OneCoin continues fraud through Santander Bank PL
Although it’s a shadow of the four billion dollar Ponzi it was, new victims are still being recruited into OneCoin.
The current signup process has revealed OneCoin continues to defraud consumers through a Santander Bank account in Poland.
Throughout 2016 BehindMLM tracked OneCoin’s jump from one bank to another. As fast as OneCoin set up shell companies to dupe banks, banks cottoned on and shut them down.
That journey came to an end in November 2016. Till recently, the last bank account OneCoin solicited investment through was a Bank of Africa account held in Tanzania.
OneCoin’s current banking details reveal the methodology hasn’t changed.
Today OneCoin solicits investment through a Santander Bank account in Poland. The owner of the account is Igoria Trade SA, a shell company owned by Wojciech Grzegorz Kulinski.
The invoice new OneCoin victims receive is from One World Network FZE, a shell company set up in the UAE.
In addition to the UAE being a scam-friendly jurisdiction, OneCoin laundered hundreds of millions of dollars with the assistance of the Al Qassimi royal family.
If OneCoin founder Ruja Ignatova is still alive, the UAE is also a leading contender for her current whereabouts.
In what appears to be an attempt at plausible deniability should a bank investigate, OneCoin instructs new victims to
write ONLY invoice number without any additional information … in the payment reference.
Anything else, such as references to OneCoin and/or OneLife, will see OneCoin return the transfer. This is probably so they can tell anyone investigating the transfers were made in error.
OneCoin’s email invoices are sent from an address pointing to the “onelifecorp.eu” domain.
To date European authorities have taken no steps to disable OneCoin’s active website domains.
Igoria Trade SA was first publicly implicated in OneCoin’s current money laundering activities back in June.
Polish authorities were informed of the connection even earlier in May. So far neither Polish authorities or Santander Bank Polska has taken any action.
Through the Igoria Trade SA account, OneCoin continues to solicit investment into its Ponzi scheme.
In addition to bank wires, OneCoin solicits investment through cryptocurrency.
Separately, BehindMLM readers have been tracing OneCoin’s current cryptocurrency wallets.
Millions of dollars have recently been laundered through OneCoin wallets tied to Binance and BitForex.
Update 23rd August 2021 – Blockchain research in the comments below has now also implicated Poloniex and Kraken.
Update 3rd October 2021 – OneCoin appear to have lost their Santander Bank account.
The company is now routing new investment through Metro Bank in the UK.
Yes, we contacted both Santander Bank PL and the Polish prosecutor’s office on May 20.
Here you can see the notice which prosecutor Łukasz Zimicz from the International Cooperation Office of the National Public Prosecutor’s Office of Poland sent to the District Prosecutor’s Office in Warsaw, on June 1, 2021, and CC:ed us:
twitter.com/CryptoXpose/status/1429028317991145480
At that time we thought this OneCoin’s bank account (owned by Igoria Trade) would be quickly frozen, but no..
The Bulgarian OneCoin scammers continue using this bank account today without problems! Extremely frustrating!
Before the 8mk-ending pooling address was created on 27 November, OneCoin/VIS-2 seems to have used the “39Str2fCZkrBGaxNCC2qzwpPfprq1PKiBz” address (created 31 July 2020) as their main address.
During those couple of months prior to the pooling account, the “iBz” account has transactions that indidicate they used Bittrex exchange for money laundering.
This is the very first transaction on “iBz” account:
bitaps.com/4941506edfa188123854aae6ed8f09daa48d5060326e428065f125260f855ef6/39Str2fCZkrBGaxNCC2qzwpPfprq1PKiBz
Here — in “inputs & outputs” section — one can see that they used Bittrex to buy that 1.84 BTC:
oxt.me/transaction/4941506edfa188123854aae6ed8f09daa48d5060326e428065f125260f855ef6
About two weeks later on 15 August, they bought this 10 BTC ($492 360)
bitaps.com/e993be4a3b223e19fa37292f2157cc29cee0146cd082c9ac943ee67a56b02396/39Str2fCZkrBGaxNCC2qzwpPfprq1PKiBz
which seem to be also from Bittrex:
/oxt.me/transaction/e993be4a3b223e19fa37292f2157cc29cee0146cd082c9ac943ee67a56b02396
So in addition to Binance & Bitforex, this the third exhange I’ve found so far.
