We blocked all reported onion addresses and bank accounts but it seems he continued with fresh accounts, and we needed to extend the ban to avoid the scammer from continuing.
If you had any SEPA trade in the past 2 weeks with one of those onion addresses please PM @ManfredKarrer the trade details data (json) [1].
There might be false positives in the list above. If you don’t belong on this list, please get in touch so we can unblock you.
If you got contacted by the bank about a chargeback request, or had any unusual situations, please get in touch as well by PM to @ManfredKarrer. We will try to resolve the issue so that you and the victim do not experience any losses.
[1] You can see the trade details when clicking the trade ID
We blocked all reported bank accounts and onion addresses.
If anyone had trades with a high price tag (e.g. >3% over market price) Please open a dispute and don’t confirm receipt. The scammer often took offer or made offer with big distance to market price.
Would you please be a little bit more specific? I just did a SEPA payment an hour ago. Will this transaction be cancelled/reverted or will I still get my BTC from escrow once the seller confirms that he received the money?
Unfortunately not. Users which fall into the banned banks/regions cannot trade until we release the ban. User with new accounts , 14 days have to expect to end up in a dispute of they are the BTC buyers.
Fund are not at risk. If the trade fails because it was a banned user the funds stay in your wallet. There might be some UI mess with a pending trade. We will give advice how to deal with that soon. But for now our focus is on stopping the scammer. Sorry but ealing with Fiat is a mess…
Ugh. Yet another example of fiat / banking payment methods being the weakest link in the Bisq chain, by a huge margin. Seems scammers will always find ways to exploit weaknesses in the traditional P2P banking system. Unless it’s cash exchanged face-to-face (which has its own risks) there’s no good way to mitigate these core weaknesses in systems outside of Bisq’s control.
Seems scammers will always find ways to exploit weaknesses in the traditional P2P banking system.
Just want to make a small clarification. There is NO SUCH THING as “traditional P2P banking” - Regurgitated payment gateways that portend to be the next FINTECH unicorn are simply redressed dog and pony shows, smoke and mirror trickery.
Legacy payment networks never were and never will be P2P, they are more like Person to first gateway clearinghouse, to second gateway clearinghouse, to data aggregator, to account correlation, to third gateway clearinghouse, maybe to a person but entirely reversible easily stopped, blocked and/or stolen.
Exactly. They’re marketed as “person to person” but there are so many trusted intermediaries in between that it’s laughable to call it P2P. That’s the whole reason Bitcoin was created - to eliminate this crap.
Big KUDOS and THANKS for the arbitrators and Manfred, i already have the btc locked because of teh scammer with the onion address kqsaevkgu7apgzlt.onion:9999 back in my wallet!!
I would like the ability to automatically block accounts younger than 30 days. Can this be done or even be made configurable?
Also would it be possible to have new accounts wait an additional 15 - 30 days for the BTC to be released. You should check the time between the trades and then the chargebacks. Once they have passed the 30 days then they can trade like regular users. He will keep creating new accounts and continue with chargebacks unless it is made very painful and slow for him to use stolen bank accounts.
A quick update:
Seems the scammer has been stopped, no new cases has been detected so far. We still act extra careful and leave the bans on some banks/regions active until we have a new release deployed with important security improvements (see https://github.com/bisq-network/proposals/issues/77, https://github.com/bisq-network/proposals/issues/78). Everybody should update to that relase as soon as possible to close the gap for such scammers.
Total reported damage so far: about 10 000 EUR Some have sent back the received funds already but with bank holidays it was a bit more delayed. Some users got issues with their bank (blocked accounts).
I need to block Interac as payment method until we have a new release out with further protection.
Anyone who receives a chargeback request please accept it and get in touch. If you have traded with one of those onion addresses please send all trade details by PM to me.
I restarted PC, upgraded Bisq to 1.0.1 and tried with different connections: It works until I try to take an offer…
Did you blacklisted my address or something ?