1 XMR = $345.99

Please login

Region:

Current view: Classic | Threads
Sort by: New | Tips

Scam reports to XmrBazaar Admin for investigation

Dax
5 (7)
Posts: 21
Earned: 0 XMR
Tipped: 0 XMR
This site is such a joke that the scammer come in the forum to mock their victims.

Still no answer from the admin.
Tip Monero to Dax

Dax has not setup a {COIN} tip address yet.

Publish Tip to Dax

Dax has not setup a {COIN} tip address yet.

BeatifullGarden72
N/A (0)
Posts: 2
Earned: 0 XMR
Tipped: 0 XMR
Reply to post #1746
They already checked database for you and confirmed that there is no bug with profile links. What you want from them?
Tip Monero to BeatifullGarden72

BeatifullGarden72 has not setup a {COIN} tip address yet.

Publish Tip to BeatifullGarden72

BeatifullGarden72 has not setup a {COIN} tip address yet.

Dax
5 (7)
Posts: 21
Earned: 0 XMR
Tipped: 0 XMR
Reply to post #1747
I already wrote what they should do urgently to correct these different holes.


PS: I understand why the links allow to impersonate a mediator. Another security hole. What a scam site...
Edited: Jul 23 19:30
Tip Monero to Dax

Dax has not setup a {COIN} tip address yet.

Publish Tip to Dax

Dax has not setup a {COIN} tip address yet.

SoulReaver Donor - Resistor
5 (2)
Posts: 71
Earned: 0.003 XMR
Tipped: 0 XMR
This's a piecing together info to prove the seller/listing is scam(mer) type of report.

Dat_Mass "Abandoned BTC .dat Legacy Wallets" - Findings

Seller: Dat_Mass (joined July 2026)
Listings: WEdE (main), GvXF and other per-wallet children
Offer: .dat wallet files at $125 each (or $2000 for all), advertised balances 2.5 to 69,370 BTC, direct payment, no escrow, no refunds.

1. An advertised balance matches government-seized coins
18.dat is labeled 69370.22452167 BTC. That exact amount is the seized Silk Road stash, held at address 1HQ3Go3ggs8pFnXuHVHRytPCq5fGG8Hbhx, seized by the US DOJ in 2020 and now in government custody. That source address is empty; the coins were moved to a US government-controlled address (bc1qa5wkgaew2dkv56kfvj49j0av5nml45x9ek9hz6) The seller is advertising the balance of seized coins whose key no private party holds.

This address is owned by the FBI, it confiscated approximately 69,000 bitcoin from Individual X who stole them from the Silk Road
https://www.blockchain.com/explorer/addresses/btc/bc1qa5wkgaew2dkv56kfvj49j0av5nml45x9ek9hz6

2. The public ledger shows no second wallet with that balance exists
Bitcoin's ledger is public, so every large balance is visible. That 69,370 BTC only ever sat at the one seized address. No other wallet holds that amount; if one did, it would top every public rich list. Verify:

bitinfocharts top 100 richest addresses
CoinCarp Bitcoin rich list
Arkham Intelligence (entity-labeled holdings)

3. The free sample is a recycled public file
Sample 1.dat is a genuine encrypted Bitcoin Core wallet.dat (350 encrypted keys, 1 master key, 0 cleartext keys). Its master-key fingerprint (mkey hash 7f9cfa79..., salt f328cdce4388a454, 105603 iterations) is identical to a wallet.dat published on public wallet-recovery tutorial sites, i.e. a freely downloadable file.

Its 206 addresses were checked on-chain: 201 never used; 5 emptied years ago holding only trace dust. Largest address 12Mnc41fYtFkSir5RCHYv82cq8FMuYHmm5 received 208.96 BTC, sent all, empty since 2017. Claim that it holds low balance is true. However this's a very public Bitcoin wallet example circulating in the open for forever that the seller do not hold exclusive access to. If this were to be cracked, it would've been cracked already.

4. Reviews are same-day and cross-listing
All three 5-star trader reviews are dated July 23, 2026 (listing published July 23). "walden" reviewed this listing the day it went live; "KKxTeam" reviewed a different Dat_Mass listing (a QAI token wallet); one is anonymous on a private listing.

