BITMIXCOIN.IO scam confirmed: 16+ Bitcoin stolen

[BITMIXCOIN.IO]

I can confirm, the user deposited 16BTC to an address signed by bitmixcoin.io and the funds have not yet reached to target destination also signed by bitmixcoin.io

Thanks, please tag.

The user has told us to deposit to other address via email, for security reasons we wont reveal this address.
We asked the user to connect and verify it.

I call BS.

I call chipmixer employee/admin.

[Lutpin]

The user has told us to deposit to other address via email, for security reasons we wont reveal this address.

What kind of verification did you ask from the user before you were willing to change their destination address for $100k worth of bitcoin?
If I send BTC to you for the purpose of mixing them, I expect them to reach their destination specified in the letter of guarantee, not be intercepted during the mixing and be rerouted.
With changing the destination you did break your own letter of guarantee. I hope you are aware of what a dangerous precedence you are setting here.

What if for example their email was hacked and you were not communicating with the user that had originally deposited those funds to your mixer?
You're taking a huge risk by letting users change from addresses which you have signed.


Disclaimer: I have a working relationship with bitblender.io, my opinions are my own, and you can insult me for either of those two things as much as you like.

[BITMIXCOIN.IO]

The user has told us to deposit to other address via email, for security reasons we wont reveal this address.

What kind of verification did you ask from the user before you were willing to change their destination address for $100k worth of bitcoin?
If I send BTC to you for the purpose of mixing them, I expect them to reach their destination specified in the letter of guarantee, not be intercepted during the mixing and be rerouted.
With changing the destination you did break your own letter of guarantee. I hope you are aware of what a dangerous precedence you are setting here.

What if for example their email was hacked and you were not communicating with the user that had originally deposited those funds to your mixer?
You're taking a huge risk by letting users change from addresses which you have signed.


Disclaimer: I have a working relationship with bitblender.io, my opinions are my own, and you can insult me for either of those two things as much as you like.

You pointed out decent possibilities however if his email address was hacked we will cover his 16 bitcoins lost.
We took a huge risk only for this specific deposit since chipmixer employee went rouge on us.

[DarkStar_]

Disclaimer: I (also) have a working relationship with ChipMixer. Opinions are my own.

The user has told us to deposit to other address via email, for security reasons we wont reveal this address.

What kind of verification did you ask from the user before you were willing to change their destination address for $100k worth of bitcoin?

Mind answering this question?

Also, how would he/she prove that their email was hacked? Wouldn't it be easy for said customer to simply claim his email was hacked and profit 16 BTC. (all assuming this isn't BS). It seems like you did not request anything provable such as a signed message from the address the funds were supposed to be forwarded to. There is no place on the site where you can submit your email before mixing.

You pointed out decent possibilities however if his email address was hacked we will cover his 16 bitcoins lost.
We took a huge risk only for this specific deposit since chipmixer employee went rouge on us.

That's an incredibly stupid risk (if true) when you could have just sent the 16 BTC to the correct address, and be done with things.


Also fyi there are currently 59 members in the ChipMixer signature campaign. LoyceV is one of them.

[shield132]

The user has told us to deposit to other address via email, for security reasons we wont reveal this address.

What kind of verification did you ask from the user before you were willing to change their destination address for $100k worth of bitcoin?
If I send BTC to you for the purpose of mixing them, I expect them to reach their destination specified in the letter of guarantee, not be intercepted during the mixing and be rerouted.
With changing the destination you did break your own letter of guarantee. I hope you are aware of what a dangerous precedence you are setting here.

What if for example their email was hacked and you were not communicating with the user that had originally deposited those funds to your mixer?
You're taking a huge risk by letting users change from addresses which you have signed.


Disclaimer: I have a working relationship with bitblender.io, my opinions are my own, and you can insult me for either of those two things as much as you like.

You pointed out decent possibilities however if his email address was hacked we will cover his 16 bitcoins lost.
We took a huge risk only for this specific deposit since chipmixer employee went rouge on us.

Forget chipmixer, cryptomixer and etc...
Prove your "truthfulness" as soon as possible or it proves that you are trying to catch another victim. You have no argument to insult me for any mixer here but if you see I was positive on you.
Chipmixer has to do nothing on your huge risk, prove everything ASAP! And if you are true, your neg will be removed, don't worry.

[DarkStar_]

Looks like BitSler employees and Crypto-Games employees are also going "rouge" 

[timerland]

You still haven't answered the question. Why did you lie about the fact that you received 16 BTC from said user:

We haven't received those 16 bitcoins.

If you didn't receive those 16 bitcoins why are you refunding him now without any objections? Or, more likely, why were you previously denying the fact that you received money from the user, when clearly it can be seen on the letter of guarantee that he has deposited it? Also, why did you make comments about how the letter of guarantee could be easily manipulated at the start of this accuastion instead of trying to address the situation sooner?

the latter of guarantee easily can be manipulated

Anyways, don't think that everyone's on you just because of Chipmixer. It's because you are a shady business.

