What to Know

  • Brooklyn prosecutors and the FBI seized or disrupted 241 scam websites and 112 servers tied to a crypto investment fraud network.
  • The alleged scheme targeted Russian-speaking victims in the U.S. through Russian-language Facebook ads and fake investment advisers.
  • Victims were allegedly coached to buy cryptocurrency and send it to fraudulent trading platforms.
  • When victims attempted withdrawals, the platforms allegedly locked accounts or demanded more money for supposed taxes and fees.
  • Investigators said the same victims were later approached with false promises that their stolen funds could be recovered.
  • The operation followed a three-year investigation into online infrastructure and IP addresses in Ukraine and other Eastern European countries.
  • No arrests were announced.
  • Authorities have seized about $300,000 so far and are working to recover more.
  • Crypto investment scams accounted for roughly 84% of the $8.65 billion in investment-fraud losses reported to the FBI in 2025.
  • Across all internet-crime categories, crypto-linked losses totaled $11.37 billion, approximately 54% of the $20.88 billion overall reported to the FBI in 2025.

Brooklyn and FBI Move Against Scam Infrastructure

Brooklyn prosecutors and the FBI have seized or disrupted 241 websites and 112 servers connected to an alleged crypto investment fraud network that targeted Russian-speaking victims in the U.S., marking a significant law-enforcement action against the digital infrastructure behind a large-scale online scam operation.

The operation, carried out last week, followed a three-year investigation into a network that allegedly used online infrastructure and IP addresses in Ukraine and other Eastern European countries. Brooklyn District Attorney Eric Gonzalez said the effort focused on the systems that enabled the scheme to continue operating and reappearing even after prior takedowns of fraudulent domains. No arrests were announced.

For victims, the alleged fraud followed a familiar pattern in the fast-growing world of crypto investment scams: polished online advertising, persuasive callers, fabricated trading platforms and obstacles when users attempted to withdraw their money. Prosecutors said some victims lost their entire life savings, underscoring the severe personal impact of schemes that can appear to be ordinary online investment opportunities at first contact.

How the Alleged Scheme Reached Victims

The alleged network drew victims through Russian-language Facebook ads that promoted investment opportunities. Those ads were designed to reach Russian-speaking audiences and funnel interested users toward fake advisers who then called them directly. The use of native-language outreach likely helped create trust and made the scheme feel more familiar to potential victims.

Once contact was established, fake advisers allegedly coached victims to buy cryptocurrency and send it to fraudulent trading platforms. In many crypto investment scams, this stage is critical because victims are guided through a process that can feel technical, urgent and legitimate. A person who does not regularly use digital assets may rely heavily on the supposed adviser, which can make manipulation easier.

The platforms allegedly gave victims the impression that they were participating in real investment activity. Such platforms often mimic the appearance of legitimate trading dashboards, using account balances, charts and performance displays to convince users that their funds are active and potentially growing. Prosecutors said that when victims attempted to withdraw money, the platforms locked their accounts or demanded additional payments for supposed taxes and fees.

Victims Allegedly Targeted a Second Time

Authorities said the alleged scammers did not stop after taking the initial funds. Recovered data showed that victims were contacted again a few weeks after the initial fraud with offers to retrieve the stolen money. Gonzalez said the operators tried to exploit victims again with false promises to recover their funds.

This second stage, commonly known among investigators and fraud-prevention specialists as a recovery scam, can be especially damaging because it targets people who are already distressed and looking for help. Victims who have just lost money may be more willing to trust someone claiming to have special knowledge, access or technical ability to reverse the loss. In reality, prosecutors said these offers were another attempt to extract additional payments.

The double-hit structure of the alleged operation shows why crypto fraud enforcement increasingly focuses not only on individual wallets or websites, but also on databases, servers and operational software. If victim information remains in the hands of scammers, the same people can be repeatedly targeted under new names, new websites or new recovery pitches.

Why Investigators Targeted Servers

The Brooklyn District Attorney’s Virtual Currency Unit had previously seized or disrupted 400 domains tied to crypto investment fraud. However, replacement sites kept appearing, suggesting that domain seizures alone were not enough to stop the operators from rebuilding the scheme. In response, investigators shifted their focus toward the server infrastructure behind the websites.

This time, investigators targeted servers hosted by Eastern European and U.S. companies that held victim data and the software used to run the alleged fraud. The goal was to make it harder for the operators to quickly launch new sites and continue contacting victims. By disrupting the systems that store information and power the fraudulent platforms, authorities sought to interrupt the operation at a deeper technical level.

