How Brooklyn Prosecutors and the FBI Took Down a Massive Crypto Fraud Network Targeting Russian Speakers

By Staff Reporters
October 15, 2026, 8:35 a.m. EDT

In a major cross-border cyber enforcement operation, Brooklyn prosecutors and federal investigators have successfully dismantled a sophisticated cryptocurrency investment scam that allegedly defrauded Russian-speaking victims across the United States of tens of millions of dollars.

The coordinated strike, executed last week, targeted the digital backbone of an extensive illicit enterprise. According to Brooklyn District Attorney Eric Gonzalez, authorities seized or disrupted a staggering 241 websites and 112 servers linked directly to the fraudulent network. The operation represents the culmination of a rigorous three-year investigation into a multinational fraud ring that utilized online infrastructure, proxy networks, and internet protocol (IP) addresses rooted in Ukraine and several other Eastern European countries. Despite the sweeping technical takedown, law enforcement officials have not yet announced any formal arrests, suggesting that the investigation into the individuals behind the operation remains very much active.

The multi-million-dollar scheme relied on a carefully calibrated psychological and digital playbook designed to exploit vulnerable populations. Investigators revealed that the operators primarily drew in unsuspecting victims through targeted Russian-language advertisements displayed prominently on Facebook. These ads dangled the promise of lucrative, high-yield investment opportunities within the burgeoning digital asset sector.

Once individuals clicked on the advertisements and expressed interest, they were contacted by a cadre of fraudulent "advisers." Operating with a high degree of apparent professionalism, these scammers coached victims through the complex process of purchasing various cryptocurrencies and transferring those assets over to malicious, unauthorized trading platforms controlled entirely by the criminal enterprise.

For many victims, the illusion shattered only when they attempted to cash out their perceived earnings or reclaim their initial principal. At that critical juncture, the fake platforms would abruptly freeze their accounts. In other instances, the scammers would demand additional payments under the guise of covering supposed taxes, administrative costs, or network fees before any withdrawals could be processed.

Adding insult to injury, the criminal network frequently returned to victims who had already been financially devastated, employing a cruel second layer of deception. Recovered digital evidence and data analyzed by investigators showed that the scammers routinely contacted victims a few weeks after the initial fraud occurred, posing as independent recovery agents or legal representatives offering false promises to retrieve their stolen funds. In reality, this secondary tactic was merely another mechanism designed to extract whatever remaining capital the victims might have managed to salvage.

Prior to last week’s breakthrough, the Brooklyn District Attorney’s Virtual Currency Unit had managed to seize or disrupt approximately 400 separate domain names associated with similar crypto investment fraud schemes. However, the relentless adaptability of the perpetrators meant that whenever one fraudulent website was taken offline, replacement sites would quickly spring up in their place, allowing the criminal enterprise to continue operating with minimal disruption.

Recognizing that playing a game of digital whack-a-mole with individual domain names was insufficient to stem the tide, investigators shifted their strategic focus. This time, instead of merely targeting front-end web domains, law enforcement went after the foundational infrastructure. Authorities targeted the actual servers—hosted by a combination of Eastern European and U.S.-based companies—that housed vital victim databases, financial tracking logs, and the specialized software applications required to keep the scam running. By neutralizing these servers, prosecutors and federal agents aimed to inflict a crippling blow that would prevent the operators from quickly spinning up new fraudulent portals.

The timing of the operation underscores the staggering scale of cryptocurrency-related fraud currently plaguing financial systems worldwide. According to the FBI’s annual report for 2025, investment-fraud schemes accounted for a staggering 84% of the total $8.65 billion in losses reported to the bureau that year. Furthermore, when examining all categories of internet crime tracked by federal authorities, crypto-linked losses reached $11.37 billion, representing approximately 54% of the massive $20.88 billion overall losses reported nationwide.

While the technological takedown marks a significant victory for cyber enforcement agencies, the human toll remains severe. Brooklyn authorities have managed to seize approximately $300,000 in illicitly obtained funds thus far and are actively working through international channels to trace and recover additional assets. Prosecutors noted with dismay that the fraudulent operation was so ruthless and effective that multiple victims lost their entire life savings to the deceptive investment platforms. As the investigation continues, federal and local authorities hope the neutralization of these Eastern European servers will serve as a severe deterrent to transnational cyber syndicates targeting language-specific communities in the United States.