Brooklyn Prosecutors Take Down 112 Servers Behind Crypto Scam Targeting Russian Speakers

A Massive Crypto Scam Targeted Russian‑Speaking Americans

Brooklyn’s District Attorney’s Virtual Currency Unit, working alongside the FBI, dismantled a sprawling online operation that preyed on Russian‑speaking residents of New York and beyond. The scheme used Facebook ads in Russian to lure victims into a fake investment platform, where they were coached by phone‑based "advisors" to purchase cryptocurrency and send it to addresses controlled by the scammers. Once the funds were deposited, victims found themselves locked out, pressured to pay additional fees, or told they needed to pay taxes before they could withdraw.

How the Infrastructure Was Taken Down

The investigation, which spanned three years, culminated in a coordinated raid across three time zones. Prosecutors seized 112 servers and 241 web domains, many of which were hosted by companies in Eastern Europe and the United States, with IP addresses traced to Ukraine and other regions. By disabling these servers, authorities crippled the scammers’ ability to spin up new phishing sites or contact existing victims.

A Double‑Layered Deception

In addition to the initial investment fraud, the seized data revealed a secondary “recovery” scam. Weeks after victims reported their losses, the operators reached out with promises to retrieve the stolen crypto—for a fee. This tactic aimed to extract additional money from already‑defrauded individuals, compounding the financial harm.

Financial Impact and Ongoing Recovery Efforts

While prosecutors estimate that tens of millions of dollars were siphoned from victims—some losing their entire life savings—the office has so far recovered roughly $300,000. Officials say the seizure is just the beginning of a broader effort to trace and reclaim the remaining assets, which may involve international cooperation given the cross‑border nature of the server hosting.

What This Means for the Crypto Community

The takedown underscores several key lessons for investors and regulators:

• Targeted language attacks can be highly effective; scammers often tailor ads to specific ethnic or linguistic groups to build trust.
• Infrastructure disruption—shutting down servers and domains—can significantly hinder fraudsters’ ability to operate, even if full asset recovery takes time.
• Recovery scams are a common follow‑up tactic; victims should be wary of any service promising to retrieve lost crypto, especially when fees are demanded upfront.

Looking Ahead

Brooklyn’s Virtual Currency Unit has a track record of pursuing crypto‑related crime, including a recent case where a local individual was sentenced for a $16 million Coinbase phishing scheme. The latest operation demonstrates the importance of sustained, multi‑agency investigations and the need for victims to report fraud promptly. As law‑enforcement agencies continue to refine their digital forensics capabilities, the hope is that more of the stolen funds can be reclaimed and that future scams will be intercepted before they can cause widespread damage.

--- For readers who have been affected by similar scams, the FBI’s Internet Crime Complaint Center (IC3) and local law‑enforcement cyber units remain the primary points of contact for reporting incidents.