Cryptocurrency and crime describe notable examples of cybercrime related to theft (or the otherwise illegal acquisition) of cryptocurrencies and some methods or security vulnerabilities commonly exploited. Cryptojacking is a form of cybercrime specific to cryptocurrencies used on websites to hijack a victim's resources and use them for hashing and mining cryptocurrency.[1]
According to blockchain analysis company Chainalysis, around US$2.5 billion was laundered through Bitcoin between 2009 and 2018, and the fraction of cryptocurrency transactions linked to illicit activities has been on the rise since early 2019.[2] In 2021, 0.15% of known cryptocurrency transactions conducted were involved in illicit activities like cybercrime, money laundering and terrorism financing, representing a total of $14 billion.[3] The FBI estimated that crypto fraud costs American investors $4.8 billion in 2023.[4]
There are various types of cryptocurrency wallets available, with different layers of security, including devices, software for different operating systems or browsers, and offline wallets.
Novel exploits unique to blockchain transactions exist, and aim to generate unintended outcomes for those involved. One of the more well-known issues that open the possibility for exploits on Bitcoin is the transaction malleability problem.[5]
The Immunefi Crypto Losses 2022 Report lists industry losses from frauds and hacking as a combined total of US$3.9 billion for the year, and US$8 billion for 2021.[6]
Despite increasingly strict regulations in the US and Europe, Crypto Crime continues to rise, with losses in early 2025 already exceeding $502 million, according to Bitrace’s Crypto Crime Report 2025. Hacks account for 63% of these losses, with phishing and rug pulls also contributing significantly, particularly on decentralized exchanges like Uniswap and Tornado Cash. Criminals are using ever more sophisticated methods, including smart contract attacks and deepfake scams. While some crypto exchanges are strengthening compliance and transparency, such as Coinbase and PayPal’s collaboration on stablecoins, others still overlook suspicious transactions. New regulations are pushing companies to tighten Know-Your-Customer (KYC) and Anti-Money Laundering (AML) procedures, but criminals keep exploiting loopholes. For investors, vigilance remains crucial. Thorough research, secure wallets, and skepticism toward offers that seem too good to be true are essential as crypto crime becomes increasingly professionalized.[7]
Notable thefts
In 2018, around US$1.7 billion in cryptocurrency was lost to scams, theft and fraud. In the first quarter of 2019, such losses rose to US$1.2 billion.[8] 2022 was a record year for cryptocurrency theft, according to Chainalysis, with US$3.8 billion[9] stolen worldwide during 125 system hacks,[10] including US$1.7 billion stolen by "North Korea-linked hackers".[9]
Exchanges
Notable cryptocurrency exchange compromises resulting in the loss of cryptocurrencies include:
Between 2011 and 2014, US$350 million worth of bitcoin was stolen from Mt. Gox.[11]
In 2016, US$72 millionwas stolen through exploiting Bitfinex's exchange wallet, users were refunded.[12]
On December 7, 2017, Slovenian cryptocurrency exchange NiceHash reported that hackers had stolen over $70 million using a hijacked company computer.[13][14]
On December 19, 2017, Yapian, the owner of South Korean exchange Youbit, filed for bankruptcy after suffering two hacks that year.[15][16] Customers were still granted access to 75% of their assets.[17]
In 2018, cryptocurrencies worth US$400 million were stolen from Coincheck.[18]
In May 2018, Bitcoin Gold had its transactions hijacked and abused by unknown hackers.[19] Exchanges lost an estimated $18 m and Bitcoin Gold was delisted from Bittrex after it refused to pay its share of the damages.
In June 2018, South Korean exchange Coinrail was hacked, losing over $37M worth of crypto.[20] The hack worsened an already ongoing cryptocurrency selloff by an additional $42 billion.[21]
On July 9, 2018, the exchange Bancor, whose code and fundraising had been subjects of controversy, had $23.5 million in cryptocurrency stolen.[22][23]
Binance In 2019 cryptocurrencies worth US$40 million were stolen.[18][25]
Africrypt founders are suspected of absconding in June 2021 with US$3.6 billion worth of Bitcoin[26]
PolyNetwork (DeFi) suffered a loss of US$611 million in a theft in August 2021.[27]
Japanese cryptocurrency exchange Liquid was compromised in August 2021 resulting in a loss of US$97 million worth of digital coins[28]
Cream Finance was subject to a US$29 million theft in August 2021[29] and $130 million on October 28, 2021.[30]
On December 2, 2021, users of the BadgerDAO DeFi lost around $118,500,000 worth of bitcoin and $679,000 worth of ethereum tokens in a front-end attack. A compromised API key of the Cloudflare content delivery network account allowed the injecting of a malicious script into the web interface. BadgerDAO "paused" all smart contracts due to user complaints.[31]
On December 6, 2021, the cryptocurrency exchange Bitmart lost around $135M worth of Ethereum and an estimated $46 million in other cryptocurrencies due to a breach of two of its wallets.[32] Although BitMart stated that it would reimburse its clients, many BitMart clients have not received any money from the exchange as of January 2022.[33]
On December 12, 2021, users of VulcanForge lost around $135M worth of PYR due to breaches of multiple wallets. Partnering centralized exchanges had been notified of the hack and they have pledged to seize any stolen funds upon deposit.[34]
On January 27, 2022, Qubit Finance (DeFi) lost around $80M worth of Binance Coin due to a flaw in the smart contract that enabled the withdrawal of the said amount in exchange for a deposit of 0 ETH.[35]
