Crypto fraud has entered a new era. The criminals behind today’s scams are no longer relying on crude phishing emails or clumsy fake websites. They are building entire ecosystems—complete with believable identities, scripted relationship playbooks, fabricated trading dashboards, and real-time customer “support.”
One of the most active and dangerous operations we are tracking is the Rutormax scam, a coordinated global fraud network responsible for stealing millions from unsuspecting victims. BlockDivers is currently leading a forensic investigation into this scheme on behalf of a private client who fell victim to this exact setup. While we will not use his real name, his case reflects the precise tactics Rutormax deploys against targets worldwide.
The Approach: Social Engineering With a Personal Touch
The scam began the same way many of these cases now do: through a carefully curated online relationship. The scammer—often posing as an attractive, financially successful individual—invests weeks or months establishing trust.
This was no exception for our client. What he believed was a growing friendship, even a budding relationship, was in reality a highly scripted engagement run by a criminal team trained to manipulate emotions and build confidence before introducing the “investment opportunity.”
The Hook: A Professional-Looking Trading Platform
Rutormax presents itself as a cutting-edge crypto trading exchange with high-yield liquidity pools, algorithmic trading, and managed investment options. The interface is slick. The dashboards look real. The charts behave exactly as a legitimate platform would.
Our client was directed to deposit small amounts of crypto at first. The fake platform displayed impressive “returns,” showing balances increasing quickly. Like many victims, he was encouraged to reinvest his gains and increase his position.
Eventually, the investment grew to a substantial amount—close to seven figures when measured in total deposits and supposed returns. But the moment he attempted to withdraw, everything changed.
The Trap: Withdrawals Blocked, Pressure Increased
Once the scammers believe a victim has reached their limit, the tone shifts. Suddenly, the platform claims the account is “under review,” or that additional taxes or fees must be paid before withdrawals are allowed.
In this case, our client was told his account was frozen due to a “compliance review” and that he needed to pay additional funds to unlock it. This is a hallmark of Rutormax’s playbook—keeping victims trapped by dangling the illusion that their investment is safe and just one more payment away.
Once the victim refuses or cannot pay, communication stops. The relationship vanishes. The platform locks them out entirely.
The Investigation: What BlockDivers Uncovered
BlockDivers conducted a forensic blockchain investigation across every wallet associated with our client’s transactions. Despite the sophisticated appearance of Rutormax’s website, the underlying infrastructure tells a different story.
Our analysis found:
- Wallets associated with multiple global scam networks, not a legitimate trading platform
- Immediate fund dispersion into offshore mixers and secondary wallets
- Transfers to wallets tied to other ongoing pig-butchering schemes
- Evidence suggesting that Rutormax is part of a larger criminal consortium operating across Asia, Eastern Europe, and the Middle East
We have now issued formal legal notices to multiple exchanges—including Binance, Coinbase, and Crypto.com—requesting KYC information on receiving wallets. These exchanges are legally required to maintain records identifying the individuals behind those accounts, which may support both civil recovery efforts and criminal prosecution.
Why Rutormax Is So Dangerous
Rutormax is not a lone scammer with a fake website. It is a full-scale operation with:
- Scripted romance and relationship-building playbooks
- Realistic trading dashboards
- Coordinated international wallet networks
- Social media and messaging identities run by teams, not individuals
- Sophisticated laundering pathways that move funds rapidly across chains and jurisdictions
This is an active, ongoing scam. Multiple victims have come forward, and based on our OSINT review, the operation is still live and aggressively targeting new investors.
How BlockDivers Is Responding
For our current client and others like him, BlockDivers is executing a multi-phase strategy:
- Blockchain Forensic Report
Mapping all outbound transactions, wallet clusters, laundering paths, and identifying chokepoints. - Exchange Notifications & KYC Requests
Issuing formal legal letters to exchanges used by the scammers, requesting account ownership and identifying information. - Law Enforcement Coordination
Filing reports with U.S. and international agencies—including police departments, financial-crimes units, and cybercrime task forces. - OSINT Target Identification
Building profiles of listed operators and connected entities across corporate registries, phone records, email servers, and IP traces. - Asset-Recovery Strategy
Working with specialized legal teams across multiple jurisdictions to pursue civil and criminal remedies and freeze assets if located.
A Warning to Anyone Approached by Rutormax
If you have been contacted by someone promoting Rutormax—or if you already have funds on the platform—you must act immediately. Do not send additional money. Do not respond to demands for taxes or unlocking fees. And do not assume that silence means the scam is over; many victims are re-targeted later.
BlockDivers is currently building a coordinated case file for multiple victims. If you believe you have been affected, you can contact us confidentially through BlockDivers.com.
