Investigators from the Brooklyn District Attorney’s Office have dismantled multiple computer servers tied to an international cryptocurrency fraud syndicate, concluding a months-long inquiry into operations that targeted American investors. The coordinated sweep, launched on the night of October 6, spanned three time zones under the direction of Alona Katz, chief of the office’s Virtual Currency Unit. By 2 a.m., several critical servers hosting the illicit platforms went dark, marking a significant overseas enforcement action managed by a local district attorney’s office. The operation comes amid a sharp rise in digital asset fraud nationwide, with Federal Bureau of Investigation figures showing American losses reached $11.4 billion in 2025, an amount roughly three times higher than figures documented three years earlier.
Targeting Immigrant Communities Through Fabricated Trust
The inquiry revealed that the network concentrated its operations on specific immigrant communities within Brooklyn, including Brighton Beach and Sheepshead Bay, which are home to large Russian and Ukrainian populations. Scammers communicated primarily in Russian, presenting themselves as fellow expatriates who had built wealth through cryptocurrency trading and commercial ventures in the United States. This shared cultural background allowed the operators to foster trust before persuading victims to deposit money on fraudulent investment platforms.
The deception initially involved small sums of a few hundred dollars. To reinforce confidence, operators permitted victims to withdraw modest profits during the initial phases of the scheme, creating an illusion of solvency and high financial returns. Once the victims committed significantly larger portions of their savings, the operators severed contact or demanded steep processing fees before freezing the accounts entirely.
Tracing Digital Assets and Identifying Regional Footprints
The Brooklyn Virtual Currency Unit, founded in 2023 by District Attorney Eric Gonzalez, examined transactions across the Bitcoin and Tether ledgers to track the flow of capital. Gonzalez set up the specialised wing following reports that victims had previously struggled to find technical assistance through local police channels unfamiliar with blockchain mechanics. Katz, a former Manhattan cybercrime prosecutor, directed analysts to track funds moving between digital wallets while cross-referencing ledger data with intelligence on the websites hosting the schemes.
Digital evidence showed distinct similarities across the visual branding and core software used by the fraudulent portals. These patterns linked the underlying online operations to network hosts situated in Eastern Europe, primarily in Ukraine. While blockchain analysis mapped the movements of funds from Brooklyn wallets, investigators recognised that removing public websites provided only temporary disruption, as operators routinely deployed replacement domains.
Dismantling Technical Architecture Beyond Foreign Borders
To achieve lasting disruption, the unit devised undisclosed investigative methods to identify the specific host servers powering the operations rather than targeting public-facing sites alone. Taking down the core infrastructure required coordinated timing across three separate jurisdictions to prevent server administrators from shifting data or activating backup mirrors.
The October 6 operation demonstrated that curbing cross-border cryptocurrency fraud requires pairing financial ledger tracking with physical technical disruptions. District attorneys are increasingly relying on network tracing to bridge the gap between local complaints and cyber syndicates operating from foreign territories, establishing infrastructure seizure as an essential countermeasure against complex digital asset schemes.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics
