Bitcoin Forum

HKCEx is finally open: http://www.hkcex.net/
Some advantages:
 - more than 30 deposit/withdrawal methods, including Chinese Wire Transfers and PayPal;
 - 25 trading pairs: BTC, LTC, NMC, PPC, WDC <-> USD, HKD, CNY, EUR, RUR;
 - 8.88% welcome-bonus for all crypto-deposits until 31 of May;
 - great trading rates (BTC/USD is $532.86 now);
 - really tight commissions (0.05% trading, 1-2% withdrawal);
 - Great modern design, Forex-style tickers, professional Trading Desk.

Additionally, HKCEx, has raised $25M from private investors, that's really cool.
Let's trade!

Seems suspicious to me deposit 1BTC and get 0.0888BTC bonus, withdraw 1.0888BTC instantly and the difference between btc-e and this exchange is a whole 100$!

I've made a deposit of 1000 LTC and have 1088.8 LTC on my account already.
That's a good promo, I think

Have on account means nothing are you able to withdraw it or do you need to do something before you can withdraw?

To test the water, I deposited 0.6 ltc then requested withdrawal of 0.6 + bonus amount ltc right after deposit, it's still pending approval after 12hrs, either there's a bug in the system or they hold the withdrawal. I tried to withdraw 0.5 ltc hrs later the first attempt, still displaying pending approval.

Tested with 0.1 BTC.  Withdraw not working.  *face palm*  


Edit:  For completeness:  my small test withdrawl did come through 2 days later.  However I can't sign in with https anymore. 

I am sorry for you but i need to thank you because i was thinking about depositing the same amount as you.Now lets hope that this is just a bug and not a scam.

Two brand new accounts.

The shilling is strong with this one.

Just tried these guys too...total scam, waiting 48 hours...no response from qq account or email. Don't deposit, they will credit your account but you can't withdraw!

same thing i have deposit 10 ltc and now i want to withdraw them and 0 confirmation in 3 hours ....pending  ...

That's are security checks I think
I've made a withdrawal for 1088 LTC and got it to my purse after 18 hours.
Contacted support - they told that it was first security check and now all crypto withdrawals will be instant.

This is a scam exchange.
Only coins go in, but can never come out.
I deposit 0.1 bitcoin.
But i couldn't withdraw it, even for 48 hours.
And the support is not responsive too.

You're the owner/operator/scammer

Fullish lie. I'm not affiliated with HKCEx or anyone from this project

Blatant bullshit. This is the only announcement for a bitcoin exchange. You are running this scam and everyone knows it.

Do not insult our intelligence by saying otherwise.

All users reported that they cannot withdraw any money.
Only you could. This seems to be really suspicious.

What the fuck is going on here.

Brand new account called masterBit9 calling bitmaster8 a scammer.

Next he'll be saying he tested it and it worked for him.

Did anyone try trading for fiat and withdrawing that way?

Maybe you should consider the position you put the exchange in when you deposit crypto and try to withdraw it immediately after getting your bonus.  ::)
I expect coins to be refunded or sent once the promotional period ends; it's just hard for me to believe that this exchange would rip you off when they raised $25m.

It looks like a real scam to me.
It attract people by the 8.88% bonus. Once you deposit your fund. They will never let you withdraw it.
Soon their website will disappear with your money.

anyway my withdrawal is still pending for 5 days already.

Tried to withdraw to EgoPay. Entered the "correct" details I think but got "Invalid payment details. Please contact Customer Support":

"
USD Withdrawal Requests History

Date and Time   Transaction ID   Method   Amount   Status   
16.05.2014 08:39:37   5375cec93b909   EgoPay   -112.00   Rejected
Invalid payment details. Please contact Customer Support   
16.05.2014 08:30:05   5375cc8daed5a   EgoPay   -179.00   Rejected
Invalid payment details. Please contact Customer Support   
16.05.2014 06:48:26   5375b4ba9fa63   EgoPay   -650.00   Rejected
Invalid payment details. Please contact Customer Support   
15.05.2014 23:40:17   537550616d08a   EgoPay   -258.00   Rejected
Invalid payment details. Please contact Customer Support   
"

SCAM!

Regretfully, it doesn't look good at all.

While I managed to escape from Mt.Gox only a few weeks before they went down, it seems they finally got me. Looking back, I cannot believe how careless I must have been to deposit 5.5BTC and 10kWDC. It was probably to the massive lack of sleep mixed with a couple of beers and a bottle vine.

