FBI and Brooklyn Prosecutors Seize 112 Servers in Crypto Investment Scam Crackdown

The FBI, working alongside Brooklyn prosecutors, has seized 112 servers in a crackdown on an alleged cryptocurrency investment scam, according to a report first published by COINOTAG on Oct. 14, 2026.

The action targeted the server infrastructure used to run the scheme, and the seized hardware has since been examined as part of the ongoing investigation.

Update — 11:01 UTC: Data pulled from the seized servers confirmed the recovery stage of the fraud in detail: weeks after the initial scam, the same operators contacted victims again with promises to return their stolen assets, the DA's office said.

What the seized data showed

Information released so far indicates that victims were first defrauded through a purported investment offering. Weeks later, the same operators resurfaced, reaching out to people who had already lost money and claiming they could return the stolen assets — a follow-up phase the DA's office said was confirmed by the recovered server data.

That confirmation came from the servers themselves, illustrating why investigators in these cases target infrastructure: backend records can document each phase of a scheme directly, in the operators' own workflow.

Background: investment fraud and "recovery" follow-ups

Cryptocurrency investment scams typically begin with unsolicited contact on social media, dating applications, or messaging services, where fraudsters present themselves as successful traders or trusted contacts and persuade victims to move funds into what appear to be legitimate trading platforms. Victims often see account dashboards displaying fabricated gains, only to discover that withdrawals are blocked or made conditional on additional payments.

U.S. authorities have repeatedly identified investment fraud — much of it centered on cryptocurrency — as one of the costliest categories of internet-enabled crime. The FBI's Internet Crime Complaint Center (IC3) has reported that investment fraud accounted for the largest reported losses among cyber-enabled crimes in recent years.

Officials have also cautioned that a second wave of fraud frequently follows the initial scheme. In that pattern, the perpetrators, or affiliates posing as recovery specialists or authorities, re-contact previous victims and promise to recover lost funds, often as a means of extracting further payments. The stage described by the DA's office in this case fits that follow-up pattern, with the original operators themselves renewing contact with promises to return the stolen funds. The FBI's public guidance carries the same warning: unsolicited offers to recover lost funds should be treated as a likely continuation of the original scam, and victims are encouraged to report incidents through the Internet Crime Complaint Center.

Seized servers are generally analyzed by forensic specialists to identify victim accounts, reconstruct the flow of funds, and map how the operation was organized — the type of work that underpins cases of this kind. The report in this case did not identify suspects or describe any charges, and with the investigation ongoing, further steps may become clear as prosecutors work through the seized data.

The report was first published by COINOTAG: https://en.coinotag.com/brooklyn-fbi-seize-112-servers-crypto-scam-network