Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

Brooklyn prosecutors say a multinational cryptocurrency investment operation targeted Russian-speaking Americans, stole tens of millions of dollars and then used victims’ information to make a second fraud attempt: fake offers to recover the missing assets. On October 14, 2026, the Brooklyn District Attorney’s Virtual Currency Unit announced that, with FBI cooperation, it had disrupted 241 domains and 112 servers linked to the scheme.

What the Brooklyn investigation found

The Brooklyn District Attorney’s Office said the operation disproportionately targeted the borough’s Russian-speaking community. The campaign began with Russian-language investment advertisements on Facebook. People who responded were connected with callers posing as Russian-speaking investment advisers.

Those callers coached victims through opening accounts on imitation cryptocurrency trading platforms, purchasing digital assets and transferring the assets to wallet addresses controlled by the criminals. The websites and scripted advice were designed to make the process look like a legitimate investment service.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

After victims tried to withdraw funds, the platforms blocked the withdrawals or demanded additional payments described as fees or taxes. Prosecutors estimate that the operation stole tens of millions of dollars, and said some victims lost their entire life savings. Approximately $300,000 had been seized when the October 14 release was issued. The Virtual Currency Unit said it had previously seized or disrupted about 400 domains in related work.

#1 Best Overall
Ledger Nano X - Classic Crypto Wallet with Bluetooth | Compact, go anywhere, 1.1" display. Desktop & iOS/Android compatible
  • Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
  • Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
  • Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
  • Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.

Brooklyn District Attorney Eric Gonzalez described the two-part approach: “These criminals stole many millions of dollars from Russian-speaking victims through an elaborate investment scheme, then tried to exploit them again with false promises to recover their money.”

How the second, “recovery” scam works

1. The investment funnel collects a detailed profile

The first fraud does more than take cryptocurrency. During account setup and repeated calls, the operators can obtain names, phone numbers, identity documents, investment amounts, wallet addresses, transaction details and the victim’s preferred language. A victim who complains about a blocked withdrawal also signals that the loss has been discovered.

Rank #2
Sale
TANGEM Crypto Wallet Pack of 3 – Trusted Cold Storage Hardware Wallet | 100% offline; Bitcoin, Ethereum, NFTs & altcoins; No seed phrase; NFC; Pack of 3, Self custody wallet
  • Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
  • Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
  • Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
  • Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
  • Trusted by 6 million users worldwide (4.9 App Store, 4.8 Google Play) - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets

2. The stolen data becomes a lead list

Recovered server data showed that operators contacted some victims a few weeks later with promises to retrieve the missing cryptocurrency. The follow-up may come from a different company name or a person claiming to be a specialist, investigator or lawyer, but the caller already knows enough about the original transaction to sound credible.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

3. An urgent payment is demanded

The supposed recovery service typically asks for an upfront fee, tax, tracing charge or other payment before any funds can be returned. A fabricated report may show wallet movements or claim that assets have been located. The FBI warns that recovery scammers also use social-media posts, messaging platforms, search results and comment sections to find victims, and may falsely claim a connection to law enforcement.

Rank #3
TANGEM Crypto Wallet Pack of 2 – Trusted Cold Storage Hardware Wallet | 100% offline; Bitcoin, Ethereum, NFTs & altcoins; No seed phrase; NFC, Self custody wallet
  • Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
  • Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
  • Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
  • Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
  • Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets

A legitimate law-enforcement investigation does not charge a victim a fee to investigate a crime. A private recovery business also cannot issue a government seizure order. Paying the second demand can therefore turn one loss into two, while giving the criminals more personal and financial information.

Warning signs that a recovery offer is fraudulent

Claim or request Why it is a red flag
“Pay us first and we will release your crypto.” An upfront fee, tax or tracing payment is a standard feature of recovery fraud.
“We work with the FBI” or another agency. The FBI says scammers falsely claim official affiliations. Verify any claimed connection independently through an FBI field office.
A glossy tracing report proves your coins are ready to seize. The FBI warns that recovery firms may provide incomplete or inaccurate tracing reports.
“We can freeze or seize the wallet today.” Private companies cannot issue seizure orders.
A caller knows your exact loss and transaction history. That information may have been taken during the original investment scam or obtained from shared criminal records; it is not proof of legitimacy.
Pressure to send identity documents, wallet credentials or another payment. It creates another opportunity for theft or identity misuse before any official review occurs.

