Suspicious behaviour [Mr. Magkaisa]

[shasan]

This user (Mr. Magkaisa) has changed the email address recently and asked 500$ on my lending thread. and send a message from a telegram account which name is not matched with his username and the username+name was changed few hours ago:

I think it is suspicious. The more suspicious happened when the user posted on my lending thread about 300$ loan and removed the post which is suspicious too as it can happen by hacking the account without changing the password which has happened for several person in earlier which is available but not enough time to find that out right now.

More important factors:
Changed his wallet to bc1qetmmphwu9kkfvajegzkl6ds59gmshnvpk8velp from bc1q5ye27jxgj6yt5mnn8nk7qpvhtx9df0kqeljkw6 without sign message and just edited instead of creating a new post. And seems to me that it was changed as no one can know the change and we can see it was an old post but the user probably does not know about the edit history.


The user posted a new loan request for about 1000$ so changed his/her mind to 500$ to 300$ and then 300$ to 1000$ but hugeblack said no one would lend 1000$ then changed to 500$ while the title as well as being line not changed which is suspicious to me. The more interesting factor is that the user was told to sign a message by hugeblac from the wallet on Ninjastic but the user does that by a new wallet which has never shown on the ninjastic.

Another thing the wallet address trc-20 used on the loan request is brand new on the forum which has not been used anytime before though there is several old trc-20 wallets.
By the above discussion, it seems to me nothing but the handover of the account and/or hacked account. What do you think?

[jstyler]

I'm seeing some red flags here too. The sudden change of email, multiple wallet changes, inconsistent loan requests, and the fact that the user was told to sign a message with a new wallet that's never been seen on Ninjastic... It's like they're trying to cover their tracks. I'm curious, did you notice if the user's posting history has any other suspicious activity?

[The Cryptovator]

I think it's too early to send a red tag. User questioned posting in the Philippines local board from the beginning and still now. He has been using the Philippines number for Telegram as well. Only changing email and asking for a loan doesn't prove the account has been hacked or changed hand. But it's true his activities are quite suspicious. Neutral feedback would be fine to me, though it fully depends on you. I am just expressing my own opinion. Also, it would be possible he wants a loan and no repayment, meaning a scam. So I will prefer not to lend him without collateral.

[Hazink]

This could possibly be a case of an account hacked. I don't see a reason why someone would sell off an account like this. How much will the buyer pay for it, and what do they think they can achieve with it?

Just imagine the inexperience and unprofessional behaviour of the scammer going through a campaign thread to change an existing wallet even as the wallet is hidden on the spreadsheet. Ninjastick and Locyv tools already got it back up. Secondly, the scammer was not even patient enough to read about your loan application rules, which shows another form of being in a rush to get something and run off, but only to get caught in the act.

I think it's too early to send a red tag. User questioned posting in the Philippines local board from the beginning and still now. He has been using the Philippines number for Telegram as well. Only changing email and asking for a loan doesn't prove the account has been hacked or changed hand. But it's true his activities are quite suspicious. Neutral feedback would be fine to me, though it fully depends on you. I am just expressing my own opinion. Also, it would be possible he wants a loan and no repayment, meaning a scam. So I will prefer not to lend him without collateral.

The suspicions could have been less if the accused person had not made the move of trying to edit out all the old wallet addresses into a new one, which he/she can sign in with. It's not been long since the 1win campaign was paused; ^{edit still active and the user in question still on spreadsheet,} if the account didn't change hands, a benefit of doubt could be given, and the accused could come out and sign in with the old wallet, which is huge. Black has asked him to do it earlier on.

[shasan]

Only changing email and asking for a loan doesn't prove the account has been hacked or changed hand.

The trc-20 wallet changed
btc-wallet changed
telegram name changed
email changed
wallet edited

I think it is enough and the negative tag to show others so that no one allows any loan before the resolution. Once the user signs the message I will edit/delete the feedback as still there is no scam.

User questioned posting in the Philippines local board from the beginning and still now. He has been using the Philippines number for Telegram as well.

It might have happened as the user (new user/hacker) is from the same country. Note there is no post after the loan request which was posted on March 13, 2025, 01:44:56 PM

[Charles-Tim]

Neutral feedback would be fine to me, though it fully depends on you.

The reason I gave him negative trust is not because the account changed hands but more about how he might possibly scam someone of hundreds of dollars worth of coin on this forum.

