Crypto scam reports
Search community and official reports of crypto scams: wallet addresses, scam websites, pig-butchering and investment fraud, phishing, hacks and sanctions designations. Every reported address and website has its own page. Reporting a scam is free and needs no account.
Report a crypto scam · How to report a crypto scam
Newest reports
- 0xf471…8da0: ulinkexclub[.]com ('Ulink') scam follow-up: relay and next hop of the victim's 148,089 USDC, and the 4.31M USDT cash-out wallet · Pig butchering · 2026-10-24
- TVhUQN…VUkE: AccGN[.]club 'AI trading' scam follow-up: three TRON bridge receivers, a TRON pass-through and a BSC wallet paid by listed Acc… · Investment scam · 2026-10-24
- 0x3670…17a8: FT-ALPH / 'Orion Union Trading' (fltraderus[.]com) scam follow-up: wallet that took 22,639 from a victim-reported wallet to Bi… · Pig butchering · 2026-10-24
- 0x1311…e00d: ofxsvip[.]com fake 'OFX' platform follow-up: two wallets one hop further, paid by a victim-reported wallet and by 0x3854c632 · Pig butchering · 2026-10-24
- 0x7e7f…70d8: Aztec 2.0 rollup exploit (2026-06-17) follow-up: six wallets paid 1,101.9 ETH by consolidation 0x69923e52, then Tornado Cash a… · Hack · 2026-10-24
- TX9Jex…Y8vN: Nexus Equity (nexusequity[.]com) scam follow-up: TRON wallet that received 123,433 USDT from the listed payment address TKY7 · Investment scam · 2026-10-24
- 0xe8aa…aab2: GOXCOINS[.]com (FBI-seized domain) scam follow-up: the two outflow wallets that took 1.51M from its consolidation, then Butter · Pig butchering · 2026-10-24
- 3KoHAB…DfPM: Wellington Harbor Cap / echelonmark[.]com scam follow-up: Bitcoin wallet that collected the victim-reported address's outputs · Pig butchering · 2026-10-24
- DCpz2V…ALHv: Dogeparty 2014-era web-wallet drain on Dogecoin (2026): DOGE consolidation and token sweeper addresses and downstream wallets · Hack · 2026-10-24
- GBO7VU…2WXC: YieldBlox (Stellar Blend V2 pool) exploit follow-up (2026-02-22): four Stellar attacker accounts · Hack · 2026-10-24
- rwt8PJ…Fgb5: tx (formerly Coreum) XRPL bridge drained of 199,916 XRP (2026-08-09): attacker's two XRP Ledger receiving accounts and Ethereu… · Hack · 2026-10-24
- Dash wallet scam sites listed in Dash Core Group's documentation: dash-wallet[.]com, electrumdash[.]org and 4 more · Phishing · 2026-10-24
- 193 phishing domains impersonating Stellar wallets LOBSTR and Freighter on MetaMask's and ScamSniffer's blocklists (Oct 2026) · Phishing · 2026-10-24
- 242 phishing domains impersonating XRP Ledger wallet Xaman (Xumm), plus Sologenic and GateHub, on public blocklists (Oct 2026) · Phishing · 2026-10-24
- Fake Flare Network / FXRP staking site fxrpntwork[.]com took 3.4M XRP from 71 investors (Oct 2025), per Seoul police · Scam · 2026-10-24
- xrpl.js npm supply-chain backdoor (2025-04-21): five malicious xrpl versions sent XRPL secret keys to 0x9c[.]xyz · Hack · 2026-10-24
- bc1qh0…6wq9: mewchain[.]exchange fake MEW platform follow-up: two Bitcoin sweep addresses that collected the victim-reported deposits · Pig butchering · 2026-10-24
- 0xbb8f…7b35: AccGN[.]club 'AI trading' scam follow-up: two Ethereum gas wallets, a BSC bridging wallet and four TRON wallets incl. TNgvWRdn · Investment scam · 2026-10-24
- 0x8191…5466: Nexus Equity (nexusequity[.]com) 'IOCP' scam follow-up: second gas wallet 0x8191ab46, which cashes out to the cluster's KuCoin… · Investment scam · 2026-10-24
- 0x95d9…5fb1: xn--os-g7s[.]com (Eos) CryptoScamDB follow-up: site's suspected address 0x95d986f9 · Phishing · 2026-10-24
- 0x0000…0000: Fake Galxe/Mezo 'checker-tasks' drainer follow-up: funder 0x000037bb (Etherscan Fake_Phishing188250, scam-flagged on Blockscou… · Phishing · 2026-10-24
- TNBtBt…Ti4X: velxton[.]com fake trading site follow-up: TRON (USDT-TRC20) deposit address displayed on its deposit page · Pig butchering · 2026-10-24
- 0x00eb…3f59: ethnow[.]org (Trust-Trading) CryptoScamDB follow-up: site's suspected address 0x00eb4cc5 · Scam · 2026-10-24
- 0x7ff8…e055: elon-gives[.]com (Trust-Trading) CryptoScamDB follow-up: site's suspected address 0x7ff8caeb · Scam · 2026-10-24