In March 2022,[36] the largest cryptocurrency theft of the year, US$625 million in ether and USD coin was stolen from the Ronin Network. Hacked nodes were finally discovered when a user reported being unable to withdraw funds. The heist was later linked to Lazarus Group, a North Korean state-backed hacking collective, by the U.S. Treasury Department.[10]
On September 20, 2022, Wintermute was hacked resulting in theft of US$160 million. The company attributed the vulnerability to a service used by the platform that generates vanity addresses for digital accounts.[10]
On September 25, 2023, it was reported that $200 million was stolen by hackers from Hong Kong-based crypto firm Mixin Network. The company suspended deposits and withdrawals, stating that the database of its network's cloud service provider was attacked by hackers resulting in the loss of the assets.[37][38]
On February 21, 2025 the exchange Bybit reported the theft of $1.5 billion in ether, estimated at the time to be the largest crypto heist in history. A blockchain analysis firm linked the attack to the Lazarus Group which exploited security features transferring the money to multiply unidentified addresses[39]
On June 17, 2025 it was reported that there was cyberattack on Iran's biggest cryptocurrency exchange, Nobitex. The attack was done during the Iran–Israel War. The attack, blamed on the Israel-linked hacker group Gonjeshke Darande (also called "Predatory Sparrow"), led to the theft of more than $90 million in digital assets, mostly Tether (USDT) on the Tron network.[40]
Wallets
The Parity Wallet has had two security incidents amounting to 666,773 ETH lost or stolen.[41] In July 2017, due to a bug in the multi-signature code, 153,037 ETH (approximately US$32 million at the time) were stolen.[42][43] In November 2017, a subsequent multisignature[clarification needed] flaw in Parity made 513,774 ETH (about US$150 million) unreachable;[44][45] as of March 2019, the funds were still frozen.[46]
Energy
Notable cases of electricity theft to mine proof-of-work cryptocurrencies include:
In February 2021 Malaysian police arrested six men involved in a Bitcoin mining operation which had stolen US$2 million in electricity[47]
Ukraine authorities shut down an underground gaming and cryptocurrency farm in July 2021, accused of stealing $259,300 of electricity each month[48]
In July 2021 Malaysian authorities destroyed 1,069 cryptocurrency mining systems accused of stealing electricity from the grid[49]
In May 2021 UK authorities closed a suspected bitcoin mine after Western Power Distribution found an illegal connection to the electricity supply[50]
Blockchains
Bitcoin
There have been many cases of bitcoin theft.[51]As of December2017[update], around 980,000 bitcoins—over five percent of all bitcoin in circulation[a]—had been lost on cryptocurrency exchanges.[52]
One type of theft involves a third party accessing the private key to a victim's bitcoin address,[53] or an online wallet.[54] If the private key is stolen, all the bitcoins from the compromised address can be transferred. In that case, the network does not have any provisions to identify the thief, block further transactions of those stolen bitcoins, or return them to the legitimate owner.[55]
Theft also occurs at sites where bitcoins are used to purchase illicit goods. In late November 2013, an estimated US$100 million in bitcoins were allegedly stolen from the online illicit goods marketplace Sheep Marketplace, which immediately closed.[56] Users tracked the coins as they were processed and converted to cash, but no funds were recovered and no culprits were identified.[56] A different black market, Silk Road 2, stated that during a February 2014 hack, bitcoins valued at $2.7 million were taken from escrow accounts.[57]
Sites where users exchange bitcoins for cash or store them in "wallets" are also targets for theft. Inputs.io, an Australian wallet service, was hacked twice in October 2013 and lost more than $1 million in bitcoins.[58] GBL, a Chinese bitcoin trading platform, suddenly shut down on 26 October 2013; subscribers, unable to log in, lost up to $5 million worth of bitcoin.[59] In late February 2014 Mt. Gox, one of the largest virtual currency exchanges, filed for bankruptcy in Tokyo amid reports that bitcoins worth US$350 million had been stolen.[60]Flexcoin, a bitcoin storage specialist based in Alberta, Canada, shut down in March 2014 after saying it discovered a theft of about $650,000 in bitcoins.[61] Poloniex, a digital currency exchange, reported in March 2014 that it lost bitcoins valued at around $50,000.[62] In January 2015 UK-based bitstamp, the third busiest bitcoin exchange globally was hacked and US$5 million in bitcoins were stolen.[63] In February 2015, a Chinese exchange named BTER lost bitcoins worth nearly $2 million to hackers.[64]
A major bitcoin exchange, Bitfinex, was compromised by the 2016 Bitfinex hack, when nearly 120,000 bitcoins (around US$71 million) were stolen in 2016.[65] Bitfinex was forced to suspend its trading. The theft was the second-largest bitcoin heist ever, dwarfed only by the Mt. Gox theft in 2014. According to Forbes, "All of Bitfinex's customers... will stand to lose money. The company has announced a cut of 36.067% across the board."[66] Following the hack the company failed to refund customers, though efforts are continuing.[67] In 2022, the US government recovered 94,636 bitcoin (worth approximately $3.6 billion at the time of recovery) from the 2016 thefts of the Bitfinex exchange, reported as the "largest financial seizure" in U.S. history.[68] By February 2022, the amount of bitcoin stolen in 2016 had increased in value to $4.5 billion. Two people were arrested for the thefts[69] in 2022; married couple Ilya “Dutch” Lichtenstein and rapper Heather "Razzlekhan" Morgan were charged with conspiracy to commit money laundering and conspiracy to defraud the United States.[68]
