Security analysts at BitMEX Research have issued an urgent warning to the cryptocurrency community regarding a sophisticated new scam scheme specifically targeting early Bitcoin holders. The fraudulent campaign focuses heavily on long-dormant addresses, particularly those dating back to the pioneering days of Bitcoin in 2011, employing psychological pressure and fake legal pretenses to trick unsuspecting holders into compromising their digital assets.
According to disclosures from the research firm, the malicious actors behind this campaign are attempting to exploit historical addresses by injecting false transactions and misleading data packets directly onto the blockchain. They achieve this by utilizing OP_Return outputs, which are an optional field within Bitcoin transactions that allow users to store a small amount of arbitrary data on-chain. By embedding custom messages into these outputs, the scammers are able to broadcast their fraudulent narratives directly to the blockchain histories of targeted wallets, ensuring that anyone monitoring the address or examining its transaction log encounters the deceptive prompt.
One prominent, high-profile case documented by analysts involves the infamous "1Feex" wallet. This particular address holds approximately 80,000 Bitcoin, a massive fortune that is widely believed by blockchain sleuths and industry experts to have been stolen during the catastrophic 2011 hack of the early exchange Mt. Gox. In this instance, the attackers meticulously crafted an on-chain message designed to catch the attention of anyone tracking the movements or history of the legendary wallet. The embedded data directs individuals to a sophisticated fraudulent website that heavily impersonates Salomon Brothers, a once-prominent and historically significant Wall Street firm.
Upon visiting the fraudulent portal, potential victims are confronted with an official-looking, yet entirely fake, legal notice. The web page boldly claims that the long-dormant wallet in question has been classified as "lost or abandoned." To heighten the illusion of legitimate authority and legal urgency, the site invites the supposed rightful owners to step forward and prove their claim. The instructions demand that victims either sign an on-chain cryptographic message using their private key or submit sensitive personal documentation through an embedded web contact form. To force a rushed and panicked decision, the notice explicitly threatens that if no responsive claim is received by October 5, the wallet will be permanently and legally deemed abandoned, implying that the targeted funds will be forfeited or seized.
Fake Legal Claims and Fabricated Advisory Boards
Security researchers have dismantled the legitimacy of the campaign, noting that the fraudulent website bears no credible connection whatsoever to the real Salomon Brothers or its actual former leadership structure. While the scammers attempted to build a facade of authenticity by publishing a list of real individuals who genuinely worked at the prestigious firm during the 1980s under an "advisory board" section, a closer inspection reveals that none of these former professionals have any association with this new and spurious entity.
BitMEX Research highlighted the deceptive nature of the setup, pointing out that the approach shares troubling similarities with earlier controversies. Specifically, analysts noted that the methodology is reminiscent of past legal maneuvers associated with controversial figures such as Calvin Ayre, who previously funded various legal actions and disputes involving the exact same 1Feex Bitcoin address. However, despite any historical legal disputes surrounding the wallet, this current website is entirely unauthorized and fraudulent.
In an official statement addressing the situation, BitMEX Research noted the deceptive tactics being utilized, stating that the connections claimed by the website are entirely fabricated. While acknowledging the presence of the advisory board page featuring real financial professionals from the 1980s, the firm confirmed that these individuals appear to have no link to the spurious entity operating the scam portal.
As news of the advisory spread throughout the digital asset ecosystem, blockchain community members quickly weighed in with their own analysis. Many veterans pointed out the glaring logical flaws in the scammers’ demands, noting that a legitimate wallet owner wishing to prove activity or ownership would naturally simply move a small, negligible amount of Bitcoin to verify control of the private keys, rather than submitting extensive personal documentation or interacting with an unknown third-party web form.
This glaring discrepancy has led numerous security analysts and community observers to conclude that the entire campaign is not genuinely about legal recovery at all. Instead, it is increasingly viewed as a wide-reaching social engineering scam meticulously designed to harvest sensitive personal information, cryptographic credentials, and identifying documents under the guise of an official legal proceeding.
Security experts have repeatedly emphasized that users, especially those holding legacy assets, must exercise extreme caution. BitMEX explicitly warned all participants in the cryptocurrency ecosystem to completely avoid interacting with the suspicious contact forms, refrain from submitting personal details, and ignore any instructions to sign messages through unverified third-party platforms.
The emergence of these elaborate social engineering schemes highlights the rapidly growing complexity and sophistication of crypto-related fraud in the modern digital landscape. Malicious actors are continuously shifting away from simple phishing links toward context-aware, highly targeted campaigns that leverage blockchain metadata, historical events, and psychological pressure to deceive victims.
This persistent threat environment continues to inflict significant financial damage across the global market. According to recent industry data tracking illicit activity during the first half of the year, hackers and fraudulent enterprises have successfully stolen over $2.1 billion across 75 separate security incidents. This staggering figure represents a notable 10% increase in total losses compared to the exact same period in the previous year, underscoring the urgent need for heightened vigilance, robust operational security, and continuous awareness among both institutional and retail cryptocurrency holders as the ecosystem matures.
