Bitcoin Worth $2.8 Million Stolen in Suspected Police-Impersonation Scam, North Wales Police Say

• Impersonation led to seed phrase disclosure

• Scammers used fear and urgency to prompt the victim to access a fake wallet site.

• Police say the victim may have been identified via a data breach; investigation ongoing.

Bitcoin theft via police impersonation: £2.1M stolen from cold storage; learn how to verify calls and protect seed phrases — read guidance from COINOTAG.

What happened in the UK Bitcoin theft by impersonation?

Bitcoin theft occurred when a scammer posing as a senior UK law enforcement officer convinced a long-term holder to enter their cold-wallet seed phrase on a sophisticated fake website, enabling the attacker to transfer £2.1 million (~$2.8M) in BTC within hours. North Wales Police are investigating recovery options.

How did the scammer gain access to the victim?

North Wales Police say the scam was “highly targeted and advanced.” The attacker contacted the victim claiming a detained person had their ID and suggested multiple security risks. Using a sense of fear and urgency, the scammer provided a link to a fraudulent site and instructed the victim to “secure assets” by entering a seed phrase.

Source: Facebook

Worried and believing they were following police instructions, the victim entered their seed phrase into a convincing fake site. The fraudsters then withdrew the entire wallet balance—estimated at $2.8 million in Bitcoin—almost immediately.

How can holders verify when contacted by “police”?

Police guidance is clear: law enforcement will never ask for a crypto seed phrase or call unexpectedly about crypto assets. Hang up on suspicious calls, use official police channels to verify claims, and never follow links or enter your seed phrase on unsolicited sites.

Why are cold-storage holders being targeted?

Criminals increasingly target long-term holders who keep large balances in hardware wallets. Cold-storage users are attractive because a single compromised seed phrase gives attackers full control of funds. Law enforcement and cybersecurity specialists note that data breaches and social engineering feed these targeted campaigns.

What are authorities saying?

North Wales Police confirm an active investigation and warn that fraudsters are evolving tactics to bypass even cautious users. The US FBI has also issued warnings about impersonation and AI deepfake voice tools being used in related scams, underlining a global pattern of threat escalation.

Frequently Asked Questions

How did the scam play out in this case?

Police say the attacker impersonated a senior UK officer, claimed a detained individual had the victim’s ID, and instructed the victim to “secure” funds via a link. The victim entered their seed phrase on a fake site, enabling immediate theft of £2.1M in Bitcoin.

What immediate steps should victims take after a theft?

Report to local police cyber crime teams, record transaction IDs and wallet addresses, and preserve communications. Early reporting supports cross-border tracing efforts and increases chances of recovery when law enforcement coordinates with industry tracing tools.

Key Takeaways

• Targeted impersonation: Scammers used a realistic police narrative to extract a seed phrase.
• Cold storage risk: Seed-phrase disclosure gives attackers full wallet access; never input seeds online.
• Verify and report: Hang up, verify via official police contacts, and report to cyber crime units immediately.

Conclusion

This incident underscores the evolving threat of social engineering against long-term crypto holders. Bitcoin theft via impersonation is preventable with strict operational security: never disclose seed phrases, verify unexpected contacts, and use layered protections such as multisig. Stay vigilant and report suspicious approaches to law enforcement and COINOTAG for guidance and updates.