Bitcoin Forum

I just came over two accounts which are using the same BTC addresses to apply for bounty campaigns and I have posted my research in known alts: https://bitcointalk.org/index.php?topic=2544574.msg49437820#msg49437820

Accounts: sham100899 (https://bitcointalk.org/index.php?action=profile;u=1984223), hisori (https://bitcointalk.org/index.php?action=profile;u=1899207), fakegurutu (https://bitcointalk.org/index.php?action=profile;u=1494695)


I digged a bit deeper and found a circle of sending Merits between them, involved another account, fakegurutu:

hisori received his Merit from fakegurutu, who sent also 3 Merit to sham100899 and received 5 Merit from sham100899.

BPIP fakegurutu  https://bpip.org/profile.aspx?p=fakegurutu
BPIP sham100899  https://bpip.org/profile.aspx?p=sham100899
BPIP hisori  https://bpip.org/profile.aspx?p=hisori

Merit history of fakegurutu:

https://i.imgur.com/wH8ltE2.jpg

---

fakegurutu and sham100899 both applied to join BitBlender signature campaign (only 5 minutes difference between posts):

sham100899: http://archive.is/PiQH6#selection-3915.0-3915.10
fakegurutu: http://archive.is/PiQH6#selection-5285.0-5285.10

It looks like these accounts are trading the Merit and are most likely alts.  

I don't think your proof is sufficient. Only giving merit each other can't proof merit abuse or merit trader. I think you should obtain more info if possible.

If they are alts they will be tagged for sending merits to alts. I can't prove yet, that fakegurutu is an alt, but it's very fishy.
At least hisori and sham100899 are alts because they used same BTC address.

Let's wait how DT decides if fakegurutu is another alt of hisori/sham100899.

Okay. I think below information might be helpful for you.
Both are from Pilipinas. Archive: sham100899 (https://archive.fo/fjQ3f#selection-465.1-505.213) and fakegurutu (https://archive.fo/EEsof#selection-447.1-498.0)
Also, both person uses all small letters. Which you can see from the above archive.
Edit:
fakegurutu sent 3 merit to sham100899 at 6/6/2018 4:29:58 AM and
sham100899 sent 2 merit to fakegurutu 6/6/2018 4:36:41 AM That means merit exchanged only within 7 merits.
Both are using the same platform of bitcoin wallet. sham100899 (https://archive.fo/jBdqy#selection-57.1-67.31) and fakegurutu (https://archive.fo/xLgIh#selection-57.1-67.31)

I've tried to look at their post history (for the 2 jr members) The only relevant thing found is this one

https://www.blockchain.com/btc/tx/30a2751bd2aa9ff5979dbb75385562e22bc96d407ea592fee87454b260ca6a25

Their addresses are on this transaction but Is not clear what it is.

---

Also, they applied to the same campaign

sham100899 https://bitcointalk.org/index.php?topic=5100568.msg49358622#msg49358622 3PJdNRCtsd2jfY82JunoCz5vYC8nLj2dtv http://archive.fo/PdcKX#selection-3867.29-3867.63
fakegurutu https://bitcointalk.org/index.php?topic=5100568.msg49358661#msg49358661 3ERcX6VK2DdvNppxWNFYTyoUWum75sqMQc http://archive.fo/PiQH6#selection-5391.29-5391.63

Thanks, good research. I'll look into it later to find a hard proof of same addresses between fakegurutu and sham100899.

The application for the BitBlender campaign was only 5 minutes difference between both accounts.  

EDIT: another coincidence (maybe one too many)

Both accounts edited their messages 30 minutes later:

originally posted:

sham100899:    January 22, 2019, 03:01:52 AM
fakegurutu:      January 22, 2019, 03:06:36 AM

less than 5 minutes difference

last edited:

sham100899:    January 22, 2019, 03:34:39 AM
fakegurutu:      January 22, 2019, 03:33:45 AM

less than 1 minute difference

They might be friends, but I don't think it's merit abuse, checked their posts with google translate..i don't think there is some abuse

No, but there is a slight chance there is some abuse going over here. Just found out this report and searching for some regular transactions between these 3 accounts:

---

Archived: http://archive.is/1kxhd

As I said before they might be friends, locals have a lot of common trade groups on telegram

Can be but it's hard to be since they posts and EDIT posts basically at the same time.
While 2 or more post can be posted in a short distance of time, I find harder to edit 2 posts on the same thread in a few minutes.

Yeah that's true, but seeing how they act I don't think they are alts. They are friends or members of the same community.

And now seriously..if they were smart enough they could've used different addresses, i still find amazing how some people are using the same addresses.

Most of the reported cases I don't find them as being the same person, I just see them as being stupid as fuck.

I agree with it only about 25% rest 75% they are alter. Experienced merit abuser detector will be able to judge properly what that actually should be.

How do you guys view them if they are dealing frequent transactions amongst themselves? Need your opinion actually.

Right now I have fakegurtu dealing frequently with kaya11's old address and some token transactions with hisori.

