Between March and October 2024, a target initiated a sophisticated scam and convinced two different victims to send BTC to two different addresses identified below.

Victim1 – Sent nearly $2000 of BTC to the scammer in October 2024 in multiple transactions. 

Victim 1 sent to the following scam address

bc1q9qhg5gz66wg038g9a0kua5cttgz4kp5653ye8g

Victim 2 – Sent nearly over $300 of BTC to the scammer in March 2024 in one transaction. 

Victim 2 sent to the following scam address

bc1qd4w398z9ths9wm56mrhswde0epxkuhc89ylgh2

Fortunately, your agency had access to a monitoring tool and on November 14, 2024, you received a notification that both addresses engaged in wallet hops.

Using an advanced analytical tool, track the addresses and attempt to identify a regulated exchange used by the target to liquidate the cryptocurrency. 

NOTE: IF USING CT PRO BE SURE TO CHECK THE CEX TAB IF THERE’S AN INDICATION OF CEX BEING USED. LABEL THE NODES ON THE GRAPH. NO DATE FILTERS NEEDED.

If you are only able to identify an unregulated DEX exchange/, prepare an email and send to the identified unregulated DEX exchange/Bridge law enforcement contact: Byron Boston, byron@ctpro.io to request additional information. 

Be sure to include the target address, transaction hash, and any DEX exchange/Bridge address identified. Byron takes great pride in his DEX/Bridge so usually responds within 1-2 minutes of receiving an email notification.

Once Byron responds, continue to trace until you identify a regulated exchange.  NOTE: IF USING CT PRO, YOU WILL NEED TO START A NEW GRAPH. SET A DATE FILTER TO: NOVEMBER 11 – 18, 2024. TO ADD CLARITY TO YOUR GRAPH, ADD THE INCOMING TRANSACTIONS TO ANY INFORMATION THAT YOU RECEIVED FROM THE DEX EXCHANGE/BRIDGE

Once identified, document the transaction hash, name of the exchange, suspect address and exchange deposit address.