Again, it’s likely KYC can be linked to this transaction, so law enforcement can go knockig someone’s door. (Althoug it’s probabaly just someone like Foxi the one-brain-cell or the UAZ cryptomobile man, not jackpot like Taki or Ventsi the Fox 😉 )
Poloniex & Kraken now spotted too.
On 15 August 2020, 28.86 BTC of the accumulated OneCoin criminal proceeds was transferred from “iBz” to two addresses with this transaction:
bitaps.com/603449917de3450dfaed9fc4e513574ed21da0ce2c0ad0eb0fda9ec42a8abb31/39Str2fCZkrBGaxNCC2qzwpPfprq1PKiBz
2.34 BTC were to transferred straight to the address of Poloniex exchange:
oxt.me/transaction/603449917de3450dfaed9fc4e513574ed21da0ce2c0ad0eb0fda9ec42a8abb31
while the rest, 26.5 BTC, went to a private address, which five days later sells 14.99 BTC of it on Bitforex:
oxt.me/transaction/683bc8c51d753eebc353f9a3d948a023926f7deca7db64bfc44a26cce2be9a44
while the remaining 11.53 BTC goes to another new private address, which sells 5.0 BTCs of it on Kraken 28 August 2020:
oxt.me/transaction/b15a412e584c4d6fe50b4c45f5df87a2205fa033eeb46c2c5e455382f6a9c3fc
(just press “<" to rewid to see this)
while 6.53 BTCs goes in series of transacions in which small parts, about 0.2 BTC, are sold on Poloniex and rest transferred to new private addresses until 5 BTC of of that iBz sourced BTCs are sold on Kraken as part of 10 BTC transaction on Septemeber 24th 2020:
oxt.me/transaction/090b5b0b91316d4a11100737c5b48d83699c09c3eadd792f71f9680cb8c01ca5
(click "<" on the lower 5 BTC entry long enough to see that this it is sourced to the iBz address)
@Semjon
You remind me of something I saw yesterday …
In a video dated March 4, 2020, BehindMLM quoted extensively. Ari Widell is also quoted:
share-your-photo.com/8b2068cd38
From this topic it was quoted:
https://behindmlm.com/companies/onecoin/onecoin-website-down-dns-record-under-investigation/
There are numerous links below the video that can be clicked directly:
share-your-photo.com/315ddb6aa2
youtube.com/watch?v=olR3rB15M8o
For explanation. OneCoin Mongolia or OneCoin Mongolia Club has been promoting the OneCoin scam extensively. The channel contains 182 videos as of September 2016.
Some other remarks.
OneCoin seems to buy Bitcoin from Binance to their “Latam” address too:
– bitaps.com/ee0571f23ae3b1a9216a84dc0bc3e2ac05b1227416a5e6a250f7853201d9597a/3K9DJUzubxyiQNveM1x72wjoLQ1J1CCNQU
– bitaps.com/e46eac22861df85512bb67866d418e198c34f667d080f9c0629a94fff5e448dd/3K9DJUzubxyiQNveM1x72wjoLQ1J1CCNQU
– bitaps.com/a75246c0085b1e1af0367f98b763f05de40c37d2cacead70b11bbc9c4a0b0d7b/3K9DJUzubxyiQNveM1x72wjoLQ1J1CCNQU
– bitaps.com/9f830045ffc22a95dd3221fa225cd048253f4820bc2c3a61f4d4b22a8ab894e0/3K9DJUzubxyiQNveM1x72wjoLQ1J1CCNQU
The above totals ca. 6 BTC, but there are several other smaller transcations during the year which seem to take the total sum bought from Binance to this “Latam” address in the ballpark of 20 BTC.
These are pretty big Bittrex BTC purchases to the “iBz” account in the summer-autumn of 2020:
– bitaps.com/2d1bd1e1dbf27909ec61607d22614ddc64898e65346957df43852912fa667ced/39Str2fCZkrBGaxNCC2qzwpPfprq1PKiBz (+7.18000000BTC / $348 864.28)
– bitaps.com/fd0625e53db8b1affb8e6691f261cdc1ded6c8bb27effef0c6546be0a2d7ef1b/39Str2fCZkrBGaxNCC2qzwpPfprq1PKiBz (+10.54000000BTC / $512 309.13)
– bitaps.com/2d1bd1e1dbf27909ec61607d22614ddc64898e65346957df43852912fa667ced/39Str2fCZkrBGaxNCC2qzwpPfprq1PKiBz (+7.18000000BTC / $349 298.52 )
Addition to comment #4
This video was uploaded on the same channel:
In addition to many well-known OneCoin scammers, Nigel Allan is named and shown in the video:
share-your-photo.com/cbdc864032
This cheater is much better known and I hope he won’t laugh much longer:
share-your-photo.com/6b2bb88193
youtube.com/watch?v=IwlODSRnHpk
PS: How brainwashed OneCoiner react to such a video is documented very emphatically by the viewer “No comment”!
