A signature scammer/account buyer/farmer

[coolcoinz]

Just putting the facts here for you to evaluate.
First spotted: https://bitcointalk.org/index.php?topic=2020019.msg47826624#msg47826624

What I found that confirms it (not using archive because their posts are quoted by other people in those threads, he won't be able to delete them):

uszaty43 https://bitcointalk.org/index.php?action=profile;u=326943 used to post in Polish.

Jakby byl to shit to powiedzialbym ze po co kupowac gowno jak mozna samemu naprodukowac... Forma pytania to inna kwestia.Zachecam do zaznajomienia sie z WP.Sama perspektywa Anona to pewny zarobek 500-1000% moze i wiecej.Jakoze to watek ogolnodostepny preferowanym jezykiem jest angielski,wiec rowniez zachecam do poslugiwania sie nim tak aby wszyscy mogli uczestniczyc w dyskusji.

Let me apologise guys ,I wrote some info about Nav@Waldozaur12 and quickly come back into english;)

In October 2017 he sold this account and wasn't tagged.
https://bitcointalk.org/index.php?topic=2074472.msg20726055#msg20726055
and joined a signature campaign right away.
https://bitcointalk.org/index.php?topic=2255703.msg22828542#msg22828542
Did not use Polish since then.


hahahafr used to post in French.

Bonjour à tous,

Hypothèse : je vends pour 1000 euros de bitcoins, je rapatrie l'argent par virement SEPA sur mon compte bancaire.

Question : je déclare ces 1000 euros dans la case 5KU ? ou bien uniquement la case 5KY ? ou bien je met 1000 dans la case 5KU et 1000 aussi dans la case 5KY ?

Gap in posting November 2016 - October 2017
No French post under new management, most likely hacked.

minersday
https://bitcointalk.org/index.php?action=profile;u=229588
Post gap from August 2015 to March 2017

GreatOrchid https://bitcointalk.org/index.php?action=profile;u=364362
Post gap November 2016 - March 2017
Most likely hacked along with minersday


Now for the good part.

All above accounts stopped posting on the same day. July 21, 2018
All above accounts joined the same campaign on the same day November 11, 2018
All above accounts did the same mistake when joining. They copied the personal text along with the word "personal text"
All above accounts were inactive since their campaign application.



There are some other posters that also did the mistake in text, and are most likely owned by the same person.
dead_m92
https://bitcointalk.org/index.php?action=profile;u=228551

Anonylz
https://bitcointalk.org/index.php?action=profile;u=153613

shursight
https://bitcointalk.org/index.php?action=profile;u=294993


I'll check their posts and add more later.

[Hexah]

Seems pretty valid but I guess it's better that I archived the buy and sell of uszaty43 in here:
 Archived

Better to archive everything you find.

[coinlocket$]

As told to op This is everything I've found.
I'm almost 100% sure that some of them are alts (probably 5-6) but I can't proof it, since he is "clever" and he hides himself.
One of them Is a 100% cheater.

_________________________________________	_____________________	____________________________	_____________________________________________________________
ETH	ACCOUNTlink	ETH on forum	ARCHIVE
39D2xiHtwqhRUR4gvGPimJJdC3ALcCMZpv	GreatOrchid	https://bitcointalk.org/index.php?topic=2020019.msg47808834#msg47808834	https://web.archive.org/web/20181113142113/https://bitcointalk.org/index.php?topic=2020019.msg47808834
0x29392440458A59f3ceEb519A4Ef7b581E0b10a00	GreatOrchid	https://bitcointalk.org/index.php?topic=3479652.msg41813032#msg41813032	https://web.archive.org/web/20181113142116/https://bitcointalk.org/index.php?topic=3479652.msg41813032
1CVRDSQ36gU8wTRWvTHJcEYHEpkjhGk5PM	GreatOrchid	https://bitcointalk.org/index.php?topic=2664813.msg27431216#msg27431216	https://web.archive.org/web/20181113142119/https://bitcointalk.org/index.php?topic=2664813.msg27431216
1BFg584AWU8CbMjJVVKSJdWHDU3PmdiBkc	GreatOrchid	https://bitcointalk.org/index.php?topic=2312863.msg23473505#msg23473505	https://web.archive.org/web/20181113142123/https://bitcointalk.org/index.php?topic=2312863.msg23473505

