Topic: [Investigation] Fighting The Account Mafia (Read 3737 times)

There was a user data breach in 2015 - part of it was user email addresses - so likely what happened was somebody figured out that your email had expired and re-registered it. I see old accounts coming back to the forum all the time; many of them were probably obtained through this same method.

Just wish campaign managers would do 5 seconds of research before accepting them into their campaign    by doing so they are only encouraging this kind of behavior.

Writing it just to this thread, coz thinking that Fighting The Account Mafia is a never-ending-process;)


---




(Finally) Here would be some sort of description of how my BTT account fell into the wrong hands, sold, etc.

No other explanation has been found than the fact that the email account associated with the BTT account
was not used for 6 months.
The email service provider had changed the "inactive time" from 1 year to 6 months, which caused my "mistake" = "forgetting" (or missed the provider's notification email in other email inboxes).


After the email account had been inactive for 6 months, it was closed and then the email address was released to the open markets.
And someone X had taken it from there - for free.
And after that he had either sold that email account to Y, or reset the BTT password.
Anyway, either X, Y or Z took over my BTT account in July 2022.

I don't know how X would have guessed to try BTT-resetting, because there shouldn't have been any connection between the email address and BTT anywhere. I am remembering that the email address has been 'hidden' in my BTT settings.

Therefore there would be 3 options, why X decided to try to reset the BTT password:

1) pure guess or systematically tried for several sites
2) the email account had not been cleaned properly, but there would have been some emails that contained "bitcointalk"
3) Has there been a data leak on the BTT website? At least some years ago there was a warning on the page about "some hacking".   That was the reason, why I changed my email address in that time. But, I do not know, if the email addresses could have been leaked then?



X tried to cover his tracks with different stories, e.g. that Google Support helped him.
It couldn't have been true, because Google was in no way connected to my BTT account or my BTT email account.
https://bitcointalksearch.org/topic/m.60525631


Problem solution:
In August 2022 I contacted the BTT (admins and [email protected]), and received instructions.
In December 2022 "BTT jury" decided that I am the real owner of the jkoil account.
Maybe the delay was caused by the missing PGP or Bitcoin signature...
I have used no Bitcoin address on this forum; the only way to prove myself was to send a signed message from may NEM ICO wallet.

Also it may have helped a bit that I have written in the same "style" and "language" since Dec 2013  
At least some members recognized the imposter by his postings



Other related:
https://bitcointalksearch.org/topic/m.60706810
https://bitcointalksearch.org/topic/recovering-hackedlost-accounts-5089777   ( signatures, etc. )
https://bitcointalksearch.org/topic/m.60529510 ( "if a user never used a bitcoin address anywhere on this forum.." )



PS.  Since the problem was not related to password hacking, I still avoid using the password managers ... for my important passwords.

LOL. That's just BS.

Looking at Rigon's trust page I see that he has several neutral trusts of negative spirit, and although I have great respect for those of you who have left them, I don't see why they are not negative. In any case, I see this case much clearer than LDL's, so I'm going to leave a negative. This reminds me of the one who made up a story about having a brother in Indonesia who had given him the account, martyns.

I think Rigon is maybe going to be lucky because I don't think Royse777 is going to rush to take action with just one negative feedback from me.

Another lie. I didn't say the original owner was from Canada. Read carefully. Show me where I mentioned Canada; is it worth picking up an atlas?
In addition, the first owner was a woman, if you carefully read the highlighted text.


Rigon needed enough time to answer my question because alternate accounts started showing up. I sent the first PM to Rigon a long time ago but didn't get a response. But I sent a PM again recently, and now, due to a related topic, Rigon woke up and replied.


However, the fairy tale about moving from country to country is not accepted.

LOL I don't believe any of that for one second.

Worst. Story. Ever.

He's just afraid that if he admits its a bought account he'll be red tagged, so he feels like he has to lie. But in reality he should have just said nothing.

I won't make anything up with you here. After being basically inactive for seven years I came to Bangladesh in 2020 covid19 year active and I decided to bounce in 2021 when the market is good so that I can earn some money to support myself and family. But I am currently staying in Bangladesh and I will be coming back to Canada in few months. I have not resorted to any dishonest means. I told my reality you will judge.

Take a moment and listen to my whole story. In 2009-2012 America Diversity Visa (DV) my elder sister won the American lottery and my elder sister immigrated to America with her husband. After they moved to America I also moved to America with my sister and spent several years there. In 2020 I moved to Bangladesh and started some of my work qualifications I trained for my electrical course. And also I spend some time on bitcoin forums.

But recently my course is complete and I have applied for Canada work permit visa. I will probably be moving to Canada in a few months and will see if I can be active on the forum but will try to be as active as possible. But in this case, if I mentioned Canada in the post, would you be guilty of changing the ownership? I have tried to be precise and leave the rest to your judgement. You have the right intelligence and occupy a privileged place in the forum. Hope your honesty and integrity has impressed everyone on the forum.

That was the answer I needed, and thanks for the reference too, @lovesmayfamilis.

So far I haven't flagged anyone for any case I've encountered around the forum, but I'm more inclined to support or be in opposition if the accusations are not true. Well maybe out of ignorance of small details, but in general I know how it works.

Well the negative trust was removed and jkoil can always refer to this thread in the future. So I dont think the flag would be an issue in the future.
Also it will bring people here to explain the story, so people will understand that his account was compromised for some time. I think that is also a good thing, since it creates transparency.