I guess I was one of the first trolls who came across the news about HKCex collecting $25mio from investors in some Chinese blog and I didn't even wonder about the 8.88% or the BTC exchange rate way above other exchanges. To add some reasoning here,  I expected BTC/USD to skyrocket and thought they were just making proper incentives to take over a good chunk of the market. So, I came to the conclusion that as soon as traders were rushing into the new exchange the price then would quickly adjust somewhere between 470 and 500USD. After weeks of going sideways, I was just so convinced and excited that there finally might be some price movement due to HKCex stepping into the market (amonst many other indications), that I didn't see those huge red flags. Seriously, I am not a n000b, but feel free to call me a fool instead, if you like to call me names... But maybe some of you can even see how I got tarped.

As the price kept on stagnating at those insane prices - even after the news was finally around (approx. 6hrs after I deposited, sold, happy about a great deal) - and first reports about withdrawal issues were surfacing, I got suspicious. First, I assumed that time limitations were self-explanatory to prevent folks from taking bonus and insta-withdraw. But then their support told me otherwise. Ever since we have been in intense contact  ;)

But hey, the presumption of innocence also applies to HKCex. Therefore, I have set them a deadline to process my withdrawal requests which is running out this afternoon. So from my perspective, it is still too early to call it a scam. But in case I don't get my crypto back real sooonish, I gonna provide hard evidence for some questionable business practices, to say the least. I took their website apart, did some research on their background and found amazing stuff you most likely didn't notice when scanning the content. With that said, let's hope for the best and prepare for the worst.  

All the best... And don't get Cex'd!

I guess you could say it would be foolish for btc666 to jump in right after you... However I noticed your posts in the troll box, read between the lines and did the same. Sold my BTC, bought some NMC, sold that at a profit. Was looking real good. However my EgoPay payments got rejected due to "Invalid payment details". There are a few things fishy about the site: (1) Matching WDC/USD buy and sell orders are not getting filled. (2) There is a lot of BTC selling going on but the sell orders are not getting significantly less.............. So one would be inclined to think that HKCex is taking crypto coins, albeit at 8% markup but then re-selling them (via BTC/USD buy orders) for  a 23% markup - a quick 15% nett profit just there already. Seems like an incredible waste for even a scam site to scam so early in its life - they could have taken so much more loot. This is the only flicker of hope I have- maybe it's not what it seems. Good luck all and be careful!!!

Lots of people unable to withdraw from HKCEx.  My bank account details have just been rejected with no other information.  I can't get BTC out either.  >:(

I just received this email from them:

Dear <me!>,


Our service is under massive DDoS attack. We're moving to CloudFlare. All coins are in cold storage, there are no database leaks.
All withdrawals will be sent today.


Thank you for patience and understanding.


--
Orlando James,
Technical Support,
HKCEx
www.hkcex.net

hkcex.net is online and under cloudflare!
Good lesson, guys!

No it's not.

The hkcex scam on news

http://www.cryptocoinsnews.com/news/hkcex-hong-kongs-supposed-new-bitcoin-exchange-bitcoin-atm-network-exposed-scam/2014/05/19 (http://www.cryptocoinsnews.com/news/hkcex-hong-kongs-supposed-new-bitcoin-exchange-bitcoin-atm-network-exposed-scam/2014/05/19)

I just reported this to the HK Joint Financial Intelligence Unit (financial police).  Hopefully more people will do the same.  Here's the link.

http://www.jfiu.gov.hk/en/contact_us.html

Finally, I've got a payment from HKCex on Paypal.
Sold BTC for a good price and got a bonus.
Fine!

Hard to believe you got anything. They send me an email that states I have been using them to launder money...

They just emailed me saying that they think I'm money laundering!  They want a notarized copy of my passport.

At least this is evidence that they aren't a scam, they're just struggling to catch up.  They want the notarized passport copy to be posted to

HKCEx
Belcher's Street, 56
Sai Wan
Hong Kong

That's the address on the web site too, so at least it ties up.

I've also contacted HK customs who have confirmed that the MSO license is for MG Foreign Exchange LTD.  HKCEx claim to be a trade mark of this company.

Things are looking up.

They sent me the same email

Got the same email, postage seems to be too troublesome, I'll have my lawyer notarized my scanned passport and email to them tomorrow. See what else they will need me to do.

Their office is only 3.5km from where I live.  I'll be back in a few days... guess where I'll be going!

I think it's temporary stuck. I've been waiting for 3 days, probably because of DDoS.

dude, they asked me for the notarized passport to be sent by MAIL not EMAIL to their HK office.
Meantime, i filled a report to the HK police....
http://i.snag.gy/Ath9h.jpg

hey Gruss, you sent any document to them? any proof or a screenshot you got money from them ?
please do us a favor, and post a screeshot (if you can) of the transaction, hide your details...
thanks

Maybe they're thinking that so little people will send in a notarized copy (which is expensive in itself) that they can just send money to whoever does (and stay just within the law).

