news.bitcoin.com
A seized bitcoin privacy wallet domain has resurfaced in 2026 under criminal control, reviving a defunct project as a phishing trap targeting unsuspecting users.
U.S. Seized Crypto Domain Falls Into Scammers’ Hands, Users Warned
The domain tied to Samourai Wallet, once a well-known non-custodial bitcoin privacy tool, is now being used to distribute malicious software after falling out of U.S. government control and into the hands of scammers earlier this year.
Samourai Wallet originally operated as a privacy-focused application that allowed users to maintain control of their private keys while using advanced transaction obfuscation tools. Its features included Whirlpool, a Coinjoin implementation, as well as Ricochet and Dojo, which enhanced user privacy through layered transaction techniques and self-hosted infrastructure.
The project came to an abrupt halt on April 24, 2024, when U.S. authorities arrested co-founders Keonne Rodriguez and William Lonergan Hill. Prosecutors alleged the platform facilitated more than $2 billion in bitcoin transactions, including over $200 million tied to illicit activity such as darknet markets, fraud schemes, and sanctioned entities.
Following the arrests, law enforcement seized Samourai’s infrastructure, including servers hosted in Iceland and the primary domain samouraiwallet.com. The application was removed from distribution channels in the United States, effectively shutting down operations.
In 2025, both founders entered guilty pleas to charges related to operating an unlicensed money transmitting business. Sentencing later that year resulted in prison terms of five years for Rodriguez and four years for Hill, along with financial penalties and asset forfeiture.
While the legal chapter closed, the technical reality remained unchanged: because Samourai was non-custodial, user funds were never held by the service itself. Coins remained on the blockchain, accessible through seed phrases, even as the platform disappeared.
The latest twist emerged in March 2026, when the previously seized domain appears to have expired or been auctioned and subsequently acquired by unknown actors. The site now presents itself as a legitimate continuation of the original wallet, complete with branding, feature descriptions, and fabricated blog content dated for 2026.
Security researchers and community members quickly flagged the site as a phishing operation. Reports indicate it attempts to lure users into downloading compromised wallet software or updates designed to extract private keys and seed phrases.
A widely circulated warning from a prominent bitcoin advocate described the situation as a bitter irony, noting that a domain once seized in the name of enforcement had ultimately landed in the hands of actual cybercriminals.
“PSA: A scammer has taken control of the samouraiwallet.com domain. Do not be fooled into downloading malicious software,” the X account Burn the Bridge wrote. “How ironic that the FBI seizes control over the domain only for it to fall into the hands of actual criminals.”
The incident has triggered renewed attention around domain forfeiture practices and the lifecycle of seized digital assets. While law enforcement actions removed the original service, the eventual release of its domain created an opening for impersonation, highlighting a gap between enforcement and long-term user protection.
Security guidance remains straightforward but critical: never enter seed phrases into websites, avoid downloading wallet software from unverified sources, and treat resurrected domains with skepticism. In this case, the original development ceased in 2024, meaning any active version claiming continuity should raise immediate red flags.
The Samourai case, once viewed as a landmark enforcement action against privacy-focused crypto tools, has now taken on a second life as a cautionary tale. It underscores that while blockchain systems preserve funds through self-custody, the surrounding infrastructure, including domains and user interfaces, can still become attack vectors long after a project disappears.
FAQ 🔎
-
What happened to Samourai Wallet?
It was shut down in April 2024 after U.S. authorities arrested its founders and seized its infrastructure. -
Is samouraiwallet.com safe to use?
No, the domain is now controlled by scammers and linked to phishing and malware activity. -
Are user funds from Samourai Wallet lost?
No, funds remain onchain and can be recovered using the original seed phrase. -
How can former users safely recover funds?
Recovery should be done offline using trusted wallets like Sparrow or Electrum with verified guides.