Skip to main content
U.S. flag

An official website of the United States government

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Danil Potekhin

Danil Potekhin

ALIASES: Данил Потехин, “cronuswar”
DOB: N/A
NATIONALITY: Russia
CITIZENSHIP: Russia
HEIGHT: N/A
WEIGHT: N/A
HAIR COLOR: Brown/Red
EYE COLOR: Blue
U.S. SECRET SERVICE FIELD OFFICE: San Francisco

CASE SUMMARY

From on or about June 2017 through on or about April 2018, Danil Potekhin and Dmitrii Vadimovich Karasavidi launched a sophisticated phishing campaign targeting users of multiple digital currency exchanges. Potekhin and Karasavidi purchased and deployed multiple web domains that appeared to be websites belonging to legitimate digital currency exchanges. However, when users logged into these fraudulent websites, Potekhin and Karasavidi were able to steal the users’ credentials, enabling the defendants to control the actual digital currency exchange accounts, withdraw some or all of the victims’ digital currency, and manipulate the market for digital currency. This tactic used a combination of phishing and spoofing to exploit users’ trust in known companies and organizations, with the ultimate purpose of fraudulently obtaining victim login credentials. The scheme resulted in losses of digital currencies valued at approximately $17 million.

The prosecution is being handled by the U.S. Attorney’s Office for the Northern District of California. In addition to the criminal charges, the U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) issued sanctions against Potekhin and Karasavidi.

Relevant Links

If you have information regarding this individual, please contact the U.S. Secret Service at MostWanted@usss.dhs.gov.