Or maybe you'll send it and they'll say they never recieved it or it's somehow incorrect.

They never asked me for my address so I don't know how they plan to verify that :/

They asked your notarized copy too?

Yeah notarized copy by post.

They send me that email too. Want my passport notarized and send by standart mail which will take weeks! They do not accept emailed copy or photo.

I think they send it to everybody...

so everybody should fill a report to the financial honk hong police.
as i did.

They are most likely in Singapore, so good luck with that one.

the office is in HK....

Doubt it is a real office. Most likely a virtual office.

Cannot login anymore. Redirects me to some Gleez CMS page.

EDIT: fixed

Check the timestamp on the email headers: Date: Tue, 20 May 2014 15:13:36 +0800 (SGT)

SGT is singapore time

And there we have it.

SGT and HKT are both +8.  Singapore is 3 hours flight from HK and has very close business ties.  I can envisage someone working in both cities and travelling between the two.  I seem to remember that Pheng Chuah (or one of the people there) was Singaporean.

They do have a an HK MSO license number.  I've checked it with HK customs.  So they are operating in HK.  Or at least MG Foreign Exchange do and they claim to be part of that company.

Having a registered company/office address means shit all.

Plus, if they were there to begin with they'll already be on a flight out.

I've sent a notarized (by lawyer) copy of my passport to them by email.

There is no logical reason that it must be receive by a standard post.

Additionally, I'll start to involve the lawyer that signed my passport if they does not send the withdrawal to me within 24 hours.

Anybody up for a class action?  I'm based in HK (although I travel a lot, so not there much of the time).  I could find a solicitor here and we could combine resources.

Even if we do get our money back and they are legit, I'm annoyed that I'm missing out on this rally - all my funds are in fiat with them.

Hi, pletharoe. I am a victim from China. We have a HKCEx victims group on QQ. Currently there are 34 people in the group and our total loss is at least more than 70k USD. If you do also use QQ, please join our QQ group: 362341226. Let's combine together!!

Orlando James should be living in HK. He reply my email with "回覆" in the title. These are Traditional Chinese and encoded by Big5.
Singapore use Simplified Chinese and GB2312 encode.

I'm living in ShenZhen, I can go to HK, but now in this two weeks, maybe free in next month.

https://docs.google.com/spreadsheets/d/13JXcBjbwNs0Q-6O19hF0CpLN2Jy25OK5JxEqhoIecbM (https://docs.google.com/spreadsheets/d/13JXcBjbwNs0Q-6O19hF0CpLN2Jy25OK5JxEqhoIecbM)

I create a sheet to statistic the amount been tricked.

SGT was in the timestamp, so the computer they sent it with was set to SGT not HKT.

I don't know why they'd set it to SGT if they were in Hong Kong unless their support team is in singapore.

All emails seem to return to hkcexadm@yahoo.com.hk (both from Chi Xu at the "Financial Department" and Orlando James at "Technical Support")

I would not send anything to that address. If you go to google maps and look at the place, you will find that the address is an old residential building. The really shabby kind. The address did not even have the apartment number or a floor number. Your letter will not be delivered.

Looking at the website, I would say the licence number and the company registration number do not belong to HKCex. They may be using license numbers from another unrelated company.

I think they deleted their twitter account @hkcexinfo

Now this really reminds me of gox..

I can't access their site in the UK, works via proxy though

We got an reader report not able to withdraw and we visited the address from their website

http://bitcoinnews.hk/2014/05/22/%E8%B7%9F%E9%80%B2%E6%9C%AC%E7%B6%B2%E8%AE%80%E8%80%85%E5%B0%8Dhkcex%E7%9A%84%E7%96%91%E5%95%8F/

 ??? ??? ???

There is no HKCEx but 7-11 and property agent

http://bitcoinnews.hk/safe-content/uploads/2014/05/IMG_20140522_080703-200x180.jpg

The reader has called HK police.

http://bitcoinnews.hk/

Don't trust Google maps when looking for HK businesses.  A building with 25 floors is considered 'low rise' here!  Even B2C businesses (shops and restaurants) can be hidden on the 20th floor of a very nondescript building with no sign outside.

The address from their website is
"Belcher’s Street, 56, Sai Wan, Hong Kong"

The photo was taken this morning onsite in person. (not google map)

https://i.imgur.com/o8GIU3j.png

how do you call it ?
I say that they are making us believe they are REAL...f*ck

http://bitcoinnews.hk/2014/05/22/%E8%B7%9F%E9%80%B2%E6%9C%AC%E7%B6%B2%E8%AE%80%E8%80%85%E5%B0%8Dhkcex%E7%9A%84%E7%96%91%E5%95%8F/

Added two closeup photos.

