Bitcoin Forum

Ive had an account on blockchain.info for a few months now. Yesterday was the first time I had an opportunity to use it and was paid 5 bitcoins for goods/services etc..

Ive just logged into my wallet now and its been emptied, there is a record of 45 transactions until the wallet was eventually emptied. I have just emailed blockchain who replied after just 10 minutes asking if there was a record of transactions leaving the account (which there was) and for my wallet address. Im just now waiting for a reply from them.

Have I had my bitcoins stolen?

Unless you post your bitcoin address, it is difficult to say anything.

It seems so.

How did you backup your wallet?

2FA was enabled in the account?

Which devices do you access the account?

Post the bitcoin address or transaction id. It's weird that the money was drained in so many transactions as its normally just cleaned out in one go. Was the money sent as soon as you logged in or had it already been sent after you received the funds?


I'm guessing not. Whenever I see someone ask this after the person has been hacked the answer is always 'no'.

I didnt have 2FA. I just opened an account. I have only logged into it from my home computer. Im an amateur at this so maybe ive done something wrong.

My account shows 45 transactions but when i look at bitref it doesnt show these. My wallet is 1GBNCbFnsmHLxdSSGmRN3GWEYtiLSaJBE3  it shows it was emptied at 6.44 this morning when I was sleeping UK time.

Blockchain.info wallets are not stealable, unless you have written your secret passphrase and you password down somewhere.
Also, how did you manage to get 5 bitcoins? Post your public address. Btc is not reversable and no one will give the stolen money back to you. There is not customer support or things like that. When its gone, its gone forever. Unless the thief sends it back to you

Prove that the address is yours by singing a message with that address

You got hacked, same hacker from here https://bitcointalk.org/index.php?topic=816613.msg9134962#msg9134962

What do you mean singing a message with that address

any way to sign a message using blockchain, with no need to export the key?

Check the post shared by joele, your coins where stolen by someone who has been doing this for quite some time, you probably got your devices infected by his malware.

You are mistaken. It can be stolen if any of the transactions generated weak signature.


https://bitcointalk.org/index.php?topic=990345.0

Im just doing a scan on my computer now to see if it been infected

Of course they are 'stealable' .You can have you funds stolen in multiple ways. And what good is signing a message now? All it proves it to everybody else that that is his wallet but not much point in doing that now.


Ignore him He doesn't really no what he's talking about but signing a message is just a way tio prove that you own a specific address. You can find out more about it here for future info: https://bitcointalk.org/index.php?topic=180068.0


It almost certainly is unless you logged into a phishing site.

Why give him a link to complicated thread when there is a simpler one? :-\ https://bitcointalk.org/index.php?topic=990345.0

I was ignoring him already. Just done the scan with free AVG and nothing showed up. I suppose its possible I could have logged into a phishing site, I just did a google search for blockchain and logged into the top one which would have been this one https://blockchain.info/

Still waiting for a reply from blockchain (Jade)

Why give him a link to that one when there are probably even simpler ways of describing it? :-\


Sometimes anti-viruses will miss them. In fact, that's maybe one way it slipped by in the first place. You should bookmark blockchain.info and not google for it as there have been many instances in the past of the hackers paying google to put their phishing links up. Make sure you have 2-factor set up also and this should protect you.

Describe it in more simple way, then.

Just to clarify I was confusing confirmations with transactions, it was removed in one transaction

Appears one transaction - https://blockchain.info/address/1GBNCbFnsmHLxdSSGmRN3GWEYtiLSaJBE3

And it has confirmations so sadly it is gone.  I highly suggest do scans as you said.  Did you open any wierd emails?  Store password or private key online?   Use any open wifi connections and connect to your wallet?

Don't invest more until you figure it out, and do not use that wallet again no matter what.

What were the results of the scan?  I am very interested to know.  I have several blockchain.info accounts so knowing would certainly help me.

I have several accounts on blockchain.info, and luckily each of them has 2FA enabled. Well, I could only think that you've visited a phishing site instead of blockchain.info? That could be the most probable thing that had happened in regards to your stolen coins. Also, what is the reply of their support and the result of your scan?

The scans showed that nothing was on my computer whatsoever. I am still waiting to hear back from blockchain.info They answered my first email very quickly but that was over 6 hours ago and I havent heard anything back yet.

Wow, first  time Ive used any bitcoins, I knew it was a new technology but I didnt think somebody would be able to clean out an account like that. I certainly wont be using it again till I find out what happened, if I ever do

I couldn't blame you, losing 6 bitcoins is a stretch. You should have enabled 2FA on every account that will cost you money, because it is another layer of security ready to protect your account in case your password has been stolen. Have you even clicked a single link in the emails you received? In case you didn't know, this forum has been attacked days ago and it seems that the attacker had accessed to some of the files including the emails. The attacker could've sent some emails leading to a phishing link, and unfortunately, you clicked on one of them. Do you remember anything?

