{"id":65454,"date":"2022-08-08T10:54:44","date_gmt":"2022-08-08T07:54:44","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=65454"},"modified":"2025-09-06T20:05:07","modified_gmt":"2025-09-06T17:05:07","slug":"aurora-labs-manager-reveals-crypto-fraud-scheme-involving-otc-trades","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/aurora-labs-manager-reveals-crypto-fraud-scheme-involving-otc-trades\/","title":{"rendered":"Aurora Labs manager reveals crypto fraud scheme involving OTC trades"},"content":{"rendered":"<p>The head of product at Aurora Labs, Matt Henderson, described a \u201ccaptivating and sophisticated\u201d crypto <span data-descr=\"OTC trading\" class=\"old_tooltip\">OTC<\/span> deal, of which he nearly became a victim.<\/p>\n<p>According to Henderson, a user using the pseudonym Olai contacted him via Telegram, allegedly wishing to buy a certain amount of AURORA tokens for USDC.<\/p>\n<p>The parties agreed on the terms of the transaction, to be carried out via a trusted escrow. Henderson proposed the intermediary. In the correspondence he referred to him as Steve. Under this alias was the head of Aurora Labs&#8217; security, Frank Brown.<\/p>\n<p>To communicate during the execution of the transaction, Olai created a Discord group, including Henderson, the intermediary and a fourth party \u2014 his business partner Gerard.<\/p>\n<p>The entire amount in AURORA was transferred to Steve, and Henderson received USDC directly. After successful test transactions, Olai wrote to him that he had sent the entire balance in the stablecoin, and the intermediary could transfer the remaining tokens.<\/p>\n<p>However, the funds did not arrive, and Steve contacted Henderson via the Signal messenger, showing a screenshot of a message from him confirming the receipt of USDC.<\/p>\n<p>After requesting to authorize the transaction with a link to Etherscan, the scammers sent the intermediary a new message allegedly from Henderson, proposing to return the AURORA to the specified address.<\/p>\n<p>According to Henderson, the \u201csilent business partner\u201d Gerard copied his Discord profile and messaged the intermediary. The block feature prevented Henderson from seeing this correspondence.<\/p>\n<p>As he noted, Brown (Steve) \u201cis obsessed with security.\u201d Henderson also offered several tips for conducting similar deals:<\/p>\n<ul class=\"wp-block-list\">\n<li>Put all funds without exception into escrow accounts;<\/li>\n<li>Check transactions on a blockchain explorer and never trust words alone;<\/li>\n<li>Always create groups in chats yourself, and verify identifiers and confirmations.<\/li>\n<\/ul>\n<p>Henderson believes that coordination with Brown through another channel and a prior transfer of tokens to him helped avoid another danger \u2014 scammers could have sent their own address for the transaction.<\/p>\n<blockquote class=\"twitter-tweet\" data-conversation=\"none\" data-lang=\"en\">\n<p dir=\"ltr\" lang=\"en\">How curious\u2026 I was recently approached by an \u201cOlai Olsen\u201d on Telegram attempting to initiate an OTC deal and offering USDC. Same character?<\/p>\n<p>\u2014 Scott Yeager (@scott__yeager) <a href=\"https:\/\/twitter.com\/scott__yeager\/status\/1556195085284302853?ref_src=twsrc%5Etfw\">August 7, 2022<\/a><\/p><\/blockquote>\n<p> <script async=\"\" src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cHow curious\u2026 I was recently approached by Olai Olsen on Telegram attempting to initiate an OTC deal and offering USDC. The same character?,\u201d he wrote.<\/p>\n<\/blockquote>\n<p>Earlier this year, victims of scammers <a href=\"https:\/\/forklog.com\/en\/news\/ftc-crypto-crime-victims-lose-more-than-1bn\">lost more than $1 billion<\/a> in cryptocurrencies, according to data from the U.S. Federal Trade Commission.<\/p>\n<p>Read ForkLog Bitcoin news on our <a href=\"https:\/\/telegram.me\/forklog\" target=\"_blank\" rel=\"nofollow noopener\">Telegram<\/a> \u2014 cryptocurrency news, rates and analytics.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The head of product at Aurora Labs, Matt Henderson, described a \u201ccaptivating and sophisticated\u201d crypto OTC scam, of which he nearly became a victim.<\/p>\n","protected":false},"author":1,"featured_media":65455,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1154],"class_list":["post-65454","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-crimes"],"aioseo_notices":[],"amp_enabled":true,"views":"34","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/65454","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=65454"}],"version-history":[{"count":1,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/65454\/revisions"}],"predecessor-version":[{"id":65456,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/65454\/revisions\/65456"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/65455"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=65454"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=65454"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=65454"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}