Cryptocurrency analysts have issued urgent warnings regarding a sophisticated new social engineering campaign specifically targeting early Bitcoin holders, particularly individuals and entities holding dormant assets in wallets dating back to 2011. The fraudulent scheme attempts to capitalize on aging, inactive accounts by leveraging on-chain data manipulation and elaborate spoofed legal entities.
According to a recent advisory published by research analysts at BitMEX Research, the scam heavily relies on the exploitation of long-dormant blockchain addresses. The perpetrators achieve this by injecting false transactions and misleading, deceptive messages directly into the metadata of the Bitcoin ledger using OP_Return outputs. This optional field within a Bitcoin transaction allows developers and users to carry arbitrary data on the blockchain, a feature the attackers have repurposed to broadcast malicious claims to anyone monitoring these historical addresses.
One prominent, high-profile case highlighted by security researchers involves the infamous “1Feex” wallet. This heavily monitored address currently holds approximately 80,000 Bitcoins, which are widely believed by blockchain sleuths and industry analysts to have been illicitly acquired during the historic 2011 hack of the now-defunct Mt. Gox cryptocurrency exchange.
In this targeted instance, the attackers meticulously crafted an on-chain message linked to the 1Feex address, directing curious onlookers and potential victims to a fraudulent website. This rogue web portal has been designed to impersonate Salomon Brothers, a legendary and historically significant Wall Street firm that no longer operates in its original capacity.
Upon visiting the fraudulent domain, victims are greeted by a fabricated legal notice asserting that the targeted cryptocurrency wallet is officially classified as "lost or abandoned." The malicious platform then invites the supposed rightful owners to step forward and prove their claim. To complete this so-called verification process, the site demands that users either sign a cryptographic on-chain message using their sensitive private keys or submit exhaustive personal identification documentation through an online web contact form.
To create a profound sense of urgency and panic, the fraudulent notice warns that if no official response or claim is registered by October 5, the wallet will be legally deemed abandoned, compelling victims to act impulsively before taking time to verify the claims.
Following the emergence of the campaign, BitMEX Research scrutinized the fraudulent website, confirming that it bears no credible, legitimate link to the real Salomon Brothers institution or its historical corporate leadership. While the spoofed website brazenly displays a list of real, verifiable individuals who actually worked at the renowned Wall Street firm during the 1980s, security analysts confirmed that none of these former professionals have any affiliation or connection to this new and spurious entity.
Furthermore, the platform noted that this specific approach bears striking similarities to an earlier, controversial campaign associated with prominent figures such as Calvin Ayre, who previously funded and promoted legal action involving the exact same historic Bitcoin address. However, unlike prior public legal maneuvers, this current web-based operation leans heavily into deception and data harvesting.
As news of the campaign spread across digital asset communities, experienced cryptocurrency users and blockchain security analysts quickly weighed in on social media platforms. Commentators pointed out a glaring logical flaw in the scammers’ premise: a legitimate wallet owner wishing to prove activity or ownership on the blockchain would simply need to move a minor, negligible amount of Bitcoin to establish control, rather than risking the transfer of a full, historic balance or surrendering private keys and personal data to an unverified third party.
This glaring discrepancy has led many industry observers to conclude that the entire campaign is not a genuine legal proceeding, but rather a calculated social engineering scam. The ultimate objective appears to be the gathering of sensitive personal information, credentials, or private keys under the deceptive guise of a formal legal or regulatory obligation.
In light of these findings, BitMEX Research has emphasized that crypto holders should exercise extreme caution, advising users never to interact with the suspicious contact forms, click unverified links embedded in blockchain transactions, or provide personal details to unauthenticated entities claiming rights over dormant assets.
The sudden emergence of these complex legal-themed wallet scams highlights the rapidly evolving sophistication of cybercriminals operating within the digital asset ecosystem. Fraudsters continue to devise inventive ways to exploit human psychology, leveraging technical features of the blockchain to lend false credibility to their illicit operations.
This rising tide of sophisticated attacks arrives against a backdrop of escalating financial losses across the digital asset landscape. During the first half of 2025 alone, hackers and malicious actors successfully stole over $2.1 billion across 75 separate security incidents worldwide. This alarming figure represents a substantial 10% increase in total stolen funds compared to the exact same period in the previous year, underscoring the ongoing challenges facing cybersecurity professionals, institutional custodians, and everyday crypto asset holders alike.