On May 7, 2019, hackers stole over 7000 Bitcoins from the Binance Cryptocurrency Exchange, at a value of over 40 million US dollars. Binance CEO Zhao Changpeng stated: "The hackers used a variety of techniques, including phishing, viruses, and other attacks... The hackers had the patience to wait, and execute well-orchestrated actions through multiple seemingly independent accounts at the most opportune time."[70]
Thefts have raised safety concerns. Charles Hayter, founder of the digital currency comparison website CryptoCompare said, "It's a reminder of the fragility of the infrastructure in such a nascent industry."[71] According to the hearing of the U.S. House of Representatives Committee on Small Business on April 2, 2014, "these vendors lack regulatory oversight, minimum capital standards and don't provide consumer protection against loss or theft."[72]
Japan and the United States have accused North Korean hackers of stealing cryptocurrency worth over $300 million from the Japan-based exchange DMM Bitcoin. The theft was attributed to the TraderTraitor group, believed to be part of the Lazarus Group, which is allegedly linked to North Korean authorities. The incident occurred in late May 2024, involving the theft of 4,502.9 Bitcoin. The theft involved the hackers using social engineering tactics to impersonate a recruiter on LinkedIn and send a malicious pre-employment test to an employee at a crypto wallet software company. This allowed them to compromise the employee's system and manipulate a legitimate transaction request from DMM, resulting in the loss of 4,502.9 Bitcoin. The FBI and Japan's National Police Agency are collaborating to combat North Korea's cybercrime activities, which date back to the mid-1990s and include a cyber-warfare unit known as Bureau 121. The Lazarus Group has previously gained notoriety for its involvement in high-profile hacks, including the attack on Sony Pictures in retaliation for the film "The Interview."
In June 2016, hackers exploited a vulnerability in The DAO to steal US$50 million. Subsequently, the currency was forked into Ethereum Classic, and Ethereum, with the latter continuing with the new blockchain without the exploited translations.[73][74]
On November 21, 2017, Tether announced that it had been hacked, losing $31 million in USDT from its core treasury wallet.[75] The company has 'tagged' the stolen currency, hoping to 'lock' them in the hacker's wallet (making them unspendable).[citation needed]
In 2022, hackers created a signature account on a blockchain bridge called "Wormhole" and stole more than $300 million worth of ether.[76]
Fraud
Exit scams and Ponzi schemes through initial coin offerings (ICOs)
Most exit scams (or rugpulls) as well as many ponzi schemes involving cryptocurrencies are performed through Initial Coin Offerings (ICOs).[77] As an example, according to a report by Satis Group, almost 80% of all projects launched through an ICO in 2017 were scams.[78] These scams usually involve attracting investments from mostly retail investors, inflating the price and the perpetrators subsequently abandoning the project in question after selling off their own shares.[79]
The novelty of ICOs accounts for the current lack of governmental regulation.[80] This lack of regulatory measures as well as the pseudonymity of cryptocurrency transactions and their international nature across countless jurisdictions in many different countries can make it much more difficult to identify and take legal action against perpetrators involved in these scams.[81][82] Since 2017 the SEC has been actively pursuing groups and individuals responsible for ICO-related scams.[83]
Examples of ICO-related scams
AriseCoin (AriseBank): AriseBank marketed itself as the world's first decentralized bank, falsely claiming to be able to offer FDIC-insured accounts, VISA cards as well as services related to cryptocurrency and making other false statements.[84]AriseBank promoted its AriseCoin through celebrity endorsement and social media in order to raise the US$1 billion the company was aiming for.[85] Their ICO was halted by the SEC in early 2018 with their CEO and COO receiving a fine of US$2.7 million.[86]
BitConnect: Bitconnect was among the highest-performing cryptocurrencies in 2017, promising investors enormous returns through a trading bot.[87] At its height, it reached a market capitalization of US$3.4 billion.[88] In early 2018 the exchanged ceased to operate with investors losing millions of dollars, amounting to a total of US$14.5 million.[89] It later turned out that the initial profits were generated through a Ponzi scheme by paying earlier customers with money made through newer customers.[90] Legal action against the perpetrators was taken on an international scale.[91]
Centra: Centra was a Miami-based company that claimed to offer a cryptocurrency-based debit card backed by a VISA and Mastercard. The company raised US$32 million by October 2017 through an ICO and, f few months later, performed an exit scam. In April 2018 two of the founders were arrested. It was soon revealed that neither Mastercard nor VISA backed the company in their alleged efforts.[89]
Modern Tech (PinCoin/iFan): Based in Vietnam, Modern Tech hosted two separate ICOs for PinCoin as well as iFan promising monthly returns of 48%.[89] After the initial success, the founders ran off with approximately US$660 million raised from 32,000 investors.[92] The founders are still at large and none of the funds have been retrieved.[93]
