
- A scammer posed as a UK officer to steal Bitcoin.
- Victim’s cold wallet breached, $2.8 million lost.
- Police emphasize increased phishing and impersonation threats.
A scammer impersonated a UK police officer to steal $2.8 million in bitcoin through a social engineering attack on a long-term holder, reported by North Wales Police.

The incident underscores security vulnerabilities faced by crypto holders using cold storage, highlighting the sophistication of targeted scams.
A scammer successfully stole $2.8 million in Bitcoin by impersonating a senior UK police officer. This attack highlights the growing threat of social engineering schemes that are increasingly targeting cryptocurrency users globally.
The victim, a long-term Bitcoin holder using cold storage, was manipulated through fake law enforcement communications. The North Wales Police are actively investigating the highly targeted social engineering attack but have issued warnings regarding impersonation scams.
This incident has drawn attention to vulnerabilities in security protocols surrounding cryptocurrency holdings. It further reveals the dangerous intersection of personal data breaches and advanced phishing tactics.
The financial impact is isolated, with Bitcoin being the sole targeted asset. Despite the significant loss from a single wallet, there are no reverberations affecting broader market metrics like staking or liquidity movements.
Authorities stress the importance of verifying suspicious communications through official channels. No evidence shows institutional involvement, nor reports about recovering the stolen funds. The magnitude of the theft has prompted urgent warnings to cryptocurrency holders.
Historically, targeted attacks of this nature are uncommon yet increasing, with police highlighting a disturbing trend.
The case highlights a disturbing new trend targeting long-term crypto holders who use cold storage devices.
— North Wales Police Cyber Crime team
Scams using spoofed law enforcement identities often aim for high-value targets, exploiting data breaches for victim profiling and manipulation.