I’ve now looked at the OneCoin’s old BTC address too — the one which accumulated over 2000 BTC worth of criminal proceeds.
–> bitaps.com/17amYMHaaJ8Z7zfcgHXG6KvR97F2r3faDq
Although it’s onerous and ugly to document it — as one can see from my latest posts –, now that I managed to improve my blockchain forensics skills/routine over this weekend, it didn’t take me long to see that most of the old OneCoin loot gets sold in patches of 100, 200, 50 BTC either on Kraken or BTC-e during mid-2016 – late-2017.
BTC-E is interesting because of this:
justice.gov/usao-ndca/pr/russian-national-and-bitcoin-exchange-charged-21-count-indictment-operating-alleged
Just wild speculation, but perhaps the BTCs Ruja got from the crypto-sheikh al-Qassemi were the from Mt. Gox heist… 😉
BTw, there are some exceptions. In September 2019, some 47 BTCs gets moved out, and after many intermediaries, 39 BTC of it gets sold on Binance October 2019 4th:
oxt.me/transaction/e8615700b52beb184028f90d5df6e0d3f736126f96f20ef92b8e4877d93aba6e
Due to the timing, this could be one of the Habid-Veselina thefts.
Or just Ignatov crime family arranging money to pay Konstantin’s legal bills.
Satander (second paragraph) or Santander?
Though I like name Satander for bank 😉 I think it’s typo.
@Mr. Czech
Source: Google
Santander obviously cannot do without a single customer …
Correction to my comment #7:
It seems only 20 BTC (not the whole 34) can be linked to the original September 2019 47 BTC OneCoin wallet move.
But I think another 5 BTCs from it can be linked to this separate Binance sell:
oxt.me/transaction/ca17de78e1d70215ee5605c725956a2f0fb216854cd93a858946c3f6400765ca
The story of the rest 17 BTCs is way more complex. It branches here (oxt.me/transaction/44464c463458e107d1bda5da4fd11817c5a5b60828a2593f4297388c8e2de522), and the 17 BTC form quite complicated transactions from which none seesm to lead any exchange after 10+ moves I looked. There seems to be some BTCs orginating from darknet Hydra Market included in some of those transacions.
Ok, so this is interesting, and I have to revise my comment #7 again.
I implied that most of the OneCoin’s BTCs were sold between 2016-2017.
This may be true for the BTC-e cases (like this:oxt.me/transaction/56a1bb5acdc44b3e8d1a57bd75f9da13389b29b476a4bf47c4146cb8c3188c84), but not with the Kraken cases.
In March 27th 2017, OneCoin only transfered 233 BTC to a private wallet:
oxt.me/transaction/403bdc99640355eb8ad630db19eede1fd8fdeac7ad52acbdf4afb97e63586be3
But the private address remained inactive until November 2020 (!!!), when a recursive pattern starts to repeat itself in which small slices of the 233 BTC get sold on Kraken with rest of the amount are sent forward to one or two new addresses which repeat the pattern respectively.
Same thing happens with two other 200 BTC patches: They were transferred to a private wallets in 2017, but only staring from August 2019, they begin similar “melting” process of the 200 BTC chunk by unloading slices of it onto Kraken –>
oxt.me/transaction/5c90a8e4b342fba6ad529d5933771721ca4eb5b7820b31ffe611b91906aea295
&
oxt.me/transaction/7ecb9b2b036bd4e0dededf4c4253e48ce829c6148ffc3dcc3e18cb1dec98027e (I followed this process tens of iterations and they were at still 50 BTC, having melted some 150 BTC, in January 2020 when I quit.)
So it seems that Kraken has cashed out over 600 “OneCoin” BTCs starting from August 2019 (thus with much better prices what would have gotten in 2016-2017). However, ss the first mentioned “melting” process started as late as Nov 2020, it may be still ongoing.
@Semjon
I’m so glad one of us doing this. You take the headaches so the rest of us don’t have to, and you have my thanks.
@Czech
Argh I thought I got all of these, I even ran a search before publishing! Thanks.
