Project or site name: rMrBAz XRP memo wallet forwarders (weyshare / venanco / cbusy fake exchanges)
Incident date: 2026-10-25
Reported: 2026-10-26
Last updated: 2026-10-26
This follows up https://blockint.ai/c3?report=7c94921c-7a3e-49ad-a915-3850150605e2 on the XRP memo wallet rMrBAzHA…XoLD, which PCrisk listed for the 2024 fake exchanges weyshare[.]com, venanco[.]com and cbusy[.]com, and on the XLM memo wallet GBKVX2PY…SINA, filed in https://blockint.ai/c3?report=2d017335-c055-48e2-a67c-c448111caeb5 and also shown by weareoxis[.]com and globaxio[.]com (https://blockint.ai/c3?report=3b241106-c4c4-41c2-a54d-0a2e03a0b2cd). We traced where their funds went on-chain on 2026-10-25. Filed here: 21 addresses (19 XRP, 2 XLM), 3 of them low confidence. Wallets already…
Chains: XRP Ledger, Bitcoin, EVM, Tron, Litecoin +3 more
Project or site name: weyshare / venanco / cbusy fake exchanges (XLM wallet shared with cryptovos)
Incident date: 2026-10-25
Reported: 2026-10-26
Last updated: 2026-10-26
This follow-up files the XRP deposit wallet rMrBAzHAHBtY7DvkSf8JkAsxn89HBnXoLD and the other public scam wallet addresses listed for three 2024 fake crypto exchange sites: weyshare[.]com, venanco[.]com and cbusy[.]com. PCrisk, a community scam-warning site, lists rMrBAz among the scammers' wallet addresses on all three of its pages (weyshare[.]com and venanco[.]com published 2024-03-20, cbusy[.]com published 2024-03-26). The weyshare[.]com and venanco[.]com pages also list the XLM wallet GBKVX2PY…SINA, which cryptovos[.]com still shows as its XLM deposit address in October 2026; it is already…