A self-proclaimed crypto rugpuller claims he was robbed of $14,000 worth of SOL by a group of drunk Australian girls while partying in Bali.

Ronnie Magrehbi, who has previously admitted to using the stories of cancer-afflicted babies to pump and dump crypto, shared footage of himself drinking shots with a group of female strangers he’d met at a beach club in Bali.

According to Magrehbi, he gave his unlocked phone to one of the girls so that she could look up and follow her Instagram account for him. 

When she returned his phone, he noted that the vibe shifted and the girls disappeared after going to the bathroom.  

Read more: FC Barcelona Instagram hacker made $26K in Pump Fun rewards

Upon checking his phone, he realised that $14,000 worth of SOL had been transferred from his Phantom mobile wallet to a wallet he’d never interacted with before. 

Footage appears to show him confronting the girls and accusing them of stealing his funds. One girl panics, while another stands silent as he films. 

Magrehbi subsequently called the police, leading to 12 undercover officers tracking the girls down and arresting them.

He then continued to film the girls in a police station, where he’s heard saying, “They wanna steal and not follow the law of the land, they can deal with the consequences. All of them. How about that.”

Bali crypto robbery karma for Magrehbi’s crimes

Magrehbi, who goes by the name “29” on X, was 19-years-old when he was charged in January 2020 with armed robbery and burglary after police caught him and three accomplices robbing a man at gunpoint and stealing his jacket and bag. 

Later that year, Magrehbi was charged with conspiracy to commit wire fraud after allegedly taking over the social media account of a National Football League (NFL) player and holding it ransom. 

Magrehbi allegedly took a ransom payment from the athlete, but never relinquished access to the account. Authorities claim his accomplice, Trevontae Washington, targeted both NFL and National Basketball Association players.

In 2025, Magrehbi was branded a “scumbag crypto scammer” after he rug-pulled investors with Pump Fun memecoins that appeared to exploit children with cancer.

Afterwards, he was recorded apparently mocking the children and “thanking” them for helping him make thousands of dollars. 

Read more: UK gang who posed as cops to steal $5.4M in crypto jailed

In an interview with YouTuber THURL DES, Magrehbi also admitted to “draining” crypto wallets with malware.

He’s also linked to the alias “Ronny Fargo,” and he has repeatedly claimed to have hacked the Twitter and Pinterest accounts of Mark Zuckerberg back in 2017. 

Another YouTuber, Atozy, doubted these claims, noting that there’s no reported connection between hacking group OurMine, which hacked Zuckerberg, and Magrehbi’s other alleged NFL social media takeovers.

Got a tip? Send us an email securely via Protos Leaks. For more informed news and investigations, follow us on X, Bluesky, and Google News, or subscribe to our YouTube channel.

Cointelegraph is committed to providing independent, high-quality journalism across the crypto, blockchain, AI, and fintech industries.

All news, reviews, and analyses are produced with full journalistic independence and integrity. For more details on our standards and processes, please read our Editorial Policy.

Blockchain intelligence firm TRM Labs has claimed in a new analysis that Justin Sun-owned HTX has been “rotating its wallet infrastructure on a rapid cycle” following sanctions issued by the UK Foreign, Commonwealth, and Development Office (FCDO) against Huobi Global S.A.

The FCDO sanctions, which landed in May, claimed that Huobi Global S.A. was being used by the A7 Network in Russia to bypass sanctions meant to target Russia.

HTX quickly claimed that “the listed entity Huobi Global S. A. is distinct from the online HTX exchange.”

The U.S. Department of Justice has filed five civil forfeiture complaints seeking more than $25 million in cryptocurrency it alleges is linked to international romance and investment frauds that targeted victims in both Canada and the United States. According to the U.S. Attorney’s Office for the District of Columbia and the U.S. Secret Service, the case stems from separate investigations conducted by the Cyber Fraud Task Force.

Prosecutors say victims were persuaded into believing they were making legitimate digital asset investments, only for their funds to be routed through laundering networks designed to obscure the origin and movement of stolen crypto. The DOJ describes tactics that frequently blend social engineering, fraudulent trading platforms, and layered wallet transfers to make recovery difficult.