Conclusion
This is a variant of one of the oldest scams in crypto: selling "locked wallets" said to hold large balances the seller cannot actually access. The facts do not support the claim that these files hold spendable coins. The one advertised balance that can be traced (18.dat) belongs to seized coins in government custody, and no other wallet holding that amount exists on the public chain. Even setting that aside, a Bitcoin Core wallet encrypted with a strong passphrase cannot be brute-forced with current technology; the key-derivation function makes exhaustive search computationally infeasible on any hardware available today. A buyer pays $125 for a file that is either fabricated or, at best, permanently unopenable.
Statistically, there's a near-certain chance that these types of listings are all scams.
Edited: Jul 23 20:54
Tip Monero to SoulReaver
QR Code 8AJJt5FoxgKapYk69YgSLXPaSBYd88hghg32ie25ZXGSFFYgVeKT4ytLkPoCsnJGE3gQninbK6JDUAX4qNCRUqfXFwXe3Hm
Publish Tip to SoulReaver

Please login to publish your tip

Admin Admin Mediator Donor
N/A (0)
Posts: 9
Earned: 0.1 XMR
Tipped: 0 XMR
Reply to post #1749
Thank you. Labelled them all as scam/fake reviews, including fake reviewers and fake reviews of fake reviewers (including the "Anonymous" ones).
Tip Monero to Admin
QR Code 42DxmL7sdVzHU6fEocXioT1ZPf3n1CThA1HEbPVofKgC6GGG1oPYXXg6mbwMuZE4w3PkBF3UAWjhfMbMpu82dfmFJqGpsCb
Publish Tip to Admin

Please login to publish your tip

We_are_all_burning Donor - Resistor
5 (3)
Posts: 15
Earned: 0 XMR
Tipped: 0 XMR
Reply to post #1746
I got scammed the same way, and this site needs to seriously tighten up its security to protect the users it depends on for its very existence. And btw I'm not some noob who's naive about the crypto space being floor to ceiling scammers. I thought I was going through the escrow process correctly, but nope.

Clean this site up. I was donating to XmrBazaar prior to getting ripped off. Think I'm going to do that again?
Tip Monero to We_are_all_burning
QR Code 859nqtpbZuf6Q1h3merQwm3NZNsQcPyxsBmDS9K7ySqmN92jUwGjQARHZQAc9Yd1pyKE66jZN2F9reDs36NP1S5DDn7NpmZ
Publish Tip to We_are_all_burning

Please login to publish your tip

Dax
5 (7)
Posts: 21
Earned: 0 XMR
Tipped: 0 XMR
At this point we can even question if admins are not linked to the scammers.

Still no answer for me in the messenger from Douglas or AilliA. Not even a banner on the site before correcting the security holes.

I warned them that I will report the site to their hosting companies and file a complaint at the police for their responsibility in my loss. It's been more than a week that they are aware of the problem and they still don't care.

Douglas is easily found on the Web, Facebook has his address and phone number. If some victims want to join me for a legal action, message me or Telegram @Daxorp.
Tip Monero to Dax

Dax has not setup a {COIN} tip address yet.

Publish Tip to Dax

Dax has not setup a {COIN} tip address yet.

AilliA Admin Mediator
5 (135)
Posts: 263
Earned: 2.491 XMR
Tipped: 0.061 XMR
All reports/appeals are only reviewed publicly. Do NOT DM your reports/appeals - they will not be reviewed.
https://xmrbazaar.com/contact
Edited: Jul 25 17:33
Tip Monero to AilliA
QR Code 8B9ZmojrPx5c19RvWwYkYkHfgX9Cu29av6vpnWPF61jwdrs6ujRcrUaUrS8Q9UPs4EhwN7ibwJGRmYMKwWkfgwPM8ngdgXL
Publish Tip to AilliA

Please login to publish your tip

SecureSnake68
N/A (0)
Posts: 3
Earned: 0 XMR
Tipped: 0 XMR
Who is to blame you fucking pussies? You both had a part in getting played. Stop blaming other people for your mistakes. Like, do you really need someone holding your hand for everything you do? The scammer treated you like you were kids. And if you go to the police with this, they’re gonna clown you.
Tip Monero to SecureSnake68

SecureSnake68 has not setup a {COIN} tip address yet.

Publish Tip to SecureSnake68

SecureSnake68 has not setup a {COIN} tip address yet.

Admin Admin Mediator Donor
N/A (0)
Posts: 9
Earned: 0.1 XMR
Tipped: 0 XMR
Phonetically/visually identical usernames are a classic human-level social-engineering tactic, not a security hole or technical exploit in computer-science terms. The fake mediator “aka__TheAC” that JAnon interacted with (https://xmrbazaar.com/forum/topic/51/post/1693/#post_1693) simply used a double underscore instead of the single underscore in the real mediator’s username “aka_TheAC”.
Likewise, the “DougIas_Tuman” account that Dax interacted with used a capital “I” in place of a lowercase “l”, making the name appear identical at a glance (explained here: https://xmrbazaar.com/forum/topic/51/post/1742/#post_1742).

We will implement distinct badges for mediators and additional safeguards in the next update. However, all of these scams would have been avoidable by using the built-in non-custodial multisig escrow tool https://xmrbazaar.com/escrow-guide. Even XmrBazaar’s whitelisted mediators are NOT supposed to handle any custodial escrow or receive funds directly: only the non-custodial multisig escrow is permitted. Users should NEVER trust or send money directly to ANYONE, including mediators or the XmrBazaar team (the sole exception being those who deliberately choose a risky direct trade while fully understanding and accepting the risks and bearing complete responsibility).

