Bolster AI’s Threat Intelligence Lab uncovered a dark web counterfeit currency marketplace that appeared to manufacture order volume, security features and vendor credibility to attract buyers. During a nine-day investigation, researchers found fewer than 2,400 orders generated by the marketplace’s payment infrastructure despite vendors displaying more than 57,000 claimed orders, alongside reused Bitcoin addresses and order counts that changed only during a narrow overnight window.
The investigation also found that advertised protections such as multisig escrow and secure messaging were not supported by the underlying implementation. Bolster AI says the findings demonstrate how fraud operations increasingly engineer trust itself, using fabricated activity, security claims and buyer protections to make scams appear legitimate. The company shared its findings and supporting evidence with relevant law enforcement and financial authorities ahead of publication.