Scammers Profile Link: https://bitcointalksearch.org/user/hhampuz-881377
Reference Link: https://bitcointalk.org/index.php?topic=5125389.0;all
Amount Scammed: 0.54BTC
Proof of Payment: c5c716e779653795aaa03c950199cfcc73fef855b290153f421886d3d572fae1
Additional Notes:
On May 22, 2019, it appears the BestMixer domain was seized by European government authorities. At the time Hhampuz was running their signature campaign. Once Hhampuz learned of the domain seizure, he announced the signature campaign was ending immidiately, and shortly thereafter he paid out what was due to each participant, presumably at the time. (The early cutoff for posts, and early payment appears to have violated the terms of the campaign, but that is not the topic of contention).
The txid for the payment to participants was b27574cee6516ce29ff84dca1fad3e04e799cabcb801a102360e5e437c7147d9, which has a change address of bc1q9dzph9s96gsawqzcyj63j37e8nx8438pne296c, which is also the address the payment came from, and where all previous payments for this campaign came from. About 30 minutes later, the balance of what remained from the signature campaign was sent to 3GNadBucAV7kU3V5M5BrusFesQ4wfRsrtv via txid c5c716e779653795aaa03c950199cfcc73fef855b290153f421886d3d572fae1.
After the above transaction, the money was sent via txid f1d0b755a53da5d17312a9df7304d3f08ecd264b5704d80e708e74dfae9bd388 to 1JnE9A72rBNbNRCN6FSdrRqcG1msTxki8x, which I believe may belong to ChipMixer.
Later that day, Hhampuz posted that he never communicated with BestMixer outside of the forum:
Quote from: Hhampuz
I've never had any contact with BestMixer outside of this forum, the account that messaged me never even gave me a name at the bottom of their message. I once asked if we could talk outside of bitcointalk since it would be easier and due to them not being online here that much. They declined and said this will be the only form of communication.
As of when the signature campaign ended, the bestmixer account that created the ANN thread referenced in the OP of the signature campaign was last active three days before the campaign ended.
The outputs to the transaction that 1JnE9A72rBNbNRCN6FSdrRqcG1msTxki8x spent are:
1M1o8TUAUunxD2rS4tnWFe8T3FSwQp8633
18FjF4nhU3m6MELjrpGyw175Hj1cMG8jXf
17EociKcomb7bXrN5uXFJS1WD989SoiCHB
17j1WYxgetC9JEmzNLCVF7iX63wEWvmHSi
1Lwu7dAUdidJtcsaYjwMNTJVK5dWAQTK64
All of which are 0.064BTC, and according to the tool, http://chipstatdethbuwk.onion/ (tor link) BestMixer posted, all are "chips" belonging to ChipMixer and/or its customers.
Additionally, BestMixer was critical of ChipMixer, and as such is unlikely to use their service.
I asked Hhampuz in his campaign thread about why the bitcoin was moved when he could not have possibly received instructions on how to return the excess money, but have not received a response after a day.
Based on the above, I believe that Hhampuz has stolen the excess money from the BestMixer campaign for his own personal use.