Key takeaways

• The DOJ is pursuing five civil forfeiture actions targeting more than $25 million in crypto tied to romance and investment scams.
• One complaint seeks about $12.1 million connected to romance schemes affecting more than 200 victims.
• Another action seeks $10.4 million tied to suspected victim transactions involving more than 270 people.
• Authorities allege the launderers were largely based in Southeast Asia, with related IP activity associated with China, Malaysia, and Cambodia.
• International enforcement has recently intensified against similar social engineering–to-crypto laundering pipelines, including Interpol’s Operation First Light 2026.

DOJ targets crypto tied to romance and fake investment platforms

In a statement, the U.S. Attorney’s Office for the District of Columbia and the U.S. Secret Service said the assets were recovered as part of investigations associated with the Cyber Fraud Task Force. DOJ officials allege that scammers identified thousands of victims worldwide and misled them into believing they were investing in digital assets.

The largest complaint seeks approximately $12.1 million and is tied to romance-based frauds that reportedly defrauded more than 200 victims. Prosecutors say proceeds were routed through intermediary addresses and commingled with funds from other victims—an approach that can complicate attribution and recovery efforts.

A second complaint seeks $10.4 million and involves more than 270 suspected victim transactions. DOJ also filed three smaller complaints, which prosecutors describe as involving fake investment accounts and an additional “recovery” scheme—an escalation pattern seen in many fraud ecosystems, where initial victims are later targeted again with offers to help them get their money back for a new fee or deposit.

Where laundering allegedly operated—and how identities were masked

The DOJ said the alleged laundering infrastructure was predominantly located in Southeast Asia, while related IP addresses were associated with China, Malaysia, and Cambodia. While the filing describes these characteristics at a high level, the enforcement theory is consistent: criminals sought to break the on-chain connection between victim payments and the addresses that ultimately benefited.

Prosecutors frame the problem as more than a direct “investment” fraud. They argue that crypto-enabled romance scams typically rely on social engineering to build trust, then steer victims toward fraudulent trading or investment platforms. After funds are placed, investigators say the money is moved through multiple wallet layers and networks that help conceal the stolen funds’ trail.

Interpol operation highlights the scale of social engineering to crypto laundering

This DOJ filing follows broader international enforcement activity focused on social engineering scams and the financial networks used to launder their proceeds. According to earlier reporting from Cointelegraph, Interpol-coordinated Operation First Light 2026 involved 97 countries and territories. Interpol said the operation led to 5,811 arrests and the interception of $283 million in illicit assets.

Interpol also reported that the operation identified more than 142,000 victims and blocked more than 31,000 bank accounts. Within the operation, Thai authorities reportedly uncovered a network that allegedly converted romance-scam proceeds into crypto. Investigators also described the use of cross-chain token swaps to further obscure the movement of funds.

Cointelegraph reported that a wallet associated with a suspected money launderer processed more than $122.5 million in crypto over a period of 10 months. While that figure comes from Interpol-linked reporting rather than the DOJ civil forfeiture filings themselves, the overlap underscores the same operational playbook: trust-building scams, movement of funds into crypto, then multi-step transfers and trading-like activity to frustrate tracing.

Earlier U.S. actions show stablecoin laundering patterns

The DOJ’s move also fits into a wider pattern of U.S. enforcement against crypto used in romance and investment frauds. Cointelegraph previously noted that, in February, federal agents seized over $61 million in USDT stablecoin from addresses allegedly associated with laundering proceeds tied to fraudulent investment platforms.

In that earlier account, investigators described a workflow similar to the one now reflected in the forfeiture complaints: scammers build trust through romantic relationships, steer victims to fake trading platforms, and then move funds across multiple wallets. The DOJ complaint language adds further detail about how schemes can evolve into “recovery” scams and about how funds can be commingled among victims—both of which affect how law enforcement attempts to dismantle networks and how victims may later attempt to locate assets.

For readers, the key point is practical: these cases show that the fraud often shifts from social manipulation to financial plumbing. Even when victims send funds into what appears to be a legitimate digital asset transaction, the traceable parts can be deliberately fragmented through intermediaries, layered transfers, and cross-network activity.

As the forfeiture cases proceed, the next watchpoints are straightforward: whether courts allow the government to establish ownership and tracing theories at the complaint stage, and whether additional actions follow targeting other wallets or infrastructure tied to the same alleged laundering clusters.

Bitcoin (BTC) held higher on Wednesday as crypto and risk assets continued to brush off US-Iran war tensions.