I only opened an account on this forum today to try and get some advice so the answer is no, I havent clicked on any suspicious links. I am completely baffled, by it. As you mention the only other thing that I think it could be is Ive entered details on a phishing site. Although I cant be 100% certain that I havent  done that I honestly dont think I have.

I entered the identifier and password and the account I opened a few months ago on blockchain and there was my account never been used. Even done some google searches now for blockchain and I cant even find any phishing sites.

I accept that the bitcoins are gone but I just want to know what happened. I was planning to use bitcoins for my business but obviously I cant until I find out what happened.

The problem could be within your computer. There are some malwares that aren't being detected by some AVs. Have you tried using a different AV aside from the one you already have? There are some rare cases in which AVs doesn't flag a malware suspicious until the user himself/herself finds it out. Try running a full scan on another AV and see if you can gather something.

Can you not check your internet history and see if the site is in there? You probably just have some malware that wasn't picked up by your anti-virus. I'd be careful with what you do on that computer especially if you've got a keylogger. What operating system did you use? I recommend ubuntu. It's free very easy to use and much safer.

I think, this is the reason you lost your coins. Google search returns Google ad on top, if there is any ad for your search keyword at that time. Previously, we have seen many times that this is exploited by phishing attackers. Just search Google with the following term 'blockchain.info phishing' and you'll get loads of info regarding this. At some point, blockchain.info published an article regarding this as well - https://blog.blockchain.com/2014/02/23/beware-phishing-attempts/. It is very much possible, that you wont find the phishing site now as they short budget on adwords time to time. Try typing 'b' on your browser and see whether it shows anything similar to blockchain.info.

my internet history is wiped everytime I close my computer so cant check back on that. Just  doing some more scans now, Ive tried AVG already and Mcafee free trial, and just trying Superantispyware now which seems to have found a couple of Adware tracking cookies. Anybody know of any free software I can use to scan this computer

Hmm I don't think ESET has some free trial. :( Well that was a bad thing, wiping your history every time you exit the browser or turn off the computer. If a phishing link could probably be the culprit here, then there is no way to trace what you did to have your coins compromised. I'm sorry about your loss. :(

Most probably yes but can you provide more detail like did you do anything wrong where your important data could be stolen ?

Wrong like what?

Check your browser plugins specially related to cryptos, I suspect that is the culprit.
A nice service plugins but with hidden agenda, to monitor keystrokes when the url is blockchain.info

yea, i have some problem with you my bitcoin was stolen :(

my bitcoin suddenly lose and there be one transaction but not me whos sent it to other btc address

i think because i download application on my computer and contain with virus, be carefull on it

Sadly with the money that is in crypto world it is a target.  As this forum has even showed in past week.   You have to be careful to really not use a computer that you surf the web with espically download random programs to and use it as a wallet.

I highly suggest everyone using 2FA where possible.  It could literally save all your coins possibly.  With 2FA even if they have password it could be useless to them.

You unfortunately made a few crucial mistakes... and this is very common, not unique to your situation.  

1. You should type the whole address, not Google for it, because it opens up a opportunity for someone to slip in a Phishing site.
2. You HAVE TO enable 2FA with ANY web based wallet service.

This is truly sad to hear, that a NEW adopter are compromised on it's first attempt at Bitcoin, but it happens in the banking sector too, with online banking.

About a year ago, a friend of mine decided to use Online banking for the first time.. He knows very little about computers and when he received a email stating that he has to claim his BONUS for the point system at his online banking account, he logged in with the link provided on the email. This redirected him to a phishing site and he lost over $5000 within the hour.

He was so upset, that he never used online banking again. This seems to be the route you are going with Bitcoin now, which is very unfortunate.

We all make mistakes and these thiefs are getting smarter with every successfull hack or Phish they pull off.

You cannot blame the Bitcoin technology for your mistake, but you can improve on your security with VERY little efforts and changes to your usage.

My suggestion :

Look into buying a HARDWARE wallet { Trezor } .. I do not trust ANY of these online wallets. If this is not a option, ENABLE the 2FA on your online account. {Did you Enable a password for transfers?} 

Hope you will not loose faith in the technology and that you will be climbing back on the horse, with a better saddle.  ;)

This is just an update

Ive had no reply to my emails from Blockchain, they just seem to be ignoring me. Looks like Im never going to find out what happened

Honestly I'm not sure what they can do.  I doubt they will give over IP and other information to a individual.   Sadly they can report it is gone but chances are the attacker did not use a IP that can be matched to them anyways.

That being said this has me thinking as I'm not sure proper authorities you would turn it into.  I know for example my local police would have no idea what to do with bitcoin.  But I think finding proper authority is about only way they release the information you really want.   Is anyone able to help OP as far is there a agency that you can turn in loses?

Never hold your coins on online wallet websites.

Posted From bitcointalk.org Android App

1, Always change your wallet if you didn't use it for a long time

2, Make sure you're safe when logging your wallet

3, Enable the 2FA protection and never link your wallet to your email(it's easy to be hacked)