By Suro Senen 
Analysts at BitMEX Research have raised a critical security alarm regarding a sophisticated new scam campaign targeting early Bitcoin holders, specifically focusing on dormant wallets dating back to the pioneering days of cryptocurrency in 2011.
According to the blockchain intelligence and research firm, the scheme relies on exploiting long-inactive addresses by injecting false transactions and misleading data messages directly into the blockchain. This is achieved using OP_Return outputs—an optional field within Bitcoin transactions specifically designed to carry arbitrary user data, which malicious actors are now repurposing to distribute fraudulent prompts to unsuspecting holders.
In one of the most prominent documented cases uncovered by analysts, the attackers targeted the well-known "1Feex" wallet. This specific address holds approximately 80,000 Bitcoins, a massive sum widely believed to have been associated with the historic theft from the defunct Mt. Gox cryptocurrency exchange during its early years of operation. The attackers crafted a specialized blockchain-based message that directs any curious or unsuspecting observers to a fraudulent external website. This deceptive web portal is engineered to closely impersonate the historical Wall Street firm Salomon Brothers, attempting to project an aura of established corporate and legal authority.
Fake Legal Claims and High-Stakes Pressure Tactics
The fraudulent website presents visitors with a fabricated legal notice, aggressively claiming that the targeted wallet is legally classified as "lost or abandoned." To heighten the urgency and pressure on potential targets, the site invites supposed rightful owners to step forward and prove their claim. This trap requires victims to either sign an on-chain cryptographic message using their private key or submit sensitive personal documentation through an online web contact form hosted on the fraudulent portal.
To add a layer of psychological pressure and false consequence, the notice explicitly states that if no formal response or claim is received by October 5, the wallet will be permanently and legally deemed abandoned under fictitious regulatory provisions.
However, security investigators and analysts at BitMEX have thoroughly discredited the operation, warning that the website shows absolutely no credible link to the real Salomon Brothers or its historic leadership structure. While the fraudulent platform cunningly displays a list of real, verifiable individuals who once worked at the prestigious firm during the 1980s, none of these former professionals have any association with this new and spurious entity.
The research platform noted that the operational approach closely mirrors an earlier, controversial scam associated with high-profile figures such as Calvin Ayre, who previously funded legal action involving the exact same Bitcoin address. BitMEX Research detailed the disconnect in an official statement, emphasizing the deceptive nature of the advisory board credentials showcased on the scam portal.
"The links between this company and this website are fake," BitMEX Research stated. "There is a page with an ‘advisory board’ that contains real people who worked at Salomon Brothers in the 1980s, however, these people seem to have no link to this new spurious entity."
Community Response and Social Engineering Concerns
As news of the campaign spread across industry forums, cryptocurrency community members quickly weighed in with technical insights and cautionary advice. Security-minded observers pointed out that a legitimate wallet owner wishing to prove activity or operational control would simply need to move a negligible amount of Bitcoin to verify the address, rather than exposing full balances, private keys, or sensitive personal information through a centralized web portal.
This glaring discrepancy has led many security analysts and community researchers to suspect that the entire campaign is not actually about recovering lost funds, but rather part of a broader, highly targeted social engineering scam effort. The ultimate objective of such operations is typically to harvest sensitive personal data, manipulate private key management, or trick aging or inactive holders into compromising their security postures under the guise of complying with a legal mandate.
Given the sophisticated psychological tactics involved, BitMEX has strongly emphasized that users, asset holders, and community members should under no circumstances interact with the contact form, follow the verification prompts, or provide personal details to the fraudulent website.
The emergence of these specialized campaigns highlights the continually evolving complexity and ingenuity of crypto-related fraud in the modern digital asset landscape. Malicious actors continue to develop inventive methods to target legacy holders who may be out of touch with contemporary security best practices. This incident arrives amid a troubling broader trend across the digital asset ecosystem. In the first half of 2025 alone, hackers and malicious actors have successfully stolen over $2.1 billion across 75 separate security incidents, representing a concerning 10% rise in stolen capital compared to the exact same period in the previous year. As digital asset values remain high, security experts advise absolute vigilance when encountering unexpected on-chain messages or legal claims concerning dormant digital wealth.
Asro 
Layla Zulfa 
Muslim