You never reach them by
"Belcher’s Street, 56, Sai Wan, Hong Kong"

Don't send send anything to that address !!!

Victims should report here: https://docs.google.com/spreadsheets/d/13JXcBjbwNs0Q-6O19hF0CpLN2Jy25OK5JxEqhoIecbM/edit#gid=0

Yeah. That "business address" is the final proof that we got Cexx'd. Following another part of that mysterious "office building" taken from Google Street. They were captured back in 2011, so they are a bit old, but it is more than obvious that this is not even a business district where you would expect one of the most secure Crypto Exchanges to be located  ::)


http://999dzine.com/uploads/HKCex-Belchers-Street-56-Hong-Kong-1.jpg

http://999dzine.com/uploads/HKCex-Belchers-Street-56-Hong-Kong-2.jpg

http://999dzine.com/uploads/HKCex-Belchers-Street-56-Hong-Kong-3.jpg


Officially Fucked! I really hope those scumbags are getting doxxed very soooonish. I wanna see them burn!

I am so fkn pissed. Let's fundraise some to hire a hitman. Who is down with that?

Following the address where MG Foreign Exchange Limited, the company found in the website's footer, is allegedly registered.

>>> UNIT F, 18/F, MG TOWER, 133 HOI BUN ROAD, KWUN TONG, KOWLOON <<<

It can be found by searching for their MSO Licence # 14-02-01350 >>> https://eservices.customs.gov.hk/MSOS/wsrh/001s1

Although the building itself looks a bit better, it is pretty obvious that this is just another dead end. A typical boiler room kind of building with lots of abandoned office space... >>> http://www.hongkongoffice.com/building_search/office_profile.asp?B=12173#


PLUS, there seems to be another domain with the same IP address as hkcex.net >>> fuckday.info >>> http://domain-kb.com/ipv4/124.248.221.5

Just coincidence or a fkn bad joke?

fuckday.info is an amazon re-seller it would seem.

In that case, you may be able to get their information from Amazon.

The registrant's information is public in the case of fuckday.info, but there is another thing which bothers me the most atm.

I wonder how the US government, to be more precise the USCC, is involved in all this. Their USCC Economic Issue Brief No. 4 "Bitcoin’s Uncertain Future in China" published on the 12th May 2014 by Lauren Gloudeman is more than suspicious. It almost seems like they were part of preparing this large-scale scam. The timing might have been just coincidence, but the miserable research most definitely was not. The report is obviously propagating Hong Kong "to be primed for Bitcoin’s successful takeoff as a medium of exchange" (p.15)

Moreover, Lauren Gloudeman uses a map allegedly taken from HKCex.net that shows different Bitcoin ATM locations. Even more suspicious that Cex is ONLY mentioned ONCE in the graphic's caption. No additional word about the new exchange in the whole paper. And it did in fact misguide me provided that it has been one of the main reasons I decided to deposit, ending up tarp'd. While I have to admit that I only scanned the content it was crystal clear to me that the US government would not promote, nor mention possibly fraudulent businesses in such a report.


http://999dzine.com/uploads/uscc-issue-brief-no4-hkcex-connection.jpg

Source:
http://origin.www.uscc.gov/sites/default/files/Research/USCC%20Economic%20Issue%20Brief%20-%20Bitcoin%20-%2005%2012%2014.pdf


Could it be that this whole fraud was orchestra'd by a conspiracy of different Western individuals/organizations trying to fool Chinese into the HKCex scam??? Not as unlikely as you might think now. That is for certain. 

By the way, don't you wonder why most English writing BTC news websites kept calm about those $25 million raised, although they have been reporting the alleged investment of $2 million like it has been a huge event back then?


Well, take a look yourself at what is written on pages 13-15 and make up your own mind about all that...

yeah, that 56 belcher street isn't a proper address at all.

for that building, you will need a Floor, and Flat, even if they are operating in an apartment.
but when they tell people to send their passport to the incorrect address..

I think it is very clear now. the company is a cover.

Tried to deliver my freshly notarized copy of my passport today.  There are numerous apartments in the building and nothing to identify where HKCEx is in the building.  I have emailed them requesting clarification.

Clarification: Its a scam

Yeah. It's over... But now the hunt is officially on. I bet they were a bit surprised by being exposed that fast. There is a good chance for them making mistakes which might lead straight to their doorstep. I sincerely hope that they will be getting doxxed soon.

The only thing we still need to do is reporting them to law enforcement, as there are Interpol, HK Police as well as Singapore Police, and of course to the hosting company. I can't believe that the website is still up and running... That is fucking disgusting!

Well, take care.

Cheers

I'm more surprised that they chose to run this soon.

If I was them, I would have waited a long while. Then again I guess that increases risk?

Furthermore, why didn't they just run a profitable business and not have to worry about the police?