@Semjon, is it possible you create some kind of simple chart showing the transactions and addresses which connect OneCoin’s btc to Kraken.
^ Yeah, I’m checking this now, it wouldn’t be a very simple chart if one wants to go to details..
Kraken? Oz wrote on August 27, 2018:
https://behindmlm.com/companies/onecoin/kraken-exchange-refuses-to-list-onecoins-ofc-ponzi-coin/
Ok, here’s just one full tracing, connecting 19.9 btc to Kraken:
The first OneCoin btc wallet OneCoin used during 2016-04-28 to 2020-01-31.
17amYMHaaJ8Z7zfcgHXG6KvR97F2r3faDq
Source: youtu.be/LCQiefs0yuM?t=64
This wallet collected over 2060 btc. Part of it has ended up on Kraken. Here’s one such chain:
|
txid: 403bdc99640355eb8ad630db19eede1fd8fdeac7ad52acbdf4afb97e63586be3 | 2017-03-27
233 btc to: 1CNvbvVEL3PADQiZP9XZ2WgNRzqhSngnHb
bitaps.com/403bdc99640355eb8ad630db19eede1fd8fdeac7ad52acbdf4afb97e63586be3
|
txid: c97bddd140192fd5e8d447d8221d919953cdb63e559f662d3ca2dd4b5ef73770 | 2020-11-23
232.9 btc to: 195JWeSiecrj7yhP2T68fz9j3Ex2J5sug8
|
txid: ecf617e15535b2c7141c581378ef101aa92a2cd486c74b18f7ab2509d2bdac76 | 2020-11-23
227.9 btc to: 1H8XaUZFuwZRr99AmHA9KSpkngGwNQN2Xa
|
txid: cf9e6acdbf0326a26276356cc78d0e635b74150577ef3dbc8bf02f0aa43b6d6b | 2020-11-29
227.9 btc to: 1FroTyqzXWGNqPPkjm391VRuPRsYtkpKC9
|
txid: 13add3ab786d8ec182571f1a669c24b1aee11fc43ae368a9c95189d2671ff88d | 2020-11-29
(19.9 btc & 207.9 btc. FOLLOWING THE 19.9 btc SLICE)
19.9 btc to: 3AY8Rd2drQTa6qmJvqXvNjqApZKJQ6KSo4
|
txid: 6497a67f21b38bde9651d8482f9a2b4fcfae831ee5bf5a8ce8e29a15aa4a84c3 | 2020-11-29
19.9 btc to: 3AuHri3PcuRzyjXTCHiRx7pzzgzpbDk6mr
|
txid: 379c00cfe6ff0c2aa73e41543dab78519c85fd3fd742656242be1013cba937f9 | 2020-11-29
19.9 btc to KRAKEN: 3B5t7UWMwsdLMjHqjvnnYHhXRTs1jm2Knn <- Kraken wallet
vivigle.com/BitWallet/wallet?address=3B5t7UWMwsdLMjHqjvnnYHhXRTs1jm2Knn
^ I tweeted about this OneCoin btc to Kraken chain and Kraken support contacted me privately saying that their compliance team will look into this.
twitter.com/CryptoXpose/status/1429835906425528324
Here’s a justpaste -page I created as an example of one of the OneCoin-Kraken connections:
justpaste.it/81wa1
Thanks to Semjon for doing the ground work.
I don’t know any technological solution, and it’s a ton of work to do manually. Each Kraken “slicing” cash out process consists of tens of Kraken transactions, with probably each of them involving a different wallet address.
And there is now four of them. The rabbit hole than opens from here is the fourth Kraken slicing cash out carousel — this time with 100 BTC:
oxt.me/transaction/17d129e3616ca87e4439bc433b8c6ce83195a56bef3cc4885d254da3172d28a3
It brings the “Kraken” total to over 700 BTC from the old wallet alone. Given the BTC prices in late 2019-2021, the generated euro value proabaly exceeds 10 million.
But you have still some 213 BTC left to go on this one. 😉 And there are at least three other Kraken chunks consisting of about 500 BTC in total.
I now followed the transactions chain of the 233 BTC chunk to the very end, and it’s here:
oxt.me/transaction/439d612336f57739a06c2470f90958376f66348365d596279a081fb4e77cce63
(you should be able to “rewind” from this to the OneCoin address transaction)
The 233 BTC carousel come to halt on March 3rd 2021 when out of ca. 18 BTC, 4 BTC were send to an address which sold it on Kraken on the same day and ca. 14 BTC are still left unsold on a lonely wallet address.
