Cybercrime

Crypto-RIP-DEAL

Successful resolution of a 380,000 euro crypto fraud and asset recovery for the victim – An insight into modern fraud schemes

In the field of organized crime, a particularly insidious form of fraud has developed in recent years: the so-called „RIP DEAL.“ In a recent case involving the theft of Ethereum worth 380,000 euros, our law firm was able to achieve a significant success for the victim. The case provides important insights into the mechanics of these criminal structures and demonstrates pathways to successful law enforcement.

RIP Deal Lawyer Cybercrime Cryptocurrency

Table of Contents

What is a RIP DEAL? – A Comprehensive Analysis

The term „RIP DEAL“ was coined in 1994 by the Dutch investigative group SPARTA and describes a multi-phase fraudulent legal transaction. The name is derived from English, where „to rip“ stands for to snatch and „deal“ for business. Since around 1989, this form of fraud has developed into a highly specialized area of crime characterized by a particular degree of organization, professional perpetrator structures, and international networking. Characteristic features include the multi-phase execution and usually substantial amounts of damage.

The (typical) procedure of the RIP DEAL

The pre-offence phase

The first phase of a RIP DEAL is characterized by careful planning and organization. The perpetrators carefully select their targets and potential victims and build a deceptively genuine business identity. This includes procuring the necessary infrastructure, such as special communication tools and forged documents. During this phase, the specialized perpetrator team is also put together, with each member given a clearly defined role.

The initiation phase

In the second phase, specially trained „mediators“ come into action. They make initial contact with the potential victims and are trained to build a trustworthy facade. The victims are promised a lucrative deal (in our case, a supposed corporate investment), with the mediators very carefully probing the victim's willingness to participate. This phase is crucial for the later success of the fraud.

The trust phase

The third phase serves the targeted establishment of trust. In personal meetings, the perpetrators demonstrate professionalism and respectability. It is not uncommon during this phase for small, successful preliminary transactions to be conducted in order to further strengthen trust. The perpetrators gradually increase the stakes and thus prepare the ground for the actual crime.

The consummation phase

During the fourth phase, the decisive, carefully staged meeting takes place. For this purpose, the victims are regularly lured abroad (in our case, Italy). In the present case, the perpetrators succeeded in spying on the seed phrase of the victim's crypto wallet through clever diversionary tactics. The direct perpetrator, known in the scene by the pseudonym „Kennedy,“ worked together with at least three other individuals. After obtaining the seed phrase, the assets located in the crypto wallet (Ethereum worth approximately 380,000 euros) were immediately transferred away.

The „RECUPERO“ phase

The final phase, known in the scene as „RECUPERO,“ serves to secure the loot and obfuscate the crime. The stolen cryptocurrencies are immediately transferred further and laundered through professional networks. Digital traces are wiped out while the perpetrators physically move away from the crime scene.

The investigative success

The investigation was characterized by meticulous investigative work, professional witness interviews, and intensive blockchain forensics. We owe the successful identification of the main perpetrator „Kennedy“ to the exceptional expertise of the RIP DEAL Unit Vienna. This special unit, led by Insp. Valentin Szaga-Doktor and Insp. Mario Kaintz, has years of experience in combating organized crime and has built a deep understanding of the scene through intensive investigative work. A decisive breakthrough in the case was achieved through the knowledge of known rip-dealers, acquired by Kaintz and Szaga-Doktor over years, which enabled the investigators to present the victim with selected photographs of various potential perpetrators for identification based on the perpetrator's description. Through this specialized preliminary work by the investigators, the victim was able to unequivocally identify the perpetrator. The precise knowledge of the scene, its actors, and typical procedures, paired with the professional documentation of known suspects, proved to be the key to convicting the perpetrator. This investigative success underscores the importance of specialized police units in combating complex, organized crime.

Overcoming procedural hurdles in the preliminary investigation proceedings

The path to successful prosecution proved complex and presented our team with particular challenges. The responsible public prosecutor's office not only maintained and communicated a remarkably skeptical position regarding the issue of domestic jurisdiction—it also repeatedly and emphatically denied that the investigation could lead to success. Until the very end, the public prosecutor's office conveyed to the victim that neither the identification of the perpetrators nor restitution for damages could be expected.

A ruling by the regional court was required to secure the continuation of the preliminary investigation proceedings. This ruling not only confirmed our legal view on international jurisdiction, but also created the basis for further successful investigative steps. The skepticism of the law enforcement authorities was impressively refuted by the actual investigative results: the direct perpetrator was not only identified and arrested, but was also sentenced to a prison term without probation.

Particularly gratifying for our victim was that, contrary to initial prognoses, substantial restitution could be achieved. Already during the main trial, the perpetrator's defense counsel paid 100,000 euros as initial restitution. Furthermore, the victim's entire claims for damages were legally awarded in the criminal judgment. This case exemplifies that persistent legal work and belief in the enforceability of the law can pay off, even against initial resistance.

Conclusion and Outlook

The case impressively demonstrates the increasing professionalization in the field of cryptocurrency crime. At the same time, however, it also highlights the possibilities of successful law enforcement. The combination of specialized investigative work, technical expertise, and legal know-how enables effective law enforcement even in complex crypto-related crimes.

Legal and Cryptoforensic Support

Our law firm specializes in advising and representing victims of crypto crime. A particular focus is placed on asset recovery and repatriation as well as preventive consulting. In addition to comprehensive support ranging from initial case analysis and criminal complaints to litigation representation, we also undertake the analysis and tracing of the incriminated crypto assets themselves.

For questions related to cybercrime, you can contact Roman Taudes and his Team at any time under office@atb.law or by phone at 01 39 12345 available. 

More articles

ATB.LAW Cybercrime Lawyer

Cybercrime in Austria

Legal situation, figures, and action steps
Picture of Roman Taudes
Roman Taudes
Business Email Compromise (BEC)

Business E-Mail Compromise

Who is liable – and when does a GDPR reporting obligation apply?
Picture of Roman Taudes
Roman Taudes
Cyberattack reporting obligations NIS GDPR MAR

Reporting obligations in the event of cyber attacks

What the TeamViewer case means for Austrian companies
Picture of Roman Taudes
Roman Taudes