ADVERTISEMENT

Events

IAMTN Annual Summit 2026
14 Oct 26
London
Money20/20 USA 2026
18 Oct 26
Las Vegas

The Biggest Crypto Criminals in History and How They Were Finally Caught

The Biggest Crypto Criminals in History and How They Were Finally Caught

Away from price fluctuations and regulation, one of the most persistent stories surrounding crypto is its connection to crime. This age-old combination has struck a chord with the public, partly because crypto has repeatedly appeared in stories involving terrorism, rug pulls, hacks, scams, and other forms of financial crime. Much of the fascination comes from a simple belief: that money moved through crypto cannot be traced. The logic seemed straightforward. No bank manager, no physical cash, and no obvious paper trail meant that vast sums could disappear without leaving much evidence behind. But one major problem remained: the blockchain never forgets.

While transactions recorded on a public blockchain aren’t untraceable, they can remain difficult to find for years, as criminals can move coins through hundreds of wallets, exchanges, and different cryptocurrencies. It becomes even more difficult when connecting those transactions to a real person. 

Some of the biggest crypto investigations of the last decade now look more like digital detective stories, with investigators having to follow stolen Bitcoin through thousands of transactions, identifying links between wallets, obtaining private keys and seizing billions of dollars in digital assets.

Europol has warned that cryptocurrency has become part of the financial infrastructure used by organized criminals for fraud, money laundering and other serious crimes, but at the same time, the agency notes that investigators have developed new techniques for tracing these transactions. The result is an uncomfortable lesson for anyone who thinks crypto is completely anonymous.

The Cryptoqueen Who Built a $4 Billion Illusion

Ruja Ignatova’s FBI most wanted poster
Ruja Ignatova’s FBI most wanted poster

Few stories demonstrate the scale of crypto fraud better than OneCoin. Ruja Ignatova became known around the world as the “Cryptoqueen” after helping build OneCoin, a cryptocurrency investment scheme launched in 2014. OneCoin was presented as the next major digital currency, with a global community and a business model that encouraged members to recruit others.

The only problem was that the coin and project were fraudulent. According to the US Department of Justice, Ignatova, Karl Sebastian Greenwood, and others used a global multi-level marketing network to sell OneCoin. More than $4 billion was invested by victims all around the world. Greenwood eventually pleaded guilty and was sentenced to 20 years in prison, while Ignatova was never caught.

Her impressive disappearance made her one of the most famous fugitives in the cryptocurrency world, but the OneCoin story also reveals an important point about crypto money laundering. The biggest crypto criminals do not always steal coins directly from a blockchain. Sometimes the crime begins with something much older: persuasion, because while the technology is new, the fraud is not.

A convincing story, celebrity endorsements, promises of wealth, and pressure to recruit friends can be just as powerful as a sophisticated piece of code, and once victims send their money, blockchain analysis can help investigators understand where it went.

In April 2026, the US Justice Department announced a compensation process for OneCoin victims using funds recovered through asset forfeiture. That means the story has continued even long after OneCoin collapsed.

RELATED: The Biggest Hacks and Exploits in DeFi History and What We Can Learn From Them

BitConnect: When a Trading Bot Became a Billion-Dollar Trap – $2.4 Billion USD

BitConnect logo on a mobile phone
BitConnect logo on a mobile phone. Source: CNN

If OneCoin showed how powerful marketing could be, BitConnect showed how an investment story could be dressed up in technology. BitConnect pretty much promoted a “Lending Program” that claimed its trading software could generate huge returns. According to US prosecutors, the scheme attracted more than $2 billion from investors and operated as a Ponzi scheme, using money from newer investors to pay earlier ones.

BitConnect shut down its lending platform in January 2018, sending its token into a spectacular collapse, but investigators continued following the money. One of the scheme’s leading promoters, Glenn Arcaro, pleaded guilty in 2021 and was sentenced to 38 months in prison, which, if you ask me, is a slap on the wrist for such an enormous amount involved. 

Authorities also seized about $56 million in cryptocurrency connected to the fraud, and the alleged mastermind, Satish Kumbhani, was indicted in 2022 on charges including wire fraud and money laundering, but unlike Arcaro, Kumbhani also disappeared and remained at large. Amazing stuff! They all just seem to vanish after “cashing out” generational wealth.