_________________________________________	_____________________	____________________________	_____________________________________________________________
ETH	ACCOUNTlink	ETH on forum	ARCHIVE
39GFNGVJwcnzx3LpfLf9axD72SQMGecPn2	hahahafr	https://bitcointalk.org/index.php?topic=2020019.msg47808873#msg47808873	https://web.archive.org/web/20181113143152/https://bitcointalk.org/index.php?topic=2020019.msg47808873
0xbE25E3b2cDf16EBA7602DC2CFa8749470B22d119	hahahafr	https://bitcointalk.org/index.php?topic=3353693.msg41319459#msg41319459	https://web.archive.org/web/20181113143156/https://bitcointalk.org/index.php?topic=3353693.msg41319459
3G2cmaBdeCvyrCdHVLgKeU4G4ahewZkxdD	hahahafr	https://bitcointalk.org/index.php?topic=3132539.msg32410141#msg32410141	https://web.archive.org/web/20181113143159/https://bitcointalk.org/index.php?topic=3132539.msg32410141
1B3ypoHFeWN6Z7FNsmHyfK8bzHdsMY9FUM	hahahafr	https://bitcointalk.org/index.php?topic=2664813.msg27431570#msg27431570	https://web.archive.org/web/20181113143202/https://bitcointalk.org/index.php?topic=2664813.msg27431570
1N71xosjZFPGZATHUJ7Pkj5J7bb3nyuM4z	hahahafr	https://bitcointalk.org/index.php?topic=2436243.msg25227339#msg25227339	https://web.archive.org/web/20181113143244/https://bitcointalk.org/index.php?topic=2436243.msg25227339

_________________________________________	_____________________	____________________________	_____________________________________________________________
ETH	ACCOUNTlink	ETH on forum	ARCHIVE
3LNYpNSPWEG1ZyEKbSoectDACsWxWKLnJc	uszaty43	https://bitcointalk.org/index.php?topic=2020019.msg47808945#msg47808945	https://web.archive.org/web/20181113143727/https://bitcointalk.org/index.php?topic=2020019.msg47808945
1EZ8mm7C2MBEQDBe91k3e2CtwE5QyYZiLX	uszaty43	https://bitcointalk.org/index.php?topic=2664813.msg27431408#msg27431408	https://web.archive.org/web/20181113143731/https://bitcointalk.org/index.php?topic=2664813.msg27431408
1FSLt7WbK9aJLvvbk2ieuy3iQ1ytWXofCL	uszaty43	https://bitcointalk.org/index.php?topic=2255703.msg22828542#msg22828542	https://web.archive.org/web/20181113143734/https://bitcointalk.org/index.php?topic=2255703.msg22828542

_________________________________________	_____________________	____________________________	_____________________________________________________________
ETH	ACCOUNTlink	ETH on forum	ARCHIVE
37LujTGCrkxfm9y6MpD5tkUo7pXbdL4kAi	minersday	https://bitcointalk.org/index.php?topic=2020019.msg47809016#msg47809016	https://web.archive.org/web/20181113151853/https://bitcointalk.org/index.php?topic=2020019.msg47809016
0xa821cD4A91fEC29085708751cf7F8A0a425c79F7	minersday	https://bitcointalk.org/index.php?topic=3479652.msg41809962#msg41809962	https://web.archive.org/web/20181113151857/https://bitcointalk.org/index.php?topic=3479652.msg41809962
39W3iT94QGpdf4f3BLNfFw8Ri23PJzZVTx	minersday	https://bitcointalk.org/index.php?topic=1935179.msg25663538#msg25663538	https://web.archive.org/web/20181113151901/https://bitcointalk.org/index.php?topic=1935179.msg25663538

