Uncovered a scammer who defaulted loan

[target]

Arshe26 = https://bitcointalk.org/index.php?action=profile;u=1236731
EzBreezy =  https://bitcointalk.org/index.php?action=profile;u=1917808
Daboy_lyle = https://bitcointalk.org/index.php?action=profile;u=1781008
And maybe more

Seeing how many users were named in this bounty campaign spreadsheet of Unifinity Project, this project meant to really attract attention.
So I started checking out the ANN thread posted by Arshe26 and find out he posted details of him here as Post of Authentication.   Upon investigation, it leads me to the profile of a user who defaulted loan not so long ago. Though the amount isn't outstanding, there is a scam accusation against him in this thread https://bitcointalk.org/index.php?topic=5180720.20

Arshe26 of reddit posted these ETH addresses 0x18Fa37De16f1136b4c07a658A931f457BDF0cCfA and 0x68c5eEe1e362A17f4ABb384963b27d6b986C9AdC
here and a POA again here https://bitcointalk.org/index.php?topic=3291633.msg34413844#msg34413844

Cut a long story, I found out EzBreezy who also owns this ETH 0x18Fa37De16f1136b4c07a658A931f457BDF0cCfA
is an alt of Arshe26 who  is also an alt of Daboy_lyle who has the loan balance in this scam thread

To prove EzBreezy is Daboy_lyle, he posted this 1EmwjyF9fu6NQJV3yJTgecAEXJhLcP6kEj here. https://bitcointalk.org/index.php?topic=4979978.msg44913561#msg44913561 (http://archive.is/gY2bg)

And Daboy_lyle also posted the wallet this thread https://bitcointalk.org/index.php?topic=5035874.0 with a sign message of this wallet 1EmwjyF9fu6NQJV3yJTgecAEXJhLcP6kEj  (http://archive.is/1DP5d)

Arshe26 is the author of more translated topics and ANN and ICO threads.

Edited: To insert links.

[suchmoon]

Arshe26 of reddit posted these ETH addresses 0x18Fa37De16f1136b4c07a658A931f457BDF0cCfA

You might be on to something but where did Arshe26 post this address? If you mean they posted it on reddit then you should provide a link to the reddit post(s) and also a link between the reddit account and the bitcointalk account (I believe the 0x68c... address is the link but I'm not sure).

[target]

Arshe26 of reddit posted these ETH addresses 0x18Fa37De16f1136b4c07a658A931f457BDF0cCfA

You might be on to something but where did Arshe26 post this address? If you mean they posted it on reddit then you should provide a link to the reddit post(s) and also a link between the reddit account and the bitcointalk account (I believe the 0x68c... address is the link but I'm not sure).

Here in his reddit comments http://archive.is/GDqX0

I think this post of his POA will link him to his reddit account to his bitcointalk account where he posted this 0x68c5eEe1e362A17f4ABb384963b27d6b986C9AdC which is also in his reddit post.

[suchmoon]

Here in his reddit comments http://archive.is/GDqX0

I think this post of his POA will link him to his reddit account to his bitcointalk account where he posted this 0x68c5eEe1e362A17f4ABb384963b27d6b986C9AdC which is also in his reddit post.

Yes, that seems to be the case. I added red trust for the two alts that didn't have it yet. There are also merit transactions and trust feedback between the alts.

[YOSHIE]

Arshe26 = https://bitcointalk.org/index.php?action=profile;u=1236731
EzBreezy =  https://bitcointalk.org/index.php?action=profile;u=1917808
Daboy_lyle = https://bitcointalk.org/index.php?action=profile;u=1781008

And maybe more

Looks suspicious, after I look around, they have another Alt.

Proof:

EDIT: Continuing my investigation

Daboy_Lyle uses telegram ID @lyledark10 here

#Join
Bitcointalk username : Daboy_Lyle
TELEGRAM AIRDROP : @lyledark10
FACEBOOK AIRDROP : lyledark10
TWITTER AIRDROP : @lyledark10

(Archive: http://archive.fo/MGzE3#selection-3831.19-3831.30)


and same telegram ID was used by lyledark10 here

$5 per sms. Contact me on telegram @lyledark10

(Archive: http://archive.fo/UAESC)

Lyledark10 profile has been autobanned according to https://bpip.org/profile.aspx?p=lyledark10 and hence he has been evading ban since then with Daboy_Lyle account. According to BPIP, he also sent merits to Daboy_Lyle account

Proof:

This is the full list list of users who use the same wallet to the suspect accounts on this signature, REMEMBER only accepted, the not accepted can be found on the bounty thread and sadly not on the spreadsheet.

