Topic: Altilly Exchange FAKE Refunds, Possible Exit Scam (Read 981 times)

I didn't get any coin back

Victims of Altilly should resolve their case through [email protected]. I've retrieved my coins completely, thanks the vaultech team.

It is very great news for the community that you have received your lost fund even after 2 years of the fund you have lost. Would you like to share the details so the community can judge and they can know either you are telling the truth or there is anything wrong.

I have received my lost XQR after 2 years from the Team last week.
around 519K XQR

where are my coins chuck charles?
still after the approval nothing heard form you!

where are my coins when i gave you the proof like you said you vanished mr chuck?

So an update on this - I gave my proof and was told I would receive a refund of 20,000 egem in the form of ALT2020 tokens pegged to 1USD


I was then told that within 30 days I will receive an email further instructions. I have received no such email.

Base on the post of the OP I came to know that you will get your money back if you can provide the deposit receipt on your email of Altilly. As you have deposit receipt you should contact with Altilly and if they not scammed then they obviously pay you. But if they are scammer then they will deny to pay you.

What up people,

Just the other day I was able to get into my old yahoo account and I going through my messages I found my emails from altilly and the deposits and transfers I made. I was wondering if theres  any way possible I can get ahold of my coins again as it would very help my situation right now! If anyone has any advice or even knowledge about what I can do or also wtf happened, it would be tremendously appreciated.im not the most intelligent person when it comes to all this but I know a fair amount. Thank you guys!

Guys, tell me, does the creation of a topic in this section somehow affect the respondent? As I see some users have expressed their opinion and absolutely nothing has changed. The problem with the fake refund from Altilly has not been resolved.

Altilly re opened with new name .
its same guy behind




https://www.crypto-city.com/PF.Base/file/pic/photo/2022/02/21f9ccf6f4b5c50a4a95168831a9425d.png

https://twitter.com/AltillyComScam

If they have access the deposit wallet ID and if you have the access of the wallet id from where you have deposited the fund then it will be easy to verify even it doesn't require verify as they will just refund to the address from where they have received the fund.

---

But according to the post of the op wallets have been deleted. So, if wallets have been deleted then how to verify to which wallet the payment has been received and from whom??

There are ALOT of accusations here about the refund system being a scam

I forgot about the whole altilly scenario if I'm honest until I saw this thread and realized I had funds on there, 20,000 EGEM. As EGEM is still very much active I want it back!

I checked my email and I have correspondence from them asking for proof. Unlike a lot of people here, I do have the confirmation email in my inbox and have sent them proof.

I will report back if they are true to their word and give me a full refund for my EGEM. If they don't give it back, then you will have your answer.

only the owner of the coins will be able to confirm that this is his wallet on the exchange, just 1 signed message is enough from any address from which the deposit was made. No one else will be able to sign messages from the addresses from which the deposits was made by the owner. Why is it so difficult to understand such simple and obvious things, especially for people with a reputation like yours? It looks like you bought these accounts or boosted the rating of the account or are just a figurehead protecting the exchange.

Think it yourself. They have the wallets, all transactions are onchain and no multiple person deposited from the same address. Anyone trying to exploit repayments would need access to your address to take your funds if deposits was sent back where they came from.

As the site had been hacked and they have no backup of that database, I do not think it is possible for them to refund base on the information of deposit from a wallet. Think it yourself what will happen if same claim occurred by multiple person? You may think it is not possible as you are a legit users but there are a lot of people who will try to take a chance for the exploit of the site. I think for now they have no alternative to verify except the email which was on the receipt on the email.

If I provide my deposit address, deposit tx,  screenshot of tx in wallet and signature from the address with largest amount to that deposit you are able to verify this, right?

I also have to get something off my chest here.

My first login was on:
From: altilly [mailto:[email protected]]
Sent: Friday, 25 December 2020 14:34
To: [email protected]
Subject: Successful Login

I, never received a deposit confirm mail,
As I only registered about 10 hours before the HACK.

I made my first and only deposit from my Exodus Wallet:
send USDT from my Exodus Wallet,
https://etherscan.io/tx/0x9ea245c255df7478b32c2012b40ded0ddb36fc685e812235f17a8517d58fd642
"For this" I received "NO" deposit mail.
(SPAM folder was checked immediately) !
How am I supposed to prove this?

The "USDT" were immediately exchanged on their exchange against BTC to buy the Jackpot 777 COIN for it.
For this I have created 10 orders, of which 2 orders were executed. For this I have received 2 x Withdrawal Confirmation mails,
which I have also sent you in the original.

