Brooklyn DA and FBI take down 241 fake crypto investment sites: how the scam targeting Russian speakers worked

What happened

On October 14, 2026, Brooklyn District Attorney Eric Gonzalez described an operation his Virtual Currency Unit ran together with the FBI. Over the course of a few hours, investigators executed search warrants across three time zones and knocked out 241 web domains and 112 cloud servers. The servers were rented from hosting companies in Eastern Europe and the US, and according to prosecutors, the scammers themselves worked through infrastructure and IP addresses in Ukraine and other Eastern European countries.

The victims were Russian-speaking Americans, with Brooklyn and its large Russian-speaking community hit hardest. Prosecutors estimate total losses in the tens of millions of dollars, and some people lost their entire life savings. So far about $300,000 in stolen funds has been seized, and the office is working to claw back more. The announcement says nothing about arrests: the blow landed on the machinery, not the people.

Why servers and not just websites? Before this operation, the unit had already seized or disrupted about 400 crypto investment fraud domains, but new sites kept popping up faster than they could be taken down. Now the scammers have lost access to the data that fed their sites, to their victim records and to their operating software. "We disabled the back end of the operation," unit chief Alona Katz told Bloomberg.

How the scheme worked: six steps

The script laid out by prosecutors matches what the FBI has been describing in its reports for years. It plays on trust in "one of our own": people hear their native language and let their guard down.

1. The ad. On Facebook, someone sees a Russian-language ad promising lucrative investments.
2. The call. An "investment advisor" calls back, also in Russian, polite and patient.
3. The account. The "advisor" helps set up an account on an "investment platform" website. The site looks solid: charts, a balance, a trade history.
4. The transfer. The victim buys crypto on a real exchange or exchange service and, following the "advisor's" instructions, sends it to addresses tied to the platform.
5. Growth on the screen. For weeks and months, "profits" keep climbing in the account. They are just numbers in the scammers' database, with no coins behind them.
6. The withdrawal. When the person tries to cash out, they get locked out of the account or told to pay "fees" and "taxes" first.

Step four is the one that matters. While the coins sit in your own wallet, nobody can touch them. The moment you send them to an address the "platform" gave you, they belong to the platform: a blockchain transfer can't be reversed, and the network has no "undo" button. A legitimate crypto exchange sends coins to your address right away and keeps nothing "in your account." So any service that asks you to deposit money "into an account" first and promises to pay it out later deserves a check before you send anything. We showed how to do that in ten minutes in our guide on how to tell if a crypto exchange is legit.

Round two: "we'll get your money back"

The most cynical part of this story is the sequel. A few weeks after the first con, the same people called the victims again and promised to recover the stolen money, for a fee, of course. Gonzalez put it plainly: the criminals "tried to exploit them again with false promises to recover their money."

The FBI has known about "recovery" scams for a long time and has been warning about them since 2023. The callers pose as "lawyers," "crypto tracing agents" or "government officials." They know the exact amounts and dates of your transfers (in the Brooklyn case, the callers were the same scammers), claim you are on a "government list of victims," and ask for an upfront fee, preferably in crypto or gift cards.

Two lines from the FBI's warnings are worth remembering:

Private sector recovery companies cannot issue seizure orders to recover cryptocurrency.

Law enforcement does not charge victims a fee for investigating crimes.

And a third one: US government agencies have no officially authorized partner law firms. Anyone who introduces themselves that way is lying.

How much people lose to these schemes

The 2025 report from the FBI's Internet Crime Complaint Center (IC3) shows the scale. Americans filed 181,565 complaints involving crypto and lost $11.4 billion, 22% more than the year before. The average loss was about $62,600.

The FBI names crypto investment fraud the costliest type of fraud for Americans in 2025. People aged 60 and over lose the most to "recovery" scams: $540 million. New York State ranks fourth in the country for crypto losses.

How to spot a fake platform

The warning signs are almost always the same. If two or more of them match, stop.

• They found you. An ad, a call, a text in a messenger, a "friend from a chat group": investments offered to you out of the blue are almost always a trap.
• Guaranteed returns. Real markets don't promise a fixed percentage a week.
• The "advisor" holds your hand and rushes you: "the window closes today."
• Your money has to stay on the platform. A balance in your account is an entry in someone else's database, not coins.
• Withdrawals cost money. No honest platform asks you to pay a "tax" as a separate transfer before handing over your own funds.
• Someone offers to recover your losses for an upfront fee. That's round two of the same con.

If you have already sent money, the FBI advises reporting it to IC3 (ic3.gov) and your local FBI field office, keeping the addresses and transaction hashes, and not paying anyone who promises to "get it all back." Outside the US, go to your local police. You can look up a transfer's hash and status yourself; we walked through it in our guide on how to check a transaction by TXID.

Crypto swaps without an account: coins go straight to you

Fake platforms rely on one thing: your money has to sit with them. An honest swap works the other way around. VertEXchange has no user accounts and no balances: you enter your wallet address, see the rate and the amount you'll receive up front, send your coins and get the other ones straight to your address. There's nothing for us to hold and nothing for you to withdraw.

No sign-up needed, and no email or phone number either. Say you hold USDT and want to move into bitcoin in your own wallet: you can buy bitcoin with USDT TRC20 without registration. And if transaction privacy matters to you, you can swap USDT for Monero with the payout going to your XMR address.

• You see the rate and amount before you send, and a fixed rate holds for about 15 minutes.
• Coins arrive at your address; the service doesn't store them.
• If a swap doesn't go through, the coins go back to the refund address you provided.
• Personal fields of an order are deleted 24 hours after it completes.
• Support chat is available on every page, by swap code.

FAQ

What did Brooklyn prosecutors and the FBI shut down?

241 web domains and 112 cloud servers of a fraud network that targeted Russian-speaking people in the US through fake investment platforms. The operation was announced on October 14, 2026, after a three-year investigation.

Was anyone arrested?

The prosecutors' announcement says nothing about arrests. The operation went after infrastructure: the scammers' servers, websites and data. About $300,000 has been seized, and efforts to recover more are ongoing.

How can I tell if an investment platform is fake?

Typical signs: they found you through an ad or a call, they promise guaranteed returns, the "advisor" rushes you, your money has to stay on the platform's balance, and withdrawing requires a separate "tax" or "fee" payment.

Can you get back crypto sent to scammers?

The blockchain transfer itself can't be reversed. Sometimes law enforcement manages to freeze or seize the funds, as in this case. Private "recovery companies" that ask for an upfront fee, the FBI warns, often turn out to be scammers themselves.

Where do I report crypto fraud in the US?

To the FBI's IC3 at ic3.gov and to your local FBI field office. Keep the addresses, transaction hashes, messages and links to the websites.

Why can't you lose money the same way at a no-registration exchange?

Because it doesn't hold your coins. A swap is a single operation: you send coins and receive others at your address. There's no balance that could be "frozen" or withheld. You still need to double-check the recipient address yourself: a transfer to the wrong address can't be reversed either.