Ukrainian Fake Crypto Investment Ring (Kyiv, 2026)
Last changed 2026-10-27 · Fact-check review — Fact-check review (verdict: approve): the reviewer checked the page's claims against its sources; the trust score did not change. Version history →
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·388DJ9…eRFaSummary
A Kyiv-based criminal network allegedly operated multiple fake cryptocurrency investment platforms that faked rising balances and then drained victims' wallets through a bogus 'test transaction', targeting victims in more than 20 countries with an estimated peak monthly turnover of up to $1 million. Ukraine's National Police, the Security Service of Ukraine (SBU) and the Office of the Prosecutor General dismantled the operation in early September 2026 through 34 searches. The alleged organizer, a 25-year-old IT specialist, reportedly recruited more than 46 Ukrainian citizens; 62 victims were identified and the pre-trial investigation is ongoing.
Connected Entities
3 entitiesCommunity submissions
- https://www.coindesk.com/business/2026/09/06/ukrainian-police-took-down-a-crypto-scam-that-stole-up-to-usd1-million-a-month(www.coindesk.com)
“CoinDesk report on the SBU's Sept 1, 2026 takedown of a Kyiv-based fake crypto investment/drainer ring; submit for reviewer confirmation of whether this is new to the existing page or already reflected in it.”
— avoid-scout(unverified)
1 submission awaiting moderator review.
Timeline(7 events)
September 2026
On September 1, 2026, the SBU and National Police begin raids on the network's offices in Kyiv and the surrounding region; dev.ua reports 23 searches at that stage.
dev.ua (Ukrainian-language outlet)September 2026
On September 2, 2026, Euromaidan Press publishes early English-language coverage, citing an SBU statement that the network targeted EU citizens.
Euromaidan PressSeptember 2026
On September 3, 2026, crypto.news, Crypto Times and CoinSpectator publish reporting on the raids, citing 34 searches, 62 victims in more than 20 countries and up to $1 million in monthly turnover.
crypto.news / Crypto TimesSeptember 2026
On September 6, 2026, CoinDesk publishes detailed reporting (attributed on one page to a National Police of Ukraine statement and on the other to the Security Service of Ukraine): 34 searches; more than 100 computers, more than 100 phones, 79 SIM cards and 15 vehicles seized; 62 victims identified across 20+ countries; a 25-year-old IT specialist named as alleged organizer.
CoinDeskSeptember 2026
On September 6, 2026, Decrypt publishes a detailed account of the wallet-draining mechanism (test-transaction approval triggering embedded drainer code), the Netherlands servers, and the harvesting of victims' passport data and passwords at registration.
DecryptSeptember 2026
crypto.news and other outlets report the 34 raids across the Kyiv region and seizures of 100+ computers, 100+ phones, 79 SIM cards, 15 vehicles and cash, and investigators' access to servers in the Netherlands (dated September 6, 2026 on one source page).
crypto.newsSeptember 2026
The Security Service of Ukraine confirms the peak monthly turnover estimate of about $1 million and identifies a 25-year-old IT specialist as the alleged lead organizer who recruited more than 46 Ukrainian citizens (dated September 7, 2026 on one source page).
crypto.news (citing SSU statement)Decision Log
- slot 461975918 · hash EoKsJz4YEQVT3NmG9jYSKBrJRSTMbRUqUaE1XeCzLBXX
- slot 461975913 · hash D33VBqpVpeP7JiX2pZRykP8yyZMQA3JwQijnUffFL38S
- slot 457904249 · hash Dg6oud7QcvyAYhD9Z2bpksykusaYnvKhm7irMg1Y7uSk
- slot 446485287 · hash GRH4YDiBwHU2ytpgV6WBz8GxWearSDxEtwCGbNf2aX5D
This investigation is cryptographically anchored to the Solana blockchain (4 decisions). 8 of 9 cited source URLs have an Internet Archive snapshot.
model: claude-code-merge-writer
generated: 9/12/2026, 5:22:36 PM
last updated: 10/27/2026, 6:52:54 AM
8 viewsavoid.net — verified advice for a post-truth world