[SCAM] mycryptomixer.com is a scam. They took 0.027 BTC.

[GogetaSSJ3]

Hi, I submitted a transaction of $1380 ( 0.027 btc ) 4 or 5 days ago.
order id was "kj2ra1-2ghc9d-4hcy6f"
I set fee on 3%
Delay was default ( about 2h 30m ).
After these few days "reciever" did not recieve the payment.

Of course i talked to the support. I gave them all the most important info.
And all they can say is that, they can't refund me because "amount is too small".

They minimum for transaction is 0.0030 BTC (you can check this on their website), i sent 0.027 and they say 0.027 is too small because it's not more than 0.03 ( someone in support is not good in math)

I'm gonna upload screenshots from our conversation. They are scam or not good into math.

Conversation : https://i.imgur.com/wkdNBO1.png
Proof that the minimum amount is: 0.0030 : https://imgur.com/plf2T54

Proof of that payment was sent: https://imgur.com/a/5JqKauP

https://www.blockonomics.co/api/tx?txid=c86779857f01011f5e05efba49b9fdb2359d9282a42a3005dcc6bc598299547e

[1714632076]

1714632076

[1714632076]

1714632076

[1714632076]

1714632076

[Slow death]

I went to test:



 

add to the thread:

Scammers Profile Link: https://bitcointalk.org/index.php?action=profile;u=2734674

you can also post on their ANN thread: https://bitcointalk.org/index.php?topic=5235190.0

so he can see your complaint


if 7 days go by without him solving your problem then I suggest you create a flag against him:

https://bitcointalk.org/index.php?action=trust;addflag=2734674

when creating flag choose option 2. it will be the most suitable for your case

[LoyceV]

I can confirm the minimum amount:

Transfer between 0.0030 BTC and 76.2558 BTC to the following address:

Conversation : https://i.imgur.com/wkdNBO1.png

I'll highlight a part of this image:

Above that, they wrote: "we do not provide refunds for too low orders because of high blockchain fees".
If these screenshots are real (and not from a phishing site), asking for another 0.003BTC doesn't make sense (even if the amount would have been too low). That will only add another input and thus increase transaction fees. Don't send them more!

Reminder: downloading and verifying the Letter of Guarantee should be the first thing you do before depositing anything!
Without it, you can't prove anything.

if 7 days go by without him solving your problem then I suggest you create a flag against him:

I wouldn't Support such a Flag. The website offers the possibility to get solid evidence in case of any wrongdoing, so any scam accusation should include this to make a Flag valid.

[zasad@]

https://mycryptomixer.com/blog/getting-started-with-mycryptomixer
"On this page, you will find a field labelled as ‘Letter of Guarantee’. Please download this text file as it acts as an official receipt to your mix transaction details and can be used in the event of a dispute.
Beside the Letter of Guarantee field, you will also see 2 other fields labelled as ‘Order ID’ and ‘MyCryptoCode’ . The Order ID acts as the official receipt number and can be used in the event of a dispute."

Do you have a Letter of Guarantee?
Without this letter, it is impossible to determine whether you used this mixer or a phishing site.
Always keep your Letter of Guarantee until the exchange is complete.

[GogetaSSJ3]

https://mycryptomixer.com/blog/getting-started-with-mycryptomixer
"On this page, you will find a field labelled as ‘Letter of Guarantee’. Please download this text file as it acts as an official receipt to your mix transaction details and can be used in the event of a dispute.
Beside the Letter of Guarantee field, you will also see 2 other fields labelled as ‘Order ID’ and ‘MyCryptoCode’ . The Order ID acts as the official receipt number and can be used in the event of a dispute."

Do you have a Letter of Guarantee?
Without this letter, it is impossible to determine whether you used this mixer or a phishing site.
Always keep your Letter of Guarantee until the exchange is complete.

I have "Order ID", "MyCryptoCode","Reciever address"and deposit address

[Slow death]

https://mycryptomixer.com/blog/getting-started-with-mycryptomixer
"On this page, you will find a field labelled as ‘Letter of Guarantee’. Please download this text file as it acts as an official receipt to your mix transaction details and can be used in the event of a dispute.
Beside the Letter of Guarantee field, you will also see 2 other fields labelled as ‘Order ID’ and ‘MyCryptoCode’ . The Order ID acts as the official receipt number and can be used in the event of a dispute."

Do you have a Letter of Guarantee?
Without this letter, it is impossible to determine whether you used this mixer or a phishing site.
Always keep your Letter of Guarantee until the exchange is complete.

OP can also use "The Order ID" as proof, just as it comes in their rules that you posted and are on their website: " The Order ID acts as the official receipt number and can be used in the event of a dispute. "

I have "Order ID", "MyCryptoCode","Reciever address"and deposit address

that is enough to be able to complain according to his rules.