The user can create a flag. You need to be very careful about its creation, and understand what purpose the flag is intended for.
The flag itself cannot be removed in the future. If the person who created the flag renounces it, i.e. withdraws their support, the flag can still remain if other users supported it.
For the flag to cease to have its power, there must be support in the opposition.
For more details, read:  Trust flags

Alright, after few moment of noticing it I have considered removing my support for flags. I hope you are well now, and try to stay safe in better way than before.
Now you can oppose the flag even though the support is still there. Maybe some of them haven't noticed yet, so consider contacting them via PM or bumping this thread to let them know.


I haven't added a flag to anyone yet, but can it be removed after adding it like our tag on other users' profiles?
If it can be removed, you might consider removing it.

Not sure if I understood what you were trying to ask, but you can also oppose the flag. Right now it's already inactive since it does not have sufficient support, so it's should not bother you as it won't show up under your profile in forum posts and replies.

Since jkoil gained access to his account again, I removed the negative feedback and added a tag on the list.
I am glad that the account sellers didnt succeed in this attempt and hope that they will loose interest in their shady business if it will not be profitable for them.

Thanks.

good suggestion... what would be a right location for the "advices for hacked" topic?

Congratulation to @jkoil back to natural owner and seems all negative feedback due your account hack have been removed, you can start with new journey right now after several moths losing access to your own account. I think you need to make some topic about how to recovery account was hack and many user here ever in your position after they are losing with their account access.

You can make little advice or guide how you can recovering your account back and how long time you need when your account back to your hands, maybe will helped many user when losing their account due hacked access and they know what have to do.

Thanks.
Ok, I'll send a msg to hZti.

You may still need to PM hZti to let him know your current situation.
Right now hZti's red feedback has no power to show as he is not DT, but that will change soon when one of the DT1s adds him to his trust list in the future. So ask him to remove that tag from your profile. This is just friendly reminder for him.

Also congratulations, you have got your account again.

Today I noticed that the negative trust of jkoil has disappeared
Thanks to all of you and especially to nutildah.

---------------


In Trust summary for jkoil is this text:

logfiles alleged the following, but later withdrew it: Due largely to the factors mentioned in this topic, I believe that anyone dealing with jkoil is at a high risk of losing money, and guests would be well-advised to avoid doing so. This determination is based on concrete red flags which any knowledgeable & reasonable forum user should agree with, and it is not based on the user's opinions.
Support: lovesmayfamilis, _BlackStar, Eternad, hZti, shawon01, mafoja1
Opposition: nutildah, logfiles
Insufficient support.
Support | Oppose

Generally, and for the future: is this the place where account's owner could Oppose the arguments - Or has the owner anything to say here?

Also thanks for the mention here !
I deleted my support for the flag on jkoil , and hopefully all others also will be doing it.
Glad and happy to hear and to read that the Account is back to the real owner.
I also got no message or got asked from him to remove it , but with that post here all should be good.

Thanks for the mention! I took down the flag support. Just FYI, I would've taken care of it sooner but I didn't get any kind of message or notification about it.

Thanks so much for the PM @nutildah

I received a Private message from one of jkoil's Alt accounts, but the way the message was presented made me think it was one of those threats, and it had no links showing that the account had been recovered (I have received so many such messages from Jkoil impersonators claiming to own the account). I under looked the whole thing, especially by the fact that I was inactive at that time for personal reasons.

Indeed, the account was recovered by the rightful owner,



So I am going to remove the negative feedback and support for the flag.

I suggest the other members to look into this issue in case they missed out on the new development --> Lafu, Swordsoffreedom, lovesmayfamilis, FatFork, _BlackStar, Eternad, hZti, shawon01, mafoja1, icopress

Sorry for the delay.

Just FYI, jkoil has been returned to its original owner, who recently completed the account recovery process.

https://bitcointalksearch.org/topic/m.61520436

Would be nice if you could remove support for the flag & his negative trust, thanks.

---

Oh I didn't bother to read the end of this thread before posting but I vouch for his statement.

The case of the captured account is now solved by Bitcointalk account recoveries / The Bitcoin Forum Team.
Thanks to them

And I (the original jkoil) have the account now in my control


Now I start deleting the content posted by the "capturer" as I was suggested ...

----------------------------------------------------------------------------

The likely alternative for capturing my account was based on the deactivated email account
The service provider has changed its "inactive time" from 1 year to 6 months. It meant that when 6 months had passed since my last login to my email account, they deactivated the account, and after "some time" it has been possible to re-registrate the same email address by someone else.



----------------------------------------------------------------------------

"deleting"  ...  tho it is nice to see those posts vanishing one by one, it would be better to have more 'complicated machine' to delete some time period by one command

If someone has doubts about whether the owner of the Rigon account is real, then it is safe to say that this is not the case.
Check out his post-story; it's actually fascinating, but before 2014.
What do we learn from Rigon's posts? That he is American, lives in Ohio, or prefers this state. At the time of 2014, he was 49 years old. In general, he had easy forum communication.




But in 2021, the story changes dramatically. And the Rigon account is now very interested in participating in bounty programs.





Further reading of his posts reveals that he was born in Bangladesh. In general, this is understandable, since the language of his posts is degrading dramatically.


@Rigon, will you be honest with us or tell us some unique story about your strange transformation in seven years?
The surprising fact is that the topman21 account has also undergone significant ownership changes in its history.

But yeah, we don't believe in coincidences, do we?

Looks like "the higher the monkey climbs, the more of it's behind you see" quote is now beginning to make more sense. Slowly, Steadily and surely the person behind the sockpuppet accounts is exposing himself.