PlexCoin: After Dominic Lacroix and Sabrina Paradis-Rogers (the founders of PlexCoin) had officially raised around US$15 million through a fraudulent ICO in August 2017 while promising a return of 1,354% within a month, the SEC filed a civil complaint in December of the same year against them and sought an injunction to cease those sales, freeze the assets involved, pay civil penalties and prohibit the ones responsible behind the token launch from participating in any future offerings of cryptocurrency.[94] Shortly after Lacroix was sentenced to two months in prison and fined CA$110,000 by the Quebec Superior Court.[95] The SEC's proceedings led to seven-figure fines for the defendants in 2019 and a retrieval of the investors' funds.[96] During the proceedings, the SEC was able to prove that the success of the ICO was inflated by the founders who in fact had raised US$8.5 million instead of the US$15 million they had announced.[97]
Ponzi schemes
Ponzi schemes are another common form of utilizing blockchain-based technologies to commit fraud. Most schemes of this sort use multi-level marketing schemes to encourage investors to conduct risky investments.[98]Onecoin is one of the more notable examples of cryptocurrency-ponzi schemes: Founded in 2014 by Ruja Ignatova, OneCoin is estimated to have generated US$4 billion in income.[87] While at least in China some of the investors' funds have been recovered and several members of the organisation arrested in the U.S., Ignatova herself is still at large.[99]
Due to the inability of third parties to de-pseudonymize crypto transactions criminal entities have often resorted to using cryptocurrency to conduct money laundering.[100] Especially ICOs lacking KYC guidelines and anti-money laundering procedures are often used to launder illicit funds due to the pseudonymity they offer.[85] By using ICOs criminals launder these funds by buying tokens off of legitimate investors and selling them. This issue is intensified by the lack of measures against money laundering implemented by centralized cryptocurrency exchanges.[85]
A well-known early example of money laundering using cryptocurrencies is Silk Road. Shut down in 2013 with its founder Ross Ulbricht indicted for among other counts a money laundering conspiracy, the website was used for several illicit activities including money laundering solely using Bitcoin as a form of payment.[101]
Apart from traditional cryptocurrencies, Non-Fungible Tokens (NFTs) are also commonly used in connection with money laundering activities.[102] NFTs are often used to perform Wash Trading by creating several different wallets for one individual, generating several fictitious sales and consequently selling the respective NFT to a third party.[103] According to a report by Chainalysis, these types of wash trades are becoming increasingly popular among money launderers especially due to the largely anonymous nature of transactions on NFT marketplaces.[104][105] Auction platforms for NFT sales may face regulatory pressure to comply with anti-money laundering legislation.[106]
Regulatory measures
Canada is generally regarded as the first state actor implementing regulatory measures dealing with money laundering conducted by the usage of cryptocurrencies.[107] By 2013 the Financial Crimes Enforcement Network (FinCEN) — in direct reference to the centralized exchange Mt. Gox — issued regulations making it clear that all crypto-to-fiat exchangers had to apply KYC- as well as anti-money laundering methods.[108] Any suspicious transactions have therefore to be reported to the authorities.[109] Centralized exchanges have to register as money transmitters, with the exact definition of who and what constitutes a money transmitter in the crypto sphere being somewhat blurred and regulations differing between the different states of the U.S.[110] An important exemption from these regulations is decentralized exchanges due to the fact that they do not hold any fiat currency.[111]
As part of the Fifth Anti-Money Laundering Directive of 2018 and in an effort to combat money laundering and the financing of terrorism, the European Union has issued a directive making all member-states have to make sure that crypto exchanges are licensed and registered.[112] The EU is furthermore planning to take measures to ensure that all customers of cryptocurrency exchanges are to verify their identity as part of the registration process.[113]
Regarding NFTs
Auction platforms for NFT sales may face regulatory pressure to comply with anti-money laundering legislation. A February 2022 study from the United States Treasury assessed that there was "some evidence of money laundering risk in the high-value art market," including through "the emerging digital art market, such as the use of non-fungible tokens (NFTs)."[114] The study considered how NFT transactions may be a simpler option for laundering money through art by avoiding transportation or insurance complications in trading physical art. Several NFT exchanges were labeled as virtual asset service providers that may be subject to Financial Crimes Enforcement Network regulations.[115]
The European Union has yet to establish specific regulations to combat money laundering through NFTs. The European Commission announced in July 2022 that it is planning to draw regulations regarding that issue by 2024.[116][113]
Giveaway scam
A cryptocurrency giveaway scam involves scammers compromising or impersonating celebrities, influencers, or well-known companies to falsely claim they are multiplying cryptocurrency or giving away free cryptocurrency via airdrop. A variety of methods are used to promote these scams, primarily through posts and livestreams on social media.
