Pages:
Author

Topic: TORWallet - Scammer (Read 11230 times)

legendary
Activity: 2506
Merit: 1010
January 31, 2013, 05:56:41 AM
#36
Can someone explain how the coins have not even moved from the address?  If they are "running away with the coins,"  how are the coins still in the wallet and have not moved? 

Nobody else has the private keys for the wallet so there's no need to spend the coins.     The time that a wallet has been hacked and the funds are spent by the thief right away is because that is what the thief needs to do to prevent the rightful owner from spending the funds.  But in this case, there's no other party with the private keys.
newbie
Activity: 18
Merit: 0
January 29, 2013, 10:29:54 AM
#35
I'm glad I only put in a few bitcoins, I knew there was a risk with it being anonymous.

Can someone explain how the coins have not even moved from the address?  If they are "running away with the coins,"  how are the coins still in the wallet and have not moved? 
hero member
Activity: 742
Merit: 500
Its as easy as 0, 1, 1, 2, 3
January 24, 2013, 12:05:44 PM
#34
Its just a trap on tor to pull people in now.
vip
Activity: 812
Merit: 1000
13
January 22, 2013, 12:51:57 AM
#33
Can someone please explain to be how a online wallet like blockchain.info is better then other ewallets?
It is.

No online wallet is safe. I run a wallet service as well (hotwallet.ca) and I am paranoid that one day it will be hacked, so I put up a shut down notice and warned users not to deposit any money unless it is for a temporary purpose.

The profit model I had set up was a few bitcoin games (dragon dice) and I was planning on moving to some sort of fee-based model, like 0.1% on all deposits. But there's very little money to be made. It would take around 1,000 BTC of deposits and reasonable time spend on the games before I could even begin to justify hosting fees. That's the reality of running a wallet. It's not profitable unless you're in the top two (and torwallet probably was not in the top 2). Since they had no other profit model I am guessing they decided to scam since they're completely anonymous.

Anyway.... since you know their hosting provider, if you can demonstrate loss you can get their address. The ISP has a legal obligation to reveal their address so they can be served. But you have to go through a lawyer and it will cost at least a few hundred dollars just for that.
legendary
Activity: 1260
Merit: 1000
Drunk Posts
January 22, 2013, 12:07:08 AM
#32
The .net site appears to be down now, but the tor site is still up.

Still can't move my couple bitcoins, and they haven't moved from the deposit address either.
legendary
Activity: 2506
Merit: 1010
January 13, 2013, 01:49:33 PM
#31
Can someone please explain to be how a online wallet like blockchain.info is better then other ewallets?

When you access http://Blockchain.info/wallet and enter your password, that password is not being sent to blockchain.info/wallet.  Instead the Javascript code running in your browser uses that password decrypt the wallet that it obtained from blockchain.info/wallet (where only an encrypted copy of your wallet is stored).   So, Blockchain.info/wallet doesn't have access to your private keys inside your wallet.

Because of this, it is not considered a hosted (shared) EWallet, but instead it falls under the category of a hybrid EWallet.  (Hybrid, because it acts like a locally installed client yet is accessible from a browser with no software installation required.)

There is the possibility that the site is compromised and the attacker replaces the Javascript that is served with the site with a version that captures the wallet identifier and password and then uses that to steal your bitcoins.   The protection against that is Blockchain.info's tool called the Javascript Verifier, available as a browser plugin or Java applet.  The verifier will alert if the Javascript code served by the site is different from the version that Blockchain.info has checked into GitHub.
 - https://blockchain.info/wallet/verifier
member
Activity: 112
Merit: 10
January 12, 2013, 02:55:41 PM
#30
Can someone please explain to be how a online wallet like blockchain.info is better then other ewallets?
It is.
hero member
Activity: 588
Merit: 500
January 12, 2013, 02:51:21 PM
#29
Can someone please explain to be how a online wallet like blockchain.info is better then other ewallets?
sr. member
Activity: 252
Merit: 250
January 06, 2013, 06:39:47 PM
#28
For those of you who insist on using online wallets, please consult my signature.
hero member
Activity: 588
Merit: 500
January 06, 2013, 05:42:19 PM
#27
These e-wallets or what ever never seem to last.
sr. member
Activity: 574
Merit: 250
January 02, 2013, 05:49:54 PM
#26
Back in August TORwallet vanished for two solid weeks. When it came back online I pulled my very small amount of coin out of it. lots of others at that time did the same.

it was sketchy from day one. this doesn't suprise me
legendary
Activity: 1792
Merit: 1008
/dev/null
December 31, 2012, 04:03:52 AM
#25
if it wouldnt, coins would be able to be withdrawn or the owner of TORWallet would have posted here (or put some informations on his site)
hero member
Activity: 588
Merit: 500
December 27, 2012, 10:52:41 PM
#24
So any word on if its a confirmed scam yet?
legendary
Activity: 2506
Merit: 1010
December 21, 2012, 08:58:39 PM
#23
Another thread on the issue:

TORwallet Microtronix Webhosting Bitcoins
 - https://bitcointalksearch.org/topic/torwallet-microtronix-webhosting-bitcoins-131992
legendary
Activity: 2506
Merit: 1010
December 20, 2012, 09:20:14 PM
#22
The hosting provider where TORWallet.net is hosted (which is also the domain registrar/reseller) will consider a takedown request, but my takedown request was denied because I personally am not a party (I never used TORWallet, was not scammed).

