United States prosecutors have charged six people in connection with an alleged NFT wallet-draining scheme run from Madagascar, and the details are a wake-up call for anyone who has ever minted an NFT. According to an FBI affidavit described by The Defiant, the scheme is estimated to have caused at least 516,695 USD in losses across 74 victim-linked wallets, with victims tricked into granting attackers unlimited approval to spend their USDT stablecoin.
By Imani Davis | October 27, 2026
The Hook: Six Charged in a Far-Away Scam With Local Consequences
The case, reported by The Defiant on Tuesday, centers on what investigators describe as a wallet-draining operation allegedly operated from Madagascar, an island nation off the coast of East Africa. Distance means little in crypto crime: the victims were linked to wallets that interacted with malicious NFT offers, and the losses crossed borders instantly. US authorities charging six individuals sends a message that NFT scams are being treated as serious financial crime, not harmless internet tricks.
An affidavit from the Federal Bureau of Investigation estimates at least 516,695 USD in losses across 74 victim-linked wallets, according to The Defiant. Those numbers matter because they show the average loss per victim was substantial, this was not pocket change scattered across millions of users. It was concentrated harm against dozens of people.
How the Alleged Scheme Worked
To understand the case, you need to know what a wallet drainer is. In crypto, your wallet is your account, and every action requires a signature, like signing a check. Scammers build fake websites, often dressed up as NFT mint pages or exclusive collections, and trick users into signing away permissions. One moment you think you are minting a digital collectible; the next, attackers have the keys to your funds.
The most dangerous permission is called a spending approval. When you grant one, you allow a contract or address to take tokens from your wallet, up to the amount you approved, without asking again. According to the FBI affidavit described by The Defiant, the alleged scheme used unlimited USDT spending approvals. That means victims did not just lose a one-time payment; they authorized a standing order for attackers to take as much of the Tether stablecoin as the wallet held.
- Victims — 74 victim-linked wallets identified in the FBI affidavit.
- Losses — estimated at least 516,695 USD.
- Method — unlimited USDT spending approvals obtained through wallet-draining techniques.
- Charges — six individuals charged by US authorities in the alleged scheme.
The Core Conflict: NFTs’ Golden Rule Was Broken
NFT collectors have long repeated a comforting phrase: self-custody means nobody can touch your assets. That is true only if you never sign away access. Drainer schemes exploit the gap between owning your wallet and understanding what you approve. Every signature is a decision, and attackers design their pages so the dangerous ones look routine.
The charges also highlight a shift in enforcement. For years, drainer crews seemed to operate with impunity from jurisdictions far from their victims. A US case naming six individuals, built on blockchain tracing that connects wallets to real people, shows investigators following the money across borders. Allegations are not proof, and the defendants are presumed innocent until proven otherwise, but the investigation itself changes the risk math for would-be copycats.
What This Means for Your Wallet
Protecting yourself costs nothing and takes minutes. First, before minting any NFT, verify the site is official, linked from the project’s verified social account or website, not from a stranger’s message. Second, read what you are signing. If a prompt asks for unlimited token approval, treat it as a red alert. Third, periodically audit your wallet’s existing approvals using a reputable approval-checker tool, and revoke the ones you no longer need. Those old approvals are exactly the kind of door attackers walk through.
Fourth, keep your valuable holdings in a wallet you never use for minting. A cheap “burner” wallet for experiments, and a cold wallet for serious holdings, is the crypto equivalent of not carrying your life savings in your back pocket at a crowded market.
The Verdict
This case is a reminder that the biggest threat to your NFTs and tokens is usually not a protocol failure but a signature you were tricked into giving. Six people now face charges, and dozens of victims learned the expensive way that unlimited approvals are a standing invitation. Verify the site, question every signature, audit your approvals, and separate your minting wallet from your savings. The blockchain cannot refund you for a mistake, but a few careful habits can stop the mistake from ever happening.
The cryptocurrency market remains highly volatile. This article is for informational purposes only and does not constitute financial advice.
do the math, about 7k per wallet average. these werent whales, just regular people who clicked the wrong mint link
this. 74 wallets sounds small until you realize each one is someones savings routed to madagascar in one signature
unlimited approvals in 2026, some people refuse to learn. revoke.cash exists people
fr, the mint links came through legit looking dms. always verify the contract before signing anything
verifying the contract doesnt help much when the scam IS the mint though. the approval itself was the payload here
exactly, people keep posting verify the contract like the contract wasnt the weapon. approval literacy is the whole missing layer here
revoke.cash after the fact is closing the barn door though. the real fix is wallets defaulting to exact spend amounts, unlimited approvals should be buried behind an advanced toggle
exact amount by default with unlimited buried behind an advanced toggle would kill most of this overnight. wallets keep optimizing the wrong side of the flow
exact spend by default should have shipped years ago. the toggle is built in every wallet, its buried because partnerships want smooth ux over safety
exact spend by default plus the simulation preview already exists in rabby. the problem is every mint flow trains people to click through
unlimited USDT approvals should not even be possible to sign blindly in 2026. wallet UIs carry some of this blame too
rabby and phantom warn on these now but people click through anything that says mint. uis can only do so much honestly
phantom added simulation previews too and people still skip right past them. you cant ui your way around someone speedrunning a signature at 2am
516k across 74 wallets averages around 7k per victim. these werent whales, just regular people minting what looked like a fun drop
six charged over half a million dollars, FBI reaching all the way to madagascar for a drainer crew. thats actually encouraging
charging six people operating from Madagascar means the FBI will chase this anywhere. that is genuinely a deterrent we did not have in 2021
516k from only 74 wallets is what gets me. drainer crews used to grind thousands of wallets for dust, one unlimited usdt approval per victim is brutal efficiency
unlimited approvals behind an advanced toggle should be a regulatory case study by now. six arrests treats the symptom, default-accurate amounts treat the disease
six names charged and 516k routed through madagascar. justice is nice but i want to know if any of the 74 wallets ever see a cent back, thats the part these cases never answer
victims seeing a cent back is rare but not zero, madagascar seizure cases have frozen-asset recovery channels. 74 wallets vs 516k though, the math per victim is grim even with full recovery
frozen-asset recovery channels exist on paper but madagascar cooperating on crypto seizures is a whole other question. those 74 wallets are watching a 516k number shrink to legal fees in real time
even with full cooperation, 516k across 74 wallets minus two years of process is a rounding error per person. the deterrent is the only real payout here
cross border seizure from antananarivo is untested water. the deterrent is the charging, the recovery is the long shot
74 wallets, about 7k average, one unlimited USDT approval each. the drainer math got efficient exactly as wallet UIs stayed lazy
516k across 74 wallets on unlimited usdt approvals. three clicks in revoke.cash costs less time than one support ticket to the fbi