It’s actually not completely Kraken (only perhaps something like 80%), for they throw a´occasional Bitforex in the mix in later stages of the cash out proess.
There is a new podcast series on OneCoin/Sebastian Greenwood:
shows.acast.com/uppgangochfall/episodes/miljardbluffen-onecoin-13
However, it’s in Swedish.
My Swedish is good enough that I understood most of the first episode, but there wasn’t really any new info for me.
It’s a well made production and perhaps this first episode was more of an introduction, and we’ll see some proper investigative journalism in the future episodes.
For example, it’d great if they are able to shed more light on Sebastian’s payment firm background (+ the Helgesen/More rumours which may relate to how she met Ruja) or his relationship to Petteroe, Parhiala, Thomas/Arnstedt and the rest of the “Ponzi Viking” schene which seem important to his story…
I hope OneCoin’s Santander account is now closed, as there’s a new company/account which OneCoin uses in their Proforma invoices now. UK based postbox company BRIXIT INTERNATIONAL LIMITED which has an account at Metro Bank in London:
i.imgur.com/VIewVe0.jpg
Account Holder: BRIXIT INTERNATIONAL LIMITED
Address: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
SWIFT code: MYMBGB2L
Name of Bank: METRO BANK PLC
Bank address: ONE SOUTHAMPTON ROW, LONDON, UK
IBAN: GB91MYMB23058033072872
The UK authorities are still soft on OneCoin? That’s you Colp, Companies House, the Met. Colour me surprised.
I discovered that One World Network FZE featuring in invoice picture of this article has been unlicensed in UAE for over a year:
search with number 3473 from: uaqftz.com/commercial-license
You can also search with number 827 to see that the shell company still officially running Dealshaker (Executive Management Finance Consultants FZC) has been unclicensed since 2016, and therefore even before Dealshaker was launched.
I also discovered that the the OneCoin Sheikh Al-Qassemi has abandoned the famous OneCoin Ltd:
(search from: notices.rakicc.com/home)
I’m sure that this wasn’t published on the RAKICC page until very recently. Pretty strange…
And the Belize entity of OneLife Network has been stricken off for long time
Here is compilation of how various OneCoin entities have been abandoned:
justpaste.it/44753
Everthing is incredibly shady and criminal in OneCoin.
Unclear then how he can still be claiming to own OneCoin bank accounts.
Abandoning anything OneCoin follows with the resurgence of disposable shell companies I guess.
Now that I think about it, the Exhibit-2 document you published actually mentions two OneCoin Limted entities:
OneCoin Limited DMCC
OneCoin Limited RAK Free Zone
Could it be that the RAK entity was struck off but the DMCC enitity still remains? However, I can’t find it from DMCC corporate search by name, so perhaps it doesn’t exist, it was renamed or.
(I do find OneCoin related “Coins United DMCC” with Ruja Ignatova as the director and Adamana Group DMCC with the Maya Antonova as director.)
Wasn’t Maya Antonova the elusive “highly placed informant” that Schneider warned Ignatov was in the organization?
Schneider is of course such a shit spy that he thought it might be Scott. Antonova is apparently nowhere to be found right now.
I hope she was well paid and happy. Whoever it was did the whole world a good deed.
Also while we are on the subject. Konstantin Ignatov comes across as such a brat that he probably reads this forum.
What else is he going to do being under 24 house arrest afterall?
So KonstiKeks: why have not called “King” Jane whatever and told him to stop this if you are so remorseful?
Why do you allow your image and that of your sister to still to be used for marketing if you are serious?
Did you perjure? Of course you did. You can’t help yourself. How many times did you perjure?
How can you have agreed to cooperate with the Feds against your old lady when the mother of your child actually works for your mom?
How can you get into light hearted banter with journalists about what pic they use of you and use social media to discuss something as stupid as soccer when thousands of lives have been ruined and you are facing dying behind bars?
Semjon: Exhibit 2 indicates that Al Qassimi used his POA to dissolve One Coin DMCC and migrate it to RAK.
Al Qassimi would have apparently been able to pick off all the OC assets except the blocked bank accounts.
I am told that OC RAK has not been liquidated so he can still claim the accounts using his fake notary seals and apostilles.
@semjon do you have sources on the BTC wallets & transfers that I could take a look at not posted in the thread? Any additional thoughts on the speculative connection to Mt Gox?