Topic: The mom of my friend got scammed 7.3k$ from coinbase usin an app like teamviewer (Read 364 times)

I'm sorry to hear about the situation. The chances of recovery might be low, considering the amount. Still, it's essential to report it to the police for documentation. Even if the amount is small, having an official record could be useful.

The scammer did not and does not use a mixer. A topic about mixer was brought into this discussion strictly limited to a context where someone pointed out that the fund will not be tracable if the scammer put it on a mixer. The flow of fund itself, unless I am mistaken and it's a mixer or an exchange [thus, a "pseudo-mixer"] address, are yet to meet a mixer. Someone with blockchain skill can trace them up if they want to, I... think. Sadly, it's not my forte.

Word up.  My tech ignorance combined with my ever-growing paranoia about all these sneaky ways being mentioned about how scammers can get access to anything on your PC of phone have made me not want to download anything anymore (not that I ever did a lot of downloading of fishy stuff anyway).  Pretty soon I'm just going to be cowering in a corner afraid my computer is going to murder me in my sleep.  Lol.

It's been a while since I've seen Teamviewer mentioned on the forum, and every previous instance where I did see it, it was in relation to a scam.  I assume the younger generation, if they're dealing with crypto, would stay far away from it and that this was indeed somebody's mother who got scammed.  That sucks, OP.  Listen to the advice you're getting here, because you've gotten some good feedback so far.  Spread the word to anyone you know who's even thinking of getting involved with bitcoin about potential scams, because they're everywhere.

Thank you for sharing I couldn't even remember to scan through the ninjastic.space, you know it's very hard for someone to remember all this tools especially those that are not deep in discussion within some few users in this forum won't discover them except maybe they archive them or store them somewhere for easier access. Between is it really possible to track down the final destination of the funds and to see the scammer's address because from explanation it shows that scammer already used mixer to missed the coin away with about different output address to twist transaction from the original owner.

You can always see the original content [and, thus, the address] from ninjastic.

It was removed from the post as per an instruction to "keep things under the radar", though there are other ways to obscure the address from being indexed aside from removing it from post. The fund has been moving, though, so I don't think it's necessary to keep it discreet.

The originating address was:

It moved with this hash and now the wallet is empty:

That really sucks, but perhaps in the situation that we have right now, there are a lot of scammers that will really convince you because he/she is supposedly a "friend of a friend". So who wouldn't fall for that trick?

But in this case yeah, people will do that because of the money involved and it's really very unfortunate that this has happened.

So the best case scenario here is just filed a police report. Not sure though how the police will response as this is a special cases for them but currently this is the best recourse of action. And hopefully they catch the criminals.

Damn, that's unfortunate. Have you reported him to the police? You should be able to do that right? Considering that she knows his face and probably his name too. If the police are quick, they should be able to track him down if he's still in your country. If not, then I guess you can still rely on the Interpol.

Op did you edited the address out of here as I can see there is no address from the op how do we know the address the scammer uses to scam your friends mom, although from your explanation it seems that the scammer uses mixer after receiving the money he mixed it out to different output address so that the transactions will be hard to trace from his end. But if i must know how did your friend mom suddenly develop passion and trust for unknown person over the internet and to send bitcoin to him without knowing the risk associated with sending bitcoin to them or why did she go downloading unknown app without doing her findings to start using it, don't you know scammers often uses many app to defraud people around to collect their hand earn money from them?

Yes, i think the same ...

That's probably what's happened, scammers are good at social engineering so I don't think that they had a hard time having to convince her to do this kind of thing. Also, isn't TeamViewer works like a remote access tool right? I think that's how they've got that person and has stolen her funds. Regards to the possibility of investigation, I don't think that even if there's one, it's unlikely that they're going to ever recover the money stolen, this is a syndicate in my opinion so you'll have a hard time finding the group or even arresting any of them since this happened online.

It is quite unfortunate that such a thing happened. I do not really understand why most of these things happening seems to.be coming from someone claimed to be very close. I have come to realise that mostly mischievous act been perpetrated are very closed allies who we least or less expect it from. This is the reason why one needs to be careful of their engagement.
I believe the woman trusted that boy to have known those details means that they were beyond just friendship but it was unfortunate that she was scammed the same person she trusted.
If truly binance wallet address was discovered in the process of transferring the coin, I think you should assist her to email binance stating the problem and how it went about so they could commence their investigation by blocking activities on that account and tracing the owner of the accounts as they have KYC and every other thin to put that young man and in I think this would help more.

Cryptocurrency mixing is also known as crypto tumbler and it's the process of tainting crypto transactions which will make it impossible or almost impossible to know the initial wallet where the BTC was sent from. In other words, it's a privacy enhancement in crypto.

