Key Highlights
- The Brooklyn District Attorney’s Virtual Currency Unit (VCU) dismantled a multinational crypto scam network by seizing servers across three time zones in the United States and Eastern Europe.
- Scammers specifically targeted Russian-speaking individuals via deceptive Facebook ads, running fraudulent investment platforms that drained tens of millions of dollars before re-targeting victims with fake recovery schemes.
- The operation successfully disrupted the backend software and records for more than 400 scam domains, cutting off the syndicate’s ability to create new fraudulent platforms or contact past targets.
Multinational Infrastructure Seizure Disrupts Major Crypto Scheme
In a coordinated, multi-jurisdictional cyber operation, law enforcement authorities spent hours executing search warrants spanning three time zones to dismantle a sophisticated cryptocurrency investment syndicate. The operation seized critical servers maintained by hosting providers in both the United States and Eastern Europe. According to the Kings County (Brooklyn) District Attorney’s Virtual Currency Unit (VCU), the perpetrators leveraged cyber infrastructure and IP addresses originating in Ukraine and other Eastern European countries to conduct their illicit activities.
Prior to the server raids, the VCU’s three-year investigation had already taken down 400 fraudulent domains; however, the perpetrators consistently deployed replacement websites at a rapid pace. By directly targeting and seizing the backend servers, investigators cut off the underlying software, victim records, and database feeds that kept the scam ecosystem running. This infrastructural disruption actively blocks the scammers from launching new websites and prevents them from accessing records to contact former victims. A formal seizure notice issued by the Brooklyn District Attorney’s office, dated October 14, 2026, is now displayed across the compromised web platforms.
Targeted Facebook Ads and the Double-Dip Recovery Trap
The criminal syndicate relied on deceptive, Russian-language Facebook advertisements promoting bogus cryptocurrency investment opportunities. Once an individual engaged with an ad, a Russian-speaking operative pretending to be an “investment advisor” initiated contact, directing the victim to register an account on a counterfeit crypto trading platform. Targets were guided to purchase digital assets and transfer them directly to wallet addresses controlled by the criminal operation.
On the fraudulent dashboards, account balances artificially inflated for weeks or months to create a false sense of security. However, whenever users attempted to withdraw their assets, the syndicate locked their accounts or demanded excessive fees and supposed taxes. Because Brooklyn is home to a substantial Russian-speaking population, the borough experienced an outsized financial impact compared to other parts of the country, with multiple victims losing their entire life savings. Prosecutors estimate total financial losses reach well into the tens of millions of dollars.
Forensic analysis of the seized server data revealed a secondary layer of fraud designed to exploit compromised users a second time. Weeks after completing the initial theft, the same criminal crew recontacted the victims under the guise of an asset recovery service, offering to retrieve the lost digital currency in exchange for an upfront fee.
“These criminals stole many millions of dollars from Russian-speaking victims through an elaborate investment scheme, then tried to exploit them again with false promises to recover their money,” Gonzalez said.
Law Enforcement Collaboration and Financial Recovery Efforts
James C. Barnacle, head of the FBI’s New York field office, commended the Kings County District Attorney’s Office for its swift work throughout the investigation. District Attorney Gonzalez also credited and thanked the Federal Bureau of Investigation, Shadow Server, Coeus, and web-hosting provider UltaHost for their collaborative assistance in tracking and seizing the syndicate’s technical framework.
The enforcement action comes amid wider scrutiny over digital asset fraud prosecuted within the borough. Cryptopolitan reported that a 23-year-old Brooklyn resident, Ronald Spektor, was sentenced to up to 12 years in prison for impersonating Coinbase support staff and stealing ~$16 million from approximately 100 victims. The Brooklyn District Attorney’s office continues its efforts to claw back additional capital beyond the ~$300,000 in assets already seized during the ongoing proceedings.
Why This Matters
The takedown highlights the critical transition from superficial domain blocking to deep-tier cyber infrastructure dismantling. While domain seizures temporarily interrupt online fraud, targeting backend servers across international jurisdictions directly eliminates the operational data and software engines used to run multi-tiered operations. The case also spotlights the rising threat of “pig butchering” and targeted affinity fraud, wherein bad actors leverage specific language demographics and double-dip recovery scams. According to the FBI, Americans lost $11.4 billion to crypto-related fraud in 2025, representing a 22% increase from the prior year, illustrating the urgent need for cross-border cooperation between local district attorneys, federal agencies, and independent hosting providers.
Frequently Asked Questions
How did the scammers target victims in Brooklyn?
The scammers used targeted Russian-language advertisements on Facebook offering fraudulent investment opportunities. Russian-speaking callers posing as financial advisors then persuaded targets to transfer digital currency into illicit wallets managed by the fake platforms.
What happens now that the hosting servers have been seized?
Seizing the physical and virtual hosting infrastructure effectively cuts off the databases, victim registries, and software engines that powered the scam. This prevents the syndicate from launching new derivative sites or accessing historical records to re-target past victims.
How much money was lost, and have any funds been recovered?
Investigators estimate that total losses stand in the tens of millions of dollars, with some individuals losing their entire life savings. The Brooklyn District Attorney’s office has already recovered approximately $300,000 and is pursuing further efforts to claw back additional stolen capital.