Under U.S. law, Section 230 of the Communications Decency Act shields platforms like Craigslist, Facebook Marketplace and XmrBazaar from liability for scams by their users. You transact directly with the other party: the site is NEVER a party to the deal. (Craigslist (or XmrBazaar) in particular processes no payments, holds no funds, verifies no identities, and offers no buyer/seller protection.)
https://xmrbazaar.com/terms/
Edited: Jul 25 19:17
Tip Monero to Admin
QR Code 42DxmL7sdVzHU6fEocXioT1ZPf3n1CThA1HEbPVofKgC6GGG1oPYXXg6mbwMuZE4w3PkBF3UAWjhfMbMpu82dfmFJqGpsCb
Publish Tip to Admin

Please login to publish your tip

Dax
5 (7)
Posts: 21
Earned: 0 XMR
Tipped: 0 XMR
Reply to post #1762
When the site is correctly coded maybe, but this is not the case. The proof is the number of scammed victims with your total agreement.

Now take your responsibility in this case in refunding the victims, correct the security holes that allow to impersonate admins including the link to their profile.

How are we supposed to know to we don't speak to a mediator? This is not only a close nickname, this is a security bug. You even still didn't answer in private.

You are online now, why didn't you answer your messages? The main issue here is that the scammers are more active, polite and effective than you. That's why we all fall, they are better admins than you. Increase your efficiency, you have 77 XMR of donations. What did you do with them for one week that you know security holes???
Tip Monero to Dax

Dax has not setup a {COIN} tip address yet.

Publish Tip to Dax

Dax has not setup a {COIN} tip address yet.

snex
5 (4)
Posts: 8
Earned: 0 XMR
Tipped: 0 XMR
Reply to post #1763
You're literally the scammer trying to scam the site. It's not going to work. Go find some old ladies to harass.
Tip Monero to snex

snex has not setup a {COIN} tip address yet.

Publish Tip to snex

snex has not setup a {COIN} tip address yet.

Dax
5 (7)
Posts: 21
Earned: 0 XMR
Tipped: 0 XMR
Reply to post #1760
"All reports/appeals are only reviewed publicly. Do NOT DM your reports/appeals - they will not be reviewed.
https://xmrbazaar.com/contact"

? Public forum is not a place for support or security issues report. Especially when they are not corrected! Do you know anything to web development?
You even let the scammers mock their victims publicly. Use your messenger and work on protect your members, correct the reported threats!!!

By the way, US laws don't apply to non US citizens. And the site is hosted in Iceland with an Ireland IP.


PS: It would take 5 minutes to put the mediators' messages in red and 5 minutes to put a banner saying the links in the messenger are not reliable until you correct the bug.
You are 100% responsible and still did nothing.
Edited: Jul 25 20:03
Tip Monero to Dax

Dax has not setup a {COIN} tip address yet.

Publish Tip to Dax

Dax has not setup a {COIN} tip address yet.

Admin Admin Mediator Donor
N/A (0)
Posts: 9
Earned: 0.1 XMR
Tipped: 0 XMR
Reply to post #1763
Profile links / “security holes”
Impersonating an admin with a working link to their actual profile is not possible. There are no technical security holes that allow this. Provide an unedited screen recording with the browser console open, or the claim is rejected.

“Number of scammed victims”
Every single reported case involved phonetically or visually identical usernames. The victims themselves confirmed this. Read the previous explanations carefully.

Private messages
All reports and appeals are reviewed publicly only. That is the rule. If you do not accept the rule, do not use the site.
Your private messages contain attempts at doxxing, extortion, and allusions to threats against a founder and even his family. Those are criminal offenses.
Tip Monero to Admin
QR Code 42DxmL7sdVzHU6fEocXioT1ZPf3n1CThA1HEbPVofKgC6GGG1oPYXXg6mbwMuZE4w3PkBF3UAWjhfMbMpu82dfmFJqGpsCb
Publish Tip to Admin

Please login to publish your tip

Dax
5 (7)
Posts: 21
Earned: 0 XMR
Tipped: 0 XMR
Reply to post #1766
Lie even more. I sent you a video. Aka_theAC already knew the hole, he told me that the messenger and the escrow are not reliable, so probably you know these for longer.

Yes, the nicknames are close the real ones, this is part of the problem.

As I add in PS: It would take 5 minutes to put the mediators' messages in red and 5 minutes to put a banner saying the links in the messenger are not reliable until you correct the bug.
You are 100% responsible and still did nothing.
Tip Monero to Dax

Dax has not setup a {COIN} tip address yet.

