bitcoinpaperwallet[.]com is a scam

[ksfromasia2]

Everyone: I got scammed by this website. bitcoinpaperwallet steals the generted private keys. I was able to dox the person behind it. I have his IP address, name, hotmail, gmail account ID, mobile number, country of residence (Canada).

There are numerous storeies online of people losing their BTC to this scammer. Is there anything that we can do? Pls contact me if someone can help.

[ranochigo]

Should go to Scam Accusations/Investigations, it's not a technical support thread. Make sure you don't dox the wrong person, the ownership was changed before it became a phishing site.

Anyhow, it seems to be the site which generates address with weak/predictable RNGs and thus allows it to be compromised easily. Don't think you can really do much about it, unless you find the current owner.

[LoyceV]

I had a Crazy idea for a community project: empty compromised paper wallets before, but there were too many complications involved.
It's really sad to see a good project being sold to a scammer this way. Maybe the previous owner can help you find the current owner.

[ksfromasia2]

Should go to Scam Accusations/Investigations, it's not a technical support thread. Make sure you don't dox the wrong person, the ownership was changed before it became a phishing site.

Anyhow, it seems to be the site which generates address with weak/predictable RNGs and thus allows it to be compromised easily. Don't think you can really do much about it, unless you find the current owner.

hi. i did not dox the previous owner, but the current owner, as on Aug-2020

[seoincorporation]

Is a terrible idea to make a paper wallet online, the risk of losing your coins is high. So, you should learn the right way to make a paper wallet.

You can run vanitygen on your PC, this way is more secure, but not 100% secure because if your PC is compromised then you can lose your coins. So, you can use the paranoid way... Just install VMware or any virtualization softer, then install Linux on it and after that install VanityGen to generate the paper wallets.

https://en.bitcoin.it/wiki/Vanitygen

[LoyceV]

You can run vanitygen on your PC, this way is more secure, but not 100% secure because if your PC is compromised then you can lose your coins. So, you can use the paranoid way... Just install VMware or any virtualization softer, then install Linux on it and after that install VanityGen to generate the paper wallets.

If you don't trust your host OS, you shouldn't trust the guest OS either. Rebooting from a LIVE Linux DVD without internet access is already much better.

[ranochigo]

Is a terrible idea to make a paper wallet online, the risk of losing your coins is high. So, you should learn the right way to make a paper wallet.

You can run vanitygen on your PC, this way is more secure, but not 100% secure because if your PC is compromised then you can lose your coins. So, you can use the paranoid way... Just install VMware or any virtualization softer, then install Linux on it and after that install VanityGen to generate the paper wallets.

https://en.bitcoin.it/wiki/Vanitygen

The problem here is the insertion of malicious code into the source code itself which compromises the RNG. Unless you inspect it yourself, any scripts will be vulnerable to this. The issue here is not with the machine being online. I don't see the point of using a vanity address generator when OP was specifically generating a paper wallet and vanity gen AFAIK doesn't convert the keys into a paper wallet by itself.

[ksfromasia2]

Is a terrible idea to make a paper wallet online, the risk of losing your coins is high. So, you should learn the right way to make a paper wallet.

You can run vanitygen on your PC, this way is more secure, but not 100% secure because if your PC is compromised then you can lose your coins. So, you can use the paranoid way... Just install VMware or any virtualization softer, then install Linux on it and after that install VanityGen to generate the paper wallets.

https://en.bitcoin.it/wiki/Vanitygen

The problem here is the insertion of malicious code into the source code itself which compromises the RNG. Unless you inspect it yourself, any scripts will be vulnerable to this. The issue here is not with the machine being online. I don't see the point of using a vanity address generator when OP was specifically generating a paper wallet and vanity gen AFAIK doesn't convert the keys into a paper wallet by itself.

Everyone, thanks for these words of wisdom. None of this answers the question in hand. Can anyone help with the investigation to bring down the scammer

[LoyceV]

Can anyone help with the investigation to bring down the scammer

Did you report it to the police yet?

[ksfromasia2]

Can anyone help with the investigation to bring down the scammer

Did you report it to the police yet?

yes, but zero progress from them.

[HeroicLife]

I started this thread: https://www.reddit.com/r/Bitcoin/comments/ktydef/help_me_shut_down_the_bitcoinpaperwalletcom_scam/

ksfromasia2, can you PM Me to tell me how you doxed the owner, and the info you found?