Key Notes
- Brooklyn prosecutors and the FBI disrupted 241 scam domains and 112 servers linked to a network accused of stealing tens of millions from Russian-speaking Americans.
- Investigators say victims were drawn in through investment ads and later approached again with false promises to recover their stolen cryptocurrency.
- About $300,000 has been seized so far and recovery efforts continue, while Bloomberg reports that no arrests were made during the operation.
Brooklyn prosecutors and the FBI have disrupted an international cryptocurrency fraud network accused of stealing tens of millions of dollars from Russian-speaking Americans, shutting down 241 scam domains and seizing or disrupting 112 servers.
The Brooklyn District Attorney’s Office announced the action on October 14 after a three-year investigation. Prosecutors said the operation, carried out the previous week, targeted the infrastructure behind both fake investment platforms and a follow-up scheme offering victims help recovering their stolen money.
About $300,000 in stolen funds has been seized so far, according to the district attorney’s office. Bloomberg reported that no arrests were made, underscoring the distinction between disabling a fraud network’s systems and bringing its operators into custody.
Russian-language ads led victims to fake investments
Investigators described a recurring pattern: victims responded to Russian-language investment advertisements on Facebook, then received calls from a purported adviser speaking the same language. The adviser helped them open accounts on websites presented as cryptocurrency investment platforms.
Victims were guided through buying cryptocurrency and transferring it to addresses associated with those sites. When they later tried to withdraw funds, they found their accounts blocked or were told they needed to pay additional taxes or fees.
The investigation focused on complaints from Brooklyn’s Russian-speaking community, although prosecutors said victims were located throughout the United States. The reported losses include people’s entire life savings.
The release describes the language used to approach victims and the location of technical infrastructure. It does not identify the nationality of every person involved in running the alleged scheme.
Why investigators went after the servers
The Virtual Currency Unit worked with the FBI’s New York office to target systems hosted by companies in Eastern Europe and the United States. Investigators traced infrastructure and internet addresses to Ukraine and other Eastern European countries.
Bloomberg’s account describes enforcement actions across three time zones. The servers held website data, victim information and operational software, making them more consequential targets than individual web addresses alone.
Assistant District Attorney Alona Katz, who leads the unit, told Bloomberg that taking the servers offline disabled the operation’s back end. The objective was to interfere with the systems used to build replacement websites and maintain contact with victims.
The distinction matters because removing a domain can warn visitors without necessarily eliminating the infrastructure behind it. A server takedown reaches further into that infrastructure, although it does not establish that every participant has been identified or every stolen asset recovered.
Brooklyn prosecutors have pursued related tactics before. In a separate June 2024 announcement, the office described seizing 70 domains tied to scams that cost victims about $5 million. More than 20 Brooklyn residents accounted for over $1 million of those losses.
That earlier action also involved Russian-language Facebook advertising and purported investment advisers. It provides background to the office’s approach; those historical loss figures should not be added to the latest estimate as though they necessarily describe separate victims.
A second approach promised to recover the money
Data recovered in the latest investigation showed that victims were contacted again a few weeks after the initial fraud, this time with promises to retrieve their cryptocurrency. Prosecutors described this as a recovery scam layered onto the investment operation.
The FBI’s recovery-fraud guidance explains how such services can demand upfront payments, provide unreliable tracing reports and then seek further fees. Claims of links to lawyers or law enforcement can be used to make the offer appear credible.
Private recovery businesses cannot themselves issue seizure orders. The bureau says exchanges freeze accounts through their own processes or in response to legal proceedings, rather than because a company promises a guaranteed recovery.
CoinScreamer previously covered a separate $61 million seizure involving USDT linked to alleged investment fraud. Such cases illustrate why tracing, freezing assets and returning money to victims are distinct stages; a website takedown is not a refund.
For people who suspect they have been targeted, the FBI recommends reporting the case through IC3 and preserving transaction details, wallet addresses and communications. It warns against paying additional withdrawal fees or hiring unsolicited services claiming they can retrieve the funds.
In the Brooklyn investigation, the immediate confirmed result is the disruption of the network’s online infrastructure and a limited fund seizure. Prosecutors say efforts to recover more money are continuing; the announced action does not establish convictions or full compensation for victims.
Disclaimer: CoinScreamer is an independent media brand owned and operated by NuvexMedia LLC, publishing news, research, and market insights on digital assets and related technologies. NuvexMedia LLC invests in and collaborates with companies across the digital asset, blockchain, and technology sectors. These relationships do not influence CoinScreamer’s editorial coverage, and the publication maintains full editorial independence to provide accurate, timely, and objective information. © 2025 NuvexMedia LLC. All rights reserved. This content is for informational purposes only and should not be considered legal, tax, investment, financial, or other professional advice.