I remember @Panglima Perang and Zalima Zohair when the coward behind the accounts was pushing us to tag Royse777



Ah, it makes sense now. @TopT3ns is that you? 
What a lame coward!

I know more suckpuppet accounts can be found in this thread - Royse777 is Casino Critique

@Panglima Perang, sorry in advance. do you mean TopT3ns account as your friend's account? I found it from your deleted post history.

not accusing you or your friends, I just assume you or your friends are not the first owners of the account.

Your friend can try to recover his account using an Ethereum address, but since this is a BitcoinTalk forum, a Bitcoin address is definitely preferred. But could you please try to rephrase your question to make it more clear?


That is incorrect. Signing a message to prove your ownership of bitcoin addresses is possible from almost any non-custodial Bitcoin wallet. A crypto exchange such as Binance is not a non-custodial Bitcoin wallet.

Does he have any Ethereum address in any proof of authentication post? If yes, then he can sign a message using the ethereum address and include it in a message to account recoveries team

Tell him to follow this procedure to recover his hacked account - https://bitcointalksearch.org/topic/recovering-hackedlost-accounts-5089777

Sorry pump for this thread.

May I know enough reason or not when recovery hacked account trough SIGNED MESSAGE ETHEREUM? my friend account got hack and several post proof in service signature campaign using Binance segwit BTC address.

SIGNED MESSAGE BITCOIN only available when using Blockchain Bitcoin address, if using another bitcoin address seems can't signed with Bitcoin message.

It is not strange that he tries to change something in an individual way, but such attempts are quite useless in my opinion. If he wants to prove something, then let him do it publicly. I think it's best to ignore such things, but everyone decides for themselves.

Anybody got a message from the account roslinpl as well? Those who have tagged him? I got a message saying that he wants my feedback to be removed.

Definitely not gonna trust this account anymore with the sudden changes in behavior on the postings. After 2 years of inactivity, posts right away in a signature campaign thread.

Is there anybody else that gotten the message as well?

If your feedback is removed then how would you serve those who had tagged you? You are only serving yourself and no one else.

Secondly, your excuse of forgetting every passphrase will not work in your favor and we all know its a lame excuse.

Finally, for your information, you have been removed from your current campaign. So stop begging for mercy and move on.

It looks like you applying to be his dear slave or a servant, please stop with this pathetic begging attempts
Only result from this will be more negative feedback to your account, and since you can't prove ownership of any addresses it's obvious that you purchased this account and wasted money.

Create new account and start as a Newbie, don't purchase accounts.

No you don't need to prove it to me but just prove your account ownership to the two users who have tagged you either via pm or posting here.

I personally might consider users signing messages from their new address, for example an address they've been using for at least 2 years and that's what I do as long as the reason they can't do it with the old wallet is reasonable. But I don't think it will be exactly the same for every other user especially when I can find a compelling reason why the account has changed hands like a grammar change for the worse. In your case I doubt you're still the owners this account especially since your grammar is so bad so far.

I have lost all my previous addresses and cannot access those addresses. I started using everything again as New.
I can sign messages with new address groups if you want.

I understand that someone can easily lose access to their bitcoin address when they don't practice good security for their wallet. Device damage, forgotten passwords or anything else can happen especially when they no longer consider the address important to keep long term. But basically they don't realize that the bitcoin address they used in the past will be very useful to prove account ownership if one day the account is hacked or accused of having changed hands as you are experiencing today.

You have multiple bitcoin wallets, so look for a solution if you actually own this account:

But maybe it can be considered if you can really prove that you are the owner of this one twitter.

Nope, there's no wrong to speak multiple languages as long as you're really know the language and not using google translate. AFAIK there's few users which speak 3 or more languages in one account. But as you have wrote in Russian and Bahasa Indonesia, I would like an user who're a native Russian and Indonesian could confirm this, does he's wrote in a correct grammar?

Also can you start posting on your local languages (Russia and Indonesia)? Stake allowing to post in local board for 10 posts/week so I think it wouldn't hurt you to write 5 posts in Russia and 5 posts in Indonesia every week. If most of your post got deleted in your local board, then I would think you're a different person. What do you think?

Quoted for reference

Dear Sir, They were actually addresses of different wallets whose pass-phases have been forgotten which will not be recovered yet. I make a humble request to you to give me an opportunity to take down your feedback and serve you.

I don't think it will benefit the forum. This is a very bad idea. If you just look at those "useful" posts that have been deleted.





In addition, I gave you the wallet addresses that were in the history of your posts. You can sign a message from any of them.
There is no problem with posting in different languages, but something with every move in all your languages is very "lame."

Dear Sir, Why did you give me negative feedback, I am the owner of this account. An account owner posting in multiple languages ​​does not make the account owner multiple. Any member of this forum can express his opinion in any language. There is no rule in this forum that a forum user cannot use more than one language. Please remove your negative feedback. I have already suffered huge losses due to negative feedback. You pick up the negative feedback after looking at my overall condition.

---

I use multiple languages, so will this account have multiple owners? I humble request you to remove my negative feedback and give me a chance to be active and cooperative on the forum regularly.

[moderator's note: consecutive posts merged]

Oh, I've done that in the past without remorse and would do it again if I found someone who wrote perfect English in 2013 but is now barely coherent and participating in a bounty in 2022.  There's no way you can go from proper use of a language to barely knowing how to structure sentences, spell, use grammar, etc. (aside from a stroke or something like that, but that would be so rare on this forum that Occam's Razor would guide my paint gun with ease).