Reminder: downloading and verifying the Letter of Guarantee should be the first thing you do before depositing anything!
Without it, you can't prove anything.

but according to mycryptomixer.com the "Order ID" serves as proof, at least Is what I understood when they said it can serve in case of dispute

[zasad@]

https://mycryptomixer.com/blog/getting-started-with-mycryptomixer
"On this page, you will find a field labelled as ‘Letter of Guarantee’. Please download this text file as it acts as an official receipt to your mix transaction details and can be used in the event of a dispute.
Beside the Letter of Guarantee field, you will also see 2 other fields labelled as ‘Order ID’ and ‘MyCryptoCode’ . The Order ID acts as the official receipt number and can be used in the event of a dispute."

Do you have a Letter of Guarantee?
Without this letter, it is impossible to determine whether you used this mixer or a phishing site.
Always keep your Letter of Guarantee until the exchange is complete.

I have "Order ID", "MyCryptoCode","Reciever address"and deposit address

It’s too bad that you didn’t save the Letter of Guarantee and didn’t verify that it was signed with this PGP key.
https://mycryptomixer.com/pgp.txt
I will not use this mixer until the answer is posted on this forum.
But I cannot support the accusation of fraud, because this data is not enough.
$ 1,380 is not the amount of money a mixer will ruin its reputation for.

[Slow death]

https://mycryptomixer.com/blog/getting-started-with-mycryptomixer
"On this page, you will find a field labelled as ‘Letter of Guarantee’. Please download this text file as it acts as an official receipt to your mix transaction details and can be used in the event of a dispute.
Beside the Letter of Guarantee field, you will also see 2 other fields labelled as ‘Order ID’ and ‘MyCryptoCode’ . The Order ID acts as the official receipt number and can be used in the event of a dispute."

Do you have a Letter of Guarantee?
Without this letter, it is impossible to determine whether you used this mixer or a phishing site.
Always keep your Letter of Guarantee until the exchange is complete.

I have "Order ID", "MyCryptoCode","Reciever address"and deposit address

It’s too bad that you didn’t save the Letter of Guarantee and didn’t verify that it was signed with this PGP key.
https://mycryptomixer.com/pgp.txt
I will not use this mixer until the answer is posted on this forum.
But I cannot support the accusation of fraud, because this data is not enough.
$ 1,380 is not the amount of money a mixer will ruin its reputation for.

they have a signature campaign here on the forum if I'm not wrong and I told OP to post on their ANN thread and just create a flag if 7 days go by without their problem being solved because I think they will solve this problem without much Headache, because as you said and I agree they will not destroy reputation for a small amount taking into consideration that they are running signature campaign managed by a member of good reputation

Beside the Letter of Guarantee field, you will also see 2 other fields labelled as ‘Order ID’ and ‘MyCryptoCode’ . The Order ID acts as the official receipt number and can be used in the event of a dispute.

I think ‘Order ID’ serves as proof

[LoyceV]

Reminder: downloading and verifying the Letter of Guarantee should be the first thing you do before depositing anything!
Without it, you can't prove anything.

but according to mycryptomixer.com the "Order ID" serves as proof, at least Is what I understood when they said it can serve in case of dispute

OP's order ID shows "We couldn't find this page" and in the screenshot-conversation they say: "After your order expires we have no other information than what was in the letter of guarantee".

I'd say the Order ID can only serve as internal proof, as long as the order hasn't expired. There's no way for anyone to verify it now, and a phishing site could just come up with a similar number.

[Slow death]

Reminder: downloading and verifying the Letter of Guarantee should be the first thing you do before depositing anything!
Without it, you can't prove anything.

but according to mycryptomixer.com the "Order ID" serves as proof, at least Is what I understood when they said it can serve in case of dispute

OP's order ID shows "We couldn't find this page" and in the screenshot-conversation they say: "After your order expires we have no other information than what was in the letter of guarantee".

I'd say the Order ID can only serve as internal proof, as long as the order hasn't expired. There's no way for anyone to verify it now, and a phishing site could just come up with a similar number.

Wow I understand... in this case OP has no choice, he must present the Letter of Guarantee or close the case. it's sad if he lost money and doesn't have the Letter of Guarantee

[zasad@]

I found  MyCryptoMixer.com Signature Campaign
https://bitcointalk.org/index.php?topic=5283705.0

MyCryptoMixer.com spends over $ 1000 per week on advertising on this forum.
It is very reckless to cheat customers for $ 1,380.
Probably need to ask Hhampuz to give mycryptomixer a link to this topic.

[Hhampuz]

I will notify MyCryptoMixer about this thread, they aren't here at the forum regularly but log on a couple of times a week.

However, after quickly looking over this thread, without the Letter of Guarantee I'm not sure anything can be done, they'll most likely say the same. Let's see!

[MyCryptoMixer]

Hello,

I confirm the disclosed receiving address 3Q441kMPSEzPvw3Z7Eex4LM6USi3w8XK43 belongs the MCM.

I am sorry for the misunderstanding in email conversation, you are right and the minimum is 0.003 BTC, not 0.03 BTC. The numbers are very similar and I had a few other messages from users sending 0.0027 BTC and replied on muscle memory. Your transaction SHOULD BE and WAS processed - more on this below.

