Bitconnect, a cryptocurrency lending platform founded by Satish Kumbhani and launched publicly in 2016, collected approximately $2.4 billion from investors worldwide before collapsing on January 16, 2018, when its operators abruptly announced closure of the lending and exchange operations. The platform had promised returns approaching 1 percent per day — roughly 3,700 percent annually — through a proprietary “Trading Bot and Volatility Software” that purportedly exploited Bitcoin price movements on behalf of lenders. No such trading engine existed; DOJ prosecutors later established that Bitconnect operated as a classic Ponzi scheme, using new investor deposits to pay earlier participants while operators diverted funds through a global promoter network.
Kumbhani, a resident of Hemal in the Indian state of Gujarat, was indicted by a federal grand jury in the Southern District of California on February 25, 2022, on charges including wire fraud conspiracy, commodity price manipulation conspiracy, operation of an unlicensed money transmitting business, and international money laundering conspiracy. He faces a maximum statutory penalty of 70 years if convicted on all counts. As of November 2024, Kumbhani remains at large and in fugitive status; his location has not been confirmed by US authorities. Indian enforcement authorities separately tracked him to the Ahmedabad area and issued a lookout notice, but no arrest has been made.
Glenn Arcaro, Bitconnect’s top national promoter in the United States, pleaded guilty to conspiracy to commit wire fraud on September 1, 2021, and was sentenced to 38 months in prison in September 2022. Arcaro forfeited no less than $24 million. The US Justice Department subsequently sold $56 million in seized Bitconnect-linked cryptocurrency to begin compensating victims. Carlos Matos, whose viral conference appearance became the scheme’s internet symbol, was not charged; he was a promoter without a documented role in the scheme’s operations or financial controls.
OneCoin, founded by Dr. Ruja Ignatova and Karl Sebastian Greenwood in Bulgaria beginning in 2014, collected more than $4 billion from an estimated 3.4 million investors worldwide by selling a cryptocurrency that did not exist on any real blockchain. The scheme ran primarily between late 2014 and late 2017, during which OneCoin was marketed globally as a Bitcoin rival backed by proprietary mining and a private distributed ledger. Regulators and prosecutors later established that OneCoin had no functioning blockchain; what the company maintained was a private database that administrators could manipulate at will, with “coins” allocated to investor accounts bearing no relationship to any cryptographic proof of work or consensus mechanism.
Ignatova, a German-Bulgarian national holding a doctorate in law from the University of Konstanz, disappeared on October 25, 2017, boarding a Ryanair flight from Sofia to Athens. She has not been seen publicly since. In 2022, the FBI added her to its Ten Most Wanted Fugitives list. In June 2024, the US State Department raised the reward for information leading to her arrest to $5 million. As of mid-2026, she remains at large. A US federal indictment against her, filed in the Southern District of New York and originally sealed in October 2017, charges wire fraud, securities fraud, and money laundering conspiracy.
Her brother and successor as OneCoin’s public face, Konstantin Ignatov, was arrested at Los Angeles International Airport in March 2019, pleaded guilty to fraud-related charges under a cooperation agreement, testified at a co-conspirator’s trial, and was sentenced to time served — 34 months — by Judge Edgardo Ramos on March 5, 2024. Karl Sebastian Greenwood, co-founder and head of OneCoin’s global sales network, was arrested in Thailand in 2018 and sentenced to 20 years in federal prison in 2023. In April 2026, the DOJ opened a $40 million victim compensation process from forfeited assets, with claims accepted through June 30, 2026.
USI-Tech, a cryptocurrency investment platform founded by German nationals and operated out of Dubai, defrauded tens of thousands of investors across North America, Europe, and Asia of approximately $150 million before shuttering its US operations overnight in early 2018 and abandoning its global customer base entirely. The scheme’s core product was the “BTC Package” — a €50 unit of Bitcoin that investors were promised would yield 1 percent per day over 140 days, equating to a 140 percent total return. Layered atop the package program was a twelve-level multilevel marketing commission structure that paid recruiters 10 percent on direct referrals and distributed residual commissions across the full downline, ensuring that the platform’s most financially invested participants were also its most motivated promoters.
In December 2017 and January 2018, North American securities regulators began issuing emergency cease-and-desist orders. USI-Tech responded by suspending US operations, claiming the shutdown was a voluntary compliance measure, while continuing to solicit investors in other jurisdictions. By April 2018, a cascade of regulatory actions across Spain, New Zealand, and multiple Canadian provinces had effectively expelled the platform from regulated markets. After its global operations wound down, the platform went dark.