_________________________________________	_____________________	____________________________	_____________________________________________________________
ETH	ACCOUNTlink	ETH on forum	ARCHIVE
37Zt8QAvpffkga21t1fLaM7W58Tr1jotgz	dead_m92	https://bitcointalk.org/index.php?topic=2020019.msg47809521#msg47809521	https://web.archive.org/web/20181113151906/https://bitcointalk.org/index.php?topic=2020019.msg47809521
1CkJySCNF8ceibmtr2Y9rRq4697pcKuvzL	dead_m92	https://bitcointalk.org/index.php?topic=2459832.msg25199494#msg25199494	https://web.archive.org/web/20181113151910/https://bitcointalk.org/index.php?topic=2459832.msg25199494
1PSdTUYiTuECNhdPFBCX8YKGdpQoehbcRr	dead_m92	https://bitcointalk.org/index.php?topic=2180378.msg21869485#msg21869485	https://web.archive.org/web/20181113151914/https://bitcointalk.org/index.php?topic=2180378.msg21869485

_________________________________________	_____________________	____________________________	_____________________________________________________________
ETH	ACCOUNTlink	ETH on forum	ARCHIVE
332faCvzCU76xTM58rEMYVryw2Ae2d9WRq	livingfree	https://bitcointalk.org/index.php?topic=2020019.msg47808798#msg47808798	https://web.archive.org/web/20181113152058/https://bitcointalk.org/index.php?topic=2020019.msg47808798
39XiZD4LveRADkea6XiGN7t8ACbupaUYDu	livingfree	https://bitcointalk.org/index.php?topic=2020019.msg46956020#msg46956020	https://web.archive.org/web/20181113152103/https://bitcointalk.org/index.php?topic=2020019.msg46956020
3QPWoNjNjTycMJqf94HTU743LNR7zJbv14	livingfree	https://bitcointalk.org/index.php?topic=4979978.msg44912506#msg44912506	https://web.archive.org/web/20181113152107/https://bitcointalk.org/index.php?topic=4979978.msg44912506
0xb71Be31427Dc40D6bECC99D59D05e8fe1EF1988A	livingfree	https://bitcointalk.org/index.php?topic=4898414.msg44109315#msg44109315	https://web.archive.org/web/20181113152111/https://bitcointalk.org/index.php?topic=4898414.msg44109315
3AcE5NGnF3matJV6vEMLiQf1gpGm2gMaLk	livingfree	https://bitcointalk.org/index.php?topic=4811267.msg43424735#msg43424735	https://web.archive.org/web/20181113152114/https://bitcointalk.org/index.php?topic=4811267.msg43424735
1MF9dr2ToQT5mmSQpzc3r7g6TSw79DNYhj	livingfree	https://bitcointalk.org/index.php?topic=4505960.msg42448175#msg42448175	https://web.archive.org/web/20181113152118/https://bitcointalk.org/index.php?topic=4505960.msg42448175
14pxsqtn5zt3oudtdWtV2C4DesUhgaSaYD	livingfree	https://bitcointalk.org/index.php?topic=4594820.msg41462830#msg41462830	https://web.archive.org/web/20181113152123/https://bitcointalk.org/index.php?topic=4594820.msg41462830
363AiUFxjZiwjAFbTngx2UTwmqazkLdmu	livingfree	https://bitcointalk.org/index.php?topic=3747961.msg37013420#msg37013420	https://web.archive.org/web/20181113152126/https://bitcointalk.org/index.php?topic=3747961.msg37013420
3EmAMBD2QLWFqnwXPMt4hPhskDUiFj3ApH	livingfree	https://bitcointalk.org/index.php?topic=3078378.msg31739809#msg31739809	https://web.archive.org/web/20181113152130/https://bitcointalk.org/index.php?topic=3078378.msg31739809
0xf684B46EF87B06b82397C561DFB4B051EdF31983	livingfree	https://bitcointalk.org/index.php?topic=2481457.msg25422607#msg25422607	https://web.archive.org/web/20181113152134/https://bitcointalk.org/index.php?topic=2481457.msg25422607
1MdPGRY2o4JCSRvUBUPKVtXPGMruMk6dKl	livingfree	https://bitcointalk.org/index.php?topic=2423344.msg24806967#msg24806967	https://web.archive.org/web/20181113152138/https://bitcointalk.org/index.php?topic=2423344.msg24806967

