Analysts at BitMEX Research have raised a serious security alarm regarding an emerging cryptocurrency scam specifically targeting early Bitcoin holders, with a particular focus on long-dormant wallets dating back to 2011. This sophisticated social engineering campaign attempts to exploit historical blockchain addresses by injecting deceptive transactions and misleading messages directly into the public ledger, capitalizing on the anonymity and technical complexities surrounding early digital asset storage.
According to the research firm, the perpetrators behind the scheme are leveraging OP_Return outputs—an optional field built into Bitcoin transactions that allows users to permanently store a small amount of arbitrary data on the blockchain. By utilizing this feature, the attackers inject false transactional metadata and deceptive notification links straight into the historical record of targeted addresses, ensuring that anyone monitoring these old wallets via blockchain explorers will encounter the fraudulent outreach.
In one prominent and well-documented case highlighted by the investigators, the scammers trained their sights on the famous "1Feex" wallet. This high-profile address holds approximately 80,000 Bitcoins that are widely believed to have been illicitly acquired during the historic security breach of the Mt. Gox exchange in its early days of operation. Crafting a targeted narrative around this notorious address, the attackers embedded a custom message designed to lure anyone monitoring the wallet to an external, highly deceptive website impersonating the defunct, prestigious Wall Street firm Salomon Brothers.
Upon visiting the fraudulent web portal, targets are greeted by a simulated official legal notice claiming that the specific cryptocurrency wallet in question is legally classified as "lost or abandoned." The site then sets an urgent, high-pressure tone, inviting supposed rightful owners to step forward and legally prove their claim to the massive digital fortune. To substantiate ownership, the fake notice instructs victims to either sign an on-chain cryptographic message using their private key or submit sensitive personal documentation through an embedded web contact form. To maximize psychological pressure, the notice includes a strict deadline, warning that if no valid ownership claim or response is received by October 5, the wallet will be officially deemed legally abandoned under fabricated legal frameworks.
Fake Legal Claims and Fabricated Advisory Boards
As BitMEX analysts thoroughly investigated the infrastructure behind the scam, they quickly uncovered glaring discrepancies that exposed the fraudulent nature of the enterprise. The research firm warned that the website exhibits absolutely no credible, legitimate link to the historical Salomon Brothers financial institution or its former executive leadership. While the creators of the phishing site attempted to manufacture an aura of authenticity by displaying a comprehensive list of real, historical individuals who genuinely worked at Salomon Brothers back in the 1980s, none of these former professionals have any association whatsoever with this new, spurious entity.
The investigative platform noted that this deceptive approach bears striking conceptual similarities to earlier, highly controversial legal campaigns associated with prominent figures like Calvin Ayre, who previously funded legal maneuvers and public disputes involving the exact same 1Feex Bitcoin address. However, while previous attempts involved public legal discourse, this new incarnation has morphed into a deceptive phishing and social engineering tactic designed to trick unsuspecting individuals or trap legacy holders.
Detailing their findings regarding the fabricated professional associations, BitMEX Research stated that the connections claimed by the website are entirely fictitious. The advisory board page displays real professionals from the financial sector’s past, yet these individuals remain entirely unconnected to the spurious operation attempting to weaponize their professional reputations for credibility.
Cryptocurrency community members and on-chain analysts have also weighed in heavily on the developments, pointing out the glaring logical flaws in the scam’s premise. Security-conscious observers noted that any legitimate wallet owner seeking to prove active control over an old address would simply need to initiate a minor, low-value movement of a small amount of Bitcoin to demonstrate ongoing activity, rather than uploading sensitive personal identification or executing risky cryptographic signatures on unverified third-party websites.
These glaring operational inconsistencies have led security experts and community sleuths to suspect that the entire campaign is merely a component of a much broader, highly coordinated social engineering offensive. The ultimate objective of such campaigns is typically to harvest sensitive personally identifiable information, acquire private keys, or manipulate victims under the guise of an official legal proceeding. Security researchers at BitMEX have strongly emphasized that users, legacy holders, and blockchain monitors should completely ignore these on-chain injections, refuse to interact with the fraudulent contact forms, and avoid disclosing any personal details or private credentials.
The rapid emergence and increasing sophistication of these specialized scams underscore the growing complexity, persistent risks, and evolving threats landscape facing the broader cryptocurrency ecosystem. Malicious actors continue to innovate new psychological and technical vectors to target unsuspecting participants, ranging from legacy pioneers to everyday digital asset holders. This ongoing trend of sophisticated fraud is powerfully reflected in wider industry data; in the first half of 2025 alone, hackers and cybercriminal syndicates successfully stole over $2.1 billion across 75 separate security incidents, marking a concerning 10% increase in total losses compared to the exact same period in the previous year. As digital asset values continue to fluctuate and attract global attention, security experts maintain that vigilance, skepticism toward unexpected legal notices, and strict private key management remain the absolute best defenses against increasingly elaborate crypto heists.
