Is OxyCapitals a scam?

Yes, OxyCapitals (oxycapitalsltd.com) is a confirmed cryptocurrency scam that has stolen over $54,000. They impersonate legitimate Discord admins using typosquatting (changing one letter in usernames like "salmaogs" to "sajmaogs") to trick victims into depositing Bitcoin and other cryptocurrencies. We have documented blockchain evidence showing stolen funds being cashed out through exchanges.

Yes, MirrorExp (mirrorexp.com) is a confirmed cryptocurrency scam that has stolen over $30,000. They use typosquatting to impersonate Discord admins (changing ".atraveller" to "_atraveller") to direct victims to their fake trading platform. Funds are rapidly moved through staging wallets to exchanges within minutes of deposit.

What are the OxyCapitals scam wallet addresses?

Known OxyCapitals scam wallet addresses include: Bitcoin Collection (1NTXSjeydYLhWuXS8cVWx57VqyRFqz4gaC), Bitcoin Personal (1GC4fSsmgJMCtMh643WBCi5pBnTpqqCXP2), Bitcoin ByBit (192UAp4TEGApNdxPbSN5veQZ8ynyixjqvB), Bitcoin SegWit (bc1qz5xlayxpa3dk4u8vduwvx0r4f3v2sf0eejpd46), Ethereum (0x5f9ce0dA56c867D1BD06185D6d21744daC83cb09), and USDT Tron (TCgcYUD74LoeMoKRb7X6WcYPVD3VgZccZR). Do NOT send any cryptocurrency to these addresses.

What are the MirrorExp scam wallet addresses?

Known MirrorExp scam wallet addresses include: Bitcoin Primary (bc1qy28j32l0ntncyuqczzeau2k9yslh76djy0nh5v), Ethereum/USDC (0xE28425B27d555f870d3CaCAC4Bf7F549c768022F), and USDT (0xF4eE6d12f95f401BF6b0aB488Ec18E43bfdbeAFC). These wallets are part of a larger criminal operation with connections to a $2.1M exchange consolidation pool.

How does typosquatting work in crypto scams?

Typosquatting is when scammers create usernames nearly identical to trusted admins by changing just one character. Examples: "salmaogs" becomes "sajmaogs" (l→j), or ".atraveller" becomes "_atraveller" (period→underscore). These tiny changes are easy to miss at a glance, allowing scammers to impersonate trusted community members.

How do I report a cryptocurrency scam?

Report cryptocurrency scams to: 1) FBI IC3 at ic3.gov, 2) FTC at reportfraud.ftc.gov, 3) Chainabuse.com and BitcoinAbuse.com to flag wallet addresses, 4) The cryptocurrency exchanges (Binance, Coinbase, etc.) where scammers cash out, 5) Discord Trust & Safety for impersonation accounts, 6) Domain registrars like Namecheap to get scam websites taken down.

How can I identify crypto impersonation scams?

Red flags include: 1) Unsolicited DMs about investment opportunities, 2) Usernames with subtle differences from real admins (check character by character), 3) Pressure to act quickly, 4) Requests to use unfamiliar trading platforms, 5) Promises of guaranteed returns, 6) Requests to send crypto to "verify" your wallet. Always verify identities through official channels.

What should I do if I sent money to a crypto scam?

If you have been scammed: 1) Document everything - save messages, wallet addresses, transaction IDs, 2) Report to FBI IC3 and FTC immediately, 3) Report the wallet addresses to blockchain abuse databases, 4) Contact the exchange where funds were sent (they may be able to freeze accounts), 5) Report impersonation accounts to the platform (Discord, Telegram), 6) Share your experience to warn others.

How much money has been stolen by these crypto scams?

Based on blockchain analysis: OxyCapitals has stolen $40,400+ across Bitcoin, Ethereum, and Tron. MirrorExp has stolen $22,000+ primarily in Bitcoin. TruCopy has stolen $30,869+ across Bitcoin, Solana, and Ethereum. BridgeStocks stole $35,389 in Bitcoin before being taken down. Combined documented losses exceed $150,200 across 6 scam operations. Actual losses are likely higher as many victims do not report and some transactions may not be captured in our analysis.

Are OxyCapitals and MirrorExp related scams?

Both scams use identical methodology: Discord admin impersonation via typosquatting, fake trading platforms, rapid fund extraction to exchanges. While we cannot confirm they are run by the same operators, the operational patterns are strikingly similar, suggesting either the same group or shared scam playbooks within criminal networks.

Losses

$150.2K+

Victims

50+

Dirty Crypto

Exposing Crypto Scams Through Blockchain Analysis

We investigate cryptocurrency fraud by tracing stolen funds across blockchains, documenting scam operations, and providing evidence that helps victims and law enforcement pursue justice. Our mission is to expose scammers, protect the crypto community, and ensure criminals are held accountable.

Blockchain Analysis

Tracing stolen funds

Evidence Documentation

Building cases for justice

Public Awareness

Warning potential victims

Our Mission

Justice Through Transparency

Cryptocurrency scammers rely on anonymity and the complexity of blockchain technology to evade accountability. At Dirty Crypto, we turn their tools against them. By analyzing transaction patterns, tracing fund flows across multiple chains, and documenting evidence publicly, we create a permanent record that supports victims seeking justice and helps law enforcement identify criminals.

$150.2K+

Documented stolen funds

Scam operations exposed

150+

Transactions traced

What We Do

We use blockchain forensics and open-source intelligence to investigate crypto scams and document evidence

Blockchain Transaction Tracing

We follow the money. By analyzing on-chain transactions across Bitcoin, Ethereum, Tron, and other networks, we trace stolen funds from victim wallets through staging addresses to exchange cash-out points.

Exchange Cash-Out Identification

Scammers must eventually convert crypto to fiat. We identify exchange deposit addresses that can be subpoenaed for KYC records, providing law enforcement with actionable leads to identify perpetrators.

Scam Pattern Documentation

We document the tactics, techniques, and procedures used by scammers—from Discord impersonation and typosquatting to fake trading platforms—so potential victims can recognize and avoid these schemes.

Public Evidence Archives

Abandoned (0 victims)

Abandoned scam — same V12Hosting as EverrexTrade

How Blockchain Analysis Delivers Justice

The blockchain never forgets. Every transaction creates a permanent trail that leads to the scammer.

Transaction Tracing

Every cryptocurrency transaction is recorded permanently on the blockchain. We analyze these records to follow stolen funds from victim deposits through multiple intermediate wallets to final destinations.

Pattern Recognition

Scammers leave behavioral fingerprints—round number withdrawals, rapid cash-outs, disposable staging wallets. These patterns prove intentional fraud and connect multiple scam operations to the same operators.

Exchange Identification

Scammers must convert crypto to cash through regulated exchanges that require identity verification. When we identify these cash-out addresses, law enforcement can subpoena exchanges for KYC records.

Evidence for Prosecution

Our documented investigations provide the evidence victims need to file police reports and civil lawsuits. Blockchain evidence is increasingly accepted in courts worldwide as proof of financial crimes.

Protect Yourself From Crypto Scams

•Never send crypto to strangers — no matter how convincing they seem
•Verify usernames character-by-character — typosquatting is extremely common
•Be skeptical of "guaranteed returns" — legitimate investments carry risk

•Research any platform — check reviews, registration, and regulatory status
•Don't click unsolicited links — especially wallet connection requests
•If it sounds too good to be true — it's definitely a scam