Crypto Fraud Watch: North Korea’s $643 Million Half-Year, a $5.5M Pig-Butchering Judgment, and World Cup Scam Traps

Crypto crime is getting more concentrated, more industrialized, and more opportunistic. The past few days brought a sobering new report on North Korea’s dominance of crypto theft, a landmark court judgment against a WhatsApp-based investment scam, and fresh warnings that fraudsters are targeting World Cup fans. Here’s what you need to know, and what it means for your legal exposure.

North Korea Behind Two-Thirds of All Crypto Theft in 2026

Blockchain intelligence firm TRM Labs released its half-year report on July 2, and the headline number is stark: North Korean-linked hackers stole roughly $643 million in cryptocurrency in the first six months of 2026, about two-thirds of all crypto funds stolen worldwide. Nearly 90% of that haul came from just two April attacks on DeFi platforms: $285 million drained from Drift, a Solana-based decentralized futures exchange, and $292 million taken from restaking protocol KelpDAO in an attack attributed to the Lazarus Group.

The report tracked a record 207 crypto hacks in the first half of the year, even as total losses fell to $972 million from $2.3 billion a year earlier. The takeaway is not that the threat is shrinking; it is that a single state-sponsored operation against a major target can outweigh months of losses from every other attacker combined. G7 leaders flagged North Korean crypto theft as a global security concern for the first time in June, and U.S., Japanese, and South Korean officials met last week in Washington to coordinate enforcement.

Federal Court Orders $5.5 Million Judgment in NanoBit Pig-Butchering Case

The SEC announced Tuesday that a federal court in the Eastern District of New York has ordered six defendants to pay more than $5.5 million in disgorgement, interest, and civil penalties over the NanoBit scheme, one of the agency’s first securities-fraud judgments against a relationship investment scam built around a fake crypto platform. Scammers posing as financial professionals groomed 18 victims through WhatsApp groups, steered them to the NanoBit “trading platform,” and displayed fabricated profits while wiring more than $2 million to bank accounts in Hong Kong. Victims lost roughly $967,000.

The judgment is a legal milestone: by framing pig-butchering as securities fraud rather than relying solely on wire fraud statutes, the SEC gains tools like disgorgement and fair funds for victim recovery. But the case also illustrates the hard truth of these schemes. The defendants never appeared in court, most of the money moved offshore before the complaint was filed, and collecting from foreign accounts is notoriously difficult. Acting early matters.

Scammers Are Targeting World Cup Fans

With the 2026 FIFA World Cup underway, TRM Labs reports that fraudsters have built a full menu of tournament-themed scam infrastructure: fake ticketing sites that demand crypto payment for high-demand matches, “fixed-match” betting schemes promising insider knowledge for upfront crypto, clone-ready phishing kits for sale, and unaffiliated fan-branded meme coins like the $WORLDCUP token positioned for pump-and-dump exits. Amounts stolen so far are small, but the infrastructure is live and waiting, and scammers have historically moved proceeds through cross-chain bridges, a technique used to shift an estimated $1.9 billion in illicit funds.

How to Protect Yourself

The common thread in these stories is that fraud now arrives through trusted-feeling channels: a WhatsApp group, a ticket site, a DeFi protocol with strong branding. Never move an investment conversation to a private messaging app at a stranger’s suggestion, and verify any platform independently. A trading site that only exists because someone you met online told you about it is not a platform, it is a funnel. Buy event tickets only through official channels, treat any “guaranteed” betting or investment return as a scam by default, and check a firm’s registration at investor.gov before sending a dollar or a satoshi.

If you have already been victimized, act quickly. File a report with the FBI’s Internet Crime Complaint Center (IC3.gov) and the SEC’s tip portal, and preserve every record: wallet addresses, transaction hashes, chat logs, and screenshots. Blockchain tracing has improved dramatically, and early reporting is often the difference between an asset freeze and an empty judgment. An attorney can help you evaluate civil claims, coordinate with law enforcement, and pursue recovery through mechanisms like SEC fair funds or civil forfeiture proceedings.

At Coin Counsel, we work with individuals and businesses navigating the legal fallout of crypto fraud — whether you’re a victim seeking recovery, a company facing regulatory scrutiny, or a project working to stay compliant in an increasingly complex legal landscape. The rules are evolving fast, and the cost of getting it wrong has never been higher. Contact us at coin-counsel.com to speak with a crypto-focused attorney today.

Disclaimer

This blog post is for informational purposes only and does not constitute legal advice. Reading this content does not create an attorney-client relationship between you and Coin Counsel or Franco Law PLLC. The legal landscape surrounding cryptocurrency is rapidly evolving and varies by jurisdiction. Do not act or refrain from acting based on information in this post without first consulting a qualified attorney. If you believe you have been the victim of crypto fraud, contact us at coin-counsel.com for a consultation.