IOC Investigations
@iocofficial.bsky.social
OSInt & Blockchain Investigations for individuals, communities and organisations | ☎️ Urgent Support ➡️ +44 (0) 330 133 9852
🚨 Calling All Crypto Crime Professionals! 🚨
We’re launching a 10-episode podcast series diving deep into the world of crypto crime - and we want you to be part of it.
💡 Interested in joining or nominating someone?
👉 Fill out this quick form to get started: lnkd.in/epYzEP5G
We’re launching a 10-episode podcast series diving deep into the world of crypto crime - and we want you to be part of it.
💡 Interested in joining or nominating someone?
👉 Fill out this quick form to get started: lnkd.in/epYzEP5G
October 23, 2025 at 7:42 AM
🚨 Calling All Crypto Crime Professionals! 🚨
We’re launching a 10-episode podcast series diving deep into the world of crypto crime - and we want you to be part of it.
💡 Interested in joining or nominating someone?
👉 Fill out this quick form to get started: lnkd.in/epYzEP5G
We’re launching a 10-episode podcast series diving deep into the world of crypto crime - and we want you to be part of it.
💡 Interested in joining or nominating someone?
👉 Fill out this quick form to get started: lnkd.in/epYzEP5G
📣 Find the clues that everyone else misses🔍
Our Custom Dork Builder – designed to make advanced search simple.
✅ Choose your filters
✅ Build the query automatically
✅ Instantly search across multiple search engines
Perfect for beginners, useful for pros.
Scroll down: intelligenceonchain.com
Our Custom Dork Builder – designed to make advanced search simple.
✅ Choose your filters
✅ Build the query automatically
✅ Instantly search across multiple search engines
Perfect for beginners, useful for pros.
Scroll down: intelligenceonchain.com
July 2, 2025 at 9:40 AM
📣 Find the clues that everyone else misses🔍
Our Custom Dork Builder – designed to make advanced search simple.
✅ Choose your filters
✅ Build the query automatically
✅ Instantly search across multiple search engines
Perfect for beginners, useful for pros.
Scroll down: intelligenceonchain.com
Our Custom Dork Builder – designed to make advanced search simple.
✅ Choose your filters
✅ Build the query automatically
✅ Instantly search across multiple search engines
Perfect for beginners, useful for pros.
Scroll down: intelligenceonchain.com
🚨WE FOUND OUT HIS JOGGING ROUTE 🤯
In a recent IOC case, our client tasked us with finding out how much we could uncover about him following a recent targeted attack.
The attack itself? Minimal.
He wasn’t worried about his crypto…
He was worried about his identity. His mind was blown
In a recent IOC case, our client tasked us with finding out how much we could uncover about him following a recent targeted attack.
The attack itself? Minimal.
He wasn’t worried about his crypto…
He was worried about his identity. His mind was blown
June 12, 2025 at 11:52 PM
🚨WE FOUND OUT HIS JOGGING ROUTE 🤯
In a recent IOC case, our client tasked us with finding out how much we could uncover about him following a recent targeted attack.
The attack itself? Minimal.
He wasn’t worried about his crypto…
He was worried about his identity. His mind was blown
In a recent IOC case, our client tasked us with finding out how much we could uncover about him following a recent targeted attack.
The attack itself? Minimal.
He wasn’t worried about his crypto…
He was worried about his identity. His mind was blown
🚨🚨 CETUS PROTOL HACKED ON SUI
Please be aware of an ongoing hack with Cetus Protocol. More details are shared here:
x.com/intell_on_ch...
Please be aware of an ongoing hack with Cetus Protocol. More details are shared here:
x.com/intell_on_ch...
May 22, 2025 at 12:40 PM
🚨🚨 CETUS PROTOL HACKED ON SUI
Please be aware of an ongoing hack with Cetus Protocol. More details are shared here:
x.com/intell_on_ch...
Please be aware of an ongoing hack with Cetus Protocol. More details are shared here:
x.com/intell_on_ch...
🚨 Fake Ledger devices are still a threat.
⬇️
📦 A Ledger shows up at your door.
Looks real. Letter says, “Replace your old one.”
You enter your seed phrase.
Your crypto’s gone.
Yes, this really happened.
🔗 How the fake Ledger scam works:
intelligenceonchain.com/news/f/%F0%9...
#Crypto
⬇️
📦 A Ledger shows up at your door.
Looks real. Letter says, “Replace your old one.”
You enter your seed phrase.
Your crypto’s gone.
Yes, this really happened.
🔗 How the fake Ledger scam works:
intelligenceonchain.com/news/f/%F0%9...