Technode has updated their information on HKCEx: http://technode.com/2014/05/23/updates-matters-concerning-hong-kong-exchange-hkcex/ (http://technode.com/2014/05/23/updates-matters-concerning-hong-kong-exchange-hkcex/)

Very simple... Those guys are fucking idiots. Probably some amateurs, who crapped their pants as soon as they realized how foolish they were running this scam.

For example, I would have had the Bonus connected to a certain limitation on the first withdrawal (not before the 1st of June e.g.). Moreover, their trading bot was set to a price level which was ridiculously high. I mean 5-10% over Stamp plus those 8.88% bonus would certainly had been way enough of an incentive. Most likely, even more effective...

Bottom line, there would still be lots of moniez coming in right now in case they would have done their jobs properly. I had an intense conversation with "Orlando" about them being very amateurish. They totally failed! And this is also why we can be pretty positive about them getting caught sooonish.... At least, I hope so ;)

So, in case you plan to run the next scam feel free to consult me upfront :D

Looking forward...

I just got a reply from Sunny Vision, they have threatened to shutdown HKCEx's server if they don't get a response from them soon.

Good news!!

I guess they can just switch to another server provider, maybe it's better to hire hackers to hack in their server to see if there's anything left for our victims.

Just got back another response from Sunny Vision.

They said HKCEx told them they would fix their issues, but they haven't heard a response, "but now not response,We will chase his."

HKCEx appears to be down at the time of writing this.

The people hiding their identity are cloudflare, submit an abuse report here: https://www.cloudflare.com/abuse/ (https://www.cloudflare.com/abuse/)

Yeah. It's gone. Finally...

But it seems like they didn't move coins, yet. Mine are still in the provided deposit address. Is there any way to mark those coins as stolen?

 ???  ::)

No way that they can't get around in a flash.

Its very easy to tumble any amount of coins

Interesting..

HKCEx has just replied back with a generic message:


However, the name they have replied with is Wu Haisheng

This is probably the true name of the owner, but I can't confirm anything - they most likely replied with their email client to the support ticket and their name was on there.

I don't know how common a name this is, but it's not (wasn't) listed anywhere on their site.

Interestingly, the name appears as a member of the bitcoin foundation.

Will update if I find anything else.

No, I have his personal live.jp address from Sunny Vision.

wasn't it like sending 10 cents to the adress and add the HATE-NOTE in the field on top?

Are you fucking kidding? WOW, that would be a real blow!!!

Yeah, but as correctly mentioned by MrWDunne already, they are probably going to tumble the coins and that is pretty much it.

But with those traces to specific individuals involved, we still have a good chance to get them back before they just disappear. Let's fucking hunt those cunts down! As I said earlier they were complete amateurs not knowing what exactly they are doing! Scam n0000bs so to say.

So, please keep this thread updated and pumping, fellas. We need any support now!


All the best!

hope you get your money back

personal live.jp address ? did you mean this is a hkcex person?
I think it is would be helpful to show this address public to all of us.

I don't know if it's just a throwaway, his actual address or an something else completely but it's the one he signed up to sunny vision with.

vnet@live.jp

Any message I send I recieve this:


The name in the header is "VNET HK" -- perhaps a company hired to register the domain on his behalf?


Nice find, how did you find it?

The twitter page says San Francisco, the whois says it's located in Germany and it's a Hong Kong exchange that may have been based in Singapore...

Very odd that it only ever seemed to report HKCEx prices.

Edit:

Looking at the email headers, it seems vnet@live.jp is a forwarding address to smtpbg308.qq.com

There was also this: X-Originating-IP: 58.253.117.79

From wikipedia:


Could 58.253.117.79 be the IP of the sender?

Running it through WHOIS we find a Chinese ISP:

http://who.is/whois-ip/ip-address/58.253.117.79 (http://who.is/whois-ip/ip-address/58.253.117.79)

The guy we are looking for is mostly likely in china. China Unicom is a mobile netwrok in China, and QQmail he used almost only used in China. I think the IP addresses are a dead end, we should ask for the names of the identification used when registering for hosting from Sunny Vision.

The only reason why don't write freakin word can have two major reasons IMFAO.

First, they don't want to admit that they were promoting an obvious scam before. When HKCex allegedly collected $3m it was spread all over the major BTC "news" websites. By the way, it seems pretty obvious that Coindesk (e.g) is getting paid to promote shady companies accepting Bitcoin anyways. Just take a look at those trading platforms they write/wrote about. Usually, they are the worst one can find. And they know! Or don't ever research those companies, doing C/P journalism.

The other reason is quite simple. They are part of that scheme and are getting paid to shut up.

Well, both scenarios are, at least, not very unlikely ;)

Shame on those wannabe-journalists!