You've been here since 2013, so you ought to know a deterioration in language combined with a long absence is a dead giveaway that an account has changed hands, either through a sale or a hack.  It's happened many times.

I am in the same side in that issue: I suggested that accounts could be frozen, but it seems that the evidences are not enough to such an operation. I guess it must be in that way to avoid some kind of teasing and interference (making wrong accusations against someone).

Anyway, there could be some phase in the investigation, where the evidences are enough to freeze the account (partially), though the final result/decision is not yet made. Ofc, depending on the tech capabilities of the BTT databases (rollback etc), the freezing may be needless.

I also don't understand why the mod hasn't banned that user since the report was made. I just think the available evidence might still make it difficult for mods to make a decision and they want to follow it up on a case by case basis.

But now, lovemayfamilis has tagged it. Should there be more tags, or maybe someone should report them again?

Another hacked or sold account. User: topman21
And, interestingly, this account had three owners in its history.

The first owner wrote in the Indonesian and English sections.
https://bitcointalksearch.org/topic/m.9165417
https://bitcointalksearch.org/topic/m.9254710

Then the language of the posts changes to Russian. In May 2015, posts abruptly change the language to Russian
Russian language continues until April 2019

In April 2022, the account wakes up and immediately submits participation in the bounty.
The Russian language has been completely absent since then
https://bitcointalksearch.org/topic/m.59741515

And today's last owner, a top-level spammer, writes in bad English. Neither Russian nor Indonesian is found anymore.

There are bitcoin addresses that the owner of this account can verify. In this case, we can believe that he is a polyglot and speaks several languages ​​at the same time.

For now, I'll give it a negative tag.

1K2GGuftuPy66osyBxeyi4jQnDJdTXd9g3
1EAtusRpoPpte1nV3g8Pe39HvFLMSCcmfq
 18i7KudaH8xWnCbNyN48sk4teSsbrjesZr

Well that's another story, and looks like @Docnaster is at least guilty of ban evasion. I am surprised to see that he hasn't been banned already since lovesmayfamilies found that connection with banned account  year ago. Maybe the fact that he hasn't been active at that moment saved him for getting banned, but now that he is active once again I expect it to happen very soon.

Parodium has tagged the user for the same reason even though the tag is untrusted at this time. I don't know what caused him to flag that user ^{[no reference],} but from 2021 to 2022 this user has changed his password 3 times and now his email has changed.




It might be good if he signed bitcoin messages to prove ownership of the account, but I don't think I would suspect more people because of password and email changes unless their posting patterns change drastically.

But you guys definitely want to see this one.


Then this one too.

This user is known for baseless accusations so don't expect him providing any info why he thinks that account changed hands. For him its enough to someone change the email address (like in this case) to think that account has been sold, while people can do that for myriad of reasons.

Since you don't give any more details and also do not reply here or via PM there is no possibility to investigate this. I appreciate the input but with this low effort there is simply no use in it.

This account has been sold, please investigate
https://bitcointalksearch.org/user/docnaster-668651

I don't say that it is likely that it is the same person but I think we can not simply say his writing style changed and therefore we ruin the reputation of the account by creating a flag or give neg trust. You have to consider that he left the forum for 8 (!) years. There can be a lot going on in this time. It is not that I think he is the same person, but I think there is a slight chance. So I would give him the opportunity to proof himself.



What is shady as fuck again is that he posts in the same time like other sold/hacked accounts. This makes me think all the accounts are owned by the same person or group.

Can you please tell me how to change the writing style from good to bad, while remaining the same person ? Besides, why? And as a result of getting so many deleted posts?

Yes, I did not find a single wallet in his history from which he could prove his authenticity, but from his first posts, you can see the speech of a person who did not learn about cryptocurrencies yesterday. And the second owner, and I am sure that he is the second, dreams of only one thing, to gamble to get rich , or rather, to participate in subscription companies, and stupidly fill the required number of posts

As I was going through your bitcointalk post history I could see that in the past you have participated in many coin giveaways also of very popular coins like Litcoin and Dogecoin. Also you seem to have mined Litecoin wich makes me think that this could be the one wallet you would keep the private key most likely. If you could simply make a transaction with an address that was posted on the forum it could easily proof that you are the original owner. Otherwise I kind of feel the same, that the style of writing is not the same anymore, but that can have many different reasons.

I'm not here to argue with you. You are one of the wisest person on this forum. Maybe I don't have the knowledge to argue with you. But I want to say that the access to this account is still with the original owner. Accepting it is a personal matter of your. I don't want to say much about it


foolish, stupid, mindless, goofy, dopey We usually use these words as adjectives. So, from there i  was used a word   

That was not the question. Did you buy this account? Are you also ready to prove that you were previously a miner and were a fan of the Quark coin?
For some reason, I'm pretty sure you're not the original owner of this account.
Your English has deteriorated. How do you explain it? And also how do you explain writing such posts, having a very good experience in cryptocurrency behind your back?



No need to tell me how accounts are bought, while neither the password nor the mail changes, this is an old trick.



https://loyce.club/archive/posts/6042/60422506.html

I mean here that in my opinion people above age 45 use Bitcoin more. Here I am not saying that I have been using Bitcoin for 45 years. It was my typing mistake. How can I use bitcoin for 45 years where bitcoin has been created for 13 years and my age is 27


Note : If this account is sold or hacked then this account must be reset reset password by email or change password in normal way. Have you got any such evidence? Why wouldn't anyone buy an account and change the password for that account? Or how can a hacker get access to an account without resetting the password?

