Key Highlights
- The FBI and the Brooklyn District Attorney’s Office have seized or disrupted 241 fraudulent websites and 112 servers linked to an extensive cryptocurrency investment scheme.
- Operating from Ukraine and other Eastern European nations, the syndicate stole tens of millions of dollars primarily from Russian-speaking victims across the United States.
- Victims who lost their assets were subjected to secondary scams, with perpetrators returning weeks later offering bogus asset-recovery services.
Law Enforcement Takes Down Massive Crypto Scam Network
In a major cross-border law enforcement operation, the Brooklyn District Attorney’s Office and the Federal Bureau of Investigation (FBI) dismantled a sprawling digital infrastructure used to defraud cryptocurrency investors out of tens of millions of dollars. Authorities announced the seizure and disruption of 241 fraudulent domains and 112 servers, bringing an end to a sophisticated operation that spent years preying predominantly on Russian-speaking residents throughout the United States.
The multi-agency crackdown culminated last week following an exhaustive three-year investigation led by local and federal authorities. According to Brooklyn District Attorney Eric Gonzalez, the criminal syndicate operated through complex online hosting setups and IP addresses situated in Ukraine and several neighboring Eastern European nations. While law enforcement successfully disrupted the digital assets that powered the multi-million-dollar illicit enterprise, officials have not yet announced any formal arrests in connection with the seizures.
Deceptive Social Ads and Phony Recovery Scams
The criminal enterprise systematically targeted victims using Russian-language advertisements placed on Facebook, touting lucrative, low-risk investment yields. Prospective investors who interacted with the ads were contacted by fraudulent advisers who built trust before guiding them through the process of purchasing cryptocurrency. The victims were then directed to transfer these digital assets into sophisticated, fake trading platforms operated by the syndicate.
Once the transfers were finalized, victims discovered they were entirely unable to access their holdings. Attempted withdrawals prompted immediate account lockouts, followed by extortionate demands for fictitious administrative fees and taxes before any funds could supposedly be released. Compounding the financial damage, the perpetrators systematically re-targeted individuals who had already been duped.
The scammers then tried to exploit them again with false promises to recover their money,
Gonzalez said. Investigators reviewing seized server data discovered that the syndicate routinely followed up with previous victims just weeks after defrauding them, masquerading as asset recovery specialists who promised to retrieve the stolen digital currency for an additional upfront fee.
Why This Matters
The dismantling of this international syndicate highlights the mounting challenges state and federal prosecutors face in curbing digital asset fraud. The Brooklyn District Attorney’s Virtual Currency Unit had previously seized or disrupted approximately 400 domains linked to crypto schemes; however, criminal operators continuously deployed replacement sites to circumvent enforcement. By systematically targeting the backend servers alongside front-facing domains, this coordinated operation aims to break the cycle of rapid domain rotation and disrupt the Eastern European infrastructure supporting long-term investment fraud.
Frequently Asked Questions
Who was targeted in this cryptocurrency scheme?
The scheme specifically targeted Russian-speaking individuals residing in the United States, utilizing Russian-language Facebook advertisements to lure victims into transferring funds onto fraudulent investment portals.
Were any arrests made during the server and domain takedowns?
No arrests were announced at the time the disruption of the 241 websites and 112 servers was publicized by Brooklyn District Attorney Eric Gonzalez and the FBI.
How did the secondary recovery scam work?
After locking victims out of their crypto accounts, the syndicate monitored victim records and contacted them several weeks later. Posing as recovery specialists, the scammers made false claims that they could recover the stolen cryptocurrency in exchange for extra payments.