I have this thread and the other thread on notification. If he has something good to prove and accepted I will remove the negative trust.

[logfiles]

He deserves a negative tag unless if he can prove the account did not change hands by signing a message from the old bitcoin address. Who knows how many other people he is attempting to PM or scam. We shouldn't wait until he scams someone so that we act. The go thing is that @Shasan has noticed the red flags early enough before took the loan. I will probably wait for some few hours for his explanation or signed message.
Anything less than that, I am tag (plus creating a flag).

[shasan]

ISo I will prefer not to lend him without collateral.

I would if the user would be able to prove the ownership by signing a message.
Note: the user was online (telegram) only before few minutes but after the thread created.

I have sent a message to the user via telegram so the user is aware of the thread.

[uchegod-21]

He deserves a negative tag unless if he can prove the account did not change hands by signing a message from the old bitcoin address. Who knows how many other people he is attempting to PM or scam. We shouldn't wait until he scams someone so that we act. The go thing is that @Shasan has noticed the red flags early enough before took the loan. I will probably wait for some few hours for his explanation or signed message.
Anything less than that, I am tag (plus creating a flag).

It is good that shasan is becoming more careful this time around with his business. This could be because of loses he had encountered in his business. Let us wait for the accused to appear here. But it is almost obvious that there is something fishy. Editing loan amount immediately he was told by hugeblack that he can't get such amount  means there's no purpose for loan but to fraud.

[yahoo62278]

He deserves a negative tag unless if he can prove the account did not change hands by signing a message from the old bitcoin address. Who knows how many other people he is attempting to PM or scam. We shouldn't wait until he scams someone so that we act. The go thing is that @Shasan has noticed the red flags early enough before took the loan. I will probably wait for some few hours for his explanation or signed message.
Anything less than that, I am tag (plus creating a flag).

It is good that shasan is becoming more careful this time around with his business.

When you get burned as many times as shasan has, you start learning and either get smarter or stop being a lender.

I would wait and see what the accused has to say, but it looks like you saved yourself from a defaulter IMO.

[shasan]

The accused has online both on telegram as well as bitcointalk forum but there is no response either on the lending post or on the reputation. What is the meaning of it? I think now it is proven that he hacked or bought the account. See the screenshot below:

[Mr. Magkaisa]

Code:

address: bc1q5ye27jxgj6yt5mnn8nk7qpvhtx9df0kqeljkw6
message: Mr. magkaisa for proof for the loan and the account is not hack
-same as the signd message  yesterday,,

new message: Theres nothing to worry about, i Magkaisa and not hacked.
Thankyou.

IBkuQT6/2u6zYULXMxZ49GJ011oipf1ahG/t5+90sFOxIJ+VW0UZZ7F2GyfijweBmofNi/rvzu1ceajgYkDpcRs=

this is the proof for the Old BTC address with signature.
If you need another proof, i can make a transaction on the address too..

im sorry for the changes i made as my computer was compromised

But i hope, this will clear all the accusations about me, let me know if you need more.

[Free Market Capitalist]

Code:

bc1q5ye27jxgj6yt5mnn8nk7qpvhtx9df0kqeljkw6
IBkuQT6/2u6zYULXMxZ49GJ011oipf1ahG/t5+90sFOxIJ+VW0UZZ7F2GyfijweBmofNi/rvzu1ceajgYkDpcRs=

this is the proof for the Old BTC address with signature.

Where is the message? I see an address and a signature but not a message.

[Mr. Magkaisa]

-----BEGIN BITCOIN SIGNED MESSAGE-----
Mr. magkaisa for proof for the loan and the account is not hack
-same as the signd message  yesterday,,

new message: Theres nothing to worry about, i Magkaisa and not hacked.
Thankyou.

Date today March 15 2025
-----BEGIN SIGNATURE-----
address: bc1q5ye27jxgj6yt5mnn8nk7qpvhtx9df0kqeljkw6
signature: HwXKr1wpBlQOctQO2iOCnv+addHDCt1bbp2flPCju+iSVINh8U9V9duSX5VoyW5sjWZoYflDH1ADxPhk1/vWDH0=
-----END BITCOIN SIGNED MESSAGE-----

i make it right,, thanks for the help guys..

pls see this

[hugeblack]

The accused has online both on telegram as well as bitcointalk forum but there is no response either on the lending post or on the reputation. What is the meaning of it? I think now it is proven that he hacked or bought the account.