In 2023, a US court ordered $17.6 million in restitution for roughly 800 victims across more than 40 countries.

The $3.6 Billion Bitfinex Investigation

Ilya Lichtenstein and Heather Morgan
Ilya Lichtenstein and Heather Morgan

Then came one of the most remarkable blockchain forensics cases ever made public. In 2016, hackers stole approximately 120,000 BTC from Bitfinex and for years, the stolen Bitcoin sat largely untouched.

In February 2022, US authorities arrested Ilya Lichtenstein and Heather Morgan and announced the seizure of approximately 94,000 Bitcoin connected to the hack. At the time, the recovered cryptocurrency was worth roughly $3.6 billion, but how did investigators find it? Investigators traced it on the Bitcoin blockchain.

The stolen coins did not simply disappear, they had moved through the network, and according to the Justice Department, investigators tracked the movement of the stolen Bitcoin and eventually obtained access to files containing the private keys needed to control the wallet holding the funds. 

Court records describe the use of fictitious identities, automated transactions, cryptocurrency exchanges, darknet markets, different cryptocurrencies, and mixing services. The defendants also used what investigators described as chain hopping, moving funds between different types of cryptocurrency to make tracing more difficult. 

A wallet receives stolen funds, and these funds move to several addresses, with some addresses repeatedly interacting with each other. Eventually, the money reaches an exchange, where it can be converted into another asset or potentially into traditional money.

In August 2023, Lichtenstein and Morgan pleaded guilty to money-laundering conspiracies connected to the hack. The lesson was brutal for criminals: that crime doesn’t pay, except of course you know how to disappear.

The Dark Web and the $3.4 Billion Bitcoin Seizure

Long before the Bitfinex investigation, another case had already demonstrated the power of blockchain evidence. Silk Road became one of the world’s most notorious dark-web marketplaces, and it operated from around 2011 to 2013 and used Bitcoin as one of its primary payment methods. Its founder, Ross Ulbricht, was eventually convicted, but another investigation years later produced an extraordinary government seizure of digital assets.

In 2021, US authorities arrested James Zhong after investigating the theft of Bitcoin from Silk Road. Prosecutors said Zhong manipulated the marketplace’s withdrawal system in 2012, using multiple accounts and rapid transactions to obtain about 50,000 Bitcoin; nearly a decade later, investigators seized more than 50,000 Bitcoin connected to the scheme.

The government’s final forfeiture orders valued the seized Bitcoin at about $3.4 billion based on prices at the time of seizure. That case changed how many people thought about digital assets.

FTX: The Crime Did Not Need Anonymous Wallets

Not every major crypto criminal case involved hackers hiding behind anonymous addresses. Sometimes, the alleged fraud happens in plain sight. Sam Bankman-Fried built FTX into one of the world’s best-known cryptocurrency exchanges, attracting billions of dollars from customers and investors before it collapsed in 2022. But behind FTX was another company that played a central role in the scandal: Alameda Research, a cryptocurrency trading firm also founded by Bankman-Fried.

Alameda traded digital assets and borrowed and invested large amounts of money, according to prosecutors, however, billions of dollars in FTX customer funds were secretly transferred to Alameda, where the money was used for trading, investments, and other purposes. This meant that money customers believed was sitting safely on an exchange was allegedly being used by a separate company controlled by the same founder.

When customers rushed to withdraw their money in November 2022, FTX could not meet those demands, and the exchange collapsed, revealing just how closely connected FTX and Alameda had become. Bankman-Fried was convicted of fraud and conspiracy in November 2023 and sentenced to 25 years in prison in March 2024. The FTX case shows that crypto fraud does not always require sophisticated blockchain tricks. Sometimes the greatest risk is inside the organization itself.

Do Kwon and the $40 Billion Collapse

Do Kwon
Do Kwon. Source: Bloomberg

Another major case is Do Kwon, the South Korean entrepreneur who co-founded Terraform Labs in 2018 and became one of the most recognisable figures in the cryptocurrency industry. Terraform built the Terra blockchain and launched TerraUSD (UST), an algorithmic stablecoin designed to maintain a value of roughly $1, alongside its sister token, LUNA. Kwon presented Terra as a new financial system built around blockchain technology, with applications for payments, lending and decentralised finance.