What to do if someone offers to recover your cryptocurrency

  1. Stop contact and do not pay. Do not send cryptocurrency, bank transfers, gift cards, card payments, passwords, recovery phrases or identity documents to an unsolicited provider.
  2. Preserve the evidence. Save the advertisement, website address, emails, chat messages, caller IDs, phone numbers, payment receipts, wallet addresses and transaction hashes. Export conversations before blocking an account, and keep the original files when possible.
  3. Secure accounts that may be exposed. Change reused passwords, enable multifactor authentication and contact your bank or card issuer immediately about unauthorized payments. Do not give a caller remote access to a computer or phone.
  4. Report both stages of the fraud. File a complaint with the FBI’s Internet Crime Complaint Center (IC3) and make a report to local law enforcement. Include the original investment scam and the later recovery solicitation in the same timeline.
  5. Challenge false official claims. If a caller says the FBI is involved, use contact information from an official FBI field-office website or directory—not a number supplied by the caller—to ask whether the person or case is genuine.

Official reporting versus a purported private recovery provider

Use these checks before sharing information with anyone who contacts you after a crypto loss:

Rank #4
DCENT Hardware Wallet | Biometric Cold Storage, Bluetooth, Multi-Crypto
  • EAL5+ CERTIFIED SECURE ELEMENT + FINGERPRINT PROTECTION — Your private keys stay encrypted offline on a certified EAL5+ chip, the same security tier used in EMV bank cards. Built by DCENT, securing crypto since 2018. Fingerprint authentication adds a second layer no PIN-only wallet can match.
  • 10,000+ ASSETS NATIVE ON 100+ BLOCKCHAINS — Hold Bitcoin, Ethereum, XRP, Solana, Cardano, popular stablecoins (USDT, USDC), and NFTs in one wallet. No third-party apps, no fragmented setup — every supported asset works straight out of the box.
  • TAP-TO-SIGN MOBILE EXPERIENCE — Pair your wallet with the DCENT mobile app over Bluetooth. Manage tokens, review transactions, and access in-app swap features directly from your phone — no cables, no desktop required.
  • WEB3 & dAPP ACCESS VIA METAMASK — Connect to MetaMask and other browser extension wallets to manage NFTs, claim airdrops, and access dApps. A large screen and intuitive 4-button interface keep every transaction clearly visible before you sign.
  • SEAMLESS FIRMWARE UPDATES & 30-DAY MONEY-BACK GUARANTEE — Apply security updates without resetting your wallet or migrating funds. Backed by Amazon's 30-day money-back guarantee — your purchase is risk-free.
Check IC3 or local law enforcement Unsolicited private provider
Upfront payment Does not charge a victim a fee to investigate a crime. Often demands a fee, tax or tracing payment before action.
Identity and authority Can be verified through official government channels. May use unverifiable names, logos or claimed agency ties.
Power to freeze or seize assets Works through legal process and court-authorized actions. Cannot issue seizure orders.
Tracing information Receives the victim’s transaction evidence for an official complaint. May provide incomplete or inaccurate reports to justify payment.
Evidence handling Accepts wallet addresses, hashes, messages and payment records as part of a report. May request sensitive data before establishing who it is.
Next step Directs victims to IC3 and local law enforcement. Pushes for a private contract or immediate transfer.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

The scale and limits of the current case

The FBI’s Internet Crime Complaint Center reported more than $2.5 billion in cryptocurrency-investment-fraud losses in 2022, according to a 2023 advisory. The Brooklyn operation is a specific multinational case within that wider pattern, not a measure of all crypto fraud.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The October 2026 release does not say how many victims received the follow-up recovery pitches, whether anyone paid those demands, who the alleged operators are, whether arrests have occurred or when restitution might be available. The reported seizure of approximately $300,000 is not a promise that every victim will be repaid.

Best Value
Trezor Safe 7 Crypto Hardware Wallet with Bluetooth for Android/iOS/Desktop | Charcoal Black, Aluminum Unibody, 2,5" TouchScreen, Wireless Charging, Quantum-Ready, IP54, Long-Lasting LiFePO? Battery
  • Dual-chip architecture for maximum protection: The next-gen, fully auditable TROPIC01 chip works alongside a certified EAL6+ Secure Element—completely NDA-free—to deliver radically transparent, industry-leading defense against physical attacks.
  • Quantum-ready security: Get protection against future threats with the first-ever hardware wallet designed with quantum-ready architecture.
  • See every detail with confidence: Our largest high-resolution color touchscreen makes it easy to navigate your assets, review transactions and manage your coins with clarity.
  • Wireless freedom with encrypted Bluetooth control: Manage, buy, swap and stake securely using Trezor Suite on desktop or mobile. Qi2-compatible wireless charging keeps your Trezor powered up. No cables required—security meets convenience.
  • Works seamlessly with Android, iOS and desktop: Connect wirelessly or via USB-C to your phone or computer. Manage your crypto anywhere with our companion Trezor Suite app.

The practical takeaway for victims

A person who says they can recover stolen Bitcoin or other cryptocurrency for an upfront payment may be repeating the original fraud rather than fixing it. Treat unexpected recovery contacts as a new security incident: stop payments, preserve every record, independently verify any claimed government connection and report both the investment scam and the recovery pitch through IC3 and local law enforcement.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.