Between March and October 2024, a target initiated a sophisticated scam and convinced two different victims to send BTC to two different addresses identified below.

Victim1 – Sent nearly $2000 of BTC to the scammer in October 2024 in multiple transactions. 

Victim 1 sent to the following scam address

bc1q9qhg5gz66wg038g9a0kua5cttgz4kp5653ye8g

Victim 2 – Sent nearly over $300 of BTC to the scammer in March 2024 in one transaction. 

Victim 2 sent to the following scam address

bc1qd4w398z9ths9wm56mrhswde0epxkuhc89ylgh2

Fortunately, your agency had access to a monitoring tool and on November 14, 2024, you received a notification that both addresses engaged in wallet hops.

Using an advanced analytical tool, track the addresses and attempt to identify a regulated exchange used by the target to liquidate the cryptocurrency. 

NOTE: IF USING CT PRO BE SURE TO CHECK THE CEX TAB IF THERE’S AN INDICATION OF CEX BEING USED. LABEL THE NODES ON THE GRAPH.

If you are only able to identify an unregulated DEX exchange/, prepare a document and send to the identified unregulated DEX exchange/Bridge law enforcement contact (NOT REALLY!) 

Be sure to include the target address, transaction hash, and any DEX exchange/Bridge address identified.

Click on the below link to identify the Bridged transaction and continue to trace until you identify a regulated exchange.

NOTE: IF USING CT PRO, SET A DATE FILTER TO: NOVEMBER 11 – 18, 2024. TO ADD CLARITY TO YOUR GRAPH. ADD THE INCOMING TRANSACTIONS TO ANY INFORMATION THAT YOU RECEIVED FROM THE DEX EXCHANGE/BRIDGE

Once identified, document the transaction hash, name of the exchange, suspect address and exchange deposit address.

a9132102-3257-4796-8c79-3c6f7ab36da1

IF FILE WON'T DOWNLOAD, SEE INFORMATION BELOW:

ADDRESSES BRIDGED TO USDT ON ETH BLOCKCHAIN:

11/13/2024 - 3372.43 - 0x964412FED58A8E78575a941ba72dcC6d0C19465e

11/13/2024 - 14,965.4 - 0x808C56fE2Be062B57c864b1777D7362208e3D312

11/14/2024 - 2052.01- 0x208FF1bf311264383752AfBc1Fbdf9246018eb7C