Since this thread is already talking about sold or hacked accounts, I want to add one more and listen to the true story or not.

coinerer

The account has been inactive five years.

In the past, he was a miner, he created the wallet himself.


Now his posts are just about nothing. In addition, the owner cannot remember how old he really is.

Based on his posts, at the time when he registered, he was 16 years old. OK.
We see from the initial posts that this is a miner, he created the wallet himself.
Conclusions: talent.

Five years later, he returned, which means he is 21. But no, he is 27, and maybe much more. He writes about age in the same topic.
In addition to all this, his posts are very different from those posts that he wrote earlier.



https://loyce.club/archive/posts/6042/60422506.html
https://loyce.club/archive/posts/6042/60429095.html

Please check his history.
I will invite him to this topic.

i apologize if there is an fault when writing the signature.
because from the first i didn't really understand how to make a sign a message

@len01
I received your pm you sended to me and i appreciate it that you trust me and for now your Account isnt tagged or something !
Also the picture you sended to me hopefully you are just have sended it to me and to nobody else.
As on this picture there you can see all the private keys , and seeds for the Wallets , all kind of other login details, Please dont do this again, you can send me a pm but without any personal details.
Because its your personal datails and loggins for your stuff and nobody should be know this things.
I am deleting the pm with the picture and as i am a good guy i dont have written down or safed the keys or any stuff from there.

As mentioned already just make a signed message from your ERC20 wallet and all should be good.

First of all, you should understand that I'm not trying to damage your account reputation for no apparent reason ^{[I didn't even tag you until now].} You just woke up from a long period of inactivity and you changed your password immediately, so it's natural to assume you've changed hands regardless of whether it was hacked or sold. There are a lot of shady things being done on this forum including one of them is account selling.

As Radja Rimba suggests, you can prove it by using the ERC20 wallet to dispel this suspicion. I will try to understand your reasoning, it can happen to anyone. Don't be angry, just do it casually if you really are the owner of this account.

I think the same, I don't want to tag an innocent account and _BlackStar also doesn't want to ruin the reputation of an account that was not actually sold. The only reason this tread is here and the suspicions are there, is because there is a lot of shady things in this forum that the mods don't care about or don't have the time and energy to sort out. So if you can sign a message or send an specific amount for example 0.01337 ETH I think everyone will be happy.

Dude don't worry, just do it. Create your new wallet (ethereum address) and send something from old wallet to new wallet and show proof of tx hash here. I think it will prove that you are still the same owner and I thought it would be a reasonable proof for everyone.

Don't worry, no one can tag you if you are completely innocent. So after you managed to prove it then your problem I think is solved.

i'm also glad to be here to answer all your suspicions of me. and i will be happy to explain if indeed this is my real account.


it's true that my laptop broke down a few months ago. i store all data separately. such as login id, bitcoin wallet address, market login id etc. i save it on my flash disk. and like wallet login passwords, market login passwords, etc., i save them on the laptop desktop. the reason i save it separately is because for me it's very safe when storing id and password separately so that no one can find out.
but there are some data stored on my flash disk such as erc20 which i used to join the bounty. and i can still use the erc20 wallet because the wallet address and private key are not stored separately.


1. the reason the posting pattern has changed is because in the past i only participated in several bounty campaigns, signature campaigns and game rounds in this forum. and the rules for signature campaigns used to be different from now. in the past, only a few characters of writing did not have to be 150 characters and it was not allowed to post too many gambling boards.
2. the reason my current post pattern has changed to more than 150 characters is because after i left this forum for a long time, i decided to come back and join the signature campaign payment BTC to look for capital to play gambling again.
and you also certainly understand how if you join the signature campaign payments BTC  must be posted on several gambling boards with good quality. unlike signature campaigns payment token.
so if my post changes not because of the reason my account is sold, hacked or changed hands. but because the situation in the past was different from what it is now.


as i said above. i keep it separately. and there is some data that is still stored on my flash disk that i can still access. maybe because of my stupidity i can't manage to save some of my personal data properly.


if i work with an account seller and ask to send shitcoins from that address just to prove that this account is mine, why don't i just ask to sign message the bitcoin address above?
if i can ask the seller to send shitcoins to a specific address, i'd better ask the seller to sign message bitcoin address so that this problem is resolved quickly and my reputation is not destroyed.


but what if your suspicions are wrong??
as i said above. i used to only join the bounty campaign and signature campaign. and now i am join a signature campaign payment BTC with a rule of more than 150 characters. and one more thing you should remember. not all posts in my past are just one line.


i already said that i lost some access to my bitcoin wallet. i can only access the erc20 wallet. because in the past i only focused on the bounty campaign and signature campaign.
do i prove it in a way send some eth using that erc20 address not something reasonable?

I like that other user join me in the fight against account selling. There are many cases where users change their posting behavior after coming back to the forum after some time. The problem is often that it can have several reasons and also most of the times can not be proven why the posting behavior changed and therefor it is in my eyes not possible to tag the account. For example if your plan is to join a signature campaign that requires posting in the gaming section, than it is possible that you start to post there to have a better chance to be accepted in the signature campaign.
Yes you can give a neutral tag, but the point of this thread was to find sold account with 100% proof by talking to account sellers or other ways that can give you 100% proof. If we can not have a 100 % it will lead to tagging people wrongly and possible destroying there reputation on the forum for no reason.

I don't think changing passwords and posting patterns for the better is a reason to say someone has changed hands. In my opinion, any user can change their password and email for security reasons, but indeed people will be suspicious when the user has just been active for a long time.

