Without a passport and bitcoins: a new wave of "second citizenship" fraud targets Russians' crypto wallets
The market for services related to obtaining second citizenship and residence permits has become fertile ground for a new type of fraud. Attackers skillfully exploit fears of complex bureaucracy and clients' natural desire to speed up the process. However, their main tool in 2026 is cryptocurrency — ranging from banal extortion of advance payments to completely emptying digital wallets.
The scheme typically looks like this: the fraudster themselves acts as a "client," approaching supposedly legitimate intermediaries who are willing to accept payment in digital assets. Under the guise of making a deposit, the victim is asked to provide a crypto wallet address supposedly for balance verification. After this, the potential client is quietly handed over to a more experienced accomplice, who uses a whole arsenal of technical means — from dangerous crypto drainers to targeted phishing created specifically for the victim.
Who is at risk and what are the consequences?
The main target of criminals is entrepreneurs and people planning to relocate. The risks here are colossal and are not limited to financial losses alone. Having lost their funds, the victim risks becoming a defendant in a criminal case on illegal migration, which permanently closes the path to legally obtaining a foreign passport. Never transfer an advance payment in cryptocurrency or to individual bank cards. All transactions must be conducted under an official agreement through the legal entity's settlement account.
Other methods of deception: from calls to clones
Crypto traps are just part of a larger picture. In 2026, applicants for second citizenship receive unexpected calls supposedly from consulates demanding urgent payment of fines for failing to notify about relocation on time. Another common trick is an offer to obtain a passport remotely, without proof of roots. Fraudsters collect advances, copies of documents, and disappear without a trace. For example, since August 2025, calls have been recorded using a tricky two-step scheme: first, fake lawyers clarify the application details, and then they vanish with the money.
The main trend of the year is the widespread use of social engineering. High-quality clone websites of migration services are created, targeted advertising is used, along with hacked messenger accounts and dangerous mobile applications. Through programs for tracking document status, attackers gain full access to bank profiles.
My expert opinion: Protection against such schemes comes down to a critical perception of any tempting promises. Carefully check domain names and the legal status of companies through registries. Use two-factor authentication and never send documents via open channels. Remember: if you are promised "guaranteed and fast" citizenship for cryptocurrency — it is a one hundred percent trap.