Your story reminded me of a short series on Netflix,  it is about a couple who decided to steal Bitcoin from their manager’s computer. They stole the accounting phone to take the OTC and then sent the amount to their account. Most likely, this scammer found the phone number that was linked to the Coinbase account and learned the password using social attack like her birthday.
She must delete all the data on her phone or account, change the password, and then try to find out more data about him. If 7,500 is a large amount he may start spending it soon, and then you will be able to link his data.

Since the address of the scammer and the transaction ID is now posted here, the scammer is now aware that you are now following his action, because this discussion shows up when you Google the address, its better if you cloak the address and the transaction ID so it will not get indexed by the search engine, the scammer will now plan to move the funds without being traced.

I hope you can eventually trace the address and the scammer do not have the expertise to anonymize the transaction you mentioned that he used Binance that will be your lead expect a lot of movement from this funds, we all know scammers they will find a way to cash it out or to get it somewhere untraceable.

I understand that one of the thing you tried to acquire here is a way to freeze the fund in his address, suppose it's binance hot wallet's? Unfortunately, I agree with hosseinimr93, I don't think that's binance hot wallet, that's the scammer's personal wallet, so there's no way we can ask binance or other custodial wallet provider to freeze the fund.

Best path to chase right now is to file a police report, though I personally think that'll lead to a dead end, given the only evidence is a dutch phone number [with high probability of being a disposible number]. Other way is to closely monitor the fund in that address and wait for it to move, hoping that it moves to a centralized exchange or a custodial wallet provider, then ask them to froze it.

Did this woman trust an unknown person on the Internet to share personal data with him without knowing more information about him? I mean, identifying the man using the available data is easier than tracking Bitcoin addresses, which may require court papers to recover your money.
Regarding Bitcoin addresses, they will most likely end up in a central wallet, but without starting legal investigations, you cannot ask these services to recover her money.

Metamask is not a bitcoin wallet. So, that's not Metamask.

Exchanges usually move the fund to their hot wallet from user's deposit address after someone makes a deposit. Since the fund has not been moved yet, I don't think the address belongs to an exchange.
It's more likely that the address belongs to the scammer's personal wallet and he/she has full control over that.

It is possible to know if that account he sended the btc to its Metamask wallet or a exchange wallet ? The guy is not responing at all and he dissaperead completely! What should we do other than police report here in italy ? So money at least are still there , who knows maybe she can have them back if the wallet its not private evenntually i hope...

The transaction in question sounds like a withdrawal from a custodial service.
Custodial services usually process multiple withdrawals in a single transaction and that can be why there are 18 receiving addresses.


As I said in my previous post, there is no outgoing transaction made from the address in question and the fund is still there.

Basically an oold friend of her persented the scammer guy to her...now she is trying to reach to her friend for telling him what happened, but he wont answers the phone...started thinking that maybe he is part of it too...she cant find or meet the guy for now .

---

Ok, got it. I said her already to uninstall the app and have get a new password to her accounts. However, what you mean by mix the coin ? thanks

---

The total ammount is 7.3k$ , he started to send from 03/11/2023 , so the 0.089 btc is jjust a part of the last transaction he made. Because she discovered she is without funds only tuesday 6 in the evening. Is there anyway to understand where all those money gone ? i cant understand much ,, the only thing i know is that the transaction hash i pasted here is the one showing the money getting out from the moms wallet.

[moderator's note: consecutive posts merged]

It's quite unfortunate that both you and your friend mother have already been scammed, now i think you should have learnt so many things needed for you to know and understand, so many of us have already been dupped of our bitcoin because we lack the understanding of getting to know any elements of such right before they attack, that is why it's very important to be informed and educated about scam and wallet security.

OP's story doesn't make complete sense. It sounds like a scam of sorts really did happen but I don't know how he determined that bc1qq0ah... is the scammer's address as the funds were sent to 18 different addresses.

If the thief had TeamViewer installed on the phone, I don't think they'd need the OTP to make the Coinbase withdrawal... They'd be able to see the incoming SMS, or open the authenticator application.

The "drained" addresses are associated with a wallet that has transactions going all the way back to Aug 2012, so it appears to actually belong to Coinbase.

In the cryptocurrency space, the only person you can trust is yourself and never entrust something valuable or important to someone else.

Only if the scammer don't mix the coin.

This is beyond something you can do. First, the woman needs to secure her phone, computer, and other means of communication she used with the scammer.
You guys ought to report the issue to the authorities so that Binance can freeze the scammer's account but you can still give it a try and also record the scammer's wallet on here.

