Brooklyn DA Cracks Down on $11 Billion Crypto Scam Targeting Russian-Speaking US Residents

Precedent & Market Context

The Brooklyn District Attorney's Virtual Currency Unit has been actively working to combat cryptocurrency scams targeting Russian-speaking communities in the US. In 2026, the office seized domains and disrupted servers linked to a $11 billion crypto scam network, targeting Russian-speaking victims in the US. This recent action builds on earlier enforcement actions, including the seizure of 400 domains linked to cryptocurrency investment fraud.

Main Event

The Brooklyn District Attorney's Virtual Currency Unit has disrupted a multinational cryptocurrency investment scam targeting Russian-speaking residents across the US, seizing or disabling 241 fraudulent domains and 112 servers in a coordinated cyber enforcement operation. The action followed a three-year investigation conducted with the FBI. Investigators executed search warrants and coordinated enforcement measures across three time zones, targeting infrastructure hosted by companies in Eastern Europe and the United States.

Analysis & Market Impact

The disruption aims to make it harder for the criminals to rebuild their online infrastructure and contact previous victims. The case highlights the challenges of combating cross-border cryptocurrency fraud and the importance of cooperation between local prosecutors, federal investigators, and technology providers. The scam disproportionately affected Brooklyn's Russian-speaking community, with victims typically responding to Russian-language Facebook advertisements promoting investment opportunities.

Implications & Outlook

The District Attorney's Office has recovered about $300,000 in stolen funds and is pursuing additional recovery efforts. The investigation involved the FBI and cybersecurity partners, including Shadowserver, Coeus, and UltaHost. The disruption will likely have a significant impact on the cryptocurrency scam landscape, as it deprives scammers of access to data, victim information, and software supporting the fraudulent websites.