#Crypto
🚨 Scam-a-Day Series: F is for Fake Ledger Hardware Devices
In May 2021, some cryptocurrency holders found an unexpected package at their doorstep – a Ledger hardware wallet they never ordered. The box looked legitimate, complete with shrink-wrap and a Ledger ...
intelligenceonchain.com
May 18, 2025 at 11:09 AM
🚨 Fake Ledger devices are still a threat.
⬇️
📦 A Ledger shows up at your door.
Looks real. Letter says, “Replace your old one.”
You enter your seed phrase.
Your crypto’s gone.
Yes, this really happened.
🔗 How the fake Ledger scam works:
intelligenceonchain.com/news/f/%F0%9...
#Crypto
⬇️
📦 A Ledger shows up at your door.
Looks real. Letter says, “Replace your old one.”
You enter your seed phrase.
Your crypto’s gone.
Yes, this really happened.
🔗 How the fake Ledger scam works:
intelligenceonchain.com/news/f/%F0%9...
#Crypto
Currently in a call with the UK Government about the National Risk Assessment for the UK!
👀
👀
May 13, 2025 at 10:10 AM
Currently in a call with the UK Government about the National Risk Assessment for the UK!
👀
👀
Scam-A-Day | Day 1: Airdrop Fake Links
Scammers use fake “free token” links to trick you into connecting your wallet—then drain it.
Always verify airdrops, never trust random DMs, and use tools like Revoke.cash to stay safe.
Day 2 drops tomorrow. Follow to outsmart the A–Z of digital scams.
Scammers use fake “free token” links to trick you into connecting your wallet—then drain it.
Always verify airdrops, never trust random DMs, and use tools like Revoke.cash to stay safe.
Day 2 drops tomorrow. Follow to outsmart the A–Z of digital scams.
May 8, 2025 at 10:05 PM
Scam-A-Day | Day 1: Airdrop Fake Links
Scammers use fake “free token” links to trick you into connecting your wallet—then drain it.
Always verify airdrops, never trust random DMs, and use tools like Revoke.cash to stay safe.
Day 2 drops tomorrow. Follow to outsmart the A–Z of digital scams.
Scammers use fake “free token” links to trick you into connecting your wallet—then drain it.
Always verify airdrops, never trust random DMs, and use tools like Revoke.cash to stay safe.
Day 2 drops tomorrow. Follow to outsmart the A–Z of digital scams.
You're being targeted daily!
There are still ongoing campaigns to drain your wallet, using conference calls and/or job interviews to get you to download malicious packages.
AttackerGas Feeder:
0xB01caEa8c6C47bbf4F4b4c5080Ca642043359C2E
The clue is always in the URL > Always verify on virustotal
There are still ongoing campaigns to drain your wallet, using conference calls and/or job interviews to get you to download malicious packages.
AttackerGas Feeder:
0xB01caEa8c6C47bbf4F4b4c5080Ca642043359C2E
The clue is always in the URL > Always verify on virustotal
April 30, 2025 at 9:24 AM
You're being targeted daily!
There are still ongoing campaigns to drain your wallet, using conference calls and/or job interviews to get you to download malicious packages.
AttackerGas Feeder:
0xB01caEa8c6C47bbf4F4b4c5080Ca642043359C2E
The clue is always in the URL > Always verify on virustotal
There are still ongoing campaigns to drain your wallet, using conference calls and/or job interviews to get you to download malicious packages.
AttackerGas Feeder:
0xB01caEa8c6C47bbf4F4b4c5080Ca642043359C2E
The clue is always in the URL > Always verify on virustotal
Another client happy to now get traction with Law Enforcement following an investigation by IOC.
Previous to our involvement, the authorities hadn’t been able to resource the investigation!
We did the hard work and put it on a plate for them.
Previous to our involvement, the authorities hadn’t been able to resource the investigation!
We did the hard work and put it on a plate for them.
April 4, 2025 at 12:29 PM
Another client happy to now get traction with Law Enforcement following an investigation by IOC.
Previous to our involvement, the authorities hadn’t been able to resource the investigation!
We did the hard work and put it on a plate for them.
Previous to our involvement, the authorities hadn’t been able to resource the investigation!
We did the hard work and put it on a plate for them.
Today, we managed to freeze the proceeds of a stolen Cryptopunk NFT, with the help of OKX.
You can read about it here:
x.com/Intell_On_Ch...
You can read about it here:
x.com/Intell_On_Ch...
x.com
x.com
February 10, 2025 at 9:54 PM
Today, we managed to freeze the proceeds of a stolen Cryptopunk NFT, with the help of OKX.
You can read about it here:
x.com/Intell_On_Ch...
You can read about it here:
x.com/Intell_On_Ch...
@maxpou.fr Great blog on the scam YouTube Channel!!
www.maxpou.fr/blog/crypto-...
