Skip to content

Vendor Advertises Fraudulently Verified Crypto Exchange Accounts With European Bank Rails

Service Listing Multi-Region Financial Crime / KYC Bypass Fraud Service

Vendor Advertises Fraudulently Verified Crypto Exchange Accounts With European Bank Rails

A seller posting as RasselKyc is advertising made-to-order cryptocurrency exchange accounts registered under names supplied by the buyer. The seller states they fabricate an identity document and complete the platform's verification process on the buyer's behalf, with delivery in one to 48 hours. Accounts are offered on Bitget, Bitvavo, and Kraken at $150 to $300 each, and are advertised as arriving with French, Dutch, and German IBANs, SEPA Instant transfer capability, peer-to-peer trading access, and a virtual card. The exchanges named are the platforms being defrauded, not parties to the offer. No breach is claimed.

Price$150–300
Delivery1–48 hours
Bank railsSEPA
ActorRasselKyc

Listing details

TypeService, not a breach
Platforms abusedBitget, Bitvavo, Kraken
SectorFinancial crime / AML evasion
OfferAccounts in buyer-chosen names
IBANsFR, NL, DE
TermsEscrow accepted
Observed
ActorRasselKyc

!Advertised features

  • Buyer-specified account name
  • Fabricated identity document
  • Verification completed by seller
  • French IBAN
  • Dutch IBAN
  • German IBAN
  • SEPA Instant transfers
  • Peer-to-peer trading
  • Virtual card
  • Escrow via forum

Screenshot

Potential impact

Nothing has been breached, but this is the layer that makes other crime payable. Verified exchange accounts with European IBANs and instant SEPA transfers are the standard route for moving proceeds of fraud, ransomware, and scam payouts through regulated institutions under a fabricated identity. The buyer-chosen name is the significant detail: an account can be made to match a stolen identity, a shell company, or a name a victim already expects to pay. At $150 to $300 the pricing implies volume rather than bespoke work, and the offer being repeated across three platforms suggests a reproducible method rather than a one-off.

iStatus

Advertisement

This is a solicitation rather than an incident, so there is nothing to verify beyond the post. The account was registered around two months ago and holds a single post with no feedback, so no delivery record supports the claims. Dark Web Informer is not reproducing the contact route. Whether the seller can deliver, or is running an advance-fee scam against other criminals, cannot be established.

Want everything on this breach? Paid subscribers get the full claim details and more. Check out the threat feed, then after subscribing, search there for this alert. View pricing →

DARK WEB INFORMER - THREAT INTELLIGENCE

Latest