Scams

Security experts warn that "Evil Twin" public Wi-Fi clones can intercept credentials and expose crypto accounts. Last year, Australian Federal Police charged a man over fake airport Wi-Fi, and in January an X user reported a wallet drain after hotel Wi-Fi. Experts advise avoiding sensitive actions, using trusted VPNs, and confirming networks with venue staff.

Industry security leaders warn that close to 80% of crypto projects hit by major exploits fail to regain stability, with the outcome hinging on how teams act in the first hours. Immunefi CEO Mitchell Amador and Kerberus' Alex Katz argue that operational breakdowns and trust erosion, not just stolen funds, drive long-term damage. In 2025, reported hack-related losses reached $3.4 billion, and a single Bybit incident accounted for $1.4 billion.

On 10 January 2026, an investor lost more than $282 million in Bitcoin and Litecoin in a social engineering scam tied to a fake Trezor support channel. The attackers allegedly obtained the victim's recovery seed phrase, drained 1,459 BTC and 2.05 million LTC, and then laundered funds via instant exchanges, Thorchain and Monero, while Monero's price jumped 36% in seven days.

According to Immunefi CEO Mitchell Amador, nearly 80% of crypto projects that suffer a major hack never fully recover, largely due to operational paralysis and lost trust during incident response. Chainalysis data shows 2025 crypto hack losses hit $3.4 billion, with the $1.4 billion Bybit breach helping drive 69% of losses by early December.

Vietnam police reported arresting several suspects in Da Nang over an alleged cryptocurrency scam that mimicked a Nasdaq investment platform and caused losses of more than VND14 billion ($532,800). Authorities said the group operated from Cambodia, used social media and messaging apps to lure victims with promises of high returns, and converted misappropriated funds into crypto while the investigation remains ongoing.

GSPlatformCo Inc., a digital payments operator, says attackers accessed a customer-data system in April of last year. The company discovered the intrusion in November and filed notices with regulators, including Maine's Attorney General, in January. Breach disclosures state 537,877 U.S. individuals were affected, with exposure limited to basic personal details and account/transaction metadata.

On January 17, 2026, major US banks including JPMorgan Chase, Citibank, Bank of America and Wells Fargo detailed new safeguards for Zelle transfers, according to NBC San Diego. Measures range from blocking payments tied to social media contacts to fraud attestations and pop‑up warnings. The Consumer Financial Protection Bureau alleges more than $870 million was lost to Zelle scams over seven years.

On January 10, a high-value crypto wallet was compromised through a social engineering scheme, leading to the loss of more than $280 million in digital assets. The attacker rapidly converted large Litecoin and four-figure Bitcoin holdings via instant swaps, privacy coins such as Monero, and cross-chain bridges like THORChain, causing notable market volatility. Investigators have not linked the theft to any state-backed group, and the victim's identity remains undisclosed.

A proposed $10,000,000 class action settlement arising from an August 2022 cyberattack on Nelnet would allow affected borrowers to claim up to $5,000 with documented out-of-pocket losses. The incident allegedly exposed data of 2,501,324 OSLA and Edfinancial customers. Claims and opt-out or objection are due March 5, with final approval hearing set for May 5.

On 17 January 2026 at 14:20, a single self-custody wallet was drained of more than $282 million after the owner disclosed a hardware recovery phrase. According to blockchain investigator ZachXBT, no technical exploit was involved. Cybersecurity firm ZeroShadow said about $700,000 was flagged and frozen as the thief moved funds across chains and into Monero.