber attack, it constitutes complicity in theft.Since Duel.com's X account has been banned, Thorn turned to @ several individuals associated with the platform, urging them to push the platform to take the correct actions, and stated that if the funds are not frozen, the platform will face significant legal action.

According to Jinshi, U.S. Treasury Secretary Ben S. Bernanke stated that the United States will actively track down Iranian assets globally to ensure compensation funds for the victims of terrorism supported by Iran. Bernanke emphasized that the U.S. government's military and economic blockade measures against the Iranian regime will continue to advance without any slackening.

According to Bitcoin.com, the Singapore Police Force's Anti-Fraud Centre and Cybercrime Investigation Department, in a six-week joint anti-fraud operation from April 16 to May 31, 2026, collaborated with Coinbase, Coinhako, Gemini, Independent Reserve, OKX, StraitsX, and Upbit to identify potential fraud victims using blockchain analysis tools from Chainalysis and TRM Labs. They conducted over 145 targeted interventions through phone calls and on-site visits, preventing potential losses exceeding $4.2 million.Coinbase Singapore posted on X on July 10, stating that it collaborated with the Singapore Police to prevent over 145 individuals from losing a total of more than $4.2 million due to fraud. The Singapore Police stated that they will continue to work with cryptocurrency exchanges and other private sectors to combat cybercrime.

According to CCTV News, the Shanghai Baoshan District Prosecutor's Office announced a case yesterday, where the defendant Huang was involved in smuggling abroad to participate in telecom fraud activities, enticing victims to invest in virtual currency. After the Myanmar Miaowadi Park was disbanded, Huang continued to engage in "pig butchering" fraud, using AI face-swapping and communication with foreign models to gain the victims' trust, and then guiding them to participate in cryptocurrency investments.Subsequently, the team leader would connect with the victims, deceiving them into registering, recharging, and investing on fake websites, ultimately being sentenced to two years and six months in prison for fraud, along with a fine of 30,000 yuan.

The Federal Bureau of Investigation (FBI) reminds victims of the OneCoin international cryptocurrency investment scam that they can apply for compensation through a special program by the Department of Justice (DOJ) before the deadline.This process allows individuals who purchased OneCoin and suffered direct financial losses due to the OneCoin scheme between 2014 and 2019 to submit applications. Victims can submit applications via mail, email, or an online form. However, submitting an application does not guarantee financial compensation.The DOJ stated that global investors in OneCoin have collectively lost over $4 billion.

According to the Bangkok Post, Thai police raided a scam base in the Saraphi district of Chiang Mai province, arresting 10 Chinese citizens and seizing 67 mobile phones, 7 iPads, and 13 laptops.

On June 5, local time, the High Court of England held a procedural hearing regarding the asset disposal related to the Qian Zhiming case. Regarding approximately 60,000 bitcoins and other assets involved in the case, about 16,000 Chinese victims have registered through multiple UK law firms to participate in the civil recovery process under the UK Proceeds of Crime Act. The registration window closed on May 22.An important topic of this hearing was how multiple law firms would share the common litigation costs. The judge ultimately decided that each law firm would pay their corresponding share of £190,000 into the court account based on the number of victims they represent, with a deadline of June 26 at 4 PM. A special hearing to determine the "legal applicability issue" of whether Chinese victims can claim ownership of the assets involved will be held in July.

The British police announced that five people have been sentenced in a "Wrench Attack" case targeting cryptocurrency holders. The suspects met the victims at a bar in Shoreditch, London, in July 2025, forcibly took them back to their homes, and through violent threats and facial recognition verification, coerced them into accessing their bank and cryptocurrency accounts, stealing over £10,000 in cash, cryptocurrency, and other valuables such as watches.During the investigation, the cryptocurrency exchange platform Coinbase reported to the police after discovering unusual activity in the victims' accounts. The police subsequently identified and arrested the individuals involved. The court ultimately sentenced four main offenders to prison terms ranging from 3.5 to 6.5 years, while another individual involved was sentenced to community service for money laundering. The police stated that this case has caused long-term psychological trauma to the victims and their families, highlighting the rising risk of offline violent crimes against cryptocurrency asset holders.

According to Bits.media, the U.S. Department of Justice has announced the initiation of a compensation program for victims of the cryptocurrency mining scam AirBit Club. Founded in 2015, AirBit Club operated a financial pyramid scheme under the guise of cryptocurrency mining and virtual currency trading platforms. U.S. authorities have seized over $400 million in assets for compensation. Victims who previously provided information to the FBI or prosecutors will be contacted by RCB Fund Services. Prosecutors stated that there are no fees for the compensation process.The founder of AirBit Club was charged with money laundering and fraud by the Southern District of New York in August 2020, and the trial concluded in September 2023, with the court ordering the forfeiture of all fraud proceeds, including over 16,000 bitcoins.