[Case #001]BITCOIN SCAM INVESTIGATOR - The Betmoco Incident

[BTCian]

The Betmoco Incident
Investigate. Follow the evidence. Reach your own conclusion.


Prize Pool: $20

• 1st place: $10

• 2nd place: $5

• Best Discovery: $5

THE CASE

In early February 2026, a relatively new crypto casino called Betmoco was active on Bitcointalk.
The casino promoted itself through the forum and ran promotional campaigns, including a $25,000 leaderboard.
Then things started going wrong.
Users began reporting delayed or missing withdrawals.
On February 11, Betmoco published a statement claiming that an individual had gained unauthorized access to its withdrawal infrastructure and that approximately 95% of the assets held in its hot wallet had been illicitly withdrawn.
Betmoco said the incident was under investigation and that external cybersecurity and blockchain specialists had been brought in.
Forum members immediately started asking for evidence.
The casino subsequently disappeared from the forum and its website went offline.
A separate Bitcointalk scam-accusation thread was opened by affected users, with claims of more than $30,000 in unpaid funds.

But here's the question: What actually happened?

Was this:
A) A genuine security breach?
B) An operational/financial failure?
C) An exit scam?
D) Something else?
Or is the available evidence insufficient to reach a confident conclusion?


YOUR MISSION

Your job is to investigate the Betmoco incident using publicly available information.
You are not being asked to repeat what other users believe.
You are being asked to build your own case.
Your submission should attempt to reconstruct what happened and explain which interpretation is best supported by the evidence.


WHAT YOU SHOULD INVESTIGATE

You don't have to answer every question below, but strong investigations will probably cover several of them.

1. Timeline
Reconstruct the events.
Create a timeline with links to the relevant posts.

2. The alleged hot-wallet incident
Betmoco stated that approximately 95% of its hot-wallet assets were illicitly withdrawn.
Investigate this claim. Blockchain evidence can be extremely valuable here.

3. Withdrawal complaints
Investigate the reports from users.
Try to establish what happened before and after the alleged security incident.

4. Betmoco's statements
Collect the important statements made by Betmoco on Bitcointalk.
Don't simply quote them but compare them against independently verifiable evidence.

5. The people behind the project
Investigate the publicly available information about Betmoco.
If you discover a possible connection, prove it before presenting it as fact.
A similarity is a lead, not proof.

6. Bitcointalk history
This case has a substantial forum history.
Try to find information that wasn't obvious from the first few pages.


IMPORTANT: FACT ≠ ALLEGATION ≠ SPECULATION


HOW THE WINNER WILL BE SELECTED

• Evidence & sourcing - 30 points
• Investigation depth - 20 points
• Blockchain/on-chain research - 20 points
• Timeline reconstruction - 10 points
• Reasoning & conclusion - 15 points
• Presentation - 5 points

WHAT MAKES A WINNING INVESTIGATION?

You don't need to conclude that Betmoco was a scam.
You don't need to agree with the majority.
You don't even need to reach a definitive conclusion.
A submission can win by showing:
"The popular explanation is probably wrong because..."
or:
"There isn't enough evidence to determine whether this was an external hack."
or:
"These three pieces of evidence strongly support explanation X."
Evidence beats confidence.
A carefully researched answer that reaches an unpopular conclusion is preferable to a confident accusation with no evidence.


BONUS: BEST DISCOVERY

I'm also awarding $5 for the Best Discovery.
This doesn't necessarily go to the person who submits the best overall investigation.
It can go to someone who discovers one particularly interesting piece of evidence.
Examples:

• An important transaction

• A previously overlooked Bitcointalk post

• An old version of a website

• A significant timeline inconsistency

• A previously unnoticed project connection

• A piece of evidence that changes the interpretation of the case


You can win the Best Discovery even if you don't finish first overall.


DEADLINE

Submission deadline: 7 days after this case is published.
Please post your investigation directly in this thread.


SUBMISSION FORMAT

You don't have to follow this exactly, but this structure is recommended:

Investigator:
Your Bitcointalk username
Bitcoin address:(bech32)
TL;DR:
Your conclusion in 3–5 sentences.
Timeline:
Important events + sources
Key evidence:
#1, #2, #3...
Blockchain investigation:
Addresses / transactions / findings
Project investigation:
Relevant findings
What Betmoco claimed:
Summary
What the evidence shows:
Your analysis
Alternative explanations:
What else could explain the events?
Final conclusion:
Your best-supported explanation
Sources:
Links to your sources

RULES

1. No doxxing
2. No baseless accusations
3. No plagiarism
4. AI is allowed as a research assistant, but your submission must contain your own investigation and reasoning.
5. Don't contact or harass anyone involved
7. One investigation per participant


IMPORTANT

This is an investigation, not a witch hunt.
The purpose of this case is to determine what the available evidence actually tells us.
If the evidence supports Betmoco's explanation, say so.
If it contradicts their explanation, explain why.
If the evidence is inconclusive, that's also a valid conclusion.