Any update regarding that trace?

I did a quick search on that name and found this guy very capable of setting up such scheme >>> http://www.linkedin.com/in/wuhaisheng

In general, the name is obviously all but common!

 ::)


Seems like they wanna be sure that they left no evidence which might identify them before they start moving coins. Once those crooks feel save, our moniez will be insta-gone...

Looking up hkcex.net on domainwhitepages.com we get the following traceroute which might be helpful to those who understand it. I don't ;)

Traceroute

Tracing route to hkcex.net [124.248.221.134]...
hop    rtt    rtt    rtt         ip address    fully qualified domain name
1    0    0    0         208.101.16.73    208.101.16.73-static.reverse.softlayer.com
2    0    0    0         66.228.118.157    ae11.dar02.sr01.dal01.networklayer.com
3    0    0    0         173.192.18.252    ae14.bbr01.eq01.dal03.networklayer.com
4    34    34    34         173.192.18.141    ae0.bbr01.cs01.lax01.networklayer.com
5    30    30    30         173.192.18.167    ae7.bbr02.cs01.lax01.networklayer.com
6    41    41    41         173.192.18.150    ae0.bbr02.eq01.sjc02.networklayer.com
7    132    132    132         50.97.18.161    ae0.bbr01.eq01.tok01.networklayer.com
8    140    140    140         50.97.18.163    ae7.bbr02.eq01.tok01.networklayer.com
9    183    183    183         50.97.18.167    ae0.bbr01.pn01.hkg01.networklayer.com
10    176    176    176         202.40.160.139    sunnyvision3-10g.hkix.net
11    184    184    184         123.242.225.10    te3-3.core3.hk01.hkngn.com
12    *    *    *            
13    *    *    *            
14    *    *    *            
15    *    *    *            

Trace aborted



The bold IP is referring to another domain HKIX.NET


Queried whois.internic.net with "dom hkix.net"...

   Domain Name: HKIX.NET
   Registrar: DOMAIN.COM, LLC
   Whois Server: whois.domain.com
   Referral URL: http://www.domain.com
   Name Server: NS1.CUHK.EDU.HK
   Name Server: NS2.CUHK.EDU.HK
   Name Server: NS3.CUHK.EDU.HK
   Status: ok
   Updated Date: 12-mar-2012
   Creation Date: 23-apr-1995
   Expiration Date: 24-apr-2021

>>> Last update of whois database: Sun, 01 Jun 2014 01:21:32 UTC <<<

Queried whois.domain.com with "hkix.net"...

Domain Name: HKIX.NET
Registry Domain ID:
Registrar WHOIS Server: whois.domain.com
Registrar URL: www.domain.com
Updated Date: 2012-06-26 23:41:31
Creation Date: 1995-04-23 04:00:00
Registrar Registration Expiration Date: 2021-04-24 04:00:00
Registrar: Domain.com, LLC
Registrar IANA ID: 886
Registrar Abuse Contact Email: compliance@domain-inc.net
Registrar Abuse Contact Phone: +1.6027165396
Reseller: MyDomain
Reseller: support@mydomain-inc.com
Reseller: +1.8004057875
Domain Status: ok
Registry Registrant ID:
Registrant Name: Network Administrative Contact
Registrant Organization: The Chinese University of Hong Kong
Registrant Street: Information Technology Services Centre G/F, Pi Chiu Building, CUHK
Registrant City: Shatin
Registrant State/Province: New Territories
Registrant Postal Code: 00000
Registrant Country: HK
Registrant Phone: +852.39438801
Registrant Phone Ext:
Registrant Fax: +852.26035001
Registrant Fax Ext:
Registrant Email: noc-admin@cuhk.edu.hk


And the bold italic IP belongs to the domain HKNGN.COM


Queried whois.internic.net with "dom hkngn.com"...

   Domain Name: HKNGN.COM
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS1.HKSEEKER.COM
   Name Server: NS2.HKSEEKER.COM
   Status: ok
   Updated Date: 20-may-2014
   Creation Date: 17-jun-2013
   Expiration Date: 17-jun-2015

>>> Last update of whois database: Sun, 01 Jun 2014 01:27:49 UTC <<<

Queried whois.enom.com with "hkngn.com"...

Domain Name: HKNGN.COM
Registry Domain ID: 1809120000_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: www.enom.com
Updated Date: 2014-05-20 02:37:53Z
Creation Date: 2013-06-18 01:26:15Z
Registrar Registration Expiration Date: 2015-06-18 01:26:00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48
Registrar Abuse Contact Email: abuse@enom.com
Registrar Abuse Contact Phone: +1.4252744500
Domain Status: ok
Registry Registrant ID:
Registrant Name: DOMAIN ADMINISTRATOR
Registrant Organization: JIAPEI GROUP LIMITED
Registrant Street: ROOM 604, WELLTECH CENTRE, PAT TAT STREET, SAN PO KONG,
Registrant Street: KOWLOON, HONG KONG
Registrant City: HONG KONG


As admitted, I don't know much about that stuff. Maybe you can find a hint...

