Pages:
Author

Topic: Criminal Wallet Address Database? (Read 2746 times)

member
Activity: 84
Merit: 10
June 16, 2011, 08:06:18 AM
#23
I can write something that can make it easy to track transactions if there's enough interest *cough*donate*cough*.  Grin
Boy, this is tough.  Do I comment on the concept of someone named TheVirus writing code....
or, TheVirus saying *cough* *cough* ....

Hah, I've had this name for almost 20 years. I assure you I am safe Smiley

The way I was thinking about doing it would be to give a starting address and it would list the transactions in a tree (similar to a directory tree) so you can follow the flow. There's not much that can be done with that but I guess you could have a flag placed on coins and that can be used by merchants/exchanges to see if any coins are shady. The main issue would be how do you determine if the claim is theft or just a witch hunt? I feel that someone would transfer money to another wallet and claim it was stolen and cause all sorts of issues.
legendary
Activity: 1386
Merit: 1004
June 15, 2011, 10:10:30 PM
#22
Most probobly a payment to a merchant would be made with partially tainted and partially clean bitcoins.  As time goes on more and more transactions each would have a small amount of taint in them.  And we are supposed to do something about this?

This is exactly how real world cash works as well.  I bet some of the cash in your pocket (if you have any) has at once time been either stolen, used for drugs or other illegal acts.  Cash is that way.  

The goal isn't to attack the tainted funds, the goal would be to trace the transactions to hopefully, eventually lead back to the identity of the thief such that he can be found out and be punished / sued in a civil suit.
 

I just don't see a way this can work.  It can be defeated or used for evil. 

So you steal some bitcoins.  Then you launder it a bit maybe to make it confusing but still traceable.  Then you place an order with an online store (like mine) paid with tainted coins.  Here is the problem...  you make the order with the name, address and phone number of your enemy, not you. 



newbie
Activity: 16
Merit: 0
June 15, 2011, 07:36:15 PM
#21
Most probobly a payment to a merchant would be made with partially tainted and partially clean bitcoins.  As time goes on more and more transactions each would have a small amount of taint in them.  And we are supposed to do something about this?

This is exactly how real world cash works as well.  I bet some of the cash in your pocket (if you have any) has at once time been either stolen, used for drugs or other illegal acts.  Cash is that way.  

The goal isn't to attack the tainted funds, the goal would be to trace the transactions to hopefully, eventually lead back to the identity of the thief such that he can be found out and be punished / sued in a civil suit. With cash, it's harder to trace the order and how the transactions took place. However, like mentioned, the thief would have to inadvertently give himself away in some fashion by tying multiple of his addresses to his real identity. This would provide sufficient evidence for law enforcement to act. 

We need to protect our private property rights. However, like any free market, I'm fairly certain a solution will evolve to deal with this. I'm just trying to put some ideas out there in the hopes that somebody adopts the cause.
legendary
Activity: 1386
Merit: 1004
June 15, 2011, 07:09:17 PM
#20
Most probobly a payment to a merchant would be made with partially tainted and partially clean bitcoins.  As time goes on more and more transactions each would have a small amount of taint in them.  And we are supposed to do something about this?

This is exactly how real world cash works as well.  I bet some of the cash in your pocket (if you have any) has at once time been either stolen, used for drugs or other illegal acts.  Cash is that way. 
full member
Activity: 210
Merit: 100
firstbits: 121vnq
June 15, 2011, 06:52:53 PM
#19
Inferences can also be made based on how and where a person spends their money. Won't be enough nail a person, but it could narrow things down. Also, if there were a watchdog group with widespread exchange cooperation, that person would be stuck either selling their tainted coins on the black market or never converting to another currency. If they were stupid or unlucky enough to use a cooperative exchange, the jig would be up.

Person A has 200 stolen bitcoins
Person A also has 1000 bitcoins spread over 5 other wallets that were not stolen
Person A sends 1200 bitcoins into coin mixer from 6 different addresses and outputs them to 2 new addresses with random amounts and over a period of time -- it then looks indistinguishable from many legitimate transactions
(Meanwhile in the real world, Person B, C, D, E, and F may also be doing the same thing with the coin mixer and the coin mixer may be doing it with another coin mixer)

How do you track the stolen money without also harming anyone anywhere that unknowingly accepted "tainted" coins.