1193994      Koro-Sensei       3C5SLDY4weQNzsL8fMvMWrNc7ELyPrUXY7
942755      radjie       16ftNDpr2Qb1ye4EXX6GMmvdsNtS6yyc4Z
970225      bitzizzix       1AUr5FyZJvEL8eV97moDV16WnLQDTUX5Xj

1070655      cydrix       35tekgtk3SEzD6zcbEWTf1V3dmEuwQzczW
1933064      maxreish       3MgNkFEzB7Ru2oyQP6yQhW7DCwfn3spqgP
1781008      Daboy_Lyle       33TyVkHTqic4UNVB4UQ6QLLmXzaqmRY7F9
1166529      lablab03       3BQLWLpTLxLdJEEiRNMGUxtv5wNu2YsGfa
1087763      Lpim01       3FtRtT7ov8qxgH7MmeoXfmBSBM3m4Tesus
808431      HatakeKakashi       3NGityzUMdjiu4EqQ3XkYrVvGdUD1KSVGa
819270      Oasisman       331skcjh76u5Qt2hAbabb8Zv8EMXtNkggL
715343      Kelvinid       3FtRtT7ov8qxgH7MmeoXfmBSBM3m4Tesus
929006      Ararbermas       373Qqthime5MmSG6v1CEvLKPaxnV4sRXiL

Perhaps, this can add a little evidence that they are connected to other Alts.


add one more Alt, based on Twitter used by: @Arshe26.

1. Epsky012

#Proof of authentication post

Bitcointalk username : Arshe26
Bitcointalk Profile Link : https://bitcointalk.org/index.php?action=profile;u=1236731;sa=account
Telegram Username : @Arshelene2
Twitter Username: @Iamepepkulet
Facebook Profile Link : https://www.facebook.com/Arshelene2014

[ archive ]

Telegram Username: @epepkulet
Twitter Profile URL: https://twitter.com/iamepepkulet
Facebook Profile URL: https://www.facebook.com/tedmorning.daybreak

[ archive ]

[adultbit]

Try to reach him or any of his relatives tru facebook, below is his real account:
www.facebook.com/bermasdavidlyle
www.facebook.com/rozeluh.9 (GF)

Another Info:
TheBitcoinExplorer is his alt. I will also state here the accounts connected to him, as far as I remembered he told me about that.

Connected to User:
Ararbermas
intoy_victor
Koro-Sensei

Evidence: User Daboy_Lyle just named those account as his relatives (maybe an alt) Source:Messenger (Convo)

Thanks for sharing some informations regarding his alt accounts and his personal account including his GF. I appreciate your help and other DT members here .

User hasnt been online in 2 weeks. Looks like he is already giving up the account and likely posting with one of his alt accounts.

Hello yahoo. Can I ask if there is a possibility that his other alt accounts will be negged too because of what happened?? If proven that the accounts that @cabalism13 said are his alt accounts since in the past years, there are some DT members who are giving neg trust to alt accounts? Thanks
P.S.: I also saw in the spreadsheet of Mintdice that one of his "probably alt" Ararbermas is currently in the campaign.

undeniable proof of his alts and I have no problem tagging them.

The quote above is from the scam accusation with his facebook account. Is that his real name here?

Searching "lyledark10" will give you results going to this youtube video https://www.youtube.com/watch?v=hO3Xo5loSUo
with an email lyledark10@gmail.com in the description. But the email in the channel's about page is lyle@icolistview.com
https://www.youtube.com/channel/UC8JhOAtBkTpXtdv8I3mdsTw/about

Turns out this is an ico scammer, finally explains why that arse manages bounty campaigns n the past.

https://imgur.com/qQ0coKA

But the Bounty manager in this Unifinity Project is Edraket31. See here
Edraket31 must be a bought account. It could be if you see this https://forum.fok.nl/topic/2382922/3/50

[cabalism13]

The quote above is from the scam accusation with his facebook account. Is that his real name here?

The previous one has been change to:
https://www.facebook.com/davidlyle.bermas.9

Edit:

...
Arshe26 is the author of more translated topics.

The accusation is false (connection to DaboyLyle)
Reason: The owner of that account is an employee of Binance and well-known in our community also an admin to my FilCom.
Source: Binance Filipino
Blockchain Digital Asset Exchange
https://t.me/BinanceFilipino

[bL4nkcode]

Cut a long story, I found out EzBreezy who also owns this ETH 0x18Fa37De16f1136b4c07a658A931f457BDF0cCfA

Can you link where EzBrezzy posted that address too or any proof that he owned it?

What I can see is a proof of connection between EzBreezy and Daboy_lyle but the connection of them to Arshe26 is none.

[adultbit]

Cut a long story, I found out EzBreezy who also owns this ETH 0x18Fa37De16f1136b4c07a658A931f457BDF0cCfA

Can you link where EzBrezzy posted that address too or any proof that he owned it?