Key points:

• Bitcoin limits its comedown from five-week highs despite fresh escalation in the US-Iran war.
• US stocks also ignore the potential risks, as analysis warns that shorts could pay as a result.
• A Bitcoin trader sees BTC/USD outperforming the S&P 500 going forward.

Bitcoin, stocks digest Trump pledge to “destroy” Iran power plants

Data from TradingView showed BTC/USD down 1% on the day, having earlier hit five-week highs near $67,000.

BTC/USD one-hour chart. Source: Cointelegraph/TradingView

Crypto and US stocks continued Tuesday’s direction, which saw them ignore escalation in the Middle East, including direct strikes by both Iran and the US.

US president Donald Trump threatened attacks on Iranian bridges and energy infrastructure, which had only a mild impact on market performance.

“From this point forward, any time the Islamic Republic of Iran shoots at a ship in the Strait of Hormuz, whether it be by Missile, Rocket, Drone, or any other device or weapon, the United States will bomb and destroy ONE BRIDGE OR POWER PLANT, including those located next to, or in, the Capital City of Tehran,” he wrote in a post on Truth Social.

Only oil prices saw volatility on the day, with WTI and Brent crude reaching $88.60 and $95.50, respectively, both at their highest since June 11.

CFDs on WTI crude oil vs. CFDs on Brent crude oil one-day chart.
Source: Cointelegraph/TradingView

Stocks’ bullish momentum prompted trading resource The Kobeissi Letter to suggest that those betting on a market reversal could see more pain.

“Short interest in the S&P 500 is up to ~3.7% of its free float, near the highest in data going back to 2010. Short interest in the Russell 3000 is up to ~6.1%, also near an all-time high,” it reported on Tuesday alongside data from Bloomberg.

“Both metrics have steadily increased since the start of 2025.”

S&P 500 index short-interest data. Source: The Kobeissi Letter on X.com

Kobeissi suggested that a “short squeeze” could result, punishing late short positions.

Trader sees BTC price outperforming stocks

As for Bitcoin, traders continued to wait for a more decisive move, with $67,000 a particular focus. At time of publication, it was at roughly $65,975, with 24-hour trading volume topping $30.3 billion, according to CoinMarketCap data.

Related: Bitcoin analysis eyes ‘serious volume’ after Binance sees 9K BTC daily outflow

“Breaking above that point would make for a daily bullish market structure break putting in a higher high,” trader Daan Crypto Trades told X followers earlier Wednesday. 

“This is the first daily higher high since the push up in May.”

BTC/USDT four-hour chart. Source: Daan Crypto Trades on X.com

To be sure, some traderseyed pronounced BTC price strength against the S&P 500.

“$BTC vs. US stocks is seeing a strong weekly bullish divergence and is at the brink of an RSI trend breakout,” an X post by Osemka read, referring to the relative strength index (RSI) leading indicator. 

“Divergent lows are 5 months apart, similar to literal 2022 lows. $BTC should outperform the US stock market nicely for the foreseeable future from the most mis-priced territory in history, as the lows should already be in.”

BTC/USD vs. S&P 500 one-week chart. Source: Osemka on X.com

As Cointelegraph reported, broad consensus continues to favor Bitcoin’s next bear-market low coming later this year or in early 2027.

Crypto-friendly digital bank Revolut has been valued at $115 billion in a secondary share sale, lifting the company’s valuation by 53% in less than a year.

The company priced shares at $2,017 each, according to an internal message from CEO Nik Storonsky reported by The Wall Street Journal. The transaction allows employees and other existing shareholders to sell stock rather than raising new capital for Revolut.

The valuation has more than doubled from $45 billion in 2024 and makes Revolut Europe’s most valuable private company, representing a major rise from the $75 billion valuation seen in November last year.

It also puts the firm above rival banking giants like Barclays’ roughly $95 billion market value, though with the caveat that Revolut’s price is based on a private transaction whose size has not been disclosed.

Revolut reported $2.3 billion in pre-tax profit for 2025, up 57%, as revenue rose 46% to $6 billion. Its customer base has since passed 75 million.

The company’s main app lets its users trade more than 200 crypto tokens, transfer assets to external wallets and stake holdings, while the firm also manages its own standalone crypto exchange called Revolut X.