Is this mutual friend an online friend or can you meet them? If it is the latter can't you try locating him and ask him about his friend? It is really unfortunate but it sounds like your mom's friend is also on this if he says that the scammer is a nice person and so on. If it is an online friend, I'd suggest educating your mom about better security practices. From the way you describe it, your mom seems to be unaware of the common scam tactics and how to protect ourselves against them.

Scammers are good at doing this, they are good at tempting their victims I have watched so many of these schemes on YouTube, they started with a recommendation so there's a possibility that your mutual friend is part of the scheme, so you should never give anyone access to your computer unless they are the nearest relative but someone from the other side of the world is such a big no, if the scammer is from your location you can file charges but if its outside, it's a long shot.

For readers who aren't aware of this scheme, this is an example of how they scam people when you give them access to your computer

This is why you never let anyone remotely access your computer

Tell that woman to urgently change all access passwords on the services she uses and where she has any funds. Everything is compromised, especially if she doesn't understand how it all happened. If you have a phone number, it doesn't have to mean anything, but go to the police or a competent authority as soon as possible.
She (the victim) should remember all the possible details and information she has about that fraudster. Probably most of what he told her was a lie, but maybe there is something that will help in finding him.

Yes, Bitcoin is still at the address you shared here, but there are ways to anonymize it. Then it will not be possible to find out the final destination of those coins, nor will it give any information about that person.

The victim's fund was sent to bc1qq0aheutystzzw4vc0kn5fkuvnp54ju3yckpmww. Am I getting you correctly?
If so, there is no outgoing transaction from that that address at all. The address has received 0.08949505 (which is around $3,100 worth of bitcoin, not $7,300) in the transaction in question and 0.20808782 in total, but hasn't spent any fund.

Actually a mutual friend of her told her about this guy, that he is a nice person and so on. She belived the guy being friends, and he started to talk with the other guy about coinbase and so on. He asked her to install an app in her phone , so he could help her out with her account, he initially told her that he works for some king of blockchain agency in luxembourg...She started to trust the guy and installed the app , initially he wasnt doing nothing , but these 4 days he sended a pic of 92k$ in BTC holdings, saying that those money are for her, and that btc went to the moon so she can now take out the money, but before that he needs the OTP codes arriving so he can send em . Thats basically how she got rekt...in the transactions online, i saw a binance wallet, couldnt maybe make a complaint to binance directly so he gets the wallet on binance blocked ? have you seen some of the txs he made in these days starting from 03/11/2023 ? what you think ? thanks

How did she contact this scammer? How does the scammer install TeamViewer on her phone?
Do they meet in person? Or did she install it with herself?
The bad thing she did why she allow someone to install any app on her phone it should have been personal no one should give access to your personal things like a phone especially if all your bank accounts and assets are on your phone.

If she didn't meet this scammer in person there's no way that she can find this guy and you can't reverse the transaction.

I'm sorry but no one here on the forum can able to help you or her with this case much better to report and seek help from local law enforcement or any cyber security agent that can able to track down this scammer.

Hi all ! this is my second time on bitcointalk , first time i wrote on the forum was couple weeks ago when i got scammed by a guy i trust ( for 300$ ) , but now things are going bad for my friend and i want to help him somehow, so here i am looking for your help in this wide forum.
Basically the mom of my friend had some btc on coinbase, and a guy ( he called her months ago and started gaining her trust , she is alone , no man to her side if not her son ( my friend) , and somehow he installed an app that he can do whatever he wants from her phone . And yesterday he sended from her account on coinbase from the phone all the money she had ,here is the Tx Hash :

.  
Here is the wallet address he sended all to :

 

In your opinion is possible to understand where the guy and if he cashed out? using /ww w. blockchain. c om( dont know if i can post links here) i saw that he sended the ammount to 9 different wallets a specific ammount and  18 different wallets another ammount, starting sending in date 03/11/2023 till yesterday 06/11/2023... I saw that he used BINANCE 4 in some wallets to get out the money , but i cant understand well if he sended it or received it from there, im not good at reading the blockchain txs im sorry, thats why im here . Obviously tommorrow we go together to tge police with her , but i think its normal to bring them some proofs , so we can eventually block his future transactions on binance or other centralized exchanges he used to get the money out . Could you guys helpp me to have more informations as possible about this person ? i have his phone nr , he used a dutch tel. number to call her , obviusly i tried to call him but not an answer and i got blocked fast... I just want to help my friend and his mom, if you guys would help me out by reading better between txs and obtaining some info, i thank you a lot in advance , God bless .