Are you serious? You were going to give him a $300 loan. I don't know how the lending system works here, but I can't trust $10 to this account.
I think the account has been sold, so signing message won't change anything.

i make it right,, thanks for the help guys..

pls see this

This will avoid negative trust, but it doesn't mean trust in you.
Neutral trust may be necessary.

[Despairo]

-----BEGIN BITCOIN SIGNED MESSAGE-----
Mr. magkaisa for proof for the loan and the account is not hack
-same as the signd message  yesterday,,

new message: Theres nothing to worry about, i Magkaisa and not hacked.
Thankyou.

Date today March 15 2025
-----BEGIN SIGNATURE-----
address: bc1q5ye27jxgj6yt5mnn8nk7qpvhtx9df0kqeljkw6
signature: HwXKr1wpBlQOctQO2iOCnv+addHDCt1bbp2flPCju+iSVINh8U9V9duSX5VoyW5sjWZoYflDH1ADxPhk1/vWDH0=
-----END BITCOIN SIGNED MESSAGE-----

i make it right,, thanks for the help guys..

pls see this

Signature verified.

Have you changed your email? if you didn't change it, the hacker might still able to compromise your account.

You can also explain how you can end up like this, it feels like the hack was targeted to access your account in this forum.

[Mr. Magkaisa]

The accused has online both on telegram as well as bitcointalk forum but there is no response either on the lending post or on the reputation. What is the meaning of it? I think now it is proven that he hacked or bought the account.

Are you serious? You were going to give him a $300 loan. I don't know how the lending system works here, but I can't trust $10 to this account.
I think the account has been sold, so signing message won't change anything.

i make it right,, thanks for the help guys..

pls see this

This will avoid negative trust, but it doesn't mean trust in you.
Neutral trust may be necessary.

I had a transaction before with mr. shasan and i paid it back, i do understand if the loan will be rejected because of the changes in my account.
I also message Mr shasan on his Tele.

- i will be happy if the negative trust will be deleted on my profile and bring back the positive trust Mr. Shasan gave me before.

Sorry for what i cause in the community. But thank you guys. Lesson learned!

Signature verified.

Have you changed your email? if you didn't change it, the hacker might still able to compromise your account.

You can also explain how you can end up like this, it feels like the hack was targeted to access your account in this forum.

Thank you sir, I changed it when my computer was compromised.

[BlackBoss_]

This case can be complicated and in the past, there was discusion on account sellers are ready to sell their Bitcoin wallet / private key so that the account buyers can sign Bitcoin messages too.

I don't say the person who uses this account is not a real owner, but a signed message can be not an enough proof in this case by some coincident activities at the same time on this account.

It can not be a hacked account, but can be a sold account and the new owner has access to that wallet and private keys.

shasan already found risk so don't loan this account is best choice.

[Mr. Magkaisa]

This case can be complicated and in the past, there was discusion on account sellers are ready to sell their Bitcoin wallet / private key so that the account buyers can sign Bitcoin messages too.

I don't say the person who uses this account is not a real owner, but a signed message can be not an enough proof in this case by some coincident activities at the same time on this account.

It can not be a hacked account, but can be a sold account and the new owner has access to that wallet and private keys.

shasan already found risk so don't loan this account is best choice.

https://bitcointalk.org/index.php?topic=5535231.msg65169540#msg65169540

signature is valid.

I own this account, i am not hacked or eveything and i can prove it.

Code:

It can not be a hacked account, but can be a sold account and the new owner has access to that wallet and private keys.

i can prove its not, i am the owner of my wallet. i have a transactions before with Shasan and darkS , and i can use all that wallet to prove it. i made a signature message before but the address i used is the active one but can still use the reserved address though, my computer was compromised that is why i changed everything. is changing those info illegal? i did not expect i will have a loan soon but no worries.

[lovesmayfamilis]

i can prove its not, i am the owner of my wallet.

What happened to your first wallet address? Why were all your posts with this wallet deleted?

https://ninjastic.space/address/bc1qen6t0ent4nc2jstfgrys2ly9tyrpeterfkyp9x

It would be fair if you signed the message from this address. Signing a message from another, later address will not be considered valid, since it is not difficult to sell the wallet itself with its seed phrase along with the account.

Please sign from this wallet: bc1qen6t0ent4nc2jstfgrys2ly9tyrpeterfkyp9x

Besides, you were so excited that you couldn't figure out exactly how much you needed to borrow?
Greed truly corrupts people.