Unless people simply stopped taking any coins that had even gone through an anonymous node (ie; only accepting BTC that could be tied to a person or a trusted user everywhere along the chain) there is simply no way to implement this.

--

This is one of the things that makes BTC so scary for law enforcement agencies and also one of the reasons that I think that bitcoin theft through trojans, viruses, phishing, etc will be a huge problem and that secure (and insured) bitcoin banks will def. emerge and be used
hero member
Activity: 714
Merit: 500
June 15, 2011, 06:36:04 PM
#18
Inferences can also be made based on how and where a person spends their money. Won't be enough nail a person, but it could narrow things down. Also, if there were a watchdog group with widespread exchange cooperation, that person would be stuck either selling their tainted coins on the black market or never converting to another currency. If they were stupid or unlucky enough to use a cooperative exchange, the jig would be up.
newbie
Activity: 16
Merit: 0
June 15, 2011, 06:17:23 PM
#17
So, where those stolen coins go will be public, but as others have pointed out, there are relatively simple ways to obfuscate that trail so much that it becomes impossible to track them down to the individual that stole them.

Yeah, the individual would have to be stupid enough to attach his real ID to one, or a few of his addresses in some shape or form and make a transaction where his real identity is known. Probably multiple transactions to acquire a reasonable burden of proof.
newbie
Activity: 52
Merit: 0
June 15, 2011, 05:59:39 PM
#16
im missing something here...

why would he use this exact address ever again and not pick a new one from his wallet's next addresses?



Every bitcoin can be traced back to the block that created it, by tracing the public chain of transactions.  If someone has stolen coins, the address they are sent to is visible in those transactions.  To spend those coins, they must be pulled from that address.  They can't use a different address from their wallet.  You can create a new address to receive coins, but spent coins come from the specific addresses that own them.

So, where those stolen coins go will be public, but as others have pointed out, there are relatively simple ways to obfuscate that trail so much that it becomes impossible to track them down to the individual that stole them.
hero member
Activity: 586
Merit: 501
June 15, 2011, 05:47:12 PM
#15
im missing something here...

why would he use this exact address ever again and not pick a new one from his wallet's next addresses?

full member
Activity: 210
Merit: 100
firstbits: 121vnq
June 15, 2011, 05:41:39 PM
#14
I'd say that since all transactions can be viewed by everyone on the network... it's pretty hard to launder the money. I guess they'd send the funds to Mt Gox and cash out and then buy back in at a different address? At that point, I guess there isn't much you could do. Although, if there was a way to report theft in a reliable manner without it being susceptible to abuse, the individual would have to tie cashing out from Mt Gox with a name and and an account of some sort such as Dwolla. I think it would be entirely possible to trace the laundering route. ween a thief sending some BTC to an address of their own vs. them paying someone for something with those coins? If you start to refuse tainted coins and can't make that distinction, you end up punishing people who were simply unlucky enough to get paid with stolen coins.

Please read this thread and understand what is and isn't possible w/rt laundering and anonymity in bitcoinland.

http://forum.bitcoin.org/?topic=241.0
newbie
Activity: 16
Merit: 0
June 15, 2011, 05:16:17 PM
#13
Well, at least we you don't know what laundering is, or how it works here in btc land.

Next question is, how do you prove it is actually stolen? Some people would lie about this, to either try and get their legitimately spent money back, to tarnish a name, to get a story publicized...etc.

I agree, abuse would be a problem. Perhaps you'd have to make an actual police report and provide evidence you did so there would be legal ramifications for lying? I have no clue... once again, I'm just trying to have an open brainstorming session here. I want to hear everyone's ideas.

Quote
How do you distinguish between a thief sending some BTC to an address of their own vs. them paying someone for something with those coins? If you start to refuse tainted coins and can't make that distinction, you end up punishing people who were simply unlucky enough to get paid with stolen coins.