Server-focused enforcement can be more consequential than taking down a single website because a network of scam domains may depend on shared back-end tools. If those tools are disabled or seized, operators may lose access to databases, scripts, administrative panels and other resources used to manage the fraud. That approach also can help investigators identify additional victims, trace infrastructure and support future recovery efforts where possible.

Crypto Fraud Losses Remain a Major Concern

The case comes amid substantial reported losses linked to crypto-related fraud. Crypto investment scams accounted for roughly 84% of the $8.65 billion in investment-fraud losses reported to the FBI in 2025. Across all internet-crime categories, crypto-linked losses totaled $11.37 billion, approximately 54% of the $20.88 billion overall reported to the FBI in 2025.

Those figures show how digital assets have become a major feature of online fraud. Cryptocurrency transfers can be fast, cross-border and difficult for victims to reverse. While blockchain transactions are recorded publicly, identifying who controls a wallet and recovering funds can require specialized investigative work, cooperation across jurisdictions and rapid action before assets are moved or converted.

Authorities have seized about $300,000 so far in the Brooklyn case and are working to recover more. The amount recovered remains far below the tens of millions of dollars the scheme allegedly stole, highlighting the challenges that law enforcement faces when funds move through complex digital channels and international infrastructure.

Warning Signs for Crypto Investors

The allegations in the Brooklyn case point to several warning signs that investors should treat seriously. Unsolicited ads promising investment opportunities, especially those leading to direct contact from advisers, should be approached with caution. Fraudsters often build trust by speaking the victim’s language, referencing familiar communities and offering step-by-step help with unfamiliar technology.

Another major warning sign is pressure to buy cryptocurrency and send it to a platform controlled by someone else. Legitimate investment services do not need to rush users into transfers, and investors should independently verify any platform before depositing funds. If a platform blocks withdrawals and then demands extra payments for taxes, fees or verification, that can be a strong indication of fraud.

Recovery offers also require extreme caution. People who have lost funds may be contacted by supposed investigators, blockchain specialists or recovery agents who claim they can retrieve stolen cryptocurrency for an upfront payment. In many cases, such offers are designed to take more money from the same victim. Victims should seek help from appropriate authorities rather than sending additional funds to unknown parties.

A Broader Enforcement Push

The Brooklyn action reflects a broader shift in crypto crime enforcement toward disrupting the infrastructure that allows scams to scale. Fraud networks often rely on advertising pipelines, call operations, fake websites, victim databases and payment flows. Removing only one part of that chain may slow the fraud temporarily, but operators can adapt if the deeper systems remain intact.

By targeting websites and servers, prosecutors and federal investigators aimed to prevent quick relaunches and protect victims whose data may have been used for repeated approaches. The emphasis on Russian-speaking victims also shows how scam networks can tailor operations to specific communities, using language and cultural familiarity as tools of persuasion.

For the crypto sector, cases like this reinforce the importance of user education, platform due diligence and rapid reporting. Digital assets remain a legitimate technology with many lawful uses, but fraudsters continue to exploit the speed and perceived complexity of crypto transactions. FXCOINZ will continue monitoring enforcement developments as authorities pursue recovery efforts and investigate networks targeting investors online.

Frequently Asked Questions (FAQs)

What did Brooklyn prosecutors and the FBI disrupt?

They seized or disrupted 241 scam websites and 112 servers tied to an alleged crypto investment fraud network targeting Russian-speaking victims in the U.S.

How were victims allegedly targeted?

Victims were allegedly reached through Russian-language Facebook ads promoting investment opportunities, then contacted by fake advisers who guided them into buying and transferring cryptocurrency.

What happened when victims tried to withdraw money?

Prosecutors said the fraudulent platforms locked accounts or demanded more payments for supposed taxes and fees when victims attempted to withdraw funds.

Were victims contacted again after losing money?

Yes. Recovered data showed victims were contacted a few weeks after the initial fraud with false promises that their stolen funds could be recovered.

Were any arrests announced?

No arrests were announced in connection with the operation.

How much money has been seized so far?

Authorities have seized about $300,000 so far and said they are working to recover more.

Why did investigators focus on servers?

Investigators targeted servers because replacement scam websites kept appearing after prior domain disruptions. The servers held victim data and software used to run the alleged fraud.

How large are crypto investment scam losses?

Crypto investment scams accounted for roughly 84% of the $8.65 billion in investment-fraud losses reported to the FBI in 2025.

What should investors watch for?

Investors should be cautious of unsolicited investment ads, fake advisers, platforms that block withdrawals, demands for extra fees and recovery offers that require upfront payments.