Alleged Sale of 37,954 Forex and Crypto Leads Across Multiple Countries

🏢 What Happened

Threat actor Manik123 has advertised the alleged sale of a dataset containing nearly 37,954 “forex recovery” and crypto leads.
The data is linked to brands such as Etoro, Bdswiss, Coindopan, and Coinmark, and reportedly contains sensitive depositor details.

⚠ Disclaimer

This report may include screenshots and/or text that may include unredacted personally identifiable information (PII) gathered from publicly available sources.
The sensitive information is presented solely for cybersecurity awareness and threat intelligence purposes.

📌 Overview

On September 4, 2025, Manik123 listed over 37,000 forex and cryptocurrency-related leads for sale on a dark web forum.

The dataset allegedly includes:

• Fields: Last name, first name, email, country, phone number, deposit date, deposit amount, currency, second deposit, broker
• Brands Referenced: Etoro, Bdswiss, Coindopan, Coinmark
• Distribution by Country:
  • Germany: 9,954
  • Denmark: 6,215
  • Norway: 5,434
  • Sweden: 7,771
  • Netherlands: 2,235
  • Finland: 1,737
  • Austria: 1,869
  • Switzerland: 1,933
  • New Zealand: 644
  • Czech Republic: 162

Total: 37,954 records

The actor provided a sample file (Mega.nz) and a screenshot (prnt.sc) as proof of data.

📊 Key Details