The principal operator identified by US prosecutors is Horst Jicha, a German national and co-founder of USI-Tech whom the Eastern District of New York indicted in August 2023 and arrested in Miami in December 2023. Jicha pleaded not guilty, was released on a $5 million bond with house arrest conditions, and absconded in October 2024 after disabling his ankle monitor. He remains a fugitive as of mid-2026. The other principals named in early industry reporting — including individuals operating under the names Jochen Knecht and Thomas Gutschalk — were never publicly identified by US prosecutors as indicted co-defendants. Approximately $150 million in Bitcoin and Ether sent to deposit addresses controlled by Jicha and associates after the platform’s closure remains unrecovered.
Cloud Token Wallet, a mobile cryptocurrency application launched in 2019 and linked to entities in Singapore, Malaysia, and Australia, raised funds from hundreds of thousands of investors across Asia, the Asia-Pacific diaspora, and globally by claiming that an embedded “artificial intelligence” trading robot — marketed as “Jarvis” — would generate monthly returns of 6 to 12 percent by executing automated cryptocurrency arbitrage across exchanges. No such algorithmic trading infrastructure existed; the platform was a Ponzi scheme that paid existing participants from new investor deposits until deposit inflows became insufficient to sustain payouts. The application ceased functioning in late 2019 to mid-2020. Losses are disputed in the record: estimates from community sources and partial investigations range from $500 million to $4 billion, though no single regulatory enforcement action has produced a judicially validated loss figure.
The scheme was primarily associated with Ronald Aai (also known as Ronald Aai Weng Joon), a Malaysian national who built and promoted Cloud Token’s technical and commercial operations from Singapore, initially with co-operator Daniel Csokas. Aai was removed from WBF Exchange’s Singapore offices where he had been operating and relocated to Malaysia as regulatory scrutiny in Singapore mounted in mid-2019. The scheme’s corporate structure included Cloud Technology & Investments Pty Ltd, registered in Australia, which gave it an appearance of Western legitimacy to Asia-Pacific investors even as the scheme was operated primarily from Southeast Asia.
Chinese law enforcement arrested 72 individuals connected to Cloud Token operations in actions conducted in 2020, making the Chinese enforcement the most significant documented legal action against the scheme’s participants. Ronald Aai’s status as of mid-2026 is not publicly confirmed as resulting in criminal conviction; the scheme is categorised here as At-Large because no central operator has been publicly convicted in a Western or Singapore jurisdiction. James Riemers, an Australian national described in some records as a scheme promoter and linked to the Australian entity, has not been publicly named in any court filing confirming charges or conviction.
Crypto888 Club was a cryptocurrency pyramid scheme that operated primarily out of Thailand from approximately 2017 through 2019, promising investors daily returns on cryptocurrency deposits framed as proceeds from automated trading and arbitrage. The scheme collapsed in 2019 after operators ceased paying returns and withdrew from public contact; no operator has been arrested or brought to trial as of the time of writing. Estimated losses of approximately $38 million have been cited in Thai-language financial media and in reports linked to investigations by Thailand’s Department of Special Investigation (DSI), though no court judgment has established a final verified figure.
The scheme recruited heavily among Thai nationals and members of South and Southeast Asian diaspora communities, using a multi-level marketing structure in which participants earned commissions by bringing in new depositors. Promotional materials emphasized the speed and certainty of the stated daily returns — figures cited in participant accounts ranged from 0.5 to 2 percent per day — and positioned the platform as a passive income vehicle accessible to anyone who could acquire and deposit cryptocurrency. In practice, the daily returns were funded by new investment capital rather than any trading operation, a structure that could only persist as long as recruitment outpaced withdrawal demand.
When the scheme’s operators ceased operations in 2019, withdrawals stopped without notice and the platform’s online presence was dismantled. Thai financial authorities, including the DSI and the Securities and Exchange Commission of Thailand (SEC Thailand), recorded the collapse among a cluster of similar crypto yield schemes that operated during the 2018–2019 period. None of the scheme’s identified operators have been located or prosecuted. The $38 million figure, while widely cited in Thai reporting, should be understood as an estimate derived from reported member counts and average deposit sizes rather than from an audited accounting of funds.
Research note: Documentation of Crypto888 Club is substantially thinner than for similarly-sized schemes in common-law jurisdictions. No English-language court filing, SEC or DOJ press release, or major blockchain analytics report covers this scheme directly. The account below draws on Thai-language financial media coverage, SEC Thailand public alerts, and the pattern of DSI investigations into crypto pyramid schemes during 2018–2019. Dollar-figure precision should be treated with corresponding caution.