In this case I understand why you suspect len01, but I think you should consider the reasons why he should change his account password. Digital devices such as laptop and flashdisk are quite susceptible to damage, so there might be a good reason. len01 can also prove he has an account if he can sign message from an ethereum address, but for something like sending coins/tokens from that address then I think he should create another wallet and post his tx here. So don't force other people to do it from a btc address after they tell you about losing access to the wallet, while len01 can also prove it with an ethereum address. Try to lighten other people's problems and I think it will be good to consider wisely. But wait, I have nothing to do with len01, but here I am just expressing my opinion.

First, I'm glad you came here to explain my concern about your account being hacked, sold, or changing hands. Then, you can convince me in any way as long as the reasons and evidence you have are reasonable and valid as proof that you are still the original owner.

About your reasons saying that your laptop broke in the last few months so you have to change your account password and loss of access to the wallet until you can't sign messages, seems to be common reasons that are often used by new users from accounts being sold, hacked or changed hands. That's a weak enough reason to convince people to believe that you're still the primary owner of the account. Then your posting pattern seems to have completely changed even though you could tell that you are also a poster who likes to post on gambling boards.

You say your laptop is broken and all the data stored on the flashdisk has been lost, then how can you still save the actual ERC20 address you used in the same year as this bitcoin address 19a7UVCra8iTPs3X8jPxw6PoTyG9nNC2x and it's only a few months apart? Now, I don't think your logic is correct because if all your data is lost then you should also no longer have access to that ERC20 address. What if you work with an account seller and you ask him to send some shitcoins from that address as proof that the account is yours?


Before you change the password of this account, I can absolutely prove that you are a poster who usually posts one line. But after changing your password your posting pattern has changed so it is natural for me to suspect that you are no longer the primary owner of the account regardless of whether it was hacked, sold, or changed hands.

So if you want to prove that you are the main owner of this account especially after you have been inactive for a long time and changed the account password then prove it by sign message or something reasonable.

previously have you checked my posts in 2016?

i started joining gambling boards because i already like gambling before leaving the forums in 2018
and i just changed the password only. i don't deceive anyone on this forum and i don't make spam shit post. so no need to accuse me with your suspicions

Sent several altcoin asset to people claimed about your account have change hands,

How if your investigating wrong and @len01 can show he is the real owner, will you ask forgiveness and promised not made any report again?

for this problem i will answer slowly.
the reason i changed the password for this account was because all the data such as the emails i saved on my laptop were lost. my laptop was broken a few months ago, i can't use it anymore

and for the btc wallet problem i only store the address on the flash disk and some login ids. but my btc blockchain login password is missing along with other data. because i save the id and password separately.


but i still have data on the wallet erc20 0xcdD493d4f50c1997649A2c77d296d3C6506ac40D which i used to join the bounty last year.


is there any other solution besides using btc wallet signature? or i can use the erc20 wallet and send something to prove this is indeed my account. i just lost some of my data that was on the laptop

You can always send a neutral feedback as it dosnt really effects the Account , as it says its " neutral " .
If you  are not to 100% sure that the Account has changed hands its the best way with a neutral tag , and you will see how the User will be act after it.
You can change the feedback laters or delete it when the things clear in this case.

My suspicions about one other account being sold, heacked or change hands.

This user has been inactive for a long time, and his last post was on January 3, 2018 and after that he left the forum without any activity. Then on June 7th he came back and changed his password and started signing up for the campaign on the same date. The odd thing I found clearly was that he started posting more actively on the gambling board than before he left the forum. The posting patterns are different ^{[check post history]} and these are the two things that might make me think this account has changed hands.

Profile link: https://bitcointalksearch.org/user/len01-854735

Here are some of the bitcoin addresses he used before being inactive for a long time. But after he came back and changed his password then I think he should prove account ownership by signing message from some address below.


*Is it possible to send a neutral tag until he can clear up the situation?

Add them to the list too, but tell me about one thing; Would this thread be a thread to list all account sold ^{[recently and in the past]} instead of a specific about some accounts being sold based on your investigation?

I've asked him to do so, but haven't responded to anything. If maybe he ignored it more than 7 days since that post, I think we can tag it again until there is evidence to neutralize the situation.

Those are accounts that were previously up for sale and were exposed by other people. I added them to have a more complete list where people can easily look up what accounts were sold. You can see the proof link that I gave for more detail about how and why the account was exposed for changing hands.

---

About jkoil I also hope that the original owner can get access to his account and proof that in some way. I don't want to neg trust an account but if he simply stop to reply after he is asked for at least some little proof than I don't think there is another option. People that deal with the account can klick the ref link and see for them self if they want to trust or not.

---

Updated the list with the accounts that were mentioned in the thread that LoyceV mentioned.

Almost missed out this two but before I flag them using the same reference, are glandall and nandnor also part of the accounts that were up for sale by the same account seller?

---

I do really hope he comes around to clear it up.

I'm in support of the flag for now as @jkoil doesn't respond to anything to prove its account ownership. He didn't even bother to post proof that his e-mail had been recovered so he could reset his account password.

I'll be back to review and remove flag support if that user manages to prove a few things. Also, I'm not going to break his account, so I hope he can prove that for us here.

Thats interesting , as i got also a personal message from that User yesterday where he asking about to remove my support of the Flag i supported .
After i have readed the Topic in Meta about that Account i removed it and now i am reading this one here and thanks for the head ups logfiles.
Will support the Flag again and also will remove it when its confirmed that the Account is back to the owner.
And i will give the Account 10 Days for now on and if he dosnt proof it to us it i will tag the Account , also i dont want to destroy the Account.