So in summary:

VNET is a company that have set up hosting services with Sunny Vision on behalf of HKCEx.

When I contacted Sunny Vision and informed them of HKCEx's fraud, they took down HKCEx's server.

Wu Haisheng works for VNET, and forwarded emails to and from HKCExadm@yahoo.com.hk (address now inactive)

VNET have provided the following address:

We cannot verify if this address is accurate as VNET did not verify addresses.

VNET has this address from HKCEX's paypal information, but anyone with a prepaid card can setup a paypal account and enter fake information.

Our only lead is the above address, someone in Hong Kong want to go check it out?

Very well done, sir! I have a feeling we are getting somewhere in the end...


Following screenshots from Google Streetview

http://999dzine.com/uploads/Lockhart-Road-53-55HK-1.jpg

http://999dzine.com/uploads/Lockhart-Road-53-55HK-2.jpg

http://999dzine.com/uploads/Lockhart-Road-53-55HK-3.jpg


Even though this address is most likely a fake one, maybe they were not chosen randomly. Would be great if someone in HK could go there to have a look.

The question is if the identity was just stolen or not? I guess it was ;) I mean, people hiding behind multiple VPN providers won't give their name to anyone.

Well, we just need to keep digging...

Why not contact a hongkong based news station and tell them to  GO FOR IT, SEARCH ..
they would be first with such a ''story'' and maybe it's a win-win situation.

 :o

Just sent the address to bitcoinnews.hk (the guys who checked out the original address and confirmed it was fake)

I am meeting Detective Mok from Central police station at 5pm (09:00 GMT).  The information I will give him is as follows.  Is there anything I have missed?



Company name: HKCEx
HKCEx is a registered trademark of MG Foreign Exchange Limited. CR.No 1979508. MSO Licence # 14-02-01350
 
Company address:
HKCEx
Belcher's Street, 56
Sai Wan, Hong Kong
 
MG Foreign Exchange address:
MG Tower on 133 Hoi Bun Rd. Kowloon
 
The web site owner’s details are obscured by privacyprotect.org (Queensland, Australia) I believe this company is being used to cover the fraud.  Privacyprotect is used to stop web site owners receiving junk mail, they say that they take illegal use very seriously, however they have not taken my allegation seriously.  Maybe they will take you more seriously.
 
To avoid hacking, they have hosted the site with cloudflare.com . They set this up after the problems started, adding weight to the case that they were hacked and not stealing money.  Cloudflare should have customer details on record, but again aren’t very willing to share information.
 
People:
Pheng Cheah (CEO)
Peng Tsou (Director)
Mr. Liang
Mr. Gang Fu
Chi Xu (Financial department)
Orlando James (Tech support)
Lavin Lam (Head of Marketing and PR)
 
More info on the people working there can be found at:
http://webcache.googleusercontent.com/search?q=cache:55P-OfxR0F0J:https://www.hkcex.net/about/management-team+&cd=1&hl=en&ct=clnk&gl=us
 
Latest update:
VNET is a company that have set up hosting services with Sunny Vision on behalf of HKCEx.

When I (CaptainClaw) contacted Sunny Vision and informed them of HKCEx's fraud, they took down HKCEx's server.


VNET have provided the following address:
Quote
Room 1408, 15F, SPA Centre, 53-55
Lockhart road
Wanchai
Hong Kong

We cannot verify if this address is accurate as VNET did not verify addresses.

VNET has this address from HKCEX's paypal information, but anyone with a prepaid card can setup a paypal account and enter fake information.

Domain was set up at Sunny Vision data centre in HK using the email address: vnet@live.jp
 

Please keep us in touch..
I'm very sorry I've started this topic. I've lost all my BTC as others :( :( :(

Bitcoinnews.hk just told me they're going to check it out.


