iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
The Brooklyn District Attorney’s Office and the FBI disrupted a multinational cryptocurrency-fraud network on October 14, 2026, taking down or seizing 241 web domains and 112 servers. Investigators said the operation targeted Russian-speaking victims with Russian-language Facebook advertisements, fake investment platforms and a second scam that demanded payment to “recover” lost cryptocurrency.
Authorities recovered or clawed back about $300,000 in the 2026 operation, but described the overall theft as many millions of dollars. The case shows how a convincing adviser, a professional-looking website and escalating withdrawal fees can turn a social-media contact into a substantial financial loss.
What happened in the Brooklyn crypto-scam takedown
The three-year investigation identified an organized network operating across jurisdictions. On October 14, 2026, Brooklyn prosecutors and the FBI disrupted the network’s online infrastructure rather than merely removing individual advertisements. The seizure covered 241 domains and 112 servers containing victim information, website content and the software used to run the operation.
Investigators said the infrastructure was hosted in Eastern Europe and the United States, with associated IP addresses linked to Ukraine and other Eastern European countries. Brooklyn District Attorney Eric Gonzalez said: “These criminals stole many millions of dollars from Russian-speaking victims through an elaborate investment scheme, then tried to exploit them again with false promises to recover their money.”
#1 Best Overall
How the scammers targeted Russian-speaking victims
1. Russian-language social-media advertising
Many victims first encountered the scheme through Russian-language advertisements on Facebook. The ads promoted supposed investment opportunities and were designed to reach a specific language community rather than a general audience.
2. A purported investment adviser built trust
After a victim responded, a person posing as an investment adviser coached them through opening cryptocurrency accounts and transferring funds. The adviser’s guidance made the process appear legitimate while directing money to platforms controlled by the criminals.
3. A fake investment platform displayed the money
The transfers went to fraudulent investment websites. Such sites could show account balances or apparent profits even though the funds were not being invested through a legitimate exchange. The servers seized in the operation contained website content and operational software supporting those platforms.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errors4. Withdrawal requests triggered invented fees
When victims attempted to withdraw, they were locked out or told to pay additional taxes, fees or other charges. These demands were a central warning sign: a legitimate investment service does not require repeated invented payments to release a customer’s own funds.
5. A second recovery scam followed
Data recovered from the seized infrastructure showed that criminals later contacted some victims with offers to recover the cryptocurrency for a fee. This “recovery” pitch was another fraud layer, aimed at people already distressed by the initial loss.
What authorities seized and what the figures mean
| Enforcement action | Infrastructure | Victim and loss information | Funds identified |
|---|---|---|---|
| 2026 Brooklyn DA/FBI disruption | 241 domains and 112 servers | Report describes many millions stolen; a primary-source victim count was not stated | About $300,000 recovered or clawed back |
| Related 2025 Brooklyn investigation | Part of roughly 400 domains disrupted or seized by the Brooklyn DA over the prior two years | More than 300 victims identified; over $1 million in Brooklyn losses | $140,000 seized and approximately $300,000 frozen |
The 2025 figures describe a related but distinct investigation. They should not be read as a victim count or loss total for the October 2026 server seizure. The Brooklyn DA said its related cryptocurrency-fraud actions had disrupted or seized about 400 domains over the preceding two years, while the 2026 operation specifically involved 241 domains and 112 servers.
Can victims recover stolen cryptocurrency?
Recovery is possible in some cases, but it is not guaranteed. The 2026 operation recovered or clawed back about $300,000, demonstrating that investigators can sometimes trace and restrain funds. That amount is only a portion of the many millions described as stolen, and it does not establish that every victim will be reimbursed.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallVictims should not pay anyone who later promises to retrieve the cryptocurrency for an upfront fee. The seized data indicates that this was an intentional second-stage scam. A request for “tax,” “release,” “legal” or “processing” money after an investment loss should be treated as another demand for payment, not proof that funds are being recovered.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What victims should do now
- Preserve evidence. Save Russian-language advertisements, messages, email addresses, phone numbers, wallet addresses, transaction IDs, screenshots of the investment dashboard and records of every fee request.
- Stop sending money. Do not pay withdrawal charges or a recovery service. Continuing to transfer funds can increase the loss.
- Contact the Brooklyn DA’s Office if you are a Brooklyn resident. The official release gives the victim-reporting number as 718-250-2340.
- Use New York’s financial-regulator complaint process. The New York Department of Financial Services provides complaint resources for New Yorkers who want to report suspected cryptocurrency fraud or verify whether an exchange is legitimate.
- Notify the cryptocurrency service used for the transfer. Provide transaction records and wallet details promptly; an exchange may be able to flag an account or preserve relevant records, although it cannot promise reimbursement.
Why taking down servers matters
Removing a single scam domain often allows criminals to register another one and continue contacting victims. This operation targeted the back-end servers holding the sites, victim data and operating software, making it harder for the network to repopulate its websites or immediately reuse the same infrastructure. The cross-border hosting locations also explain why the investigation required cooperation between Brooklyn prosecutors and the FBI.
The case reinforces several checks for anyone considering an online crypto investment:
- Be skeptical of investment advertisements aimed at a specific language community.
- Independently verify an adviser and the investment platform before transferring cryptocurrency.
- Treat guaranteed returns, pressure to deposit more money and blocked withdrawals as immediate stop signs.
- Never assume a visible balance on a website proves that funds are held in a real account.
- After a loss, reject unsolicited recovery offers that require payment in advance.
The broader Brooklyn enforcement effort
The Brooklyn DA’s official 2025 release described the need for agencies to work together as crypto scams proliferate. Gonzalez said: “As crypto scams continue to proliferate, it is crucial for law enforcement agencies to work together in order to stop them.” The 2026 action extends that approach by combining domain disruption, server seizure, victim-data analysis and efforts to trace or claw back cryptocurrency.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