YouTube is a platform commonly used to promote this scam. Popular accounts are hacked to stream pre-recorded videos of the impersonated figure, overlaid with fake giveaway announcements that often encourage viewers to visit the scammer’s website.[117] In July 2020, Apple co-founder Steve Wozniak and 17 other victims filed a lawsuit against YouTube and its parent company, Google, alleging that the platform allowed scammers to use their name, image and likeness in cryptocurrency giveaway scams.[118] After earlier dismissals based on Section 230, a 2024 California Court of Appeal ruling allowed the case to proceed, finding that YouTube’s role may fall outside those legal protections, with the case now pending further proceedings in the lower court.[119]
In the 2020 Twitter account hijacking, 130 high-profile accounts, including those of multi-billionaire Elon Musk and then U.S. president Joe Biden, were used to promote a bitcoin giveaway scam. Within minutes of the initial tweets, more than 320 transactions had been sent to one of the wallet addresses, and over US$110,000 worth of bitcoin had been deposited before the scam messages were removed by Twitter.[120]Coinbase blacklisted the bitcoin address and said they stopped over 1,000 transactions totaling over US$280,000 from being sent.[121]
Paper wallet generators
Paper wallet generators allow users to create a wallet address and corresponding private key. While not dubious in itself, fraudsters create infected generators that secretly phishes the generated keys, giving them control of the wallet.[122]
In August 2017, a hacker began advertising an online IOTA wallet seed generator. To gain the victims trust, the hacker linked to a legitimate GitHub repository, claiming the website ran the same code. In reality, malicious code in a hidden Notifier.js file patched the Math.seedrandom function, forcing the generator to use a fixed seed plus a counter variable that increased by one each time seedrandom was called. This caused Math.random() to return a predictable sequence of numbers, resulting in the same IOTA wallet seeds being generated. Each of these seeds was logged.[123] On January 19, 2018, the hacker drained approximately US$3.94 million from wallets created during the six-month period. Profiles associated with the website on GitHub, Reddit, and Quora that had provided support to users were deleted, and the website was updated to display the message: “Taken down. Apologies.”[124] In January 2019, Europol arrested a 36-year-old man from Oxford, England believed to be behind the theft.[125]
A pig butchering scam (Chinese:杀猪盘,sha zhu pan[127] or shazhupan,[128] translated as the killing pig game)[126] is a type of online scam where the victim is encouraged to make increasing financial contributions over a long period,usually in the form of cryptocurrency.[129] Such scams are commonplace on social media and dating apps,[130] and often involve elements of catfishing,investment fraud and romance scams. The scammer builds trust with the victim through online communication,subsequently persuading them to invest in a fraudulent cryptocurrency scheme. The "butchering" or "slaughtering" of the victim transpires when their assets or funds are stolen.[131] Perpetrators are typically victims of a fraud factory,[132] where they are lured to travel internationally under false pretenses,trafficked to another location,and forced to commit the fraud by organised crime gangs.[133][134]
Contact begins with unsolicited telephone calls with extended or repeated contact,fake profiles on dating apps,or romantic interest from strangers,all with requests for personal information with the view to financially profile the target. After gaining the victim's trust,the scammer offers too-good-to-be-true rates of return on trades or investments using genuine-looking but fraudulent websites or apps. The scammer may pressure the victim to invest quickly,offer extravagant gifts which require the release of money,claim difficulties in withdrawing funds from supposed investment returns,and give inconsistent or vague details about the investment. A scammer will often try to isolate their victim by monopolizing their attention away from loved ones,who may otherwise realise the victim is falling prey to a scam.[135][136]
Scams can be detected using simple precautions. To avoid being scammed,experts recommend that persons conduct due diligence and verify the identity of the fake persona,such as by asking for their long-used legitimate LinkedIn and Facebook accounts with their verifiable family and colleagues in their social network. Scammers get angry and abusive when pressed for verifiable details for them or their investments scams. To avoid being detected,scammers also often avoid giving out their WhatsApp number,and prefer apps where their phone number is hidden such as Telegram or WeChat. Many scammers obtain their own WhatsApp-linked fraudulent phone number through a burner phone,virtual number,phone number mule,or caller ID spoofing,and then avoid videocall verification. Experts also recommend that potential victims insist on multiple,long videocalls to verify the identity of the potential scammer,confirm the identity of mentioned companies with registration and regulatory bodies,not invest in any scheme through people met online but not in person,cut off contact with potential scammers and their platforms,and immediately alert local,state,or federal authorities and loved ones.[136] Legitimate opportunities rarely require rushed decisions.
In 2024,crypto fraud was estimated to have had a value of US$12.4 billion,of which high-yield investment program (HYIP) scams and pig butchering scams contributed 50.2% and 33.2% respectively,with pig butchering scams growing at the rapid rate of 40% over the previous year.[137] In October 2023,12% of Americans using dating apps experienced exposure to this type of fraud,up from 5% in 2018.[130] The scam originated in China in 2016 or earlier,[138] and proliferated in Southeast Asia amid the COVID-19 pandemic.[132]
Further examples