This is also a very good point. The goal of this database would be to assist the catching of thieves, not to demonize people recieving tainted coins. The transactions obviously wouldn't be demanded to be reversed. It would merely be used to help pinpoint the person who originally stole the funds and perhaps assist in bringing them to justice.

legendary
Activity: 1615
Merit: 1000
June 15, 2011, 04:55:19 PM
#12


The criminal could launder it to another account, but all the transactions that are made from the account are known... so it will also be known what addresses the bitcoins are sent to from the fradulant account as well. The individual who stole the funds would eventually be pinpointed. Also... if it's known the address stolen funds are associated with, merchants could decide to refuse business if they want.


How do you distinguish between a thief sending some BTC to an address of their own vs. them paying someone for something with those coins? If you start to refuse tainted coins and can't make that distinction, you end up punishing people who were simply unlucky enough to get paid with stolen coins.
sr. member
Activity: 364
Merit: 252
June 15, 2011, 04:42:06 PM
#11
Next question is, how do you prove it is actually stolen? Some people would lie about this, to either try and get their legitimately spent money back, to tarnish a name, to get a story publicized...etc.
newbie
Activity: 42
Merit: 0
June 15, 2011, 04:31:51 PM
#10
Infeasible.

Why wouldn't [the criminal] launder it? Why wouldn't [the merchant] accept it?

You might be able to "taint" the chain, but given the network, infeasible.
 

The criminal could launder it to another account, but all the transactions that are made from the account are known... so it will also be known what addresses the bitcoins are sent to from the fradulant account as well. The individual who stole the funds would eventually be pinpointed. Also... if it's known the address stolen funds are associated with, merchants could decide to refuse business if they want.

But yeah, obviously, there would be a lot of problems with application. Just trying to think of a way to address theft.

It seems to me preventing abuse would be very, very difficult.

I agree with this, I was just putting ideas out there.

Well, at least we you don't know what laundering is, or how it works here in btc land.
sr. member
Activity: 266
Merit: 250
June 15, 2011, 04:29:49 PM
#9
I can write something that can make it easy to track transactions if there's enough interest *cough*donate*cough*.  Grin
Boy, this is tough.  Do I comment on the concept of someone named TheVirus writing code....
or, TheVirus saying *cough* *cough* ....
newbie
Activity: 16
Merit: 0
June 15, 2011, 04:26:10 PM
#8
Infeasible.

Why wouldn't [the criminal] launder it? Why wouldn't [the merchant] accept it?

You might be able to "taint" the chain, but given the network, infeasible.
 

The criminal could launder it to another account, but all the transactions that are made from the account are known... so it will also be known what addresses the bitcoins are sent to from the fradulant account as well. The individual who stole the funds would eventually be pinpointed. Also... if it's known the address stolen funds are associated with, merchants could decide to refuse business if they want.

But yeah, obviously, there would be a lot of problems with application. Just trying to think of a way to address theft.

It seems to me preventing abuse would be very, very difficult.

I agree with this, I was just putting ideas out there.
legendary
Activity: 1615
Merit: 1000
June 15, 2011, 04:18:49 PM
#7
It seems to me preventing abuse would be very, very difficult.
newbie
Activity: 42
Merit: 0
June 15, 2011, 04:17:53 PM
#6
Infeasible.

Why wouldn't [the criminal] launder it? Why wouldn't [the merchant] accept it?

You might be able to "taint" the chain, but given the network, infeasible.
 
newbie
Activity: 16
Merit: 0
June 15, 2011, 04:12:16 PM
#5
I can write something that can make it easy to track transactions if there's enough interest *cough*donate*cough*.  Grin

I was thinking of something along the lines of an online community site. Thefts would be reported and then there would be some way to clarify that they were actually stolen. Whenever a merchant is about to make a sale, they can type in the address they recieve the transactions from to see if it's associated with an address known to have stolen funds.

This would make it easy for us to report thefts to law enforcement and eventually return the funds to their proper owner. A detective for hire site if you will? There needs to be some sort of mechanism to protect private property ^_^. 

member
Activity: 84
Merit: 10
June 15, 2011, 03:51:46 PM
#4
I can write something that can make it easy to track transactions if there's enough interest *cough*donate*cough*.  Grin
Pages:
Jump to: