Scams

On December 18, 2025, the U.S. SEC filed proposed final judgments against former FTX and Alameda executives Caroline Ellison, Gary Wang, and Nishad Singh. The settlements include permanent anti-fraud injunctions, a 10-year officer/director ban for Ellison, 8-year bans for Wang and Singh, and a further five-year conduct injunction.

Summit National Bank will create a $400,000 settlement fund for customers impacted by a May 2024 email-account breach that exposed names, Social Security numbers, contact details and account numbers. Eligible class members can claim up to $5,000 for documented out-of-pocket losses, plus a pro rata cash payment around $175 and three years of credit and identity monitoring, with claims due February 17, 2026.

On December 20, 2025, a crypto investor mistakenly sent $50 million in USDT to a poisoned address. Within 30 minutes, the funds were swapped to DAI and then 16,690 ETH, with 16,680 ETH routed through Tornado Cash; on-chain timestamps show a 0.005 USDT test and the large transfer minutes apart.

A crypto user mistakenly sent 49,999,950 USDT to a look‑alike address, an incident attributed to address poisoning, according to SlowMist. The funds were rapidly moved into ETH, split across wallets, and partly routed via Tornado Cash; on December 20, 2025, Cos shared the involved addresses. The wallet had been active about two years with frequent USDT transfers.

On December 20 2025, cybersecurity firm Kaspersky detailed a new infostealer malware called Stealka that is being distributed through pirated mods and cheats for Roblox and other Windows games. The malware targets browser data, crypto wallet extensions, standalone wallet apps, password managers, 2FA tools, and messaging and VPN clients to capture credentials and digital assets. Kaspersky reported detections mainly in Russia with cases also seen in Türkiye, Brazil, Germany, and India, and urged users to avoid unofficial mods, secure their accounts, and limit sensitive data stored in browsers.

Prosecutors charged 23-year-old Brooklyn resident Ronald Spektor with stealing roughly $16 million in cryptocurrency from about 100 Coinbase users. He allegedly impersonated a Coinbase representative and used social engineering to pressure victims to transfer funds, with a judge setting bail at $500,000. Authorities reported asset seizures and said recovery efforts continue.

On December 19, 2025, the U.S. SEC filed proposed final consent judgments in the Southern District of New York against Caroline Ellison, Gary Wang, and Nishad Singh. The trio consented, without admitting or denying, to permanent antifraud injunctions under Section 17(a), Section 10(b), and Rule 10b-5, plus five-year conduct-based limits and multi-year officer/director bans tied to alleged misuse of FTX customer funds.

Hyundai Group's headquarters in Seoul received an email demanding 13 Bitcoins and threatening detonations at 11:30 AM if unpaid, according to South Korea's police. The message cited sites in Jongno-gu and Seocho-gu; 13 BTC is worth $1.1 million (KRW 16.4 billion) at current prices. Police searched facilities and said no explosive devices were found.

Bubblemaps reported in a Thursday X post that 23 wallets linked to the Ava deployer sniped around 40% of the AVA supply at launch on Solana. AVA later hit a $300 million FDV by January 2025, then plunged over 79% since launch and 96% from its $0.33 all-time high on Jan. 15, 2025.

On December 19, 2025, credit reporting firm 700Credit disclosed a data breach that may have exposed personal information belonging to 5,836,521 individuals in the United States. The company reported that names, Social Security numbers, financial account details and other sensitive data could be compromised following unauthorized access to its systems. Affected consumers are being urged to monitor their credit activity and consider fraud alerts or credit freezes while regulators continue to investigate the incident.