So, if anyone is willing to contact the hosting provider to assert that fraud is occurring, please PM me and I will provide the e-mail address for the hosting provider.
newbie
Activity: 18
Merit: 0
newbie
Activity: 28
Merit: 0
September 26, 2012, 06:29:21 PM
#20
Thanks for that long winded speech guruvan.

I completely agree with what you have said.

There's also some interesting notes to be taken. I'm fully aware of what needs to be achieved in "mixing" coins.

Quote
Finally, you really have to ask yourself: "Am I even achieving what I thought I was by mixing my coins, and did I even need to do that in the first place?"

Most of the time, most people do not have the experience with fiat money systems or bitcoin to successfully obfuscate the source of funds. While the mixing service may work effectively enough, the tracks on either side of the mixing service are usually going to expose you. This means that all that's really been achieved is exposing the mixing service's addresses.

Even if both sides of the transaction (in/out) are obvious, eg. funds came from this exchange and went out from this exchange, if the coins are mixed in between you cannot link the two transactions meaning they could have come from anywhere. So even if the original transaction is exposed there is no way to link it to the transaction out of the network. This is just my view anyway.

I really don't have time to reply to everything you have said  Sad

From now on I will be setting up my own anonymous VPS with a headless Bitcoin client running and use those addresses, at least then I have access to the private keys.


hero member
Activity: 952
Merit: 1009
September 26, 2012, 05:19:06 PM
#19
That's cute.  Cheesy
newbie
Activity: 18
Merit: 0
September 26, 2012, 05:17:39 PM
#18
You know, after reading some of the scam threads, I wonder if they could be cooperating with an investigation and not letting anything go out.  Are they not allowed to talk about an ensuing investigation?  

I know I'm probably grasping at straws, but it's just a thought.
hero member
Activity: 532
Merit: 500
September 26, 2012, 08:09:00 AM
#17
Hi Guruvan,

Would be nice to see the link for this googlegroup ?

The only way to really find out if it is a scam or not is to use the service, which many of us did, Is it not ok to assume that there are good people that create quality services out there ? Should we always instantly think that something is a scam.... it's not within our nature.

It was a very successful con... shame that  Smiley

Yes the only way to find out if it's a scam it to use the service (or wait for others to do so)

No, it is not ok to assume that the new, anonymous people you're sending your money to are good people. You should presume that they are trying to con you, and allow them to slowly earn your trust. Slowly, because the long con nets the most of your money.

When attempting to verify such a service, you must presume that any and all coins sent are gone, and be pleasantly surprised if they're returned. The more complete the anonymity of the service, the less likely that service can ever build significant trust. There's no telling how long the con is!!

Community trust is not an acceptable measure of the trustworthiness of a service. It's very common in all social networks (online and off) for a con artist to befriend multiple people in the same network, establishing trust relationships quickly among all the new friends based on the newly gained trust of the other new friends. With this method, one can become very popular, well known, and trusted in a short time in a tight social group.
Obviously this quickly leads to amplified returns on such a scam as this appears to be. (works better with pseudonomous people rather than anonymous people...pirate got a lot more out of the people than torwallet....he's a friendly guy)

When you have no financial incentive for the service to stay honest, and they're anonymous, you have no way other than limiting your exposure to limit your risk. You have no way to inflict a penalty, so there is exactly zero consequence to relieving you of funds. Your funds should, at most, go in, and right out.

But, there's more....Say you do use a somewhat less anonymous, well known anonymous mixing wallet, like Silk Road. Well....they provide a service which is illegal in most jurisdictions that I know. So, if you move coin from your Mtgox account (with your real name on it) into SR, and SR is discovered, you now have exposed yourself to risk of law enforcement contact (at least). Or, maybe, the people who run SR got tipped off they were about to be discovered, and had to close up shop unexpectedly, and for any number of reasons...say...destruction of data in a high speed chase w/ crash ending...your btc is gone. With any anonymous service, it's impossible to truly evaluate the operation's overall security posture - if the operation is illegal in any jurisdiction, that makes your risk analysis much more complex (especially if you're not an experienced criminal!) So, still, you only move the coins you really want mixed, and move them out asap. 

Yeaah. Even if they're super nice guys - there's reasons not to trust anonymous services that collect your funds. Even with economic incentive, there may be significant risks. The less obvious the risks are, the less you can evaluate them, the more that risk goes up.

You must not assume that people asking for your money are the good people that they might be. And the second you see red flags in their behavior, you and your BTC must flee! Smiley

Finally, you really have to ask yourself: "Am I even achieving what I thought I was by mixing my coins, and did I even need to do that in the first place?"

Most of the time, most people do not have the experience with fiat money systems or bitcoin to successfully obfuscate the source of funds. While the mixing service may work effectively enough, the tracks on either side of the mixing service are usually going to expose you. This means that all that's really been achieved is exposing the mixing service's addresses.
Pages:
Jump to: