ILuckyGuyI is part of an alt farm that has been cheating contests for years

[nutildah]

A few days ago I ran across an account that has the exact same posting style, structure and time patterns as ILuckyGuyI, and that is jakdanyel.

Both accounts tend to write posts between 6-10 minutes apart, about the same subjects (sports gambling; particularly football), are Turkish, and they don't post on Wednesdays.

jakdanyel:


ILuckyGuyI:


ILuckyGuyI only started posting on Wednesdays after his signature ban on Aug 6th. If we rerun the 90 day heatmap minus the days between Aug 6-28, it looks like this:



If you compare the timestamps of the posts of these users, you'll notice they virtually never overlap. It is always jakdanyel writing a string of posts 6-10 minutes apart, often followed by a break, and then ILuckyGuyI writing a string of posts 6-10 minutes apart. They've been posting in this pattern for the better part of a year. Here is what a very typical day looks like:

=== 2026-03-23  (2 accounts active) ===
16:39:08   user 1155166   thread 5556344
16:46:47   user 1155166   thread 1159855   (+7.7 min)
16:54:30   user 1155166   thread 5457586   (+7.7 min)
17:02:29   user 1155166   thread 1877785   (+8.0 min)
17:19:41   user 1385147   thread 5562147   (+17.2 min)
17:27:51   user 1385147   thread 5546191   (+8.2 min)
17:35:12   user 1385147   thread 5545447   (+7.3 min)

The break was only 17.2 minutes on this day. Another typical day months later:

=== 2026-05-30  (2 accounts active) ===
15:33:19   user 1155166   thread 5350807
15:42:53   user 1155166   thread 5457586   (+9.6 min)
15:50:31   user 1155166   thread 5545447   (+7.6 min)
15:57:36   user 1155166   thread 5267086   (+7.1 min)
18:12:09   user 1385147   thread 5350807   (+134.6 min)
18:19:16   user 1385147   thread 5361302   (+7.1 min)
18:34:55   user 1385147   thread 1220979   (+15.7 min)
18:50:39   user 1385147   thread 5457586   (+15.7 min)

This time the break is a bit more than 2 hours. Months later:

=== 2026-07-16  (2 accounts active) ===
12:44:16   user 1155166   thread 5522671
12:51:55   user 1155166   thread 5431360   (+7.7 min)
12:59:46   user 1155166   thread 5584565   (+7.8 min)
13:12:33   user 1155166   thread 5176196   (+12.8 min)
13:19:58   user 1155166   thread 1159855   (+7.4 min)
18:35:56   user 1385147   thread 5438071   (+316.0 min)
18:46:46   user 1385147   thread 5431360   (+10.8 min)
18:56:29   user 1385147   thread 5585294   (+9.7 min)
19:07:56   user 1385147   thread 5522671   (+11.4 min)

A 6+ hour break this time, but the pattern is generally the same, jakdanyel following ILuckyGuyI. Up to a few days before the sigban:

=== 2026-08-03  (2 accounts active) ===
09:43:21   user 1155166   thread 5349274
09:58:31   user 1155166   thread 5584049   (+15.2 min)
10:14:46   user 1155166   thread 5588524   (+16.2 min)
10:35:55   user 1155166   thread 5588552   (+21.1 min)
17:24:43   user 1385147   thread 5585294   (+408.8 min)
17:43:26   user 1385147   thread 5466394   (+18.7 min)
17:58:39   user 1385147   thread 5546191   (+15.2 min)

Same pattern, although posts are slightly more spaced apart, and the break is longer. He's been doing this since December of last year, at least with these 2 accounts, anyway:

=== 2025-12-23  (2 accounts active) ===
16:52:56   user 1155166   thread 5546676
17:00:46   user 1155166   thread 5507597   (+7.8 min)
17:10:16   user 1155166   thread 1159855   (+9.5 min)
17:21:12   user 1155166   thread 5569305   (+10.9 min)
17:50:53   user 1385147   thread 5562147   (+29.7 min)
17:59:20   user 1385147   thread 5545447   (+8.4 min)
18:06:57   user 1385147   thread 5546191   (+7.6 min)

Literally hundreds of days follow the same pattern.

Now for the fun part. Both accounts are connected to a huge account farm that was first uncovered here.

Accounts Connected: deepocean (uuid = 685117),
...
sokusimafuckusima (uuid = 554879),
...
kekrops (uuid = 987413),
...
Proof: https://etherscan.io/tokentxns?a=0x5AC67A1ff15C974d597c5eb7ddaf617143b27b21&p=1

main accounts:
deepocean / 0x5AC67A1ff15C974d597c5eb7ddaf617143b27b21 / https://docs.google.com/spreadsheets/d/1LzblL_c1dJErlGdK6_EyWJEOYbNf5tk_7QWPY60r6M0/edit#gid=136155410 / signature
...

alt accounts:
sokusimafuckusima / 0xB4cb6642802DD90C9B904aaFdc2E86CC7Ac891a1 / https://docs.google.com/spreadsheets/d/1yd7bd94LuppHsBzoICGYJj3cEuf-eA8AoJPyhmvo45s/edit#gid=632761 / signature
sokusimafuckusima to deepocean
txid: https://etherscan.io/tx/0x2c00d8c162cdf069879df63412b15767172baebdff185b5919706ae27a380e9a

It was added to by lovesmayfamilis years later:

4 Accounts Connected
Accounts Connected: (Note: Banned shown in red / Inactive in Blue)

1.deepocean red trust
2.dikistutmazsabri
3.gribalenfeksiyon
4.akm3535

First let's connect deepocean to jakdanyel:

Username   : deepocean
Language      : turkish
Portfolio/experience/previous translations links

https://bitcointalk.org/index.php?topic=2041356.0
do you want to reserve whitepaper translation Y/N : Y
Do you want to reserve website translation Y/N : Y
ETH address : 0x5AC67A1ff15C974d597c5eb7ddaf617143b27b21

#JOIN

Bitcointalk username: jakdanyel
Forum rank: Full Member
Posts count: 290
ETH address: 0x2065C265541d3C92CD8C7591b1b41B7Faa01a61F

In this transaction, deepocean sends 0.003 ETH to jakdanyel.

Also sending ETH to jakdaniel is ForeverFener, who is banned:

#JOIN

Bitcointalk username: ForeverFener
Forum rank: Sr.Member
Posts count: 558
ETH address: 0x954Ef063FFbF0a18cD29E9eB58f7d2e49bE0673E

Mentioned earlier was sokusimafuckusima:

alt accounts:
sokusimafuckusima / 0xB4cb6642802DD90C9B904aaFdc2E86CC7Ac891a1 / https://docs.google.com/spreadsheets/d/1yd7bd94LuppHsBzoICGYJj3cEuf-eA8AoJPyhmvo45s/edit#gid=632761 / signature
sokusimafuckusima to deepocean
txid: https://etherscan.io/tx/0x2c00d8c162cdf069879df63412b15767172baebdff185b5919706ae27a380e9a

Here is how ILuckyGuyI ties in:

#PROOF OF REGISTRATION
Forum Username: ILuckyGuyI
Forum Profile Link: https://bitcointalk.org/index.php?action=profile;u=1385147
Telegram Username: @Tourer12
Participated Campaigns: Signature Campaign
ETH Wallet Address: 0x127f56367e17478fE1098bC925a1F07d5Aa716d9

In this transaction sokusimafuckusima sends 0.001 ETH to ILuckyGuyI. Here is a graphical representation of how various accounts in the farm are connected:



So we can see these aren't one-off transactions, its one master account farmer moving ETH from account to account to cover gas fees to sell/swap bounty tokens. One account that managed to avoid getting tagged, Expecto, has participated in several contests alongside jakdanyel and ILuckyGuyI.

Bitcointalk Username: Expecto
Bitcointalk Profile Link: https://bitcointalk.org/index.php?action=profile;u=2090170
Campaigns you apply: Signature
ERC20 address: 0x114Cc7a4C58aF389599c7109b97aAa3e4B75F07d

Here are all 3 accounts participating in the same contest:

Game 1:  6'  2-1 Liverpool
Game 2:  6'  2-1 Arsenal

Game 1:  20'  3-1 Liverpool
Game 2:  20'  3-1 Arsenal

Game 1:  12'  2-1 Liverpool
Game 2:  12'  4-1 Arsenal

Here's one more contest where all 3 accounts participated (I'm sure there are others). There are several where only ILuckyGuyI and jakdanyel participate, like this one. All 3 accounts stopped participating in the same contests by 2022. I am not sure if this person has other accounts currently manipulating the same contests, but I wouldn't be surprised if they did.

[ILuckyGuyI]

I haven't heard anything that's whackier than this. You are accusing me of a transaction that happened 10 years ago?

The fee sent in the transaction made is 0.001 ether which is worth 0.1 dollar. Hasn't it ever crossed your mind that people can send ether to each other for fee? 

[FinneysTrueVision]

The fee sent in the transaction made is 0.001 ether which is worth 0.1 dollar. Hasn't it ever crossed your mind that people can send ether to each other for fee?  

There are a hundred different ways in which you can get gas. It’s very unusual to ask another person to fund your wallet with gas.

All of these addresses were funded at the same time as yours with the exact same amount of ETH and all of them received tokens from the same airdrop. This is classic airdrop sybil behavior.



You also swept ETH from your address to the same address that was funded by sokusimafuckusima.



You are clearly the same person as sokusimafuckusima. The onchain evidence connecting jakdanyel to the same farm is damning enough on its own. There isn’t any plausible way to explain why their posting schedule matches yours so closely other than it being your alt account.

[Don Pedro Dinero]

You are clearly the same person as sokusimafuckusima. The onchain evidence connecting jakdanyel to the same farm is damning enough on its own. There isn’t any plausible way to explain why their posting schedule matches yours so closely other than it being your alt account.

He's following the same strategy as CryptoYar and others in similar situations: denying the evidence, hoping that, with a little luck, his account won't be ruined.

The problem is that they probably have more accounts in the farm that are low ranks, and now that they can't use these anymore, they'll probably rank them up. But it sucks for them because it'll take some time. And with these patterns that nutildah has discovered, they're going to have to work harder to make sure their alts don't get caught.

[Rikafip]

He's following the same strategy as CryptoYar and others in similar situations: denying the evidence, hoping that, with a little luck, his account won't be ruined.

And that usually has the diametrically opposite result, as even more of their alt accounts get discovered once forum sleuths start digging.

The problem is that they probably have more accounts in the farm that are low ranks, and now that they can't use these anymore, they'll probably rank them up.

Its almost certain that there are more accounts connected to him, and probably even high ranking ones seeing how easy is to farm merit.

It's an interesting coincidence that these accounts don't usually post on Wednesdays. I wonder how many more accounts are active on the Turkish board with that same posting pattern. 

[Lucius]

If you dig deep enough and are persistent in what you do, there is no doubt that you will find things like this. I have written this several times in the past years, but in case someone decides that it is time to seriously deal with alt farms, I think that at least a third of all active accounts would be banned - of course when I say seriously I mean checking IP logs because most of those who "work" on the forum do so without hiding their IP address.

Anyway, good job - keep up the good work and clean up the forum.

[Shishir99]

I think I read something like "This community is way smaller than you think it is" a few months ago, which was posted by either Og or Vod. Looking at these cases, I am feeling like at least 25% of the current active forum accounts have a previous forum background, and they had a dark past. A lot of high-ranked forum accounts are getting caught with multiple accounts and abuse. They are connected to the accounts that have bad forum records. I sometimes feel like that sometimes the forum admins probably laugh seeing all those connected IPs that are posting in the same thread, talking to themself, and cheating the forum. Anyway, Good catch nutildah.

Do you guys mind checking this thread?

ILuckyGuyI's judgement is Trusted by:
1. jeremypwr (Trust: +58 / =2 / -0) (DT1! (13) 6272 Merit earned) (Custom Trust list) (BPIP)
2. LFC_Bitcoin (Trust: +33 / =0 / -0) (DT1! (22) 12132 Merit earned) (Custom Trust list) (BPIP)
3. CLS63 (Trust: +7 / =0 / -0) (1845 Merit earned) (Custom Trust list) (BPIP)

[Bitcoin_Arena]

It's very sad that greed overpowers someone to an extent of cheating in contests, yet there are so many out there. I checked the contest rewards, and I really don't understand why they had to do this. Don't some people just love fun and at the same time being fair to the other participants?
The reason I don't think much about participating in contests is because of the so many suspicious accounts involved in them, especially low-ranking accounts.

[Rikafip]

Speaking of accounts that have very similar posting habits as those two mentioned by OP, there are 2 more that fits the profile: emrecemsan and Distraction.

