Bitcoin Forum

I started lending service few days ago
https://bitcointalk.org/index.php?topic=1352856.0

Yesterday I got PM from a user named WhitePhantom that he need loan for 3 days using his account for collateral.I asked him to sign message from bitcoin address posted by him in 2013, he said its old wallet and he lost it but he can sign message from bitcoin address staked last month.After some discussion I agreed to give him 0.05btc loan and he signed message from bitcoin address staked on 20 January.

BUT after few minutes of processing loan a someone created a new account WhitePhantom1980 and claimed that it was his account that got hacked and asked me not to send any money but the loan was already processed.I asked him for signed message but he said he can't sign message.


Now the problem is I am confused if someone is trying to trick me to get the account for 0.05 or account was really hacked.


3 things to notice

1) If account was hacked then why hacker doesn't changed the email and password of the account?
2) How hacker managed to stake bitcoin address in January.
3) How it is possible within few minutes of sending loan someone said it was his account and someone else was using this but why the real owner wasn't aware when potential hacker used the account and staked bitcoin address in January.


I am confused what is going there

The new user isn't able to sign message from any bitcoin address but borrower signed message.
It is possible the old owner sold the account and now trying to get it back.

I told new account WhitePhantom1980 that if the borrower repay the loan then I will give account back to borrower and he can solve this matter with him


If borrower failed to repay then 2 things I can do

1) If WhitePhantom1980 can sign message from old bitcoin address I will give him account after he repay the debt

2) If WhitePhantom1980 can't sign the message then I will put the account on auction he can bid there to get the account.


I don't trust any other proofs but only signed message
Because it is possible account was sold without signed message and previous owner now trying to get is back showing other proofs.

It's indeed some confusing shit lol .
According to the Seclog , WhitePhantom changed his password : February 05, 2016, 03:44:31 PM - WhitePhantom - password changed

but there is something that I don't understand , how exactly "WhitePhantom1980" knew that you gave a loan to WhitePhantom if all taht happened in P.M ?

one was inactive for half a year and can only sign an address from 2 weeks ago and the other claims that it was his account yet is unable to sign any message.. both of these users are equally suspicious IMO.

and there's nothing wrong with what you posted on the second post.

@omegastarscream whitephantom posted on OP's thread.

This password was changed by me when I secured collateral but there is no other password change recently
thats why I given him loan no password reset/change recently

Account password not changed, he signed message from staked address in january.
How it is possible within few minutes of sending loan someone said it was his account and someone else was using this but why the real owner wasn't aware when potential hacker used the account and staked bitcoin address in January.

I already offered whitephantom19080 if he can sign message I can give him account back after repay the loan amount, But I can't give account to a random person who can't sign message.

But if without signed message I given him account then we may see many request in lending board people claiming for high ranked collateral account in exchange of paying the loan amount.

that and they could have reset their password via email like someone did earlier today (https://bitcointalk.org/index.php?topic=1354453.0).

you better change the email if you haven't already.

thanks for suggestion
I have secured account and changed both email and password before sending him loan.

1) I assume I would have received an E-Mail notification if the hacker had changed the E-Mail address or password on the account, and he didn't want me to know that he had access to my account.
2) Because he had access to my account and could post as me.
3) I hadn't logged into my account since last July and E-Mail notifications are not sent when a hacker posts a message using my account.  I found out somebody was using my account when I received E-Mail notifications that my account had new private messages from you to the hacker.



The address Sarahiko found in one of my posts from 2013, and wants me to send him a signed message from, is a deposit address for my BTC-e account.

I have provided him with screenshots of my BTC-e transaction history that show my BTC-e account receiving 18 payments, over many months, from an address that I currently control.  All 18 deposit times and amounts match the blockchain transaction record perfectly.

Obviously, I am unable to send a signed message from an address controlled by BTC-e, but I've provided a reasonable explanation of why I have never controlled the address he found in my post from 2013, provided substantial evidence that I do have access to all funds sent to that address (via BTC-e), and I've offered to send him a signed message from the address I used to make 18 deposits to the address BTC-e controls.

Along with this evidence, I offered to pay back his loan amount, including the interest, when the hacker fails to pay, but he says my account will be auctioned unless I send him a signed message from the address that I've demonstrated is controlled by BTC-e.

I don't understand why he has a problem with letting me buy my account back AFTER the hacker fails to pay, especially with the evidence I've provided.

You are responsible for this account and your pc/password should be secured to prevent the hacker.

If you want your account returned you will need to settle the loan.

Seems a lot of effort for the hacker for a 0.05BTC loan  ???

All sounds a little suspicious to me.

Right, and I offered to settle the loan, including the interest, after the hacker fails to pay, but Sarahiko says he'll auction my account.  I fail to see how that is reasonable.

If you settle the loan in full I dont see why the lender would want to sell the account as his terms have been met.

Unless greed gets the better of him.