Josh Garza,who founded the cryptocurrency startups GAW Miners and ZenMiner in 2014,acknowledged in a plea agreement that the companies were part of a pyramid scheme,and pleaded guilty to wire fraud in 2015. The U.S. Securities and Exchange Commission separately brought a civil enforcement action against Garza,who was eventually ordered to pay a judgment of US$9.1 million plus $700,000 in interest. The SEC's complaint stated that Garza,through his companies,had fraudulently sold "investment contracts representing shares in the profits they claimed would be generated" from mining.[139] Garza was later found guilty of fraud and ordered to pay US$9 million and begin serving a 21-month sentence commencing January 2019 by the U.S. Attorney's Office District of Connecticut.[citation needed]
The cryptocurrency community refers to pre-mining,hidden launches,ICO or extreme rewards for the altcoin founders as deceptive practices.[140] This is at times an inherent part of the cryptocurrency's design.[141] Pre-mining refers to the practice of generating the currency before its released to the public.[142]
In 2025,U.S. authorities led by the Department of Justice and the FBI’s San Diego Field Office have seized approximately $2.5 million in cryptocurrency linked to a series of sophisticated fraud schemes. The forfeiture,approved by U.S. District Court,targets criminals who exploited digital financial platforms to defraud victims,often through so-called "confidence schemes." The crackdown involved collaboration with various agencies and support from Tether,a crypto industry company,and aims to both compensate victims and deter future online fraud.[145]
Malware
Malware attacks
In February 2014,the Pony virus,which spread to between 100,000 and 200,000 computers through a botnet,was reported to have stolen up to US$220,000 in cryptocurrency from 85 wallets.[146] Researchers later discovered updated versions with the ability to steal 30 types of cryptocurrencies.[147]
A type of Mac malware active in August 2013,Bitvanity posed as a vanity wallet address generator and stole addresses and private keys from other bitcoin client software.[148] A different trojan for macOS,called CoinThief was reported in February 2014 to be responsible for multiple bitcoin thefts.[148] The software was hidden in versions of some cryptocurrency apps on Download.com and MacUpdate.[148]
Stealers and drainers
A stealer,also known as a drainer or infostealer,is a type of malware designed to steal private information including private keys from cryptocurrency wallets,enabling attackers to access and transfer the funds to their wallet. The most common infections scan computers for wallet files and upload them to a remote server,where they can be cracked.[149] Many stealers also incorporate keyloggers to record keystrokes,often bypassing the need to crack the keys.[150]
Clipboard hijacking
Clipboard hijacking involves a malware that detects when a cryptocurrency address is copied to the clipboard,and quickly replacing it to trick victims into sending their cryptocurrency to the attackers address. The method is effective due to the difficulty of memorizing or manually typing wallet addresses,combined with the irreversible nature of cryptocurrency transactions.[151]
Ransomware
Cryptocurrency is considered to be the "near-universal form of payment" for ransomware,[152] a type of malware that encrypts a victim's data until a ransom is paid. Ransomware attacks are estimated to have generated US$1.1 billion in 2019,US$999 million in 2020,a record US$1.25 billion in 2023,and US$813 million in 2024.[153] In 2024,a record breaking US$75 million ransom was paid to the Dark Angels ransomware group by an undisclosed Fortune 500 company.[154]
Cryptojacking is the act of exploiting a computer to mine cryptocurrencies,often through websites,[155][156][157] against the user's will or while the user is unaware.[158] One notable piece of software used for cryptojacking was Coinhive,which was used in over two-thirds of cryptojacks before its March 2019 shutdown.[159] The cryptocurrencies mined the most often are privacy coins—coins with hidden transaction histories—such as Monero and Zcash.[156][160]
Like most malicious attacks on the computing public,the motive is profit,but unlike other threats,it is designed to remain completely hidden from the user. Cryptojacking malware can lead to slowdowns and crashes due to straining of computational resources.[161]
Bitcoin mining by personal computers infected with malware is being challenged by dedicated hardware,such as FPGA and ASIC platforms,which are more efficient in terms of power consumption and thus may have lower costs than theft of computing resources.[162]
Fraud factories
Fraud factories in Asia traffic workers to scam Westerners into buying cryptocurrencies online.[163]
Other incidents
In 2015,two members of the Silk Road Task Force—a multi-agency federal task force that carried out the U.S. investigation of Silk Road—were convicted over charges pertaining to corruption.[164] Former DEA agent,Carl Mark Force,had attempted to extort Silk Road founder Ross Ulbricht ("Dread Pirate Roberts") by faking the murder of an informant. He pleaded guilty to money laundering,obstruction of justice,and extortion under color of official right,and was sentenced to 6.5 years in federal prison.[164] Former U.S. Secret Service agent,Shaun Bridges,pleaded guilty to crimes relating to his diversion of $800,000 worth of bitcoins to his personal account during the investigation,and also separately pleaded guilty to money laundering in connection to another cryptocurrency theft. Bridges was sentenced to almost eight years in federal prison.[165]
Gerald Cotten founded QuadrigaCX in 2013,after graduating from the Schulich School of Business in Toronto. Cotten was acting as the sole curator of the exchange. Quadriga had no official bank accounts since banks at the time had no method of managing cryptocurrency. In late 2018,Canada's largest crypto exchange QuadrigaCX lost US$190 million in cryptocurrency when the owner died;he was the only one with knowledge of the password to a storage wallet. The exchange filed for bankruptcy in 2019.[166]