Both of those accounts don't post on Wednesdays, they are mainly active in Turkish and Gambling board and they have a very similar writing style as those two accounts (similar formatting, relatively short sentences, use of ellipsis etc) and their posting time don't overlap. emrecemsan is the one usually starting the day and posting first, before jakdanyel. The other one, Distraction, tends to write at the end of day, after ILuckyGuyI (not always though).

Anyway, might be worth looking into the addresses to find proper connections.

[AakZaki]

I haven't heard anything that's whackier than this. You are accusing me of a transaction that happened 10 years ago?

But you made the latest cheating 5 years ago, and one of your farm accounts is still active today. Isn't that worth cleaning, in order to make room for honest accounts?
What's more, your brain has been divided into other accounts, as seen in your merit gains over the last 120 days.

After all, your account is doing Ban evasion, since the ForeverFener account has been banned. In this part alone, you have violated the rules. So you don't deserve to be here because you are a liar and a cheater.

The fee sent in the transaction made is 0.001 ether which is worth 0.1 dollar. Hasn't it ever crossed your mind that people can send ether to each other for fee? 

Sending ether to each other repeatedly for the same amount is a pattern of farm accounts. 

[LFC_Bitcoin]

Oh dear, and to think I stuck up for this guy recently. I feel betrayed, I have removed him from my trust list.

[DireWolfM14]

If you dig deep enough and are persistent in what you do, there is no doubt that you will find things like this. I have written this several times in the past years, but in case someone decides that it is time to seriously deal with alt farms, I think that at least a third of all active accounts would be banned - of course when I say seriously I mean checking IP logs because most of those who "work" on the forum do so without hiding their IP address.

Having alt accounts isn't the problem, and if someone can manage whole farm of alts without cheating I don't know why any of us would care.  Only admins have access to IP logs, and there's no forum restriction on having alts.  Are you suggesting that policy change, and have staff track down and ban alt accounts?

[PrivacyG]

I honestly do not understand how some of you people can write Topics connecting people with out losing your self in the middle of it.  It is definitely a great job from all of you who do connect them.  I tried to link some accounts and I lose my self every time in the middle of it, not knowing where I started and how I got where I am.  You do probably need to have at least a few more brain cells than I do.

-----

If you dig deep enough and are persistent in what you do, there is no doubt that you will find things like this.

I really think a lot of it is almost at a surface level.  The more you dig, the more suspicious links you will find but every time I tried to link some accounts, they were so evident that I doubt they even tried to hide it.

-----

Having alt accounts isn't the problem, and if someone can manage whole farm of alts without cheating I don't know why any of us would care.  Only admins have access to IP logs, and there's no forum restriction on having alts.  Are you suggesting that policy change, and have staff track down and ban alt accounts?

Maybe alternative accounts should not be banned but what about all users who are using the same IP should be signature banned if one of them is?  That would immediately kill a lot of account farms, and hiding their IP would not work either because of the evil fee they would keep having to pay.

[nutildah]

Speaking of accounts that have very similar posting habits as those two mentioned by OP, there are 2 more that fits the profile: emrecemsan and Distraction.
...
Anyway, might be worth looking into the addresses to find proper connections.

I think you're right about that, and there is actually 1 more account that falls perfectly into alignment with the others: CLS63

Let's add all 3 new accounts to the days I posted timestamps of above:

=== 2025-12-23  (5 accounts active) ===
07:36:26   user 1124954   thread 5552008
09:45:00   user 1217918   thread 5546191   (+128.6 min)
09:52:37   user 1217918   thread 1220979   (+7.6 min)
10:00:03   user 1217918   thread 5349274   (+7.4 min)
10:07:35   user 1217918   thread 5569305   (+7.5 min)
16:52:56   user 1155166   thread 5546676   (+405.4 min)
17:00:46   user 1155166   thread 5507597   (+7.8 min)
17:10:16   user 1155166   thread 1159855   (+9.5 min)
17:21:12   user 1155166   thread 5569305   (+10.9 min)
17:50:53   user 1385147   thread 5562147   (+29.7 min)
17:59:20   user 1385147   thread 5545447   (+8.4 min)
18:06:57   user 1385147   thread 5546191   (+7.6 min)
18:14:33   user 929299   thread 1393430   (+7.6 min)
18:22:40   user 929299   thread 1220979   (+8.1 min)
18:30:07   user 929299   thread 5569291   (+7.5 min)
18:40:14   user 929299   thread 5569131   (+10.1 min)
20:26:45   user 1124954   thread 5406159   (+106.5 min)
20:37:37   user 1124954   thread 2542231   (+10.9 min)
20:48:20   user 1124954   thread 5438071   (+10.7 min)
21:06:03   user 1124954   thread 5438071   (+17.7 min)
21:20:11   user 1124954   thread 5466394   (+14.1 min)

