By Raul Delapena Setiawan 
Security analysts at BitMEX Research have issued an urgent warning to early Bitcoin investors regarding a sophisticated new scam campaign targeting long-dormant cryptocurrency wallets, particularly those dating back to 2011. The fraudulent scheme attempts to exploit vintage addresses by injecting deceptive transactions and misleading communications directly into the blockchain, aiming to trick unsuspecting holders into relinquishing access to their digital assets or confidential personal information.
According to insights shared by the research firm, the perpetrators of the scheme are utilizing OP_Return outputs—an optional field embedded within Bitcoin transactions capable of carrying arbitrary strings of data—to attach malicious messages to historical addresses. By leveraging this on-chain mechanism, the attackers bypass traditional communication channels like email or messaging apps, delivering their fraudulent narratives directly to blockchain explorers and wallet interfaces that display transaction histories.
The scale and audacity of the campaign became apparent when researchers identified a high-profile target: the famous "1Feex" wallet. This heavily monitored address currently holds approximately 80,000 Bitcoin, a massive fortune believed by blockchain analysts to have originated from the historic breach of the Mt. Gox cryptocurrency exchange in the early days of the industry. In this specific instance, the attackers crafted a specialized transaction that directed curious observers and potential victims toward a fraudulent website meticulously designed to impersonate Salomon Brothers, the prominent and defunct Wall Street financial institution.
Fake Legal Claims and Coercive Deadlines
Upon visiting the fraudulent website, visitors are greeted with a fabricated legal notice asserting that the targeted wallet is legally classified as "lost or abandoned." The site then employs high-pressure tactics, instructing supposed rightful owners to step forward and prove their legitimate claim. To accomplish this, the portal prompts victims to execute an on-chain message signature using their private keys or to input sensitive personal and financial documentation through an online contact form hosted on the malicious platform.
To heighten the sense of urgency, the notice imposes a strict deadline, warning that if no responsive action or claim is registered by October 5, the wallet will officially and permanently be deemed legally abandoned by the fake entity, creating a false narrative of impending financial loss.
However, a closer examination by industry experts has revealed that the entire operation lacks any structural or legitimate connection to the real Salomon Brothers or its historic corporate leadership. While the fraudulent website attempts to establish an aura of credibility by publishing a list of genuine individuals who previously worked at the investment bank during the 1980s, investigators have confirmed that none of these former professionals maintain any association with the newly emerged, spurious entity orchestrating the crypto scheme.
Furthermore, BitMEX Research noted striking operational and tactical similarities between this current campaign and previous, controversial efforts associated with figures such as Calvin Ayre, who historically funded past legal maneuvering centered around the exact same 1Feex Bitcoin address. This historical overlap has fueled speculation within the broader cryptocurrency community regarding the origins and motivations behind the ongoing blockchain messaging.
Community Warnings and the Rise of Social Engineering
As details of the campaign circulate across social media and security forums, experienced community members have stepped forward to debunk the technical validity of the scam’s premises. Analysts have pointed out that a genuine wallet owner looking to prove active control over an address would simply need to move a minor, negligible amount of Bitcoin to demonstrate activity, rather than executing risky signatures or handing over sensitive details to an unverified third-party web portal.
These observations have led security professionals to categorize the campaign as a specialized social engineering attack. Rather than executing a direct technical hack or exploiting a software vulnerability in wallet code, the scammers rely entirely on psychological manipulation, manufactured legal authority, and intimidation to extract critical information or private keys from individuals who may have lost touch with the technical realities of the modern cryptocurrency landscape.
In light of these findings, BitMEX Research and other cybersecurity advocates have reiterated clear guidance for the crypto community, strongly advising all holders—particularly those managing dormant or legacy accounts—to completely ignore these on-chain messages, avoid interacting with suspicious contact forms, and refrain from disclosing any personal information or private keys under any circumstances.
The emergence of this intricate fraud highlights the continually evolving threat landscape facing digital asset investors as malicious actors deploy increasingly creative methods to part users from their holdings. This campaign arrives amid a broader surge in illicit crypto activity. During the first half of 2025 alone, hackers and cybercriminals successfully stole over $2.1 billion across 75 separate security incidents, representing a concerning 10% increase in total losses compared to the corresponding period in 2024, as state-backed groups and opportunistic syndicates ramp up their attacks across the global digital economy.
Asro 
Layla Zulfa 
Muslim