AGAIN: how should I prove this ? Without Deposit Mail ??
I have already written to you several times, but you insist on these Deposit Mails.
I do not know what to do,
and it is after all (or only) about approx. 600 USD

Greetings
sirrok

Altilly representatives, why are you not responding? What are the options for resolving the problem with refunds for users?

Isn't it easier to process one signed message confirming the address than studying all those screenshots, typing txids and amounts, making a summary of them? Saves a lot of time on your side.

As I said here, refunds don't have to be completed all at once, but gradually by processing legitimate claims (users who signed their addresses) first. It only takes one verification per address, then you can ask the address owner to list the txids of the output tx that end up in your hot wallet.

For users sending funds from a centralized wallet, I prefer the video capture proof from the phone showing a detailed history per their wallet withdrawal to your exchange deposit address.

I've heard something similar before. I repeatedly tried to resolve the issue of a refund amicably through Charles, but, like you, he suggested that I contact him later, citing a heavy workload. I periodically wrote to him and in the end we got to the point where it all started "no screenshots of deposits from the email - no return" and no other options are offered or suitable. Time wasted. As a result, more than a year has passed since the hack (output scam) and you propose to wait again, it is not clear what and how long.
Nayiem, we are adults and let's get to the point. Do you agree to accept refunds for users who can sign the address? (or offer some of your conditions for confirming ownership of the funds, but that it would be feasible for all users, and not the circus that you came up with email screenshots, requesting them almost a year after the event).
Give us a clear YES or NO answer. If you agree, then announce the approximate terms, if not, then we will use other means to get a refund from you. We need to count on something and plan our further actions.

Deposit emails don't tell if funds are deposited from an exchange either, you could have set up a simple form asking for deposit tx and a option field if it was from personal wallet or exchange. Then you could check personal tx,  subtract withdraws from deposits and refund based on this.
Then you could ask for further proof for deposits from exchange.

The team didn't consist of only you and lead dev before this happened..

The issue with sending funds back to the wallet where it came from is that some users have deposited funds from an exchange.
I'm not sure if this is something that people want.

I've been in touch with the hosting provider. I can guarantee you that it was not an inside job. Also by looking at the living circumstances from the lead developer of Altilly, I can tell that this wasn't planned.

Requiring emails is just BS. Exchange wallets is easily recognizable, funds could be sent back to the address they came from.
Messages about this in refund channel was DELETED on the fly.

This was an inside job, then they just made up a lot of crap to keep people busy in order to avoid jail.

I don't think Nayiem did it, but also seem he don't understand blockchains very well.

You mean the punching bag and the so-called decision maker  
I'm definitely not the leading tech guy behind Altilly and have never been.

I've joined the discussion and will read up in this thread and provide answers in a moment.

---

So to answer the above questions.

The so far best method is to analyze the screenshots we request from users.
We have a method to verify the content of the screenshot which we are not able to share at this time.

All of the refunds could have been easier if we had honest users.
Unfortunately, people have been sharing their wallet address, txid, names and emails in telegram channels and on forums online.
There are even communities where certain people already know the addresses from their community members.
Because of this, we had to deal with a lot of fake refund claims.

During the initial refund claims, we even had to deal with people that created a youtube tutorial on how to claim refunds with funds they never had, simply by copying tx ids from other users.
Or by checking the master wallet addresses of Altilly, and then just copy the txid and claim a refund based on that.

--

We've also stated in the Altilly_Refund channel on telegram that we will first handle refunds using the current method.
Once those are all handled (over 85k), we will look in to those that can verify the claims in other ways.

--

Having only a team (if that's what you can call it) of 2 members, and after being in a full year of complete depression with the rest of the team falling apart, I can tell that it's a shitty situation that no one deserves.
We will do whatever we can to make sure that everyone is being refunded. It's going to take a lot of time and patience, but we will get there.

--

About the person that wrote in this thread that our developer was incompetent about not having backups and losing everything. Please check this page https://qredit.io/altilly
I would have the same reaction as you, no arguing about that. But perhaps you want to take a look at that page and read the complete story before saying those things.

Once i have handled all refunds for those who qualify with deposit confirmation emails
i will be happy to explore the possible option the signature may provide.

True that tx hash doesn't exactly provide a proof of a wallet ownership, hence both of the victims here are offering a signed message and/or a screenshot of their desktop wallet showing the address. If you ask me, that is actually a win-win solution, you got your prove and could move on from this refunding issue sooner, while they got their right. I really can't fathom the reason why a signed mesage from the original wallet is proof of ownership enough.

I think a little bit faster way to get to the bottom of this issue is by inviting the decision maker or the one specifically handed the task to clear the refunding issue here.

