⚠️ JUST IN: Per source, 2,809 wallets were drained in February, with $2.97M stolen.

Over 6,000 suspicious approvals have been detected in 2026 so far, with the largest single theft totaling $388K across nearly 3,000 victims.

@scammed / @DWCusers

⚠️ JUST IN: Bitrefill has been offline for over 2 days.

Users are raising suspicions that the platform may be hiding something they do not want public, potentially an insider-related hack or a security breach.

@scammed / @DWCusers

⚠️BREAKING: Coinbase partnered with Microsoft and law enforcement to trace and shut down a phishing panel.

According to Coinbase, the service was developed by a Pakistani developer and was used to redirect Coinbase victims to phishing pages where they were social engineered into entering their 2FA codes.

The panel has since been taken down and users of the service are now under investigation.

@scammed / @DWCusers

⚠️ JUST IN: A crypto whale has reportedly been robbed for $24M in a violent home invasion.

The victim publicly stated he was kidnapped and forced to transfer $24M in various cryptocurrencies while under threat.

The stolen funds are being swapped into XMR in real time.

@scammed / @DWCusers

⚠️ JUST IN: A hacker exploited the casino BC GAME and illegally profited $4.3M.

The attacker exploited a vulnerability in a third-party game, allowing them to steal over $4.3M from the platform.

The casino is now offering a $500K global bounty to players worldwide.

@scammed / @DWCusers

⚠️JUST IN: ZachXBT has been paid a $500K bounty for providing leads on the attacker behind the BC.Game exploit.

BC.Game publicly thanked ZachXBT for identifying leads tied to the individual responsible for stealing $4.3M from the platform.

@scammed / @DWCusers

⚠️BREAKING: John Lick has been arrested, the FBI has confirmed.

Authorities state he was arrested yesterday on the island of Saint Martin by French authorities.

During the arrest, The FBI seized three Trezor devices along with multiple cryptocurrency-related hard drives.

@scammed / @DWCusers

⚠️JUST IN: One week before his arrest, John Lick moved his Telegram usernames through multiple wallets.

The move appears to have been an attempt to prevent his $10M+ Telegram username collection from being seized by the FBI.

If he refuses to give up the usernames and stolen crypto assets, he could face up to 50 years in prison.

@scammed / @DWCusers

⚠️ JUST IN: The head of the FBI issued a warning to fraudsters following John Lick’s arrest.

“If you attempt to defraud hardworking American taxpayers, the FBI and our partners will find you no matter where you try to hide.”

@scammed / @DWCusers

⚠️UPDATE: The attackers behind the $24M physical robbery theft have begun laundering the stolen funds.

Millions in stolen Bitcoin and DAI have been moved and split across multiple wallets after the victim was violently robbed in the UK for his cryptocurrency

@scammed / @DWCusers

⚠️ JUST IN: The attackers behind the $24M physical robbery of a crypto investor have begun splitting the stolen funds.

On-chain activity shows the funds are being distributed across multiple wallets, with $3M sent to three wallets while about $11M remains in the original wallet tied to the theft.

@scammed / @DWCusers

⚠️JUST IN: Real Madrid players’ X accounts appear to have been compromised.

A threat actor most likely paid an insider at X (Twitter) to gain access to the accounts and promote a memecoin across the compromised profiles.

Do not buy or interact with the token being promoted as it will likely end in a rug pull.

@scammed / @DWCusers

⚠️ JUST IN: Ledger is facing criticism after claiming it had not been hacked in 10 years.

ZachXBT says Ledger has been compromised multiple times in recent years, with the latest incident on January 5, 2026 contributing to social engineering scams where users lost millions.

@scammed / @DWCusers

⚠️JUST IN: Threat actors have begun phishing Signal users while impersonating Signal support.

Signal says this phishing bot has taken over government official and other high-profile accounts after attackers social engineered victims into sharing their SMS verification codes.

@scammed / @DWCusers

⚠️ JUST IN: Notorious crypto scammer Pink Drainer has moved funds after 7 months of inactivity.

Pink Drainer, whose phishing tools have been linked to over $85M in stolen crypto, just moved $117K from known wallets earlier today.

@scammed / @DWCusers

⚠️JUST IN: Fragment has just sold its most expensive anonymous number

The number +888 8 777 was just sold for 651,358 TON (~$882K), making it the most expensive anonymous number ever listed on Fragment.

@scammed / @DWCusers

⚠️ JUST IN: Trust Wallet has added real-time protection against address poisoning attacks.

Trust Wallet will now automatically run a security check on every transaction before you send money, warning users when something looks suspicious.

@scammed / @DWCusers

⚠️JUST IN: An older couple were robbed in france after attackers posed as police, stealing 14 BTC (~$1M).

Three men posing as police officers targeted a couple in their 50s in Versailles, France, violently forcing them to transfer over $1M in Bitcoin to the attackers’ wallets.

@scammed / @DWCusers

⚠️JUST IN: ZachXBT has received a $150K USDT bounty from BC Game for identifying an exploiter.

ZachXBT submitted a detailed report along with an on-chain graph tracing the attacker’s wallet responsible for stealing ~$4.3M through a third-party game exploit.

@scammed / @DWCusers