Key Takeaways
- • 3.4 million XRP tokens worth $8.5 million stolen from 71 investors in a fake Flare Network staking website operated in South Korea between October 16-23, 2025, with potential total losses reaching $19 million according to Seoul police investigations.
- • Three suspects identified; two detained on aggravated fraud charges with a third accomplice at large and subject to an Interpol Red Notice request, as authorities investigate the full scope of the scheme.
- • Scammers impersonated legitimate Flare blockchain project and promoted the fraudulent site through blogs, news articles, Wikipedia, and YouTube while offering false promised returns of 1.5% to 1.8% monthly on deposited XRP.
- • Seoul Metropolitan Police Cyber Crime Investigation Unit continues investigation believing the actual fraud scale significantly exceeds confirmed losses, signaling a broader vulnerability in cryptocurrency investor targeting and impersonation schemes.
- • Assets frozen and recovery underway with Seoul police securing $12 million in frozen funds related to the scam, though the three-suspect involvement and ongoing fugitive status complicate full asset recovery.
Summary
Seoul police have dismantled a major cryptocurrency fraud operation that targeted 71 investors through a counterfeit Flare Network staking website. According to authorities, scammers stole 3.4 million XRP tokens valued at approximately $8.5 million between October 16 and October 23, 2025. However, investigators believe the total haul may reach as high as $19 million, suggesting the confirmed cases represent only a fraction of actual victims.
The fraudulent operation exploited the legitimate Flare blockchain project's name and reputation. Scammers created a fake investment website and aggressively promoted it across multiple channels—including blogs, news articles, Wikipedia entries, and YouTube videos—to build credibility and attract victims. The scheme promised investors fixed monthly returns of 1.5% to 1.8% in exchange for depositing XRP tokens, a yield proposition designed to appeal to cryptocurrency investors seeking passive income opportunities.
Law enforcement arrested two suspects on aggravated fraud charges, while a third accomplice remains at large. Seoul police have secured an arrest warrant and requested an Interpol Red Notice for the fugitive, expanding the manhunt beyond South Korean borders. As of the investigation's latest update, authorities froze approximately $12 million in related assets, though full recovery remains uncertain given the multi-suspect structure and ongoing international pursuit.
The Seoul Metropolitan Police Cyber Crime Investigation Unit indicated that investigations are continuing and that the scope of the operation likely extends beyond the 71 confirmed victims. This assessment reflects the investigative challenge of quantifying total damage when perpetrators operate across multiple channels and victim reporting is often delayed or incomplete. The case underscores the vulnerability of retail cryptocurrency investors to impersonation schemes targeting well-known blockchain projects, particularly when fraudulent sites employ sophisticated marketing tactics to establish false legitimacy.
The fraudulent operation exploited the legitimate Flare blockchain project's name and reputation. Scammers created a fake investment website and aggressively promoted it across multiple channels—including blogs, news articles, Wikipedia entries, and YouTube videos—to build credibility and attract victims. The scheme promised investors fixed monthly returns of 1.5% to 1.8% in exchange for depositing XRP tokens, a yield proposition designed to appeal to cryptocurrency investors seeking passive income opportunities.
Law enforcement arrested two suspects on aggravated fraud charges, while a third accomplice remains at large. Seoul police have secured an arrest warrant and requested an Interpol Red Notice for the fugitive, expanding the manhunt beyond South Korean borders. As of the investigation's latest update, authorities froze approximately $12 million in related assets, though full recovery remains uncertain given the multi-suspect structure and ongoing international pursuit.
The Seoul Metropolitan Police Cyber Crime Investigation Unit indicated that investigations are continuing and that the scope of the operation likely extends beyond the 71 confirmed victims. This assessment reflects the investigative challenge of quantifying total damage when perpetrators operate across multiple channels and victim reporting is often delayed or incomplete. The case underscores the vulnerability of retail cryptocurrency investors to impersonation schemes targeting well-known blockchain projects, particularly when fraudulent sites employ sophisticated marketing tactics to establish false legitimacy.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.