Seems like a good strategy. Probably the borrower want to scam you the collateral, claiming it was hacked.

If the account was not hacked, and I'm actually the borrower trying to scam the collateral, then why am I offering to repay the loan and interest to get the account back?

Not once did I suggest that the lender should give me the account without me covering the loan.  Even if he had offered to do that, I would insist on paying him back the loan.

Unless WhitePhantom1980 can verify his integrity via staked address, he is an outsider to your deal. However, do not continue with this trade until further proof comes forward of ownership.

You would not receive any kind of email notifications sent by the forum when you change your email nor when you change your password.

So let me get this straight, you were willing to access your account after ~a year because someone was randomly PM'ing you, but you were not willing to access your account when theymos emailed you when the forum was hacked?

---

@OP -- how many PM's did you send this person, and when was the first/last PM that you sent this person? When you accessed the account were all of the PM's you sent this person still in his inbox?

---

I would say that based on what I have read so far that it is more likely then that that the person who the OP sent the loan to is the same person who created the "WhitePhantom1980" account.

I did find an address posted in 2013 by WhitePhantom that is a btc-e address

I opened the PM message and saw a loan being discussed.  Of course I'm going to look into it if I think somebody is impersonating me to rip somebody off.  Also, I do recall the E-Mail about the forum being hacked, and I thought I had changed my password, but when I looked at the one I had saved in my browser (yes, I need to stop managing passwords that way), it was still the old one, to my dismay.

If I am the same person as the guy who requested the loan, then why wouldn't I just pay it back to get the account?  I am willing to calmly wait until the guy who hacked my account fails to pay back the loan and then I'll pay it back to recover my account.  I suggested that to Sarahiko as soon as I realized he had, in fact, already sent the loan to the hacker.  I have far better things to do with my time than create drama by getting a loan and then making a new account to cause trouble.  Work, wife, toddler, video games, etc.

---

Lastly, here is some additional evidence I provided to Sarahiko yesterday in a PM to show that the account is mine.


I have since added a new image to that Imgur album that states, "WhitePhantom1980 is the rightful owner of the WhitePhantom BitcoinTalk account."

All I want is for Sarahiko to wait until the hacker doesn't pay and then sell my account back to me for what the hacker owes him rather than auctioning it off.


Edit: Something that just occurred to me was that the hacker may not have changed my password before handing the account over to Sarahiko.  I just PM'd that password to Sarahiko with the hope that it helps establish that there is no reason not to let me buy it back from him after the loan has not been paid.

hacked account story is getting common nowdays,I have seen few accounts sold and used for collateral being claimed by others

in your case seems like hacker was using the account and he given you signed message (not too long but its proof that account was being used by hacker)
so if whitephantom1980 is real owner of that account then he is responsible for this, why he didn't noticed his account was being used but he popup after he took loan.If account was given for collateral and guy claiming for the account isn't able to sign message then lender have full rights of the account what to do if loan is defaulted.he can't forced to give it to random guy.

few guys saying account should returned if the guy pay him 0.05
there are many accounts defaulted small loans, I can pay their loans if lenders give me these higher accounts.
I think loan's deadline is today so lets see what happens, repay or default

Loan wasn't repaid on time but as I am rightful owner of this account so I am putting it on auction.
It was my first loan so I will be more careful next time lending money to someone.

You're the rightful owner of my account about as much as a person who buys a car from a car thief is the rightful owner of the car (it gets confiscated by the police, btw).  The only difference here is I was offering to make you whole because I'm willing to take responsibility for not having changed my password last year when Bitcointalk had a big data breach.

So where does an auction like this take place?

https://bitcointalk.org/index.php?topic=1358190.0

also I think that imgur album is a good enough evidence... at least in this case. why would anyone give up their potential legendary hero account (almost legendary) for 0.05BTC?

Here's my most recent dialog with Sarahiko:


--Encrypted--, thank you, by the way.  At least somebody in this thread is sane.

Another fool who took the word that staked address, so recent will prove the ownership of the account. You both f*cked up, now just meet in the middle and accept any losses

After some thoughts I have decided to give the account to whitephantom1980
I don't want to hurt someone

I have created a unique bitcoin address for him to send money,
16SCxS7gsLa1LM3Zgmzpz3Jr525j24bxX1

I am rejecting his offer to pay 0.10 btc ,so he just have to repay loan
as soon as he repay the loan to this address I will give him password of account

0.06 paid to 16SCxS7gsLa1LM3Zgmzpz3Jr525j24bxX1
https://blockchain.info/tx/faa3a5698d852d7ece91093f7ea74daea2edacb79f07a887c88874c5f913c449

Thank you for working with me on this.

Account reclaimed, password set to something MUCH longer and secure, E-Mail address changed.  Thank you for not auctioning it.

Stake an address this time, ASAP, not a depo addy this time. Nice to see this got resolved.

Done.  Thank you.