For a while, the idea appeared to work, but by early 2022, the combined apparent market value of UST and LUNA had risen above $50 billion, making Kwon one of the most prominent leaders in crypto. Beneath the growth were problems that would eventually bring the entire system down.

In May 2022, UST lost its $1 peg, and LUNA collapsed alongside it, wiping out more than $40 billion in investor losses. US authorities later alleged that Kwon had misled investors about the stability of UST and the technology supporting Terraform’s ecosystem. In 2024, a US jury found Kwon and Terraform Labs liable for defrauding investors, and they agreed to pay about $4.5 billion in penalties and disgorgement.

Kwon’s story did not end with the collapse, and after Terra failed, investigators began pursuing him internationally. In March 2023, Kwon was arrested in Montenegro while travelling with a fraudulent passport. He was eventually extradited to the United States in December 2024.

In August 2025, Kwon pleaded guilty to fraud charges in the United States. Prosecutors said he had misrepresented the effectiveness of Terraform’s technology and manipulated parts of the ecosystem to create the appearance of a functioning, decentralised financial system. In December 2025, he was sentenced to 15 years in prison and ordered to forfeit more than $19 million.

What These Criminals Teach Investors

The biggest lesson from these cases is that crypto fraud often looks surprisingly familiar. OneCoin relied on recruitment and unrealistic promises. BitConnect, by contrast, relied on promised returns. FTX relied on trust in a powerful brand and its leadership, and Terra relied on claims about a complex financial system. These are vastly different crimes, with different technologies but the same human weaknesses. Greed, trust, and the ever-common fear of missing out.

For investors, that means the first defence isn’t a bigger wallet. It is usually better judgment. If a project promises guaranteed returns, that should raise questions immediately. If a founder cannot clearly articulate where yield comes from, investors should investigate further. If a platform combines customer custody, trading, lending, and other financial services under one roof, the risks more often than not deserve serious attention.

The SEC has also warned about the risks created when crypto intermediaries combine functions traditionally separated in financial markets, including exchange, brokerage, custody, and clearing.

The second lesson is never confuse complexity with legitimacy. A project can have a white paper, a token, a smart contract, an impressive website, and millions of followers and still be dangerous.

The criminals who made crypto history understood that better than almost anyone because they knew that people rarely invest in code. They invest in stories, and those who can spin a compelling narrative can use that to defraud others. And as governments, exchanges, and blockchain analytics firms become better at fighting crime, criminals are discovering something they once underestimated: a wallet address may hide your name, but a blockchain can still remember what you did.

Disclaimer: This article is intended solely for informational purposes and should not be considered trading or investment advice. Nothing herein should be construed as financial, legal, or tax advice. Trading or investing in cryptocurrencies carries a considerable risk of financial loss. Always conduct due diligence.

Enjoyed this? Bookmark DeFi Planet, explore related topics, and follow us on Twitter, LinkedIn, Facebook, Instagram, Threads, and CoinMarketCap Community for seamless access to high-quality industry insights.

Take control of your crypto portfolio with DEFI PLANET PRO, DeFi Planet’s suite of analytics tools.

ADVERTISEMENT
ADVERTISEMENT

Spotlight

ETH $2,491.47 -2.84% NU $469.04 +0.00% POLY $792.15 +0.00% APE $748.09 +0.00% FET $226.49 +0.00% ARPA $160.56 +0.00% GTC $2,668.91 +0.00% FORTH $4,194.39 +0.00% PLU $2,124.48 +0.00% MLN $10,448.26 +0.00% ETH $2,491.47 -2.84% NU $469.04 +0.00% POLY $792.15 +0.00% APE $748.09 +0.00% FET $226.49 +0.00% ARPA $160.56 +0.00% GTC $2,668.91 +0.00% FORTH $4,194.39 +0.00% PLU $2,124.48 +0.00% MLN $10,448.26 +0.00%