_________________________________________	_____________________	____________________________	_____________________________________________________________
ETH	ACCOUNTlink	ETH on forum	ARCHIVE
3F2H6A4X2He3by4dDf6qJsTU8HY1Ypu6zy	Anonylz	https://bitcointalk.org/index.php?topic=2020019.msg47813001#msg47813001	https://web.archive.org/web/20181113152700/https://bitcointalk.org/index.php?topic=2020019.msg47813001
19rerDTcfXtUa8FBBTucCzRjnHkmYwzgtU	Anonylz	https://bitcointalk.org/index.php?topic=2436243.msg24987070#msg24987070	https://web.archive.org/web/20181113152703/https://bitcointalk.org/index.php?topic=2436243.msg24987070
0xD734bf9feA30C045f8dacCB5ee305b782a47bbb1	Anonylz	https://bitcointalk.org/index.php?topic=3479652.msg41706053#msg41706053	https://web.archive.org/web/20181113152706/https://bitcointalk.org/index.php?topic=3479652.msg41706053

_________________________________________	_____________________	____________________________	_____________________________________________________________
ETH	ACCOUNTlink	ETH on forum	ARCHIVE
34EszktjVqz3xtkmE5HKRFGMVTR3uEvgsv	shursight	https://bitcointalk.org/index.php?topic=2020019.msg47809123#msg47809123	https://web.archive.org/web/20181113152710/https://bitcointalk.org/index.php?topic=2020019.msg47809123
0x0AC52c015D298422FEEd47F233918f9c58ab4Fb4	shursight	https://bitcointalk.org/index.php?topic=3132539.msg32410077#msg32410077	https://web.archive.org/web/20181113152713/https://bitcointalk.org/index.php?topic=3132539.msg32410077
3PP5GCFtLZVABWMUMEKyJnB3zjWtxLZDE3	shursight	https://bitcointalk.org/index.php?topic=3132539.msg32410077#msg32410077	https://web.archive.org/web/20181113152713/https://bitcointalk.org/index.php?topic=3132539.msg32410077
1HB4YL6Zorkk8CpPixU71R6BXwyXQ7d7Rq	shursight	https://bitcointalk.org/index.php?topic=2664813.msg28013985#msg28013985	https://web.archive.org/web/20181113152831/https://bitcointalk.org/index.php?topic=2664813.msg28013985
1MMqFY3TCWtYUthqR9vY81dFgVWqLvXAvV	shursight	https://bitcointalk.org/index.php?topic=2528724.msg26513006#msg26513006	https://web.archive.org/web/20181113152835/https://bitcointalk.org/index.php?topic=2528724.msg26513006
14npW9WtN5SmPiJmRXn42KTPeQymHim1Yz	shursight	https://bitcointalk.org/index.php?topic=2430804.msg24884873#msg24884873	https://web.archive.org/web/20181113152838/https://bitcointalk.org/index.php?topic=2430804.msg24884873
1MrarfxEaNdQkPGVHgFvb1pg7zkLXn7i7K	shursight	https://bitcointalk.org/index.php?topic=2211200.msg22276093#msg22276093	https://web.archive.org/web/20181113152842/https://bitcointalk.org/index.php?topic=2211200.msg22276093
0x52D80Cd240E3143D462291DbefDcBeC207A1fAfe	shursight	https://bitcointalk.org/index.php?topic=2068444.msg20653343#msg20653343	https://web.archive.org/web/20181113152845/https://bitcointalk.org/index.php?topic=2068444.msg20653343

[The Sceptical Chymist]

In October 2017 he sold this account and wasn't tagged.
<snip>
Gap in posting November 2016 - October 2017
<snip>
Post gap from August 2015 to March 2017
<snip>
Post gap November 2016 - March 2017

I just scanned this thread here and haven't looked into it fully, but this is more evidence that there was an influx of shitposters/bounty spammers in roughly October 2017, and there seems to have been a big hack before then or some serious account sales as well as a lot of new members joining in order to spam for bounties.

This guy just got banned here (don't know what for yet), and he registered in Oct. 2017, and I've seen a few others like that.  Seems strange to me.  Anyway, I'm going to go back and read the OP here a bit closer.

