Back to News
NewsEthereumInflationInterest RatesBitcoinFederal Reserve

Thai Crypto Billionaire's Escape, FBI Tokens, and Cybersecurity Events

Recent cybersecurity incidents include a Thai billionaire's fraud case, arrests in Ukraine, and scams targeting Nordstrom customers.

Aisha Patel
March 21, 2026 2 min read
Thai Crypto Billionaire's Escape, FBI Tokens, and Cybersecurity Events

Recent developments in the cybersecurity realm have raised significant concerns, including accusations of fraud and alarming scams.

  • Thai billionaire Vorawat Narknawadi is under investigation for a $42 million fraud involving his crypto platform 1000X.
  • Ukrainian authorities arrested a co-founder of a $1 million crypto pyramid scheme.
  • The FBI has seized websites linked to Iranian hackers after a significant cyberattack on the medical sector.
  • Nordstrom customers have reported falling victim to a crypto fraud scheme.

Thai Billionaire Under Investigation for Fraud

Vorawat Narknawadi, a notable figure in the Thai crypto industry and the founder of the platform 1000X, is being pursued by law enforcement following allegations of defrauding investors to the tune of approximately 1.39 billion baht (around $42 million). The investigation commenced after multiple complaints were lodged against him.

In March 2023, the Thai Securities and Exchange Commission had already flagged Narknawadi for operating without the necessary licenses. Narknawadi, who previously gained fame as the lead singer of the band DoubleDeep, transitioned into the crypto space, claiming a substantial accumulation of Bitcoin since 2012.

However, records show that his business activities are not without controversy, as he faces significant losses and debts through other ventures. Reports suggest he has fled to the UAE, where he owns various assets.

Ukrainian Authorities Bust Crypto Pyramid Scheme

A crypto pyramid scheme operating in Ukraine has been dismantled by local law enforcement, resulting in the arrest of one of its co-founders in Kyiv. The group allegedly lured investors with promises of high returns from their own token, while the operation primarily relied on recruiting new participants.

Investigations revealed that the scheme had been running since 2022, with total losses estimated at $1 million. Authorities executed search warrants across several regions, confiscating evidence and assets from the suspects.

FBI Takes Action Against Iranian Hackers

In a decisive move, the FBI has seized websites associated with the Iranian hacktivist group Handala, following a significant cyberattack on medical technology company Stryker. This group, believed to have links to Iran's intelligence service, executed a large-scale attack in March, leading to the compromise of 80,000 devices and the theft of sensitive data.

While details of the seizure have not been fully disclosed, the domains were redirected to FBI-controlled DNS servers, indicating law enforcement's efforts to curb such cyber threats.

Nordstrom Customers Targeted in Crypto Fraud Scheme

In the United States, customers of the luxury retailer Nordstrom have reported receiving fraudulent emails that promised to double their cryptocurrency holdings. The emails, which appeared to come from a legitimate company source, created a false sense of urgency and instructed recipients to act quickly.

As of mid-March, scammers had reportedly received over $5,600 in cryptocurrency from victims, highlighting vulnerabilities in digital security measures.

FBI Warns of Fake Tokens and Phishing Scams

On March 19, the FBI alerted crypto users about a new phishing scam involving counterfeit tokens labeled as "FBI tokens." These scams targeted users on the Tron blockchain, with messages threatening to freeze assets unless personal information was provided through a third-party site.

The breadth of victims affected by this scheme is still being assessed, underscoring the persistent risks in the cryptocurrency landscape.