[Lutpin]

Looks like BitSler employees and Crypto-Games employees are also going "rouge"

Just for the record, CG is useless when it comes to mixing, do not attempt to mix your coins via crypto.games
I much prefer bitblender.io for that purpose.
(I'm taking a piss here, in case it wasn't obvious. gamble wherever you want and mix your coins where you feel comfortable doing so)

You pointed out decent possibilities however if his email address was hacked we will cover his 16 bitcoins lost.
We took a huge risk only for this specific deposit since chipmixer employee went rouge on us.

Can we stop dismissing valid concerns and provable points by the fact they are being pointed out by person X or person Y.
What is said should be more important than who it is that says it.


So, once again:

- Why did you claim to have not received the 16 BTC, when clearly you did?
- What verification have you received to agree to change the receiving address for $100k worth of BTC?
- Do you really believe bitcoin signed messages can be easily faked? If so, can you give us an example, eg sign a message from an address I give you?

[marlboroza]

We fixed everything with the user,

We haven't received those 16 bitcoins.

I don't get it. You fixed everything even thought you didn't receive 16 bitcoins. Nah, I still don't get it.
Did you or did you not receive 16 bitcoins from user?

They did, according to the letter of guarantee I have been forwarded.
~

I was pointing at changing the story (haven't received bitcoins- received bitcoins).
Also, there is "user has never sent us email" VS "we settled everything via email".

Maybe bitmixcoin can show us emails(in case user never shows up)?

[DarkStar_]

I was pointing at changing the story (haven't received bitcoins- received bitcoins).
Also, there is "user has never sent us email" VS "we settled everything via email".

Maybe bitmixcoin can show us emails(in case user never shows up)?

Emails are actually easy manipulated, unlike bitcoin signed messages. (though the headers would be incorrect, but I *think* you can manually edit the header if the email is controlled by you to make it appear legit)

[LoyceV]

So, once again:

- Why did you claim to have not received the 16 BTC, when clearly you did?
- What verification have you received to agree to change the receiving address for $100k worth of BTC?
- Do you really believe bitcoin signed messages can be easily faked? If so, can you give us an example, eg sign a message from an address I give you?

I was pointing at changing the story (haven't received bitcoins- received bitcoins).

Isn't this just the typical scammer making up random lies hoping a few more people will believe him and fall victim to his scam too?

[alanweber885]

Bitmixcoin.io is SCAM - I sent 1.2BTC 4 days ago

[cruso]

Bitmixcoin.io is SCAM - I sent 1.2BTC 4 days ago

Is there no way to report them and have the website taken down? Not everybody will read this thread.

[StImelda]

One cannot be too careful when we when it comes to investing in ICOs or in crypto-related projects.16 Bitcoins is a lot.I just wished that in some how there is a way he can recover those bitcoin back.I read other peoples comments,it seem the experience is similar.

[LoyceV]

Is there no way to report them and have the website taken down? Not everybody will read this thread.

I don't think there's much we can do about it. The domain is registered through namecheap.com:

Code:

$ whois bitmixcoin.io
Domain Name: BITMIXCOIN.IO
Registry Domain ID: D503300000045288201-LRMS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: www.namecheap.com
Updated Date: 2017-11-05T20:34:09Z
Creation Date: 2017-09-06T16:19:06Z
Registry Expiry Date: 2018-09-06T16:19:06Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc
Registrar IANA ID: 1068
Registrar Abuse Contact Email: abuse@namecheap.com
Registrar Abuse Contact Phone: +1.6613102107
Reseller:
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registrant Organization: WhoisGuard, Inc.
Registrant State/Province: Panama
Registrant Country: PA
Name Server: DNS1.REGISTRAR-SERVERS.COM
Name Server: DNS2.REGISTRAR-SERVERS.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of WHOIS database: 2018-06-25T12:20:14Z <<<

Namecheap.com shows: How to Report a Fraudulent Website to a Registrar, but I highly doubt they'll act on it.
I don't want to send them someone else's Letter of Guarantee, and I doubt they'd be willing to verify those to confirm the theft.

[Lutpin]

The domain is registered through namecheap.com

I've submitted a Domain abuse complaint with namecheap earlier anyway.
Previously done so with Giveawayethereum.win and it was handled quickly, though that was a more clearly cut case, as they were hosting an illegal ponzi scheme.
We'll see how/if they handle this case.

[LoyceV]

I've submitted a Domain abuse complaint with namecheap earlier anyway.

Thanks! If this is their doing, I'm impressed!


I don't know if they can "repossess" .io domains, or just take the site offline until it moves to a different host.
I'll leave the thread open for other victims to report in.