Crypto Scam Takedown: Brooklyn DA and FBI Hit 112 Servers

Prosecutors in Brooklyn, working alongside the FBI, have knocked out the technical foundation of a fraudulent crypto investment operation that preyed on Russian-speaking residents of the United States. District Attorney Eric Gonzalez said last week's coordinated action took 241 web domains and 112 servers out of the scammers' hands. His office estimates the network took tens of millions of dollars from victims. About $300,000 has been recovered so far, and no arrests have been announced.

Why the Servers Mattered More Than the Websites

For anyone following crypto fraud, the key detail is what investigators chose to go after. The DA's Virtual Currency Unit had already taken around 400 fraudulent domains offline. Fresh copycat sites kept appearing almost as fast as the old ones vanished. This time the unit went after the layer underneath: servers rented from hosting firms in Eastern Europe and the U.S. that stored victim records, page content and the software behind the fake platforms. Officials say that removing this layer makes it much harder for the operators to launch replacement sites or get back in touch with people they had already defrauded.

Search warrants and related enforcement steps were carried out across three time zones within a few hours. According to the office, the network relied on infrastructure and IP addresses located in Ukraine and elsewhere in Eastern Europe. Gonzalez said the action had “struck at the heart” of the enterprise and thanked the FBI for its role.

Background: How the Scheme Worked

The investigation behind the operation lasted three years. The DA's office said Brooklyn's sizeable Russian-speaking community meant the borough's residents were hit disproportionately. The method followed a pattern that has become common in investment fraud generally:

• The hook: Russian-language Facebook advertisements promoted supposed investment opportunities.
• The coaching: A self-described adviser phoned each person who responded. The adviser helped them register on a bogus crypto trading site, buy digital assets and send them to addresses tied to that platform.
• The trap: After weeks or months of apparent gains, attempts to cash out ended in frozen accounts or demands for extra “fees” and “taxes.”
• The second hit: Data pulled from the seized servers showed that the same group came back a few weeks later posing as a recovery service and offered to retrieve the lost money.

Prosecutors say some victims saw their whole life savings disappear. The follow-up “recovery” pitch is especially cruel because it targets people who have just been defrauded and are desperate to get their money back.

The Bigger Picture: Crypto's Fraud Problem

The case lands against a grim national backdrop. The FBI's annual report for 2025 recorded $8.65 billion in investment-fraud losses. Based on the bureau's totals, CoinDesk calculated that crypto investment schemes made up roughly 84% of that figure. Across every internet-crime category, crypto-related losses came to $11.37 billion, about 54% of the $20.88 billion total.

Local prosecutors are taking on a growing share of this work. The Brooklyn DA's office previously charged a resident who used phishing to take $16 million from close to 100 Coinbase customers. He was later given a prison term of up to 12 years.

Our Assessment: What to Watch Next

A takedown like this does not move markets. It does matter for the broader question of trust in crypto, because large-scale retail fraud remains one of the main reasons regulators and the public are wary of the sector. Historically, enforcement against scam websites has been a game of whack-a-mole. Going after the hosting layer is an attempt to make rebuilding slower and more expensive for the criminals.

Big questions remain open. No arrests have been announced. There is also a wide gap between the roughly $300,000 seized and the tens of millions believed lost. Two things to watch: whether the operators can simply move to new hosting providers, and whether victims receive any meaningful restitution. For readers, the scheme's structure is the practical lesson. Unsolicited advisers, platforms that block withdrawals until more money is paid and recovery offers that arrive after a loss are all well-known warning signs.