Hey, just saw a Pm from you.

I am not the kind of person who would love to destroy someone's account, especially if they are the real owner. I need to be sure you are the original owner of the account and not the same account seller trying to trick us.

Could at least prove that you are indeed the original owner, like show us the recovery message from Google. I am pretty sure they sent one to you. Make sure you blur off any sensitive information, but be sure important things like the date the email was sent can be seen. It should have been easier if you have any staked Bitcoin address.

I will remove my tag if this is confirmed.

Clearly, this is meant to repair his trust score after the account changed hands. As nutildah pointed out, jkoil has a dramatically different language style now.


This is just not credible to me. I don't believe his email was compromised at all and he even contacted Google. Getting a reply from Google within a day is virtually impossible.

Not here, I'm sure it will take a little longer because the service will review it first. The one that best supports my assumption is because jkoil once said:


So the Google support team conducts a review first before sending the password reset link. I assume the restore action will take a bit of time as google is not as easy to believe in fairy tales. If he manages to recover his e-mail, that means he also knows how to prove ownership of his account here and I think he should do it to assuage those doubts.

I already wrote on another topic that it is rather suspicious that a user who knows about various kinds of password generators allows his e-mail to be hacked.
In addition, his language has deteriorated significantly compared to the posts that were written earlier.


Does anyone here believe in a quick response from Google support, and getting mail back on rather peculiar questions? And also does anyone remember the dates of creation of their emails?

I checked the seclog myself, there are indeed no recorded dealings with the bitcointalk recovery team.

I'd say the account seller/new owner is trying to salvage their already neg trusted account by making up a sob story about how they were hacked.


^ Lol, Busted!

Guys what do you think about account jkoil? It was 100% sold and now the owner of the account claims that he got back his email address via google and therefore is again in control of his account. While I want to believe that this is true, without proof the buyer could easily claim the same. See here for reference: https://bitcointalksearch.org/topic/my-hero-member-account-hacked-please-help-5405076 .
What I can see from https://bpip.org/Profile?id=206476 is that he for sure did not deal with bitcointalk recovery team. There is also no proof of dealing with google recovery team.


added user glandall to list (https://bitcointalk.org/index.php?action=trust;u=44649 proof: https://bitcointalksearch.org/topic/hacked-or-sold-profiles-tagged-by-veleor-5190670 )
added user nandnor to list (https://bitcointalksearch.org/user/nandnor-6 proof: https://bitcointalksearch.org/topic/m.16194427 )

All accounts flagged. My target was to flag roslinpl since the profile has multiple service announcements that could easily fool newbies into dealing with a new owner of the account.

1. MatthewLM - https://bitcointalk.org/index.php?action=trust;flag=2992
2. jkoil - https://bitcointalk.org/index.php?action=trust;flag=2993
3. raffern - https://bitcointalk.org/index.php?action=trust;flag=2994
4. archita - https://bitcointalk.org/index.php?action=trust;flag=2995
 
1. roslinpl - https://bitcointalk.org/index.php?action=trust;flag=2996
2. Monzsta - https://bitcointalk.org/index.php?action=trust;flag=2997
3. Accountslegend - https://bitcointalk.org/index.php?action=trust;flag=627

That tag should stay forever as a warning to any user. I can't imagine if everyone agrees on selling accounts and it's never a problem, then surely it will turn into a profitable business in an instant. Imagine if users who post something constructive, quality start running this business? Will the forum and users be fine?

I assume that selling accounts is frowned upon mainly because it can be a bad start for the forum. There are more and more farming ^{[in bounty or campaign],} spammers are out of control and will cause various problems that can harm other parties financially. So account sales must be tagged even though in the rules account sales is allowed.

I can agree with you that in 99% of the cases but I did not feel that I would be in the position to decide that every account selling is bad, since the unofficial forum rules (https://bitcointalksearch.org/topic/unofficial-list-of-official-bitcointalkorg-rules-guidelines-faq-703657 Rule 18) do not strictly forbid it. Also there is for example this case: https://bitcointalksearch.org/topic/m.16194427 which to me is unnecessary, but still I can't really say that it is a super bad thing.


In my opinion it should be a forum rule that you can sell accounts, but you have to wear a tag for at least 120 days that the account has changed hands. You can never know who dealt with the account in the past and therefore trusts the account and if it is a common practice (which I can definitely tell from the amount of accounts that were sold daily in the Telegram Group) it will destroy a lot of trust in the forum in general. It may not even that people loose money, but some users are also trusted for their technical knowledge or their judgment on Price action etc.

I personally think if there is proof an account has changed hands, a tag should be given.

Most users likely don't pay attention unless it's red though. Even the buyer wouldn't likely care about a neutral as they could still participate in most campaigns.

Low ranked nobody accounts that pose no threat to the community as far as being able to borrow large amounts with no collateral, maybe the neutral. High ranking or highly trusted accounts is where we should all consider a negative to stop someone from trying to scam.

You can add neutral feedback in this case if you suspect that account was sold or changed hands.
If there are enough evidence and if someone is doing ban evasion or abusing campaigns than you can add negative feedback.
I wouldn't care much about roslinpl, but his post history changed a lot after account purchase.

I couldn't find the link from mobile, but it's bob123's topic from 3 years ago: Flagging accounts which are up to sale.

