When a California man was scammed out of hundreds of thousands of dollars of cryptocurrency in a fake romance this year, Erin West was able to track and freeze the money.
West, a deputy district attorney who heads the high technology crimes unit in Santa Clara County, said she believes the scammer lives in a country where there isn’t an easy path to extradition and therefore is unlikely to be arrested anytime soon. The money, however, is a different story.
“Our bread and butter these days really is tracing cryptocurrency and trying to seize it and trying to get there faster than the bad guys are moving it somewhere where we can’t grab it,” West said.
West is among a growing number of state and local prosecutors and law enforcement officials who have embraced a handful of digital tools that can monitor blockchains, the digital ledgers that track every transaction for most cryptocurrencies.
West said her team tracked the victim’s money as it bounced from one digital wallet to another until it ended up at a major cryptocurrency exchange, where it appeared that the scammer was planning to launder the money or cash out. West sent a warrant to the exchange and frozen the money, which she plans to return to the victim.
It’s a stark reversal from just a handful of years ago, when cryptocurrencies were seen as an unmitigated boon for criminals. Cryptocurrencies allow users to instantly send money over the internet without intermediaries like banks. It can be done anonymously because the digital wallets that hold cryptocurrencies don’t have to be tied to people’s identities.
But because the digital ledgers that facilitate cryptocurrencies are public, law enforcement agencies have in recent years begun to gain the expertise necessary to track cryptocurrencies, leading bitcoin and ethereum to play roles in a significant number of criminal cases. During that time, such cases have overwhelmingly been the purview of federal agencies like the FBI, the Secret Service, the Justice Department and the IRS.
Those agencies have large budgets for tools like blockchain tracking programs and relationships with counterparts in friendly countries, which often lead to multinational cybercrime stings. But there are limits to the operations, such as when the hackers live in countries that don’t extradite to the US, like Russia or China.
The vast majority of legal requests, like warrants and subpoenas, to Coinbase, the largest US cryptocurrency exchange, come from federal law enforcement agencies, according to the company’s two most recent transparency reports. Requests from all US law enforcement agencies more than doubled, from 1,197 to 2,727, from the second half of 2020 to the first half of 2021, with state and local requests growing the most.
A Federal Trade Commission report published Friday found that 1 in 4 dollars lost in fraud payments is now paid in currency.
Elizabeth Roper, chief of the bureau that handles cybercrime and ID theft in the New York county district attorney’s office, said cryptocurrency has become such a constant in criminal complaints that it’s unrealistic for only the federal government to handle it.
“There’s just so much of it that it’s just not realistic to think that the federal government and federal law enforcement is going to be able to address every threat and handle every case,” Roper said. “So It is important for locals to develop competency in these areas.”
Roper’s office, which advertises a cybercrime hotline, has become a hub for people who report that their nonfungible tokens have been stolen, and it averages a new complaint about every day, she said.
As with West’s romance scam, Roper’s staffers often find themselves with an unusual definition of a successful case: They’ll be able to freeze and return a stolen asset but not put a scammer behind bars.
“It is interesting, because you start to think about what it means to have a successful investigation, what accomplishes the most good, what’s the best use of our resources,” she said. “I think we’re going to see it more and more frequently with these particular assets than we have in the past.”
Ben Suver, the director of law enforcement initiatives for the Ohio Department of Public Safety, said the agency’s statewide Narcotics Intelligence Center has received funding for blockchain tools to take on more dark web drug cases. But because it’s the only agency in the state with such tools and with a dedicated blockchain analyst on staff, it has become the state’s de facto hub for all cryptocurrency investigations, he said.
“We have a number of these agencies that just don’t have this technology and know-how, and so although it’s narcotics, they’re calling us and telling us about these different scams where elderly folks are being ordered to buy cryptocurrency,” Suver said.
Kurtis Minder, the CEO of the cybersecurity company GroupSense, said he has gotten an influx of requests recently for training seminars and blockchain analysis software from state and local law enforcement agencies.
“We’re seeing the very beginning of this, where they’re feeling some responsibility to have to speak to this kind of thing or show some level of competence,” he said. “They want to be responsive to their constituents, and they’re more visible to their constituents, where the FBI is a little opaque.”
CORRECTION (June 6, 8:51 am ET): A previous version of this article misattributed quotes about it being unrealistic for only the federal government to handle cryptocurrency crime. They were from Elizabeth Roper, chief of the cybercrime and ID theft bureau in the New York county district attorney’s office, not Elizabeth Murphy, an assistant district attorney in the Manhattan district attorney’s office.