In 2018,Ellis Pinsky,15 years old,was accused of orchestrating a scheme to steal millions of dollars worth of cryptocurrencies from Michael Terpin,a prominent cryptocurrency investor. The scheme involved a social engineering technique known as the SIM swap scam. The case attracted significant attention due to Pinsky's young age and the substantial amount of money involved. It raised questions about the security of digital assets and the challenges in regulating and prosecuting crimes in the rapidly evolving world of cryptocurrencies. Pinsky later reached a settlement to return $22 million in cryptocurrency to Terpin.[167][168][169][170][171] In May 2020,Pinsky experienced a home invasion by intruders searching for remaining stolen assets.[168] Michael Terpin,the founder and chief executive officer of Transform Group,a San Juan,Puerto Rico-based company that advises blockchain businesses on public relations and communications,sued Ellis Pinsky in New York on May 7,2020,for leading a "sophisticated cybercrime spree" that stole US$24 million in cryptocurrency by hacking into Terpin's phone in 2018.[172][173] Terpin also sued Nicholas Truglia and won a $75.8 million judgment against Truglia in 2019 in California state court.[173]
On July 15,2020,Twitter accounts of prominent personalities and firms,including Joe Biden,Barack Obama,Bill Gates,Elon Musk,Jeff Bezos,Apple,Kanye West,Michael Bloomberg and Uber were hacked. Twitter confirmed that it was a coordinated social engineering attack on their own employees. Twitter released its statement six hours after the attack took place. Hackers posted the message to transfer the Bitcoin to a Bitcoin wallet,which would double the amount. The wallet's balance was expected[according to whom?] to increase to more than $100,000 as the message spread among Twitter followers.[174]
In 2021,US Authorities carried out a raid on James Zhong's home in Gainesville,Georgia. Authorities found over 51,000 bitcoin that Zhong had stolen from Silk Road between 2012 and 2013. Through an error on Silk Road,Zhong was able to withdraw more bitcoin than what was initially deposited. He concealed his identity and was able to evade authorities for nearly a decade. Zhong ended up pleading guilty to wire fraud and was sentenced to 1 year and 1 day in prison along with a forfeiture of all bitcoin.[175]
In early 2022,the Beanstalk cryptocurrency was stripped of its reserves,which were valued at more than US$180 million,after attackers had managed to use borrowed US$80 million in cryptocurrency to buy enough voting rights to transfer the reserves to their own accounts outside the system. It was initially unclear if such an exploit of governance procedures was illegal.[178]
In 2025,A Nigerian scammer impersonated Trump ally Steve Witkoff by creating a nearly identical email address to solicit a $250,000 cryptocurrency donation from a political donor intended for the Trump-Vance Inaugural Committee. The donor,deceived by the subtle change in the email domain,transferred 250,300 USDT.ETH,which was quickly laundered through multiple wallets. The FBI,with help from Tether and Binance,managed to recover and freeze about $40,300 of the stolen funds,but over $210,000 remains missing. Officials warn that the complexity of blockchain transactions makes recovering stolen crypto extremely difficult.[179]
↑ Hou, Greg (2022). "Cryptocurrency money laundering and exit scams: Cases, regulatory responses and issue". In Corbet, Shaen (ed.). Understanding Cryptocurrency Fraud. The challenges and headwinds to regulate digital currencies. Boston/Berlin: De Gruyter. p.83. ISBN978-3-11-071688-7.
↑ This phenomenon is described in detail at the hand of several examples in Hou, Greg (2022). "Cryptocurrency money laundering and exit scams: Cases, regulatory responses and issue". In Corbet, Shaen (ed.). Understanding Cryptocurrency Fraud. The challenges and headwinds to regulate digital currencies. Boston/Berlin: De Gruyter. pp.85–87. ISBN978-3-11-071688-7. See also the sources cited there.
↑ Nestarcova, Dominika (2019). A Critical Appraisal of Initial Coin Offerings. Lifting the "Digital Token's Veil". Leiden/Boston: Brill. pp.43 f. ISBN978-90-04-41657-4.
↑ Rao, Sandeep (2022). "Mt. Gox – The fall of a giant". In Corbet, Shaen (ed.). Understanding Cryptocurrency Fraud. The challenges and headwinds to regulate digital currencies. Boston/Berlin: De Gruyter. p.80. ISBN978-3-11-071688-7.
↑ Nestarcova, Dominika (2019). A Critical Appraisal of Initial Coin Offerings. Lifting the "Digital Token's Veil". Leiden/Boston: Brill. pp.43 f. ISBN978-90-04-41657-4. Cf. Clayton, Jay (11 December 2017). "Statement on Cryptocurrencies and Initial Coin Offerings". U.S. Securities and Exchange Commission (SEC). Archived from the original on 31 January 2023. Retrieved 15 February 2023. Please also recognize that these markets span national borders and that significant trading may occur on systems and platforms outside the United States. Your invested funds may quickly travel overseas without your knowledge. As a result, risks can be amplified, including the risk that market regulators, such as the SEC, may not be able to effectively pursue bad actors or recover funds.
↑ Johnstone, Syren (2021). Rethinking the Regulation of Cryptoassets. Cryptographic Consensus Technology and the New Prospect. Cheltenham/Northampton: Edward Elgar. pp.61 f. ISBN9781800886780.
↑ See Girasa, Rosario (2018). Regulation of Cryptocurrencies and Blockchain Technologies. National and International Perspectives. Pleasantville: Palgrave. pp.156 f. ISBN978-3-319-78508-0.
1 2 3 Nestarcova, Dominika (2019). A Critical Appraisal of Initial Coin Offerings. Lifting the "Digital Token's Veil". Leiden/Boston: Brill. p.44. ISBN978-90-04-41657-4.
↑ Conlon, Thomas; McGee, Richard J. (2022). "ICO fraud and regulation". In Corbet, Shaen (ed.). Understanding Cryptocurrency Fraud. The challenges and headwinds to regulate digital currencies. Boston/Berlin: De Gruyter. p.47. ISBN978-3-11-071688-7. Cf. "SEC Halts Alleged Initial Coin Offering Scam". U.S. Securities and Exchange Commission (SEC). 30 January 2018. Archived from the original on 10 March 2023. Retrieved 15 February 2023.
1 2 Conlon, Thomas; McGee, Richard J. (2022). "ICO fraud and regulation". In Corbet, Shaen (ed.). Understanding Cryptocurrency Fraud. The challenges and headwinds to regulate digital currencies. Boston/Berlin: De Gruyter. p.46. ISBN978-3-11-071688-7.
↑ Girasa, Rosario (2022). "Criminal Prosecutions and Civil Litigation Concerning Blockchain Technologies". Regulation of Cryptocurrencies and Blockchain Technologies. National and International Perspectives. Pleasantville: Palgrave. p.184. doi:10.1007/978-3-319-78509-7. ISBN978-3-319-78508-0.