I have a victim, unfortunately, did you put everything in the blog, or do you have any other information on top of this?
www.maxpou.fr/blog/crypto-...
I have a victim, unfortunately, did you put everything in the blog, or do you have any other information on top of this?
Anatomy of a Crypto Scam - Thomas Harris
Thomas Harris is a fraudulent YouTuber who uses fake crypto tutorials to spread malware. He artificially inflates his channel's popularity and promotes a malicious script that downloads harmful files ...
www.maxpou.fr
January 15, 2025 at 10:55 AM
@maxpou.fr Great blog on the scam YouTube Channel!!
www.maxpou.fr/blog/crypto-...
I have a victim, unfortunately, did you put everything in the blog, or do you have any other information on top of this?
www.maxpou.fr/blog/crypto-...
I have a victim, unfortunately, did you put everything in the blog, or do you have any other information on top of this?
GOT RUGGED?
We might be able to help! If you are impacted in anyway, I recommend you reach out!
We might be able to help! If you are impacted in anyway, I recommend you reach out!
December 8, 2024 at 11:34 PM
GOT RUGGED?
We might be able to help! If you are impacted in anyway, I recommend you reach out!
We might be able to help! If you are impacted in anyway, I recommend you reach out!
Degen accounts following us to see what we're saying about the 😅
November 28, 2024 at 10:03 AM
Degen accounts following us to see what we're saying about the 😅
BREAKING - Tornado Cash deemed not a "property" and therefore falls outside of OFAC authority.
Does this mean sanctions will be removed?
I doubt it, I believe the government will look to refresh/redefine IEEPA which was enacted in 1977.
Let's see
Does this mean sanctions will be removed?
I doubt it, I believe the government will look to refresh/redefine IEEPA which was enacted in 1977.
Let's see
November 27, 2024 at 1:52 PM
BREAKING - Tornado Cash deemed not a "property" and therefore falls outside of OFAC authority.
Does this mean sanctions will be removed?
I doubt it, I believe the government will look to refresh/redefine IEEPA which was enacted in 1977.
Let's see
Does this mean sanctions will be removed?
I doubt it, I believe the government will look to refresh/redefine IEEPA which was enacted in 1977.
Let's see
GM Ermmm.
What do we call this? Crypto Sky? Instead of CT?
What do we call this? Crypto Sky? Instead of CT?
November 27, 2024 at 7:18 AM
GM Ermmm.
What do we call this? Crypto Sky? Instead of CT?
What do we call this? Crypto Sky? Instead of CT?
Thoughts on @pumpdotfun.bsky.social 's statement?
November 26, 2024 at 7:48 PM
Thoughts on @pumpdotfun.bsky.social 's statement?
Reposted by IOC Investigations
HOAXY
A powerful and free online tool to visualize the network of #BlueSky profiles mentioning a specific hashtag/keyword in posts and analyze the connections between them. For each account, you can see a list of those it has reposted or quoted.
hoaxy.osome.iu.edu
Tip by @ukosint.bsky.social
A powerful and free online tool to visualize the network of #BlueSky profiles mentioning a specific hashtag/keyword in posts and analyze the connections between them. For each account, you can see a list of those it has reposted or quoted.
hoaxy.osome.iu.edu
Tip by @ukosint.bsky.social
November 25, 2024 at 12:04 AM
HOAXY
A powerful and free online tool to visualize the network of #BlueSky profiles mentioning a specific hashtag/keyword in posts and analyze the connections between them. For each account, you can see a list of those it has reposted or quoted.
hoaxy.osome.iu.edu
Tip by @ukosint.bsky.social
A powerful and free online tool to visualize the network of #BlueSky profiles mentioning a specific hashtag/keyword in posts and analyze the connections between them. For each account, you can see a list of those it has reposted or quoted.
hoaxy.osome.iu.edu
Tip by @ukosint.bsky.social
@pumpdotfun.bsky.social URGENT, take down the livestream feature. People are literally going to lose their lives. It's getting out of hand
November 25, 2024 at 6:35 AM
@pumpdotfun.bsky.social URGENT, take down the livestream feature. People are literally going to lose their lives. It's getting out of hand
🚨 Address poisoning on Solana 🚨
4 letters at the start of the address are the same.
Actual address: A1S8pNwcXWR2KpNPSNY3MkhehVnzgAuVB3m9vPZ3Brzn
Spoofed Address: A1S8E7nkTtsL5KJgDPJScE4AYSG3AzCRZUz55Z6M8ixn
4 letters at the start of the address are the same.
Actual address: A1S8pNwcXWR2KpNPSNY3MkhehVnzgAuVB3m9vPZ3Brzn
Spoofed Address: A1S8E7nkTtsL5KJgDPJScE4AYSG3AzCRZUz55Z6M8ixn
November 25, 2024 at 6:33 AM
🚨 Address poisoning on Solana 🚨
4 letters at the start of the address are the same.