Publish Tip to Dax

Dax has not setup a {COIN} tip address yet.

Admin Admin Mediator Donor
N/A (0)
Posts: 9
Earned: 0.1 XMR
Tipped: 0 XMR
There was no unedited screen recording with the browser console open. Impersonating with a working link to their actual profile is not possible. There are no technical security holes that allow this.

Phonetically/visually identical usernames are a human-level social-engineering tactic, not a security hole or technical exploit in computer-science terms.

"did nothing": just now, three new impersonators have been banned: xmrbizzare (with two Z’s), AililiA, and Dougas_Tuman. All accounts were registered today.

@aka_TheAC, please clarify what you meant: "Aka_theAC already knew the hole, he told me that the messenger and the escrow are not reliable".
Edited: Jul 25 20:16
Tip Monero to Admin
QR Code 42DxmL7sdVzHU6fEocXioT1ZPf3n1CThA1HEbPVofKgC6GGG1oPYXXg6mbwMuZE4w3PkBF3UAWjhfMbMpu82dfmFJqGpsCb
Publish Tip to Admin

Please login to publish your tip

Dax
5 (7)
Posts: 21
Earned: 0 XMR
Tipped: 0 XMR
Reply to post #1768
I also use the nickname Dougas_tuman yesterday, it's easy to add a hidden letter in the name for the link. Scammer got the same idea.

This shouldn't be necessary to remove one by one accounts if you do the several suggested changes in this thread and others.
You will never block all variants, just correct the holes, answer your members in your messenger, like all websites.

Once again, that's a reason why the scammers succeed so easily. We even can't verify if they're real because you don't answer.
And you still don't answer me for 4 days since I've been scammed. Not even a sorry, not curious about of how upgrade, just ghosting your victims.

PS: Now I will speak about that in private, I already give too much public information considering the holes are all still present.
Edited: Jul 25 20:22
Tip Monero to Dax

Dax has not setup a {COIN} tip address yet.

Publish Tip to Dax

Dax has not setup a {COIN} tip address yet.

Admin Admin Mediator Donor
N/A (0)
Posts: 9
Earned: 0.1 XMR
Tipped: 0 XMR
Reply to post #1769
There were never any duplicated usernames or invisible characters.

Your private messages contain attempts at doxxing, extortion, and allusions to threats against a founder and even his family.
Edited: Jul 25 20:23
Tip Monero to Admin
QR Code 42DxmL7sdVzHU6fEocXioT1ZPf3n1CThA1HEbPVofKgC6GGG1oPYXXg6mbwMuZE4w3PkBF3UAWjhfMbMpu82dfmFJqGpsCb
Publish Tip to Admin

Please login to publish your tip

Dax
5 (7)
Posts: 21
Earned: 0 XMR
Tipped: 0 XMR
Reply to post #1770
No, it contains information about the holes, putting you in front of your responsibilities and the fact that I find the address of the admin to sue him.

Despite this, you didn't have the politeness to answer any of them. So I will take the appropriate measures to protect the users of this scam site.
Tip Monero to Dax

Dax has not setup a {COIN} tip address yet.

Publish Tip to Dax

Dax has not setup a {COIN} tip address yet.

Admin Admin Mediator Donor
N/A (0)
Posts: 9
Earned: 0.1 XMR
Tipped: 0 XMR
Well, since you cannot file a court claim pseudonymously and all your messages are backed up, a jury (and law enforcement, not you or me) will decide whether they contain actual threats against a person and his family with small children, as well as extortion/blackmail, and whether criminal charges are warranted.

All of these scams would have been avoidable by using the built-in non-custodial multisig escrow tool https://xmrbazaar.com/escrow-guide .
XmrBazaar’s whitelisted mediators are NOT supposed to handle any custodial escrow or receive funds directly: only the non-custodial multisig escrow is permitted. Users should NEVER trust or send money directly to ANYONE, including mediators or the XmrBazaar team (the sole exception being those who deliberately choose a risky direct trade while fully understanding and accepting the risks and bearing complete responsibility).

Under U.S. law, Section 230 of the Communications Decency Act shields platforms like Craigslist, Facebook Marketplace and XmrBazaar from liability for scams by their users. You transact directly with the other party: the site is NEVER a party to the deal. (Craigslist (or XmrBazaar) in particular processes no payments, holds no funds, verifies no identities, and offers no buyer/seller protection.)
https://xmrbazaar.com/terms/
Edited: Jul 25 20:55
Tip Monero to Admin
QR Code 42DxmL7sdVzHU6fEocXioT1ZPf3n1CThA1HEbPVofKgC6GGG1oPYXXg6mbwMuZE4w3PkBF3UAWjhfMbMpu82dfmFJqGpsCb
Publish Tip to Admin

Please login to publish your tip

You must login in order to publish a post