[coinlocket$]

PROFILE: shursight
ETH: https://bitcointalk.org/index.php?topic=3132539.msg32410077#msg32410077
ARCHIVE: https://web.archive.org/web/20181113152713/https://bitcointalk.org/index.php?topic=3132539.msg32410077

This is can be a bounty abuser, but he probably used account hijack (yes it worked with some tokensuite's managers, they don't look at anything).
Since he used random bitcointalk's profiles I can't find alts but because we have a transaction with others people from the spreadsheet we can suppose he is an abuser.

here the account

Code:

0x0AC52c015D298422FEEd47F233918f9c58ab4Fb4

https://etherscan.io/address/0x0AC52c015D298422FEEd47F233918f9c58ab4Fb4#tokentxns




https://docs.google.com/spreadsheets/d/1q6V0_DXmOOoawUlkGfGjUwVowwjqhBksbgwcthwmej8/edit#gid=1827284077

Wort of redtrust? Call of DTs.

Around 5 others accounts posted here: https://bitcointalk.org/index.php?topic=5068434.msg47867278#msg47867278 have a very similar line of shitposting, joining same campaigns and "btcwallet" but found 0 guilty transactions so far, they are probably alts, not all of them, some but I can't prove it.

[coolcoinz]

As told to op This is everything I've found.
I'm almost 100% sure that some of them are alts (probably 5-6) but I can't proof it, since he is "clever" and he hides himself.
One of them Is a 100% cheater.
<snip>

Thanks for help.

It's my belief that linking addresses is only one of many things that can point to an abuser. People are known to receive red trust for as little as being in control of a bought account, or trying to sell an account.
I'm sure that all these accounts are controlled by the same person, who is most likely involved in the purchase of uszaty43 and hacking of hahahafr. These 2 accounts offer probably the most damning evidence since they were local posters before being hacked/bought and stopped right after, at the same time completely changing their style of posting. They both synched, begun taking breaks from posting at the same time, and even joining the same campaigns on the same day.

Under normal circumstances, the campaign member would start posting after getting in, wouldn't he? None of these accounts have made a single post since applications. I don't see them trying to deny anything. This person most likely owns more accounts and is posting for many different campaigns. This is the reason why he recently got sloppy and used too many accounts in one campaign, probably to increase his chance of getting in, or hedge against the possibility of a campaign he's currently in ending/him being kicked.

There's also one more interesting thing. It's not a group of farmers, but a single person. His posts are identical, and there are some mistakes that keep occuring. Now that I've noticed it, I can find other accounts under his management with ease. Probably 10 min of digging per account would be enough to know if it's him.

[coinlocket$]

Some updates:

GreatOrchid         
   
Transaction 13da9c9001b68d5e4bee03d2ca99b05841ef199e694a92b04c7bf8cd78e1b9e3
https://www.blockchain.com/btc/tx/13da9c9001b68d5e4bee03d2ca99b05841ef199e694a92b04c7bf8cd78e1b9e3
Addresses 1BFg584AWU8CbMjJVVKSJdWHDU3PmdiBkc 19rerDTcfXtUa8FBBTucCzRjnHkmYwzgtU
      
uszaty43         

Transaction c22792bbeb9a504a2a8aaa1030a1c4da3464381f024cdf88930e872d37bb4d9e   
https://www.blockchain.com/btc/tx/c22792bbeb9a504a2a8aaa1030a1c4da3464381f024cdf88930e872d37bb4d9e
Addresses 1FSLt7WbK9aJLvvbk2ieuy3iQ1ytWXofCL 19rerDTcfXtUa8FBBTucCzRjnHkmYwzgtU
         
   
hahahafr         

Transaction 30b838740ab2c80c3d2fbb4ddf65ae650cc465b33be424f3b351f0d0c1f72924
https://www.blockchain.com/btc/tx/30b838740ab2c80c3d2fbb4ddf65ae650cc465b33be424f3b351f0d0c1f72924
Addresses 1N71xosjZFPGZATHUJ7Pkj5J7bb3nyuM4z 1FSLt7WbK9aJLvvbk2ieuy3iQ1ytWXofCL   
      
hahahafr         

Transaction 1cf1645a2a1db6ecac803eb611e51d0b05eba301f4e285c4295a8511158c7dfa
https://www.blockchain.com/btc/tx/1cf1645a2a1db6ecac803eb611e51d0b05eba301f4e285c4295a8511158c7dfa
Addresses 1N71xosjZFPGZATHUJ7Pkj5J7bb3nyuM4z 1FSLt7WbK9aJLvvbk2ieuy3iQ1ytWXofCL
   