Are you by any chance referring to that sting operation that Lauda and others did a couple of years back, or was there another attempt like this to get account sellers to give up the details that was rebuffed by the community?  Because I'll tell ya, I don't remember anything like the latter and I think publishing PMs from shitbag account sellers would be A-OK with anyone who cares about the forum.

I sure as hell know I don't mind what OP did, neither the sting aspect nor the publishing of PMs.  In other circumstances it wouldn't be appropriate, but considering that he might have saved someone from getting scammed by a high-ranking member who's not the original account owner or the forum itself from shitposting, I'd say it's well above board behavior.

Roslinpl?  Jesus, I haven't seen that username in forever.  I could have sworn whoever they were had disappeared for good.  I'm going to tag some accounts now and appreciate the info.

I gave you merits for doing the legwork here, but I disagree with the above; there is no good type of account selling.  Whether it's out in the open or on another website, the consequences can be exactly the same.

roslinpl an account that was trusted changed hands, woke up and started participating in 1xbit signature campaign with shitposts and the whole story is here

The proof pointing to ownership change is here
They didn't even bother signing a message from the addy.

When the campaign they were promoting stopped. roslinpl's activity also stopped.

I am going to tag all the accounts involved after sometime. I can not trust the person who is currently behind roslinpl's account or all the accounts involved in the sale.

The only issue is selling accounts is not illegal, so tagging said accounts would be an abuse of power. A large portion of the community is against account sales so I'm not sure why it's not a rule. if theymos (or any high recognized name)account was to ever be sold, do you know the amount of btc he could get donated?

It is perfectly legal (at least in my jurisdiction Germany) to ask somebody for the prices and for some samples of what he has to sell even if there is then no intention to buy it. It may not be the nicest thing to do but it is done by law enforcement everyday. You have to balance the interests and it is clear that the interest of the community to be possible scammed multiple times is more important than the interest of the seller not to expose the accounts that he sells.

People tried this before, publishing private messages and lying for a sting operation isn't appreciated by everyone.

A red trusted Legendary who wants to cash in isn't really surprising. Nobody will trust the account anyway.

To make it easier for people to know a lot about the accounts you mention, I'll help you create a complete list with profile links for each account.
Please check each account's trust page, 3 out of 4 accounts have changed their password 1 to 2 times recently.

1. MatthewLM
2. jkoil
3. raffern
4. archita
5. glendall
6. nandnor
 
1. roslinpl
2. Monzsta
3. Accountslegend

---

I'm curious, in principle this is a trap but is this allowed or recommended?

Accounts for sale or already sold:
 
Account sellers:
 

First of all I want to address the general topic of account selling. There are two types of account selling, the "good" type aka transparent selling of accounts and the bad type aka secret selling of mostly stolen accounts. (example of transparent account selling)
Secret selling of bitcointalk accounts is problematic since it will use the trust that people give towards an established account to potential scam them or trick them into trusting them more than they should. Because not a lot of long time users are willing to give away their account for money it also encourages account sellers to steal accounts by hacking, phishing and other illegal methods.
To find potential buyers it happens from time to time that an account seller posts an offer in the marketplace section, without disclosing what accounts he has to offer. This makes the deal not transparent and therefore potentially dangerous to many users in the future.  
But these offers made me think: What if users would pretend to be interested in buying an account and therefore could uncover what accounts they are being offered by the accountseller. This way it would be easy to uncover what accounts are being sold!
So that is what I did and the result was rather overwhelming. I replied to an offer of user “Accountslegend” on Telegram.  He offered me the Accounts jkoil (Hero Member) and MatthewLM (Legendary) for the price of 500 USD and 1000 USD. Since during the talks the accounts came online on bitcointalk I was convinced that user “Accountslegend” would really the one who owns the email and password to that accounts. I was happy with the result for my first investigation.
After some time I thought: Maybe it would be possible to take this further and uncover more of the Accounts Mafia. So that’s what I did. I created a new telegram account and contacted him again. But this time I wanted more proof. I told him it was not enough that he could show me screenshots from the logged in account, but that I would need personal messages to my bitcointalk profile.
This is where things started to get interesting. Instantly I got a message from user “roslinpl” to confirm that the person I speak to on telegram is a Legendary member and that I could trust him. I got also a PM form the account that was offered to me this time “raffern” (Full Member). He offered me one more account "archive" (Full Member) and even offered me to buy his account “roslinpl” which I can only speculate would have been a scam and I would have never gotten the login data. To make things even better I got a PM form user “Monzsta” that asked me why I did not reply the day before to his offers from the other accounts. I also want to mention that even if I asked many times what user could act as an escrow I only got the answer that he prefers to do the deals directly with him.

So to summarize things up, with this simple investigation I was able to uncover the main actor behind most of the accounts for sale ads here: “roslinpl”. I was also able to uncover his two alt accounts “Monzsta” and “Accountslegend”.
Furthermore I was able to uncover four accounts that are being sold at the moment(MatthewLM, jkoil, raffern and archita), with one account that was already sold during the investigation (jkoil).


During the investigation I was also added to a Telegram chat group that it is run by “Accountslegend” aka “roslinpl”. In this group there are a lot more accountsellers like “roslinpl”. So this is where this thread comes to play: In the next post you will find a list, where I will add any account that a users can provide proof that the account was offered to him by an accountseller. Furthermore there will be one more list with known account sellers here on bitcointalk. This makes accountselling transparent and unattractive for scammers. I want to say again that the selling of account is not necessarily bad, but should be disclosed to the public.

Evidence: (Klick here for full size images: https://ibb.co/album/rb971s)