The FBI Created a Fake Cryptocurrency to Catch Market Manipulators. It Worked. 10 Execs Just Got Charged.
BREAKING

The FBI Created a Fake Cryptocurrency to Catch Market Manipulators. It Worked. 10 Execs Just Got Charged.

The FBI built a fake cryptocurrency from scratch, deployed it on Ethereum, and used it as bait. Market-making firms took the bait, wash-traded it on camera, and explained exactly how they rig token prices — on recorded video calls.

Now 10 of their executives are facing 20 years each.

This isn’t a leak. It’s not speculation. The DOJ unsealed the charges on March 31, 2026, and the first defendants have already appeared in federal court in Oakland. The operation’s codename: Operation Token Mirrors.

The Sting: How the FBI Built Its Own Crypto Token

In 2024, the FBI did something no law enforcement agency had ever done before. They created a fully functional ERC-20 token on the Ethereum blockchain called NexFundAI (NEXF) — complete with a website, a whitepaper-style pitch, and everything a legitimate project would have.

Then they went shopping for market-making services.

FBI agents, posing as NexFundAI’s founders, approached crypto market-making firms and asked for help boosting their token’s trading volume. The firms didn’t hesitate. In recorded video calls, employees from these firms explained — in detail — how they could fake trading activity to make it look like the token had organic demand.

One employee from CLS Global, a UAE-based firm, told the undercover agents the company could “help with volume generation” so NexFundAI could meet exchange listing requirements. He then walked them through the mechanics: an algorithm that “basically does self-trades, buying and selling … from multiple wallets so it’s not visible.”

He even acknowledged what he was doing: “I know that it’s wash trading and I know people might not be happy about it.”

That call was recorded. And it became Exhibit A.

The Firms: Gotbit, Vortex, Contrarian, and Antier

The charges target executives and employees from four market-making firms that allegedly ran pump-and-dump operations across more than 60 cryptocurrencies dating back to 2018:

Contrarian

DefendantRoleStatus
Manu Singh, 34CEOArrested in Singapore (Oct 2025), extradited to U.S., appeared in Oakland federal court March 30, 2026
Kushagra SrivastavaCFOCharged
Vasu Sharma, 26Business Development AssociateArrested in Singapore (Oct 2025), extradited to U.S., appeared in Oakland March 30, 2026
Sabby SinghExecutive at partner firm Antier SolutionsCharged

Vortex

DefendantRoleStatus
Gleb GoraCEOExtradited from Singapore
Sergei RyzhkovCFOCharged
Michael VogelBusiness Development ManagerCharged

Gotbit (Previously Resolved)

DefendantRoleStatus
Antoine TsaoEmployeePleaded guilty
Nemanja PopovEmployeePleaded guilty

Gotbit’s founder, Aleksei Andriunin, was arrested in Portugal in October 2024, extradited to Boston, pleaded guilty, and was sentenced to 8 months in prison — plus forfeiture of approximately $23 million in crypto assets.

How the Pump-and-Dump Machine Worked

The scheme was a factory operation. Here’s the playbook these firms allegedly ran across dozens of tokens:

Step 1: Get hired by a token project. New token projects would pay market-making firms to “provide liquidity” — a legitimate service in traditional finance. But these firms weren’t providing real liquidity.

Step 2: Wash trade to inflate volume. Using algorithms and dozens of wallets, the firms would execute self-trades — buying and selling the same token between their own wallets. On-chain, it looked like organic trading activity. To exchanges, it looked like the token was gaining traction.

Step 3: Pump the price. The fake volume attracted real traders who saw what appeared to be a liquid, active market. As retail investors bought in, the price climbed.

Step 4: Dump. Once the price hit target levels, the token project founders and the market makers would sell their holdings into the inflated demand. Retail investors were left holding worthless bags.

The DOJ alleges this cycle was repeated across more than 60 tokens, generating millions in illicit profits while retail investors took the losses.

The Numbers

Here’s what Operation Token Mirrors has produced across both phases (2024 and 2026):

  • 18 individuals and entities charged total
  • Over $25 million in cryptocurrency seized
  • More than 60 cryptocurrencies involved in fraudulent wash trading
  • Up to 20 years in prison per count (wire fraud and conspiracy to commit market manipulation)
  • $250,000 fine per violation
  • Over $1 million seized in the latest round alone

CLS Global, one of the firms caught in the first phase, has already pleaded guilty and been fined $428,059, placed on 3 years probation, and banned from U.S.-accessible crypto markets.