- 0xa0d4…b2d0: quarkchain[.]de (QuarkChain) CryptoScamDB follow-up: site's suspected address 0xa0d4bee1 · Phishing · 2026-10-24
- 0xb29a…7ceb: quarkchain-ico[.]io (QuarkChain) CryptoScamDB follow-up: site's suspected address 0xb29a0b9b · Phishing · 2026-10-24
- 0xde4d…4c7f: GOXCOINS[.]com (FBI-seized domain) scam follow-up: consolidation that received all of the victim-reported wallet's 58,158 USDC · Pig butchering · 2026-10-24
- 0xdfe9…2037: Melloncrypto[.]com fake trading platform follow-up: gas wallet that funded two victim-reported deposit wallets · Investment scam · 2026-10-24
- 0x8399…b8b3: ulinkexclub[.]com ('Ulink') scam follow-up: consolidation 0x8399bc56 and gas-giving deposit wallet 0xe86d92ec · Pig butchering · 2026-10-24
- 0x3854…977f: ofxsvip[.]com fake 'OFX' platform follow-up: two wallets paid by both victim-reported deposit wallets · Pig butchering · 2026-10-24
- 0xf0b4…41c6: coinbaseai[.]ai / ethaigood[.]com fake exchange follow-up: six relay and hub wallets in the deposit address's round trips and… · Pig butchering · 2026-10-24
- 0xf09a…c170: MakerDAO legacy auction-keeper drain follow-up (2026-10-06): malicious adapter module created by the attack contract, per Cert… · Hack · 2026-10-24
- bc1qwx…7jxm: BigONE exchange exploit follow-up (2025-07-15): attacker's Bitcoin and two Solana addresses named by SlowMist and Lookonchain · Hack · 2026-10-24
- terra1…m28n: CL8Y DEX (Terra Classic) incident follow-up (2026-10-15): Terra Classic relay wallet [HACKER_C] per CL8Y's incident archive · Hack · 2026-10-24
- 0x6061…e2cc: 'J·B·G·AG' fake exchange follow-up: USDT-ERC20 and ETH deposit address displayed on jbgags[.]com's deposit page · Scam · 2026-10-24
- 0x084e…25c8: 'Worldex' fake exchange follow-up: two collection wallets and gas funder linked on-chain to the tipster-supplied address (low… · Scam · 2026-10-24
- 0xea9d…489a: cwgmain[.]cc fake exchange follow-up: two intermediary wallets first funded by deposit address 0x1fae712e (316 ETH forwarded) · Pig butchering · 2026-10-24
- 0xfd01…e5c0: qsjt66[.]com / Bifrost-wallet scam follow-up: five operator-side wallets around DOJ forfeiture target 0xe6d328 (gas funding an… · Pig butchering · 2026-10-24
- 0x9ed8…e4f8: Aztec 2.0 rollup exploit follow-up (2026-06-17): three onward wallets that moved the attacker's ETH, incl. a 10 ETH Tornado Ca… · Hack · 2026-10-24
- 0x7314…8300: NGRAVE LIQUID phishing follow-up (2026-10-17): 39 Hyperliquid accounts holding ~3,590 XMR1 bought with the stolen funds · Phishing · 2026-10-24
- kii1a5…lrw9: KiiChain exploit follow-up (2026-08-22): attacker's kii1 vesting/helper accounts, second attacker wallet and exploit helper co… · Hack · 2026-10-23
- thor16…n84q: THORChain vault exploit follow-up (2026-05-15): malicious node operator address named in THORChain's own exploit report · Hack · 2026-10-23
- 0x7b58…a1f9: Gravity Bridge exploit follow-up (2026-05-29): theft wallet, deployer, rogue validator 'julia666' and its Gravity, Osmosis and… · Hack · 2026-10-23
- cosmos…6tjt: Fake 'ATOM Airdrop' governance proposals on Cosmos Hub, Osmosis and Stride (Apr-Jul 2026): 14 vetoed proposals, 5 proposer acc… · Phishing · 2026-10-23
- mantra…hwva: MANTRA Chain Cosmos EVM exploit (2026-08-20): 720.9M MANTRA (~$3.6M) taken from burn address and genesis multisig, attacker wa… · Hack · 2026-10-23
- secret…03vm: Axelar-Secret IBC bridge exploit (2026-06-10): ~$4.67M unbacked saToken mint, attacker's Secret, Axelar, Osmosis, Ethereum and… · Hack · 2026-10-23
- init1m…m89u: Initia exploit follow-up: attacker's Initia L1 account init1mkfz...m89u sent the linked fake-mint transaction and shares the E… · Hack · 2026-10-23
- 0xdd92…edfa: Initia L1 unbacked-mint exploit (2026-10-23): reported ~$2.7M bridged to Ethereum, attacker and holding wallet per Spreek and… · Hack · 2026-10-23
- cosmos…6c4n: Neutron governance takeover (2026-09-22): attacker's Cosmos Hub address per Cosmos Labs, plus Neutron, Noble and Ethereum wall… · Hack · 2026-10-23
- 0xee2e…bd65: Meter chain and Passport bridge exploit (2026-09-23): unbacked MTR/MTRG minted, 1B wMTRG on BNB Chain, two attacker addresses… · Hack · 2026-10-23