=== 2026-03-23  (5 accounts active) ===
10:10:31   user 1217918   thread 5350807
10:22:10   user 1217918   thread 1220979   (+11.7 min)
10:30:22   user 1217918   thread 5507597   (+8.2 min)
16:39:08   user 1155166   thread 5556344   (+368.8 min)
16:46:47   user 1155166   thread 1159855   (+7.7 min)
16:54:30   user 1155166   thread 5457586   (+7.7 min)
17:02:29   user 1155166   thread 1877785   (+8.0 min)
17:19:41   user 1385147   thread 5562147   (+17.2 min)
17:27:51   user 1385147   thread 5546191   (+8.2 min)
17:35:12   user 1385147   thread 5545447   (+7.3 min)
17:42:27   user 929299   thread 5368690   (+7.2 min)
17:51:03   user 929299   thread 1393430   (+8.6 min)
17:59:34   user 929299   thread 5354490   (+8.5 min)
21:35:46   user 1124954   thread 5431360   (+216.2 min)
21:42:55   user 1124954   thread 5406159   (+7.2 min)
21:51:26   user 1124954   thread 5417743   (+8.5 min)

=== 2026-05-31  (5 accounts active) ===
09:26:00   user 1217918   thread 5350807
09:33:13   user 1217918   thread 5466394   (+7.2 min)
09:40:18   user 1217918   thread 5545447   (+7.1 min)
09:47:54   user 1217918   thread 5546676   (+7.6 min)
17:42:40   user 1155166   thread 5556344   (+474.8 min)
17:50:49   user 1155166   thread 1220979   (+8.2 min)
17:57:55   user 1155166   thread 5545447   (+7.1 min)
18:06:16   user 1155166   thread 1159855   (+8.3 min)
18:10:30   user 1385147   thread 5350807   (+4.2 min)
18:19:31   user 1385147   thread 5438071   (+9.0 min)
18:26:37   user 1385147   thread 5408229   (+7.1 min)
18:36:18   user 929299   thread 5546191   (+9.7 min)
18:43:34   user 929299   thread 5457586   (+7.3 min)
18:50:39   user 929299   thread 5350807   (+7.1 min)
18:58:15   user 929299   thread 5556344   (+7.6 min)
20:12:35   user 1124954   thread 5431360   (+74.3 min)
20:26:41   user 1124954   thread 5583815   (+14.1 min)

=== 2026-07-16  (5 accounts active) ===
09:44:08   user 1217918   thread 5585294
09:51:12   user 1217918   thread 5431360   (+7.1 min)
09:59:11   user 1217918   thread 1220979   (+8.0 min)
12:44:16   user 1155166   thread 5522671   (+165.1 min)
12:51:55   user 1155166   thread 5431360   (+7.7 min)
12:59:46   user 1155166   thread 5584565   (+7.8 min)
13:12:33   user 1155166   thread 5176196   (+12.8 min)
13:19:58   user 1155166   thread 1159855   (+7.4 min)
13:26:15   user 1124954   thread 5431360   (+6.3 min)
18:05:02   user 929299   thread 5522671   (+278.8 min)
18:13:04   user 929299   thread 1220979   (+8.0 min)
18:24:14   user 929299   thread 5584503   (+11.2 min)
18:35:56   user 1385147   thread 5438071   (+11.7 min)
18:46:46   user 1385147   thread 5431360   (+10.8 min)
18:56:29   user 1385147   thread 5585294   (+9.7 min)
19:07:56   user 1385147   thread 5522671   (+11.4 min)
21:33:39   user 1124954   thread 5584503   (+145.7 min)
21:44:37   user 1124954   thread 1220979   (+11.0 min)
21:56:41   user 1124954   thread 5522671   (+12.1 min)

