
Investigators froze $41.5M linked to the $150M DSJEX Ponzi scheme. The fraud used fake CEOs and rotating infrastructure to drain retail funds until May 2026.
The collapse of the DSJ Exchange (DSJEX) and BG Wealth Sharing Ponzi scheme has resulted in the freezing of $41.5 million in illicit assets, a recovery effort coordinated by independent investigator ZachXBT in conjunction with Tether, Binance, OKX, and United States law enforcement. While the total losses associated with the operation are estimated at a minimum of $150 million, the recovery represents a significant intervention in a multi-year fraud that targeted retail investors through sophisticated social engineering and rotating infrastructure. The scheme, which originated in 2025, utilized a dummy trading platform and a related investment firm to promise daily returns ranging from 1.3% to 2.6%, supplemented by aggressive referral and ranking bonus structures.
The DSJEX operation relied on a high-velocity, multi-chain laundering strategy to obscure the movement of stolen capital. Between April 27 and May 3, 2026, illicit actors moved over $92 million across various chains and exchanges. The laundering process involved complex token swaps on Tokenlon, bridging activities through platforms such as Bridgers, Butter Network, and USDT0, as well as the wrapping and unwrapping of USDD. By consolidating transactions across a wide array of wallet addresses, the operators attempted to fragment the trail of funds, yet timing analysis of withdrawal patterns eventually exposed the underlying flow of Solana and Tron deposits to major exchanges like Binance.
Infrastructure management was equally deceptive. The scheme employed a rotating network of domain names and hot wallets to maintain continuity. Even after United States authorities seized the bgwealthsharing.com domain on April 23, 2026, the platform remained active until the final withdrawal function was disabled. The operators utilized a fake public face, a persona named Stephen Beard, to maintain credibility. As the scheme neared its end, the operators released a video featuring the fake CEO, claiming the platform would launch an initial public offering and demanding a 12% tax on user account balances, a classic exit-scam tactic designed to extract final liquidity from victims before the total cessation of withdrawal capabilities.
The recovery effort was triggered by an investigation into USDD contract flows, which allowed for the identification of matching Tron withdrawal patterns. ZachXBT identified that over $93 million in funds were consolidated into various deposit addresses during the final week of the scheme's operation. Of this total, approximately $63 million was deposited into the Cobo platform, highlighting the concentration of illicit liquidity within centralized custodial services.
Following the identification of these flows, Tether executed a freeze on $38.4 million on May 4, 2026. An additional $3.1 million was secured through coordinated actions at various other services and exchanges. This intervention underscores the importance of crypto market analysis in tracking the movement of funds across decentralized and centralized rails. The $150 million figure is considered a conservative floor for the total damages, given the operation's duration and the high volume of victim withdrawals processed since 2025.
Prior to the collapse, thirteen different regulators across five continents had issued public warnings regarding the activities of DSJ and BG. Despite these warnings, the scheme successfully leveraged social media channels, specifically the Hong Kong-based messaging app BonChat, to propagate fake trade signals and recruit new members. This method of recruitment is characteristic of a broader category of investment frauds that target retail participants by exploiting the gap between sophisticated on-chain activity and public perception.
Even in the immediate aftermath of the collapse, reports indicate that many victims remain in denial regarding the fraudulent nature of the platform. This psychological component is a critical factor in the longevity of such schemes, as operators rely on the continued trust of participants to delay the inevitable liquidity crunch. The use of fake identities and the constant shifting of infrastructure made the operation difficult to trace for individual users, reinforcing the need for Bitcoin (BTC) profile monitoring and rigorous due diligence when engaging with high-yield investment platforms.
The success of the $41.5 million freeze demonstrates the efficacy of cooperation between private security teams and centralized exchange operators. However, the ability of the scammers to move $92 million in a single week highlights the persistent vulnerability of cross-chain bridges and decentralized swap protocols to money laundering. Future recovery efforts will likely depend on the speed at which centralized entities can act upon intelligence provided by on-chain investigators.
Investors should note that the primary risk in these scenarios is the total loss of liquidity once withdrawal functions are throttled. The demand for a 12% tax on account balances served as the final indicator of insolvency. Moving forward, the industry will likely see increased scrutiny on the deposit addresses of custodial platforms that receive large, rapid inflows from unverified sources. The case of DSJEX serves as a reminder that even when platforms appear to offer high-frequency trading signals, the underlying infrastructure often lacks the transparency required for legitimate market participation. As ZachXBT Freezes $41.5M After $150M Crypto Ponzi Scheme Collapse illustrates, the trail of illicit funds is increasingly visible, yet the speed of recovery remains the limiting factor in protecting retail assets.
AI-drafted from named sources and checked against AlphaScala publishing rules before release. Direct quotes must match source text, low-information tables are removed, and thinner or higher-risk stories can be held for manual review.