They were all trashed and gone by the time you announced your refund policy. Maybe you invite Nayiem to the conversation as he seems to be the tech guy behind Altilly?

After the hack occured most of the rest of the team moved on.  Myself and nayiem are doing the best we can to refund users. 

Well, if you are not competent in this matter, then why are you doing this? Invite someone who understands this, if any. Only it seems to me that your entire so-called team consists of 2 people - you Charles and Nayiem. Well, the rest are secondary representatives (admins, moderators, etc.), who do not play any role.

Blockchain does not provide proof that you own the address it was sent to. I will try to get more details on the signatures. 

Blockchain has proof that even you or the scammer can't change anything. If the funds are successfully sent to your hot wallet, then it is proof and you can't deny it. Very strange, I've never even seen a reputable exchange use this method.
The recovery method you requested is a waste of time for the real owner of the funds. Even people new to crypto know that blockchain verification is more credible than screenshots. Does your team not have competent resources to analyze blockchain transactions?

If you insist on generalizing claim terms like that, your problems will never go away at least refunding the user who can sign the address.

Screenshots can be easily manipulated this is correct. That is why we only accept them for the deposit confirmation emails.

There is information in those emails that will tell me if the screenshot has been manipulated.  Which information it is I will not divulge
or scammers will know how to screw us.

So let me summarize what you are saying.

You dont have any solid proof that ever had assets on altilly but you want a refund?   Not even one deposit confirmation email?


Charles

If your database is completely wipeout than how can you verify if the user screenshot is legit or not? Screenshot of previous deposit is very easy to photoshop and remove any trace of edit. You can't verify if the user is telling the truth if you don't have any blockchain records that will prove that the transaction is really happened.

Claiming you don't have backup to your database is absurd. This only proves how incompetent your developer is by completely wiping out your database and leave you empty handed. This is a bullshit excuse for not refunding customer.

It is, but wallet screenshots don't actually prove anything. Import any address as watch-only and it will look like you own it. I mean the complete transaction history will be there. However no private key, nothing can be spent.

of course there is and I provided screenshots from the wallet, but everything was rejected. ONLY screenshots of deposits are suitable.

No, I mean do you have a transaction record within the wallet itself? I looked at PhoenixCoin's website and learned that they have a desktop wallet and I assume this is what you use. Within the wallet app, s there a tab that shows transaction history? If there's any, a screenshot of it is probably a proof enough --although signed message is also a strong one, if you ask for my personal opinion.

1) I always keep my inbox clean and constantly delete old emails. I have a maximum of 5 important emails in my inbox. I have such a habit, I like cleanliness and order.

2)see last post by ph4nt0m. This is the only and correct solution for both parties, but Altilly stubbornly offered only 1 type of evidence in the form of screenshots, as they knew that the vast majority would not be able to provide them and it would be possible not to make returns. Altilly does not want to agree to the option proposed by ph4nt0m, as this will set a precedent and thousands of deceived users who have been denied refunds by Altilly will demand them. It is very good that this situation has come up for public discussion and now it will not be possible to quietly hush up the situation.

1. Yep, I keep it tight. Never felt like I need to keep every single deposit, withdrawal, login email.

2. There could be some left in trash, but they were long gone by the time when Altilly announced those emails were must have.

3. PXC is a Bitcoin fork made in spring of 2013. Probably one of the first 20 coins ever made. Sure there's a working wallet, block explorer, etc.

Okay Charles, do you realize there's no reasonable way I could make 1118 screenshots of emails even if I had those? It takes days and nights.

Usernames and emails are largely irrelevant in crypto world. Where you should start is your main hot wallet address where all deposits eventually ended and all withdrawals came from. It was only one for most coins listed on your exchange. Doesn't take much chain analysis to locate it. Then you compile a list of addresses which funded it. Every such address belongs to one user of your exchange. You make another list of external addresses which were actually used to send coins to your exchange, one list per user. All of it can be scripted. Every user has to prove ownership of his addresses. The universal way of doing it is by signing a message like "User XXX email YYY claims address ZZZ used for Altilly deposits" with his private key. You verify it with the public key, match deposit tx's and amounts. That's all.

Two things that I failed to understand:

1. You guys clear your inbox? Why? You use that email address both for personal and crypto so you need to keep them clean? It's personal preference though, so I can't comment further, just curious why bother cleaning your inbox.

2. Not even 1 tx proof, or screenshot or anything, left in your possession? Alltily indeed asked a deposit confirmation email, but the way I see it, that's not necessarily all 1,118 deposits. They just ask for an email showing that the address --a static, non-changing address that they dedicate for you-- is yours. One is enough.

