Information from blockchain researcher ZachXBT has led to the uncovering of a major $4 million scam perpetrated by Christian Nieves, also known as Daytwo.
How the Hacker Accessed Funds
According to ZachXBT, Daytwo operated a small call center operation that tricked victims into setting up Coinbase wallets using compromised seed phrases via phishing websites. The stolen funds were quickly funneled into casinos or converted into privacy coins like Monero to cover tracks. The scammer also purchased luxury items and lost most of the funds gambling at casinos.
Connection to Other Thefts
ZachXBT also reported that back in November 2024, Daytwo’s worker Paranoia (Justin) stole $240K from an elderly victim. A private recording of the scam in action exists. He traced the stolen funds, which were split into three parts, one of which was deposited into Roobet, an online crypto casino where Daytwo frequently gambled.
The Hacker's Lavish Lifestyle and Behavior
The scammer has been publicly flaunting stolen funds on social media and reportedly bought a Corvette with proceeds from his scams. He even branded the car with a sticker displaying his Instagram handle, linking his real-life identity to his scam persona. Notably, Daytwo has openly disregarded anonymity and shows his behavior during Discord calls, where they discuss laundering funds.
The case of Christian Nieves raises questions about the methods of scammers in the cryptocurrency industry, demonstrating how disregard for anonymity can lead to their exposure and ease of pursuit by law enforcement.