Why This Matters More Than a Typical Enforcement Action

There are two reasons this case is different.

First, the FBI proved it could infiltrate crypto’s gray market infrastructure. Market-making firms that offer wash trading services have operated for years with near-impunity, assuming the opacity of blockchain transactions and offshore incorporation would protect them. The FBI didn’t try to unravel existing wash trading retroactively — they set up a target and let the firms incriminate themselves in real time. That’s a template they can repeat.

Second, this happened after the DOJ disbanded its crypto enforcement unit. In April 2025, Deputy AG Todd Blanche shut down the National Cryptocurrency Enforcement Team (NCET), implementing Trump’s directive to end “regulatory weaponization against digital assets.” The memo explicitly said the DOJ would no longer pursue enforcement actions that “superimpose regulatory frameworks on digital assets.”

But the same memo made clear that fraud, market manipulation, and schemes that harm investors are still fair game. Operation Token Mirrors is the proof. The DOJ isn’t going after exchanges for what their users do. It’s going after firms that deliberately rig markets.

This is the new enforcement line: the government isn’t regulating crypto out of existence, but it will prosecute outright fraud. If you’re building legitimate products, the regulatory environment just got friendlier. If you’re running a wash trading shop out of Singapore, the FBI might already be your client.

The Bigger Picture: DOJ Crypto Enforcement in 2026

This case doesn’t exist in a vacuum. Despite disbanding the NCET, the DOJ has been on a tear in 2026:

  • $15 billion in Bitcoin seized from Chen Zhi, who ran forced-labor “pig butchering” scam compounds in Cambodia — the largest forfeiture in DOJ history
  • $61 million in Tether seized in North Carolina tied to pig butchering scams (February 2026)
  • 12 individuals charged (9 guilty pleas so far) for stealing $263 million in Bitcoin from a single victim through social engineering — they blew the money on $500K nightclub tabs and 28 exotic cars
  • Fresh investigation into Binance over Iran allegedly using the platform to move $1.7 billion to terrorist proxies including Houthi militants
  • $225 million civil forfeiture related to cryptocurrency investment fraud money laundering

The pattern is clear: the DOJ has narrowed its focus but increased its intensity. Instead of going after DeFi protocols for failing to register as securities exchanges, it’s targeting fraud, manipulation, and national security threats. The cases are bigger, the sentences are longer, and the seizures are measured in billions.

What This Means If You Work in Crypto

If you’re a developer, trader, or founder in the crypto space, here’s what you need to know:

Wash trading detection is now a career. Exchanges, analytics firms, and compliance teams need people who can identify artificial volume. The FBI just demonstrated that wash trading leaves traces — and the firms doing it will talk about it openly if they think they’re safe. On-chain analytics, market surveillance, and forensic blockchain analysis are all growth areas.

Compliance isn’t optional anymore. The SEC and CFTC just issued a joint interpretation on March 17 classifying 16-18 major cryptocurrencies as digital commodities. Regulatory clarity is arriving, and firms that don’t build compliance infrastructure now will be the next targets.

Market-making is getting legitimized. The firms that got caught were offering wash trading as a service. Legitimate market makers who provide real liquidity — and can prove it — are now in a stronger competitive position. The bad actors are being removed.

The enforcement line is fraud, not innovation. Building a new DeFi protocol? The DOJ isn’t coming for you. Running a pump-and-dump operation? The FBI might already have a token with your firm’s fingerprints on it.

The Bottom Line

The FBI built a fake cryptocurrency, deployed it on Ethereum, recorded market-making firms offering to wash trade it, and then arrested them. The message couldn’t be clearer: crypto market manipulation isn’t a gray area. It’s wire fraud, it carries 20 years, and law enforcement has the tools to catch it — even if they have to build their own blockchain token to do it.

Ten executives are about to find out the hard way that “it’s crypto” is not a legal defense.


Related reading: North Korea Just Backdoored npm’s Most Popular HTTP Library · Google’s Quantum Chip Can Break Bitcoin in 5 Years

Looking for your next crypto role?

Browse hundreds of Web3 and crypto positions on Cryptogrind — from smart contract engineers to DeFi analysts.

Browse jobs