What I can see is a proof of connection between EzBreezy and Daboy_lyle but the connection of them to Arshe26 is none.

Don't look away. Its all there approved by suchmoon.

Don't do that. Not kool man. Its not kool. I can see Daboy_lyle is author of the kenkarlo website but his profile is gone.

[bL4nkcode]

Don't look away. Its all there approved by suchmoon.

I'm asking a proof not an approval of anyone.

Don't do that. I can see Daboy_lyle is author of the kenkarlo website but his profile is gone.

So, you mean, once an author of an article of the site is equivalent to the admin/owner of the website?

Its you who said that.

C'mon, I'm asking so give me an answer.

EzBrezzy, has the same address linked on his profile itself.

http://archive.fo/3WLcB

Oh, didn't see that. Thanks.

[adultbit]

Don't look away. Its all there approved by suchmoon.

I'm asking a proof not an approval of anyone.

Don't do that. I can see Daboy_lyle is author of the kenkarlo website but his profile is gone.

So, you mean, once an author of an article of the site is equivalent to the admin/owner of the website?

Its you who said that.

[hacker1001101001]

Cut a long story, I found out EzBreezy who also owns this ETH 0x18Fa37De16f1136b4c07a658A931f457BDF0cCfA

Can you link where EzBrezzy posted that address too or any proof that he owned it?

What I can see is a proof of connection between EzBreezy and Daboy_lyle but the connection of them to Arshe26 is none.

EzBrezzy, has the same address linked on his profile itself.

http://archive.fo/3WLcB

[cabalism13]

I can see Daboy_lyle is author of the kenkarlo website but his profile is gone.

I really don't know where to laugh here. Just a bit more and almost all of these are going to be false accusations.
Seriously, @adultbit don't talk like you know something.
Kkenkarlo website has nothing to do with this. The owner of that website is not Daboy Lyle for he is just a student who can't support his needs, now tell me how can he even establish his own website?
The owner of DaboyLyle is just a kiddo and a student.

Compared to the owner of Arshe26 and the owner of the website that you're talking about.

Don't look away. Its all there approved by suchmoon.

Approved what? suchmoon did agree but the evidences are quite short so the Negative will be surely be removed to Arshe26. But the other two will stay.

Reading back again, there's no such approval and it's a whole different thing.

[Arshe26]

I think this EzBreezy account is trying to ruin my reputation. You see that address is mine 0x18Fa37De16f1136b4c07a658A931f457BDF0cCfA

But can you show that he used that particular address on bounty using my eth address?? If yes, then bring it on, I guess I could have some free work bounty if that's the case. He got connection with Daboy_lyle but I dont have anything to do with them.    If that loan default guy is me why the hell I couldnt pay 0.005btc?

add one more Alt, based on Twitter used by: @Arshe26.

#Proof of authentication post

Bitcointalk username : Arshe26
Bitcointalk Profile Link : https://bitcointalk.org/index.php?action=profile;u=1236731;sa=account
Telegram Username : @Arshelene2
Twitter Username: @Iamepepkulet
Facebook Profile Link : https://www.facebook.com/Arshelene2014

[ archive ]

Telegram Username: @epepkulet
Twitter Profile URL: https://twitter.com/iamepepkulet
Facebook Profile URL: https://www.facebook.com/tedmorning.daybreak

Telegram Username:  @epepkulet
Twitter Profile URL:  https://twitter.com/iamepepkulet
Facebook Profile URL: https://www.facebook.com/tedmorning.daybreak
ERC20 Address: 0x42085c03EFCa371a385089A26321Ac47c72340E7

The address used here by this guy is different from the posted address I been using before any nor has any connection to my address. This is possibly he trying to used my twitter profile for joining airdrop. Scammer usually copying other's information using different address.

I am holding funds amounting to 3.5million pesos for Binance Charity which entrusted to me and I am linking to a loan default of 0.005btc?  It doesnt make any sense.

[marlboroza]

But can you show that he used that particular address on bounty using my eth address?? If yes, then bring it on, I guess I could have some free work bounty if that's the case. He got connection with Daboy_lyle but I dont have anything to do with them.  

No problem, here you go:

https://etherscan.io/tokentxns?a=0x18Fa37De16f1136b4c07a658A931f457BDF0cCfA

This address is used for Urunit signature campaign at some point, and as you can see there is Urunit token transaction to this address, to be more specific, 21,862 tokens in this transaction https://etherscan.io/tx/0xe6b2fdf8939dafc67ad41d53976c1f26973181cdaf740b4a72eb621380ede17e.