Actual address: A1S8pNwcXWR2KpNPSNY3MkhehVnzgAuVB3m9vPZ3Brzn
Spoofed Address: A1S8E7nkTtsL5KJgDPJScE4AYSG3AzCRZUz55Z6M8ixn
4 letters at the start of the address are the same.
Actual address: A1S8pNwcXWR2KpNPSNY3MkhehVnzgAuVB3m9vPZ3Brzn
Spoofed Address: A1S8E7nkTtsL5KJgDPJScE4AYSG3AzCRZUz55Z6M8ixn
I'm pulling this one out of the history books again, but these addresses are symbiotic and appear to be some kind of exchange.
Inputs -> BfP2dBiHbiqYvsmESsgHEL8wQtZt25sbDNKnwmNRB34G
Outputs -> DQ5JWbJyWdJeyBxZuuyu36sUBud6L6wo3aN1QC1bRmsR
Some say it belongs to SwopShop
Inputs -> BfP2dBiHbiqYvsmESsgHEL8wQtZt25sbDNKnwmNRB34G
Outputs -> DQ5JWbJyWdJeyBxZuuyu36sUBud6L6wo3aN1QC1bRmsR
Some say it belongs to SwopShop
November 24, 2024 at 11:33 PM
I'm pulling this one out of the history books again, but these addresses are symbiotic and appear to be some kind of exchange.
Inputs -> BfP2dBiHbiqYvsmESsgHEL8wQtZt25sbDNKnwmNRB34G
Outputs -> DQ5JWbJyWdJeyBxZuuyu36sUBud6L6wo3aN1QC1bRmsR
Some say it belongs to SwopShop
Inputs -> BfP2dBiHbiqYvsmESsgHEL8wQtZt25sbDNKnwmNRB34G
Outputs -> DQ5JWbJyWdJeyBxZuuyu36sUBud6L6wo3aN1QC1bRmsR
Some say it belongs to SwopShop
⛔ STOP SCROLLING ⛔
YOU'RE AT RISK - You need to check if your credentials are in good order.
Here's what to do ⬇️
YOU'RE AT RISK - You need to check if your credentials are in good order.
Here's what to do ⬇️
November 23, 2024 at 9:07 PM
⛔ STOP SCROLLING ⛔
YOU'RE AT RISK - You need to check if your credentials are in good order.
Here's what to do ⬇️
YOU'RE AT RISK - You need to check if your credentials are in good order.
Here's what to do ⬇️
Chain Wrecked at 9pm UK/ 4pm EST Today
During tonight's session we'll be talking about kid's rugging coins (and the risks involved - Like doxxing the whole goddamn family!!), what next under Trump and many obscure topics 😅
YouTube: www.youtube.com/watch?v=iDb0...
We'll be live from Discord!
During tonight's session we'll be talking about kid's rugging coins (and the risks involved - Like doxxing the whole goddamn family!!), what next under Trump and many obscure topics 😅
YouTube: www.youtube.com/watch?v=iDb0...
We'll be live from Discord!
November 21, 2024 at 1:39 PM
Chain Wrecked at 9pm UK/ 4pm EST Today
During tonight's session we'll be talking about kid's rugging coins (and the risks involved - Like doxxing the whole goddamn family!!), what next under Trump and many obscure topics 😅
YouTube: www.youtube.com/watch?v=iDb0...
We'll be live from Discord!
During tonight's session we'll be talking about kid's rugging coins (and the risks involved - Like doxxing the whole goddamn family!!), what next under Trump and many obscure topics 😅
YouTube: www.youtube.com/watch?v=iDb0...
We'll be live from Discord!
💔 Romance Scams: The Most Devastating Fraud? 💔
Every day, we speak with victims of financial crimes—each story tragic in its own way. But among all types of fraud, romance scams stand out as the most profoundly impactful.
Why? These scams don’t just target wallets; they shatter hearts.
Every day, we speak with victims of financial crimes—each story tragic in its own way. But among all types of fraud, romance scams stand out as the most profoundly impactful.
Why? These scams don’t just target wallets; they shatter hearts.
November 20, 2024 at 8:51 AM
💔 Romance Scams: The Most Devastating Fraud? 💔
Every day, we speak with victims of financial crimes—each story tragic in its own way. But among all types of fraud, romance scams stand out as the most profoundly impactful.
Why? These scams don’t just target wallets; they shatter hearts.
Every day, we speak with victims of financial crimes—each story tragic in its own way. But among all types of fraud, romance scams stand out as the most profoundly impactful.
Why? These scams don’t just target wallets; they shatter hearts.