=== 2026-08-03  (5 accounts active) ===
08:57:13   user 1217918   thread 5590108
09:16:17   user 1217918   thread 5589260   (+19.1 min)
09:31:22   user 1217918   thread 5347904   (+15.1 min)
09:43:21   user 1155166   thread 5349274   (+12.0 min)
09:58:31   user 1155166   thread 5584049   (+15.2 min)
10:14:46   user 1155166   thread 5588524   (+16.2 min)
10:35:55   user 1155166   thread 5588552   (+21.1 min)
17:24:43   user 1385147   thread 5585294   (+408.8 min)
17:43:26   user 1385147   thread 5466394   (+18.7 min)
17:58:39   user 1385147   thread 5546191   (+15.2 min)
18:07:34   user 929299   thread 5584503   (+8.9 min)
18:35:41   user 929299   thread 5589120   (+28.1 min)
19:09:03   user 929299   thread 5354490   (+33.4 min)
19:35:42   user 1124954   thread 5584503   (+26.6 min)
19:51:04   user 1124954   thread 5589260   (+15.4 min)
20:07:34   user 1124954   thread 5283576   (+16.5 min)

^^
by this point, all accounts have switched spacing their posts from 6-10 minutes apart to 15+ minutes

Looks like he decided to stop posting on Wednesdays in May 2026. Here is the timestamp heatmap for all 5 accounts for the period of May 1 - July 19 (the day signature bans began):

emrecemsan

jakdanyel

ILuckyGuyI

Distraction

CLS63


You can see the pattern generally goes emrecemsan->jakdanyel->ILuckyGuyI->Distraction->CLS63

The overlap between ILuckyGuyI and Distraction is thicker than the other accounts, and the gap between emrecemsan and jakdaniel suggests there could be a 6th account. So this is a full-time job for this guy, and he only takes Wednesdays off.

I'm open to hearing any possible explanation or counterpoint as to how this type of thing could happen organically, or in any other way in which one person wasn't running 5 accounts.

[jeremypwr]

You can see the pattern generally goes emrecemsan->jakdanyel->ILuckyGuyI->Distraction->CLS63

Really hope this isn't the case...
Regardless, I've seen enough to remove ILuckyGuyI from my trust list

[CLS63]

Hello. I'm denying your claim. Even though it make so much sense about posting on Wednesdays could you tell me the reason why I made posts on Wednesdays on the last 2 weeks? I have to use VPN as it's forbidden to enter the forum in Turkey. As I can't enter the forum from my work PC I have to make my posts on late hours at night.

[FinneysTrueVision]

Speaking of accounts that have very similar posting habits as those two mentioned by OP, there are 2 more that fits the profile: emrecemsan and Distraction.

emrecemsan used the same Telegram username as deepocean.
https://bitlist.co/search?content=Cvip32&limit=20

Distraction shared exchange deposit address 3MJxYs14wZLaM79pa9Qn6EJT4YEY4MWjs2 with CLS63

bech32 BTC Address for payouts: bc1qtqywqs6j0hxlwdhta0pg3nc6y93fd08kqsydvf

bech32 BTC Address: bc1qzu0wjjggruvv4zka2pnj3mhc2qxpx0q68fda7g

CLS63 also shared deposit address 0x56D0292cD7B968132208dE428eE526De792A9A85 with Spack17.

Wallet Address[BSC - BEP20]: 0xF39a1121B0a4de914b8665bcC937eD8Af0BCE934

Eth Wallet Address: 0x0479c44a3265D975FB930Bb527AA6DFff416DFA7

There are similar account wake up times between CLS63, Distraction, Spack17, emrecemsam, and jakdanyel.

CLS63 woke up on 8/30/2020 5:21:23 PM
Distraction woke up on 8/30/2020 10:41:55 PM
Spack17 woke up on 8/29/2020 8:22:23 AM
emrecemsam woke up on 8/30/2020 5:17:30 PM
jakdanyel woke up on 8/31/2020 6:26:53 AM

deepocean and jakdanyel also have similar wake up times in 2025.

deepocean 10/18/2025 10:41:04 AM
jakdanyel 10/16/2025 10:46:53 AM

emrecemsam and Distraction are both currently participating in the Rainbet signature campaign. Most of these accounts are also among each others top merit senders.