1 2 3 Hou, Greg (2022). "Cryptocurrency money laundering and exit scams: Cases, regulatory responses and issue". In Corbet, Shaen (ed.). Understanding Cryptocurrency Fraud. The challenges and headwinds to regulate digital currencies. Boston/Berlin: De Gruyter. p.86. ISBN978-3-11-071688-7.
↑ Girasa, Rosario (2022). "Criminal Prosecutions and Civil Litigation Concerning Blockchain Technologies". Regulation of Cryptocurrencies and Blockchain Technologies. National and International Perspectives. Pleasantville: Palgrave. p.185. doi:10.1007/978-3-319-78509-7. ISBN978-3-319-78508-0.
↑ Nestarcova, Dominika (2019). A Critical Appraisal of Initial Coin Offerings. Lifting the "Digital Token's Veil". Leiden/Boston: Brill. p.43. ISBN978-90-04-41657-4.
↑ Conlon, Thomas; McGee, Richard J. (2022). "ICO fraud and regulation". In Corbet, Shaen (ed.). Understanding Cryptocurrency Fraud. The challenges and headwinds to regulate digital currencies. Boston/Berlin: De Gruyter. pp.45 f. ISBN978-3-11-071688-7.
↑ Girasa, Rosario (2022). "Criminal Prosecutions and Civil Litigation Concerning Blockchain Technologies". Regulation of Cryptocurrencies and Blockchain Technologies. National and International Perspectives. Pleasantville: Palgrave. p.212. doi:10.1007/978-3-319-78509-7. ISBN978-3-319-78508-0.
↑ Girasa, Rosario (2022). "Criminal Prosecutions and Civil Litigation Concerning Blockchain Technologies". Regulation of Cryptocurrencies and Blockchain Technologies. National and International Perspectives. Pleasantville: Palgrave. p.213. doi:10.1007/978-3-319-78509-7. ISBN978-3-319-78508-0.
↑ Conlon, Thomas; McGee, Richard J. (2022). "ICO fraud and regulation". In Corbet, Shaen (ed.). Understanding Cryptocurrency Fraud. The challenges and headwinds to regulate digital currencies. Boston/Berlin: De Gruyter. p.47. ISBN978-3-11-071688-7.
↑ Mukherjee, Sanmoy; Larkin, Charles; Corbet, Shaen (2022). "Cryptocurrency Ponzi schemes". In Corbet, Shaen (ed.). Understanding Cryptocurrency Fraud. The challenges and headwinds to regulate digital currencies. Boston/Berlin: De Gruyter. p.118. ISBN978-3-11-071688-7.
↑ See Mukherjee, Sanmoy; Larkin, Charles; Corbet, Shaen (2022). "Cryptocurrency Ponzi schemes". In Corbet, Shaen (ed.). Understanding Cryptocurrency Fraud. The challenges and headwinds to regulate digital currencies. Boston/Berlin: De Gruyter. p.112. ISBN978-3-11-071688-7. as well as Bartlett, Jamie (24 November 2019). "Cryptoqueen: How this woman scammed the world, then vanished". BBC News. Archived from the original on 21 December 2020. Retrieved 15 February 2023.
↑ Albrecht, Chad; Duffin, Kristopher McKay; Hawkins, Steven; Rocha, Victor Manuel Morales (2019). "The use of cryptocurrencies in the money laundering process". Journal of Money Laundering Control. 22 (2): 213. doi:10.1108/JMLC-12-2017-0074. S2CID159087019.
↑ Stabile, Daniel T.; Prior, Kimberly A.; Hinkes, Andrew M. (2020). Digital Assets and Blockchain Technology. US Law and Regulation. Cheltenham/Northampton: Edward Elgar Publishing. pp.299–301. ISBN978-1-78990-743-8.
↑ Owen, Allison; Chase, Isabella (December 2, 2021). NFTs: A New Frontier for Money Laundering? (Report). Royal United Services Institute. Archived from the original on 16 January 2022. Retrieved 15 February 2023.
↑ Johnstone, Syren (2021). Rethinking the Regulation of Cryptoassets. Cryptographic Consensus Technology and the New Prospect. Cheltenham/Northampton: Edward Elgar. p.61. ISBN9781800886780.
↑ Dwyer, Gerald P. (2022). "Regulation of cryptocurrencies". In Corbet, Shaen (ed.). Understanding Cryptocurrency Fraud. The challenges and headwinds to regulate digital currencies. Boston/Berlin: De Gruyter. pp.201 f. ISBN978-3-11-071688-7.
↑ Dwyer, Gerald P. (2022). "Regulation of cryptocurrencies". In Corbet, Shaen (ed.). Understanding Cryptocurrency Fraud. The challenges and headwinds to regulate digital currencies. Boston/Berlin: De Gruyter. p.202. ISBN978-3-11-071688-7.
↑ Dwyer, Gerald P. (2022). "Regulation of cryptocurrencies". In Corbet, Shaen (ed.). Understanding Cryptocurrency Fraud. The challenges and headwinds to regulate digital currencies. Boston/Berlin: De Gruyter. pp.202–204. ISBN978-3-11-071688-7.
↑ Dwyer, Gerald P. (2022). "Regulation of cryptocurrencies". In Corbet, Shaen (ed.). Understanding Cryptocurrency Fraud. The challenges and headwinds to regulate digital currencies. Boston/Berlin: De Gruyter. pp.204 f. ISBN978-3-11-071688-7.
This page is based on this Wikipedia article Text is available under the CC BY-SA 4.0 license; additional terms may apply. Images, videos and audio are available under their respective licenses.