Because OP have not provided the LoG, I can rely only on the limited information to perform the analysis:

1. MCM received the 0.02699279 BTC on address 3Q441kMPSEzPvw3Z7Eex4LM6USi3w8XK43
2. OP claims the fee was set to 3%
3. OP claims there was ONE output address receiving 100% of the funds
4. Calculated output value for these parameters is 0.02593300 BTC ((0.02699279 * 97%) - 0.00025)
5. OP claim the delay was "default", about 2h 30m
6. MCM do not have a fixed "default" delay, rather randomize it from 2h 1m to 2h 16m
7. MCM knows the input transaction was confirmed in block 670969, at 10:40 UTC
8. MCM expects the output transaction to be confirmed no earlier than 12:40 UTC

Knowing the exact transaction amount, as well as an estimate time, we can search for the outgoing transaction.

I found the outgoing transaction matching all the criteria above:
- output amount is EXACTLY 0.02593300 BTC
- is confirmed not long after 17.02.2021 12:40 UTC
- the input address belongs to MCM

This proves MCM processed the transaction according to the settings disclosed by OP. The destination address in found transaction differs from the one OP sent vie email. I do not know the reason for this, had we have LoG we could confirm whether it was an user error, or a malicious actor's doing. Either way, MCM processed it as requested.

As I hope everyone can see, using the information provided by the OP I was able to find the output transaction associated with the input. Please treat these coins as connected with the input. Such analysis can be performed by anyone with basic blockchain knowledge, using only the information available in OP.

To avoid compromising your privacy, I strongly suggest using MULTIPLE destination addresses with random fee and delay. Transactions with only one destination are fairly easy to track when the fee is disclosed by the sender.

[GogetaSSJ3]

It's my outgoing transaction:
https://www.blockchain.com/btc/tx/dd690c408907ad667521320aba6043e17df02dd423f491fb82fe2dbea79962c0

The amount and the rest are correct. Yes i was using only one receiver address.

For sure i don't have any malicious software because i almost everyday do BTC payments. Even pasted receiver address four times to be sure.
 i tried repeat process few times, i pasted receiver address and in the LoG good address comes up.

[TryNinja]

The order is gone but the letter is still there (why?). I hope OP doesn't mind me posting this here (it was already posted above anyways).

http://mymixerxtukle6mo.onion/api/order/kj2ra1-2ghc9d-4hcy6f/letter

Code:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

{
  "comment": "Never share your Letter of Guarantee with third parties. Attach this document to our Support Team only when you are facing problems with your mixing order. The Letter of Guarantee is only available during the active mixing operation. After the completion all data about your order will be deleted automatically from our database.",
  "createdAt": "2021-02-17T10:36:30.632Z",
  "orderId": "kj2ra1-2ghc9d-4hcy6f",
  "currency": "BTC",
  "serviceFee": "3.00%",
  "feePerAddress": "0.00025 BTC",
  "depositAddress": "3Q441kMPSEzPvw3Z7Eex4LM6USi3w8XK43",
  "destinations": [
    {
      "address": "13qZpTgh9U9Red9BJxK4aUqnkMEpa1ykgE",
      "share": "100.0%",
      "delay": "123 minutes"
    }
  ]
}
-----BEGIN PGP SIGNATURE-----
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=KNOL
-----END PGP SIGNATURE-----

Amount was received and spent: https://www.blockchain.com/btc/tx/dd690c408907ad667521320aba6043e17df02dd423f491fb82fe2dbea79962c0

[LoyceV]

The order is gone but the letter is still there (why?).

Good find! That doesn't make sense: either the letter was created after the scam report was created, or the server stores data longer than it should:

24 hours upon successful mixing, all logs are automatically and permanently deleted from our databases.

Judging by MyCryptoMixer's post, they don't know the LoG is being kept. That's bad.

[MyCryptoMixer]

Hello,
Due to the recent network load, I decided to switch the order time from 24 hours to 72 hours. A lot of users wrote over the email about their transactions not being processed, as they arrived after 24 hours from order creation. All the reported cases were resolved either thanks to the LoG or by checking whether the deposit address belonged to MCM and doing the analysis described above.

To prevent this from happening, on 05.02.2021 13:53 UTC, I decided to update order validity time from 24 hours to 72 hours, 3 days. Answering multiple emails about transactions lost due to order termination was not something I have time to do. The change was not yet propagated to the frontend, as I was not sure whether it is a temporary or permanent solution. The LoG is generated independently of the frontend, this is why it was available for full 72 hours instead of the 24 hours the frontend page was available for.

After reading the TryNinja post, not having much time at the moment, I decided to shut down the backend immediately in case something serious have happened. The backend was effectively offline from 22.02.2021 06:33 UTC to 23.02.2021 14:05 UTC, when I made sure no leaks are present.

No security was compromised. Each order is assigned unique id, it consists of 18 alpha-numeric lowercase characters, this gives us 36 ^ 18 possible combinations, roughly 1 and 28 zeros so you can imagine the number. This is enormous value, even when compensating for multiple orders being available at any time and considering finding the order id of single of them as a success, the chances of guessing and testing the order id is almost nonexistent.

The LoG generated by TryNinja is valid and confirms the transaction was successful.

As for @Cowboy310 I will post a response in his thread directly.