The Brooklyn District Attorney's Office, led by Eric Gonzalez, has seized 241 scam domains and 112 servers used in an international cryptocurrency fraud scheme targeting Russian speakers. Executed alongside the FBI across three time zones, the law enforcement operation targeted cloud infrastructure hosted by firms in Ukraine, Eastern Europe, and the US that stole tens of millions of dollars from victims.
Double-Targeting Fraud Scheme Exposed
The syndicate lured victims through Russian-language Facebook advertisements promising lucrative crypto investments. Callers posing as investment advisors coached targets through opening accounts and transferring funds to designated deposit addresses. When victims later attempted to withdraw their assets, operators locked their accounts or demanded fictitious tax payments and additional fees.
Data extracted from the seized backend infrastructure revealed that the network also ran a secondary recovery scam. Weeks after robbing victims of their savings, operators contacted them again under the guise of asset recovery services, taking advantage of victims a second time.
- 241 scam domains and 112 servers were disrupted across three time zones.
- Investigators have recovered $300,000 of the tens of millions in stolen funds.
- Scam operations relied on server hosting in Ukraine, Eastern Europe, and the US.
- Victims were targeted twice, first by fake platform advisors and later via fraudulent recovery services.
Expanding Crackdown on Cybercrime Infrastructure
Prior to this takedown, the Brooklyn District Attorney's virtual currency unit had already disrupted 400 domains linked to fraudulent investment schemes. However, operators consistently deployed replacement websites, prompting law enforcement to target the physical and cloud server networks powering the front-end portals. Depriving the group of its server layer removes access to victim databases, site source code, and operational software.
This enforcement action aligns with broader federal initiatives addressing international fraud networks. Federal authorities seized $25 million connected to global scam syndicates in July, while the US and UK signed an international pact in September to target overseas scam compounds. As local prosecutors navigate international jurisdictions, these actions mirror wider discussions around enforcement oversight, such as ongoing scrutiny over crypto regulatory frameworks.
Why It Matters
Targeting backend server infrastructure rather than relying solely on domain-level injunctions represents a crucial tactical evolution for law enforcement agencies combating crypto syndicates. While domain seizures temporarily disrupt front-end portals, seizing server assets dismantles the underlying software databases, victim records, and automation tools necessary to sustain global operations. Nevertheless, with prosecutors recovering just $300,000 out of tens of millions stolen, the case underlines the extreme difficulty of returning capital to victims once crypto assets cross international borders.