At least hisori and sham100899 are alts, they are using the same BTC address 3PJdNRCtsd2jfY82JunoCz5vYC8nLj2dtv several times:

hisori: http://archive.is/CQJck
sham100899: http://archive.is/KTidw

Therefore, I have only tagged hisori and sham100899 yet, not sure about the connection of fakegurutu. It's a clear circle of sending Merit between them and it wouldn't surprise me if they get tagged.

And the report from CaptainLance is also pointing out a connection between those accounts.


A few transactions (1 or 2) are in my opinion not enough evidence to connect accounts, but when more coincidences appear, the evidence will become clearer. Coinlocket$ does analysis of ETH transactions maybe he can give his opinion about abuse.

Well apparently there are more than 1-2 count so it really seems to me that they are most likely alts now.

Yeah coinlocket$ opinion would be of some help in this matter.

Solid prof, tagged. Let's see if we can find more on this farm.

---

I've looked yesterday on sham100899 and fakegurutu ETH, I found nothing suspicious at first view between them, let me check again.

Here are some to look at

Fakegurutu: 0xac454c2e083706f7b85fd5f4ea0748c24c5f8369

kaya11: 0xE8A675bc39dB29345FEb7B27d502b2EEa324395c


Transactions

Last page: https://etherscan.io/txs?a=0xa79d58b3e4566e57526e40d0844290580b325872&p=3 has 15 transactions including outgoing and incoming transactions between 0xac454c2e083706f7b85fd5f4ea0748c24c5f8369 and 0xE8A675bc39dB29345FEb7B27d502b2EEa324395c

And 0xE8A675bc39dB29345FEb7B27d502b2EEa324395c was used by kaya11 (https://bitcointalk.org/index.php?action=profile;u=1154250) here : http://archive.is/i7GGS

---

Fakegurutu: 0x5912b6fdc8ac4015d11456aac786db92fcdfb800

hisori: 0x80A8D0DDF75231A04F60B8CbA67802d0815BEF66


Transactions:

I found out 18 token transfers b/w these addresses. Page: https://etherscan.io/tokentxns?a=0x80a8d0ddf75231a04f60b8cba67802d0815bef66&p=1

And 1 normal eth transaction of 0.002 ETH (probably a transaction to move tokens to other addresses or exchange- activity that I have usually seen in bounty abusers)

Just playing devil's advocate here, but if you looked at how many times I've sent bitcoin to one of gameristo's wallets you might suspect we're alt accounts--but we're not.  I wouldn't discount the possibility that a lot of deals are being done off-forum, and I've been tricked by that before when tagging bounty abusers.  On the other hand, when you've got merit-swapping happening on top of the money being sent, that might be more conclusive as to whether two (or more) accounts are alts--but even then, they could be friends or family and not a single individual.

I don't think it's right to give merit to someone just because they're your friend or family member, but I wouldn't tag a person for doing that.  If you've got someone in a bounty/campaign who's doing it and you're the manager, you might think twice about letting those accounts participate.  We've all seen cases of bounty abuse and we know it happens.  What you do depends on how much you're willing to give them the benefit of the doubt.

Yes, but as you wrote we haven't found transactions between Fakegurutu and sham100899,

If we consider others accounts the story is different.

Sadly I'm really busy these weeks and I haven't a lot of time.

I agree, until we haven't a real proof it's not justified to give a tag and I didn't tagged fakegurutu yet. When the Merit system was introduced most people just tried how to use it and didn't know that they can run into problems.
Another thing are their posts back-to-back in the same signature campaign and editing them both 30 minutes later.

No problem, thanks everyone to look into it so far.

True. I was kinda swinging between whether I should tag these. But what you said is fair point and I wouldn't tag unless there is a solid proof. Thanks for the opinion.

---

Aren't sham100899 and hisori connected? Would like to know how story will be different.

Anyway I am back to digging  :D

---

Found ya!!!!

What about this:


Archived: http://archive.fo/NpLk7

I guess this is a solid proof isn't it as same eth address was used by hisori as according to CaptainLance report quoted by me in the first page of this thread

Edit: Second instance where is found using the same wallet again


Archived: http://archive.is/Dw4qH

Nice catch, do we know where hisori posted this ETH address and can we archive the post?
I'm away right now but I can look into it later.

Sorry that I forgot to quote CaptainLance's report again above. There you go:


I am still looking for solid connection between kaya11 and this ring.

so this is how the justice works here, if i want to have a negative red trust to someone that i dont like or envy or whatever, i may just copy their eth address and boom, red trust immediately.

Interesting. Then I guess you happen to mistakenly send merit to your alt (oops my mistake) someone random here: https://bitcointalk.org/index.php?topic=5031516.msg45851205#msg45851205 and yet again by mistake you happen to copy/paste his address.

Fool someone else. Its clear to me and I am obviously not gonna bend my feedback over your rants/cries/or begging for mercy that I am expecting in the PM's by your other alts.

hisori posted the address in April, you posted it in August, so are you saying that you're trying to frame hisori?

I can imagine it's very hard for you to lose your bounty rewards because you are using the wallet of another person.  ;)
Or you received double rewards because someone else used your wallet?  ;D

You are lucky that you only received 1 tag from DT.

As I understand sending any amount of merits to any account is not a problem any more? Nobody will be tagged for that?