If I may add a third one, is the PhoenixCoin platform has a fund history? Like a proof showing a token successfully mined or moved somewhere? If they have, maybe you can use that.

---

As for HodlerCompany, would a screenshot of tx history from the sender side --suppose there is any-- sufficient? What about a signed message from the sender address like what ph4nt0m had tried? It's a valid ownership proofing method that's even acknowledged by this forum. If your aim is just to have a proof that some address is belonged to someone, I think thats a proof of ownership enough

---

P.s.: oh, and last, coinman76 stop spamming

Hello, this is Charles

Due to the loss of our database to the hacker, we have absolutely no way of showing who owned what wallet address without the deposit confirmation emails.
These emails contained your username your, deposit address, the amount of the deposit and the TX ID.

We sent out these emails for any deposit that was made and due to the amount of people trying to claim deposits that did not belong to them by simply grabbing
a tx id off of an explorer that showed an address and claiming it was theirs we had to do something to ensure we were not giving refunds to fake claims.



I will approve any refund however if you can provide me your deposit address, that it is an altilly address and some sort real proof that it belongs to you. 

We have absolutely no intentions of trying to keep anyone from a refund. We just need to know beyond doubt that it is legitimate.

If you are able to provide the above then please by all means reply back to your tickets and ask for me personally.

Charles aka Chuck
Altilly Customer Service

Yeah, it's actually easy to find out who deposited how much. Every user had a single deposit address for every coin listed there.

Cryptopia was also hacked and they lost their DB, too, but you could actually reason with the liquidators and prove ownership manually. These Altilly guys just don't listen to common sense. Less they pay out, more they save for themselves.

no, you misunderstood. Each user was assigned one permanent address for deposits, and then all the coins from these user addresses were sent to a common wallet, where they were all stored. Therefore, it is not difficult to find out who made deposits and the total amount of each of the coins, but Altilli decided to blame all the losses from the hack on users or this is another exit scam.

If Altilly has been acquired by Qredit, there's nothing wrong with bothering them with claims. Looks like their site is still active. https://www.qredit.io/altilly


Do you mean they use disposable deposit addresses? I'm just reassuring that they won't store every new deposit address of every user (especially if it applies to all coins) because that's a huge database unless it ends up burning. That's why they will deny ownership signed message verification because it's definitely useless. They failed at this.

I confirm the same situation.
They also refused to return (refund) my PXC and several other supposedly unsaved assets. I spent a lot of time negotiating with Charles Naughton to resolve the issue amicably, but they are not going to return anything, demanding a YEAR LATER ONLY screenshots of email deposits as proof, knowing that practically no one keeps them. For example, I have Gmail (messages that are in the Trash for more than 30 days will be automatically deleted). They simply decided to pass on all the losses from the hack to the users of the unsaved assets. While there is no evidence that this was a hack, it may have been a planned exit scam.
I am sure that there are many such users, to whom Altilly is not going to refund anything, since there were a lot of "unsaved assets".

It is sad. I also don't really believe that I can get my coins back from Cryptopia. There, in total, over 20M PXC are stuck. At this rate, PXC will soon become a very scarce asset)) I want to once again remind everyone about the basic rule of the crypto world “Not your keys, not your coins”.

Altilly was hacked in late December, 2020. I don't know what exactly happened there. The ops said it was a hack and all exchange data including wallets were deleted. I didn't see a police report or forensic analysis or whatever. I didn't really buy what the ops said, but they promised to refund everyone, so okay. I filled the refund form like everyone else. It's a year after the hack now, they finish processing these forms and the real fun begins. Looks like they are not going to refund me at all.

Here's how stuff worked on this exchange. Every user got a deposit address. Once a deposit cleared, a script transferred it automatically to their hot wallet which was used to fund withdrawals. Looks like they didn't have cold storage and didn't even have private key backups of that hot wallet (WTF really?).

Back to my case. I had 529k Phoenixcoin (PXC) deposited there. That was like 0.2 BTC at the hack time. Mostly mined coins, so there were 1118 deposits. Sure thing I didn't keep all those deposit confirmation emails in my mailbox once the deposits were confirmed. Why should I? Now these exchange ops say they are not going to refund me anything without all those emails. How convenient, huh? I still have access to my mining wallets, told them my deposit address, even told them their main hot wallet address in case they couldn't figure it out. BTW there are 6.6 million PXC stuck, it's like 7% of the total supply.

I bet no one else claimed my deposit address, but I even offered them to sign a message with privkeys of my mining addresses to prove they're mine. Nope, they rejected. Must be too complicated for them. Show the emails or piss off. Now it sounds like a SCAM.