Anonylz         
Transaction c22792bbeb9a504a2a8aaa1030a1c4da3464381f024cdf88930e872d37bb4d9e   
https://www.blockchain.com/btc/tx/c22792bbeb9a504a2a8aaa1030a1c4da3464381f024cdf88930e872d37bb4d9e
Addresses 19rerDTcfXtUa8FBBTucCzRjnHkmYwzgtU 1FSLt7WbK9aJLvvbk2ieuy3iQ1ytWXofCL
   

Yes this can prove nothing but, the odds that these address are linked without connections so clearly are very low.

[coolcoinz]

Yes this can prove nothing but, the odds that these address are linked without connections so clearly are very low.

It can prove a lot if you take other things into account.
We have accounts that belonged to different people in the past and were sold in the same year.
They applied into signature campaigns, started posting in a very similar manner, making the same spammy 1-2 sentence posts with the same mistakes.
Next, they took exactly the same break in posting, followed by waking up on the same day and applying to the same signature campaign. They even made the same mistake in personal text when they applied. Now, you've found proof of them sending coins to the same address.
On top of it all, the accounts that we called out did not even try to explain the coincidences. GreatOrchid, hahahafr and uszaty43 are not posting anymore.

[Veleor]

<...>
uszaty43 https://bitcointalk.org/index.php?action=profile;u=326943 used to post in Polish.

Jakby byl to shit to powiedzialbym ze po co kupowac gowno jak mozna samemu naprodukowac... Forma pytania to inna kwestia.Zachecam do zaznajomienia sie z WP.Sama perspektywa Anona to pewny zarobek 500-1000% moze i wiecej.Jakoze to watek ogolnodostepny preferowanym jezykiem jest angielski,wiec rowniez zachecam do poslugiwania sie nim tak aby wszyscy mogli uczestniczyc w dyskusji.

Let me apologise guys ,I wrote some info about Nav@Waldozaur12 and quickly come back into english;)

In October 2017 he sold this account and wasn't tagged.
https://bitcointalk.org/index.php?topic=2074472.msg20726055#msg20726055
and joined a signature campaign right away.
https://bitcointalk.org/index.php?topic=2255703.msg22828542#msg22828542
Did not use Polish since then.
<...>

Another topic where uszaty43 was selling account: https://bitcointalk.org/index.php?topic=1835356 (Archive)

GreatOrchid         
   
Transaction 13da9c9001b68d5e4bee03d2ca99b05841ef199e694a92b04c7bf8cd78e1b9e3
https://www.blockchain.com/btc/tx/13da9c9001b68d5e4bee03d2ca99b05841ef199e694a92b04c7bf8cd78e1b9e3
Addresses 1BFg584AWU8CbMjJVVKSJdWHDU3PmdiBkc 19rerDTcfXtUa8FBBTucCzRjnHkmYwzgtU
      
uszaty43         

Transaction c22792bbeb9a504a2a8aaa1030a1c4da3464381f024cdf88930e872d37bb4d9e   
https://www.blockchain.com/btc/tx/c22792bbeb9a504a2a8aaa1030a1c4da3464381f024cdf88930e872d37bb4d9e
Addresses 1FSLt7WbK9aJLvvbk2ieuy3iQ1ytWXofCL 19rerDTcfXtUa8FBBTucCzRjnHkmYwzgtU
         
<...>

Profile GreatOrchid has been banned: https://bpip.org/profile.aspx?p=GreatOrchid

[coolcoinz]

Profile GreatOrchid has been banned: https://bpip.org/profile.aspx?p=GreatOrchid

Good find, thanks.

He doesn't seem to care and is avoiding the ban by still using his other accounts:

livingfree
https://bitcointalk.org/index.php?topic=5127908.msg50465653#msg50465653

minersday
https://bitcointalk.org/index.php?topic=5128198.msg50463972#msg50463972

Anonylz
https://bitcointalk.org/index.php?topic=5089180.msg50465860#msg50465860

[coinlocket$]

Just adding: http://archive.vn/wip/m5wVV

Main thread: https://bitcointalk.org/index.php?topic=5125884.new#new

Let's see if that thread will stay of he will replies.