⚠️ JUST IN: A threat actor who stole 320 BTC (~$21M) has returned the funds to the victim.

Authorities blocked centralized crypto exchanges from processing the attacker’s funds, making it difficult to launder the Bitcoin. Shortly after, the hacker returned the full amount.

@scammed / @DWCusers

⚠️ JUST IN: ZachXBT says Google should be held liable for allowing criminals to promote phishing sites through ads.

According to ZachXBT, over nine figures have been stolen via Google Ads phishing campaigns, with drainer sites frequently appearing as the top search results.

@scammed / @DWCusers

⚠️JUST IN: Uniswap CEO says scam ads keep returning despite years of fighting them.

The CEO stated they’ve been dealing with malicious wallet drainer ads for years, yet phishing sites continue to rank top on Google, contributing to millions stolen in crypto yearly.

@scammed / @DWCusers

⚠️ JUST IN: @dead has sold the usernames @evil and @star to notorious fraudster John for $8M.

Dead confirmed both usernames were sold for $4M each, making them two of the most expensive Telegram usernames in circulation, now owned by John Lick.

@scammed / @DWCusers

⚠️ JUST IN: The private keys of iotex_io were compromised, resulting in $8.8M stolen within the last hour.

One hour ago, an attacker compromised the private keys and gained access to a crypto wallet holding $8.8M. Shortly after, all funds were transferred out to wallets controlled by the attacker.

@scammed / @DWCusers

⚠️JUST IN: IoTeX exchange has been frozen after ~$8M theft.

The exchange stated it will cooperate with centralized exchanges and law enforcement in an effort to recover the funds.

@scammed / @DWCusers

⚠️ JUST IN: Threat actors have begun hacking crypto-related Discord servers to spread wallet drainer links.

Today, the UMA Discord was exploited and a malicious link was posted redirecting users to a phishing site, with at least one victim losing $40K after connecting their wallet.

@scammed / @DWCusers

⚠️ JUST IN: A victim lost $600K USDT after copying and pasting the wrong wallet address.

Address poisoning is now one of the leading causes of crypto theft, alongside social engineering and exploits, with victims losing six figures daily.

@scammed / @DWCusers

⚠️ JUST IN: ZachXBT says a major investigation is dropping on February 26 targeting one of crypto’s most profitable exchanges.

According to ZachXBT, multiple employees allegedly abused internal data to insider trade over an extended period of time.

@scammed / @DWCusers

⚠️JUST IN: New Trezor wallet update will now display a red warning next to address poisoning transactions.

The update now displays a clear red warning next to suspicious lookalike transfers as attacks continue to escalate, with over $70M stolen in 2026 so far.

@scammed / @DWCusers

⚠️ JUST IN: @cupid Telegram account has been frozen.

Per Cupid, all deals will resume shortly. Due to his account being frozen, customers have been left in the middle of ongoing transactions.

@scammed / @DWCusers

⚠️BREAKING: It appears Telegram is freezing all middleman-related accounts.

Scrizon, Cupid, and five other individuals have been frozen on Telegram. The reason remains unknown.

@scammed / @DWCusers

⚠️COMMUNITY ALERT: @scrizon has permanently lost his Telegram handle after it was frozen.

The handle was not an NFT, meaning it’s unrecoverable and permanently gone. If it gets released, a scammer will most likely buy it, so stay cautious from now on.

@scammed / @DWCusers