Looks accurate from the information we have been able to obtain

Just one thing, MG Foreign Exchange Limited have denied any connection to HKCEx according to technode:

Hi all,

Some pictures taken at the below address this morning.
15F, SPA Centre, 53-55, Lockhart road, Wanchai, Hong Kong

The address is a business service company called Taka (http://www.takaici.com/index.html), who help people setup/register company, receive mail, provide meeting room etc.
Asked the reception, she answered that she didn’t find the company called HKCEx.

http://bitcoinnews.hk/safe-content/uploads/2014/06/IMG_20140604_091601-200x180.jpg
http://bitcoinnews.hk/safe-content/uploads/2014/06/IMG_20140604_091621-200x180.jpg
http://bitcoinnews.hk/safe-content/uploads/2014/06/IMG_20140604_092823-200x180.jpg
http://bitcoinnews.hk/safe-content/uploads/2014/06/IMG_20140604_092652-200x180.jpg
http://bitcoinnews.hk/safe-content/uploads/2014/06/IMG_20140604_091902-200x180.jpg
http://bitcoinnews.hk/safe-content/uploads/2014/06/IMG_20140604_092121-200x180.jpg


bitcoinnews.hk

Thanks for the update!

Looks like the paypal address was a dead end, so the name (lavin lam) is also probably fake.

However it's possible they registered at Taka but with a different company name.

Yeah, thanks a lot indeed!

Although, this is getting a bit frustrating, I am pretty certain that if we keep digging something useful will surface. Lavin Lam might be fake, this address might be fake, but people setting up fake stuff, are frequently connected somehow to their fake stuff. In most cases they don't keep it a 100% random.

I dunno if Paypal is willing to help in a Bitcoin related case, but I wonder how the account was funded!?

 :P

Coindesk covered HKCEx today: http://www.coindesk.com/red-flags-raised-hong-kong-bitcoin-exchange-hkcex/ (http://www.coindesk.com/red-flags-raised-hong-kong-bitcoin-exchange-hkcex/)

Interesting read, thanks. How can a person (or a group) setup a company with a fake address and license and no one verified them? They even lied about raising huge amount of capital form reputable banks and no one found out?

These scammers must have planned this for a long time and probably have done it before. Someone should cross check the info from the other scams in Hong Kong and China. May be there is a link...

Intersting? Pathetic I'd say. Coindesk is a guilty as all the other BTC "news" websites that were promoting HKCex when they allegedly raised $2m in funds. Now after WEEKS since it has been a confirmed scam they come up with such an article. Any average blogger (I don't wanna call these guys journalists) must have recognized that HKCex was a fake from the start.

Detective Mok was very interested and keen to investigate this case although he is quite new to bitcoin he seemed to grasp the concept.

Please can we provide more leads for him.  e.g. paypal addresses etc.  I will pass them on.

VNET, the company providing Virtual Private Servers to HKCEx, has provided the following information:


Address seems to be related to several scams on the internet, some of the links are NSFW so I'll just post the info:

Danny Lee from South China Morning Post would like to hear from people about this.

danny.lee@scmp.com

The article was published today in (possibly) the largest newspaper in HK / Southern China.  The police are still investigating.  Anyone who hasn't already should contact them and report their loss.  Detective Mok is investigating.

Tel: +852 28599295

Am I crazy or my LTC deposited to hkcex moved to address with 20 million coins on 26 june

My coins have moved too today, interesting.

As for 20 million coins, you might be crazy - there isn't any wallet that big.


Just called, Mr Mok is on holiday until Wednesday.

It was here http://ltc.blockr.io/address/info/LWdfXUxLBV9nCJ6yk5Ed2pBNhiV7kTaTQJ

Seems they moved again

What was your original deposit address for HKCEx?

Also that's total received, could be cold storage for a large exchange (btc-e?)

This LVLFYvL4UTepk8cHrw4ENUp6RsgMM6ck2n

Check it. Maybe I did something wrong

Looks like btc-e cold storage.. they're probably selling the coins. (or maybe OKCoin?)

Can anyone who speaks russian contact btc-e and ask them? Their english isn't great.

Coins went from here:

http://ltc.blockr.io/address/info/LVLFYvL4UTepk8cHrw4ENUp6RsgMM6ck2n

Combined into 500 LTC with other coins

http://ltc.blockr.io/tx/info/11131743f61f7d7e8f0666d210fe521e037f052aea843c21fee2e94b6865cd21

Transfered here and combined into 1000 LTC

http://ltc.blockr.io/address/info/LQi6JDe3NUTtjpQ1kdGyAjFmjUs5aD75Xo

Then transferred into this wallet that seems to spread coins into multiple large wallets:

http://ltc.blockr.io/address/info/LWdfXUxLBV9nCJ6yk5Ed2pBNhiV7kTaTQJ

Did your deposit also went to that address?

Nope.

My deposit got split into two, and they're sitting in two different addresses.

http://ltc.blockr.io/address/info/Lf2WT3H4znJAEYwkPG6qPsNyUsmpU2Apfw

Are you sure? It seems like they went over there.

At the time I posted they hadn't.. They have now though.

I found they withdraw my ppc at june 30

http://ppc.blockr.io/address/info/PACu12HCHWRgfPhVxTrvJArG4wp1endqab

Nvmd. wrong thread