According to spreadsheet https://docs.google.com/spreadsheets/d/1ypn_mnMqZ8hhOD4Z6BRLvKKwdXJYzpx556cCG7s8U6s/edit#gid=1572635615, this address should have received 10833 tokens:



So, numbers don't match, 11029 tokens are missing

Yet again, someone claimed twitter bounty using the same address (https://docs.google.com/spreadsheets/d/1ypn_mnMqZ8hhOD4Z6BRLvKKwdXJYzpx556cCG7s8U6s/edit#gid=1227577233):



11029 missing-tokens-mystery resolved  
(spreadsheets are archived)
EDIT

I have found another alt account, but this is becoming interesting, apparently newbie account Zykexia joined Covex signature bounty but in spreadsheet it clearly says Junior member rank (https://docs.google.com/spreadsheets/d/1YofTv0GNCidMdKHXxe1X_gobEwgakiuD5mKormzPSZI/edit?ts=5b5f9083#gid=1843670526 archived http://archive.is/Z3NAC). It was few months after merit system was introduced so account should  be newbie because it has 0 merits, but that's OK because bounty was managed by...wait for it...bounty manager Arshe26.

2557 token transaction to Arche26's address https://etherscan.io/tx/0x040e99a775ae7034879a831854a17a01d62320364ad49580e311a8c54eb1b134 matches numbers from spreadsheet:


EDIT 2

Now, why would that be all, account Zykexia used this twitter account several times:

Twitter Link: https://twitter.com/flyingmachine36

Twitter Link: https://twitter.com/flyingmachine36

Twitter user URL: https://twitter.com/flyingmachine36

Facebook user URL: https://www.facebook.com/rheamae.dayandayan

The same twitter was used by account...you will never guess this...

My profile link: https://www.facebook.com/janezena.escobal.7

Twitter Profile Link = https://twitter.com/flyingmachine36

 

Account FlyingMachine360 used this twitter here, here and here as well.

[suchmoon]

Don't look away. Its all there approved by suchmoon.

First of all, I didn't approve or disapprove anything, nor does anyone need my approval. I looked at the evidence and it looked solid enough to me and with marlboroza's findings there is even less doubt. But anyone should make their mind up on their own. Don't take my or anyone's word for it.

I think this EzBreezy account is trying to ruin my reputation. You see that address is mine 0x18Fa37De16f1136b4c07a658A931f457BDF0cCfA

An account inactive since January 2019? 17 months waiting for someone to see the address on their profile, that must be the slowest attempt to ruin someone's reputation. Or more likely it's your alt.

I also suspect that you're evading a ban.

[marlboroza]

^ There are 6 connected accounts at the moment, it looks like Arche26 cheated campaign with that newbie account but I really didn't look into this any further.

I also suspect that you're evading a ban.

Avirunes mentioned connection between accounts lyledark10(this account is banned) and Daboy_Lyle, btw, they used the same address:

Btctalk name: lyledark10
Rank: Jr. Member
Current post count: 58
BTC Address 3JpdkzrV1sKjQnFJDTzat2xBtczpsXpq9i
Wear appropriate signature: yes

Sir yahoo! Please.

Voted
3JpdkzrV1sKjQnFJDTzat2xBtczpsXpq9i

archived http://archive.is/LoFeZ#selection-1497.0-1497.34

[cabalism13]

Okay, nothing to do here I guess? There has been a lot of digging going on, and by that time I don't have any connections. But one thing for sure now, Daboy_lyle isn't Arshe26.

Maybe there's some issues back then but the connection between two users is the only thing I can't agree with for I already met Mam Arshe26 during the Binance Meeting back on 2019.

Source: Binance Filipino Community
Feedback will stay:

Counter to suchmoon for False Accusation. I simply both know the accused and the scammer.
The (owner of Arshe26) accused was an employee of Binance and don't have any connection to David Bermas Lyle.

And don't get me wrong on this. My whole point is the connection between the two not the other things that has been implied to the user.

Will remove feedback until they give the appropriate feedback.

[marlboroza]

Okay, nothing to do here I guess? There has been a lot of digging going on, and by that time I don't have any connections. But one thing for sure now, Daboy_lyle isn't Arshe26.

What about 2 other accounts? Newbie member tried to frame signature campaign manager by having newbie account enrolled in signature campaign and signature for junior member on it, receiving bounty reward to Arshe26's address, the same as account EzBreezy received bounty payment to Arche26's address? 

[suchmoon]

And don't get me wrong on this. My whole point is the connection between the two not the other things that has been implied to the user.

Fair enough. There are some other possibilities (e.g. accounts could have been bought/sold) however I can't think of a scenario that would make Arshe26 look honest in this situation. I'm open to changing my mind if new facts come to light.