Brooklyn Prosecutors Take Down 112 Servers Behind Crypto Scam Targeting Russian Speakers
Brooklyn prosecutors, in collaboration with the FBI, dismantled the online infrastructure of a crypto investment scam, taking down 112 servers and 241 web domains.
Intelligence analysis by Gemini 2.5 Flash
The elaborate scheme targeted Russian-speaking Americans through Facebook ads, luring them into fake crypto investment platforms and later attempting a 'recovery scam.' Prosecutors estimate tens of millions of dollars were stolen, with a disproportionate impact on Brooklyn's Russian-speaking community.
Imagine some tricky people set up fake online games where they promised you could make lots of digital money, but it was all a trick to steal your real money. They even pretended to help you get your money back after they stole it! Now, the police in Brooklyn, working with the FBI, have found and shut down all the computers and websites these tricky people were using, making it much harder for them to trick anyone else.
Analysis
Brooklyn District Attorney
District Attorney Eric Gonzalez announced the significant takedown, spearheaded by the Brooklyn DA's Virtual Currency Unit. This unit has been investigating the scam for three years, indicating the long-term commitment required to combat such complex financial crimes. Their efforts involved carrying out search warrants and enforcement actions across three time zones, showcasing the broad reach necessary to address internationally distributed criminal networks.
Before this major operation, the Virtual Currency Unit had already disrupted 400 domains linked to the fraud, but new scam websites continued to emerge. The recent action, however, focused on removing the core infrastructure, specifically the 112 servers, which is expected to severely hamper the scammers' ability to quickly create new sites and re-engage existing victims. This strategic shift from domain disruption to server takedown represents a more impactful approach to dismantling the criminal enterprise.
Russian-Speaking Americans
The scam specifically targeted Russian-speaking Americans, leveraging their language and potentially their trust within community networks. Victims were initially drawn in by Russian-language Facebook ads promoting investment opportunities, a common tactic used by fraudsters to build rapport and target specific demographics. Following initial contact, victims received calls from fake 'investment advisors' who guided them through opening accounts on fraudulent crypto investment websites.
These advisors coached victims into buying cryptocurrency and sending it to addresses controlled by the scammers. The deception continued for weeks or months, with victims believing their investments were growing, only to be locked out or demanded to pay additional fees and taxes when attempting withdrawals. Furthermore, the scammers engaged in a 'recovery scam,' contacting victims again weeks later with false promises to help them retrieve their stolen assets, effectively attempting to defraud them a second time. The large Russian-speaking population in Brooklyn meant residents of the borough were disproportionately affected by this scheme.
112 Servers
The disruption of 112 servers and 241 web domains represents a substantial blow to the scam's operational capacity. These servers were hosted by both Eastern European and American companies, indicating a complex, multinational infrastructure. The scammers utilized IP addresses and other infrastructure located in Ukraine and other Eastern European countries, highlighting the cross-border nature of modern cybercrime.
By seizing and disrupting these servers, prosecutors have effectively removed the backbone of the scam's online presence. This action is crucial because it prevents the criminals from easily regenerating their fraudulent websites and continuing their illicit activities. While approximately $300,000 in stolen funds has been seized so far, prosecutors estimate the total stolen amount to be in the tens of millions of dollars, with some victims losing their entire life savings, underscoring the devastating financial impact of such schemes.
Key points
- Brooklyn prosecutors and the FBI disrupted 112 servers and 241 web domains linked to a crypto investment scam.
- The scam primarily targeted Russian-speaking Americans through Facebook ads and fake 'investment advisors'.
- Victims were coached to buy crypto and send it to scammer-controlled addresses, then locked out or charged fees upon withdrawal attempts.
- The criminals also ran a 'recovery scam,' promising to retrieve stolen assets for a fee.
- Prosecutors estimate tens of millions of dollars were stolen, with about $300,000 seized so far.
The successful takedown of a large-scale, multinational crypto scam demonstrates law enforcement's growing expertise and resources in combating digital financial crimes. This action could deter other potential scammers and protect more individuals from falling victim to similar elaborate schemes, especially within targeted communities.
Despite the significant disruption, only a fraction of the estimated tens of millions of dollars stolen has been recovered, highlighting the immense difficulty in fully restituting victims of crypto fraud. The constant emergence of new scam websites, even after previous disruptions, suggests that criminal enterprises are persistent and adaptable, posing an ongoing challenge for authorities.