START HERE

Betmoco ANN / discussion - https://bitcointalk.org/index.php?topic=5571889.0
Betmoco's security-incident statement - https://bitcointalk.org/index.php?topic=5571889.700
Betmoco Scam Accusation - https://bitcointalk.org/index.php?topic=5573846.0

These are starting points, not the answer.
The best investigators will probably find information beyond these pages.


THE QUESTION

Was Betmoco the victim of a security breach...
...or was something else happening?
You have 7 days.
Follow the evidence.

Good luck, investigators.


Learn more : [Season 1]Bitcoin Scam Investigator - Investigate Real Cases & Win Prizes

[Cinexa]

I don't want the reward, and I am not posting for the prize.
I got help from my AI agent to dig into the data. So, here is the timeline, and my personal opinion.

1) - On 31 Jan, they said balances were not touched.

Important clarification:

• This was a request-based (DDoS-style) attack only.
  
• No systems were breached.
• No user data, balances, or personal information were accessed or exposed.
  

The same post also introduced the 24h “anti-abuse” hold that started the withdrawal delays.

2) On 6 Feb, they denied a liquidity / missing-funds problem.

Funds are not missing, frozen, or “gone.”
This is a processing bottleneck — not a liquidity issue.

That deadline was missed. So were the later ones.

3) On 8 Feb, they were still claiming payouts were happening.

We have sent out another batch of payments today. 
At this moment, the remaining list is down to only 13 users.

4) On 11 Feb they suddenly changed the story

One individual was able to gain unauthorized access to our withdrawal infrastructure through methods that are currently under investigation. As a result, approximately 95% of the assets held in our hot wallet were illicitly withdrawn.

They never posted a hot-wallet address, TXID, signed message, or forensic report. A real drain is trivial to prove on-chain. This one never was.

5) On 12 Feb they denied an exit scam and asked for the flag to be removed before paying.

Betmoco is not scamming anyone. There is no exit scam, and there is no intention to disappear. Yes, it is correct that we use VOIP services — this is not unusual for online businesses and does not indicate fraudulent activity. We ask the community this: once everything has been clarified and all payments have been completed, can we agree that the flags and accusations will be removed? We are committed to resolving this transparently and professionally. We fully intend to continue operating. This situation has been a bump in the road — nothing more

6) On 19 Feb the “email us to get paid” channel was dead.

Betmoco team asked the players to send them email to get paid, but several players reported the mail bounced immediately and after 12 hours:
(see replies from CoffeeSipper64 / xLays / kyan972 / elro123 their mailserver never came online)

https://bitcointalk.org/index.php?topic=5571889.msg66426768#msg66426768
My conclusion

It was a exit scam. They never posted a hot-wallet address, TXID, or a signed message. A real drain can be proved by showing the hot wallet address.
They did not posted any address, or txid to support their claim. They simply closed their entire server including the mail server with no intention to stay in touch with the players. So, It's B and C at the same time.

[BTCian]

Your findings look good @Cinexa.
Results would be shared after 19th of Aug.
Thanks for participating.


Just 4 more days left.
I'm really expecting a few more folks to participate.

[yahoo62278]

Your findings look good @Cinexa.
Results would be shared after 19th of Aug.
Thanks for participating.


Just 4 more days left.
I'm really expecting a few more folks to participate.

As per usual, least around here, some like to submit applications or reviews at the last minute. Maybe it's paranoia or fear of someone improving on what they turn in. We have some good investigators that hang out on this board. Could be about the money too but I was hoping the low amount wouldn't be a factor.

[BTCian]

As per usual, least around here, some like to submit applications or reviews at the last minute. Maybe it's paranoia or fear of someone improving on what they turn in. We have some good investigators that hang out on this board. Could be about the money too but I was hoping the low amount wouldn't be a factor.

I guess some people prefer to keep their work under wraps until the deadline and a few might need some extra time to put together a solid investigation. Hopefully, I should get a few more investigators jumping in before the deadline.

To deal with that paranoia or fear, I'm thinking to make a few changes in the rules like submitting the findings via PM rather than posting here. I'll come up with something case #002 onwards.

Yes, it might be the money too. I don't mind increasing the prize amount if more investigators start spending time investigating. Let's see how this ones goes.

[Haunebu]

Am not participating, but I just wanted to appreciate what you are trying to do here op. Betmoco was a confirmed scammer from the initial stages itself. They basically faked their Anjouan license which AI was able to detect pretty quickly after checking properly.

That itself speaks volumes. Their promotions were never feasible either. They proved how important crypto gambling site licenses truly are.

[DireWolfM14]

But here's the question: What actually happened?

Was this:

You forgot the most likely explanation;

Z) Sheep being led to the slaughter.

Shiny new casinos with zero reputation should never be trusted with deposits.  If you win something from their promos and they actually let you withdraw it, then don't deposit any more than the withdrawal.  Repeat until they've been around for at least a year, and even then remain suspicious.  Don't ever let your suspicion subside.  Never.  If you do deposit your own money, assume you'll lose it.  If you can't afford to lose it, don't deposit it.