UK Fake-Police Crypto Scam: Three Men Jailed Over £4M Theft

Picture this. You get a call from someone who sounds exactly like a Metropolitan Police officer. They know your name, your postcode, even the bank you use. They warn you your funds are at risk and point you to a police-branded website that looks legit down to the crest. Minutes later, your crypto is gone.

That is the playbook a London crew ran for months, siphoning more than £4 million in digital assets from eight victims before a judge finally shut it down. The sentences landed this week, and the details say a lot about how social engineering has evolved in the UK.

It was not just a random phishing text. It was the uniform of authority, copied and pasted into the online world.

Impersonation scams are not new. What is new is how cleanly they now blend official-looking websites, call scripts, and crypto handover flows. In this case, three men posed as police, steered victims to fake “police” portals, and walked them through what looked like a fraud-protection process. In the end, wallets were emptied.

According to the Metropolitan Police, eight victims lost more than £4 million via this setup, which leaned on convincing police-themed websites to corral people into handing over access or authorizing transfers The Block.

When authority is forged and digitised, the target’s instinct to comply does the heavy lifting. That is the real exploit.

On 16 July 2026, Southwark Crown Court handed down prison time: Anthony Ikenwe, 29, and Kevin Nwamma, 25, each got six years for conspiracy to commit fraud and five years for money laundering, to run concurrently. Hamza Bashir, 23, received three years and nine months for conspiracy to commit fraud and three years for money laundering, also concurrent Decrypt.

How the fake-police play worked

First contact

The hook was a call or message framed as urgent. The “officer” cited a suspected compromise and told victims to take immediate action. The pitch was not sloppy. It borrowed the tone and pacing of a real fraud desk.

The switch to fake sites

Victims were ushered to websites dressed up with police insignia and language. Once you believe you are talking to law enforcement, a form requesting wallet details can feel like routine procedure. That was the trap. The Metropolitan Police highlighted how these convincing portals underpinned the scheme The Block.

Authorised by the victim

Rather than brute-forcing keys, the attackers nudged people into authorising transfers or revealing enough information to reroute funds. It is compliance theatre. The victims clicked the buttons themselves.

Sequence of events the victims experienced

1. Initial contact from a caller presenting as Metropolitan Police, warning of active fraud.
2. Instruction to visit a police-branded website to “secure” funds.
3. Guided steps that request wallet or exchange details and push urgent authorisations.
4. Immediate movement of crypto to attacker-controlled addresses while the victim is still on the line.
5. Follow-up reassurances that funds are in a “safe account,” then silence.

Timeline: from first reports to sentencing

This was not a quick case. It moved from early victim reports to coordinated raids and, finally, to lengthy sentences.

Date Event Source January 2025 Victims report the fake-police fraud to the Metropolitan Police. A dedicated crypto investigation begins. Decrypt November 2025 Coordinated warrants executed at seven addresses across London and Essex. Three suspects arrested. 40 mobile phones, crypto, and luxury goods seized. Decrypt Mid July 2026 Investigators report tracing roughly £1 million linked to victim funds and locating around £500,000 cash in a Dubai safety-deposit box. Additional luxury purchases identified. The National 16 July 2026 Southwark Crown Court sentences three defendants for conspiracy to commit fraud and money laundering. Two receive six-year terms; one receives three years and nine months. Sentences for laundering run concurrently. Decrypt Case totals More than £4 million in crypto stolen from eight victims via fake police websites and guided authorisations. The Block

Following the money: what investigators found

Cash and goods the court could point to

Police said they recovered roughly £1 million tied to victim funds, plus a stack of physical assets that helped prove proceeds-of-crime: about £500,000 in cash in a Dubai safety-deposit box, a car bought for nearly £60,000, and luxury items valued above £26,000. Those details matter because they show the spending patterns that follow a crypto cash-out The National.

Digital breadcrumbs that stuck

As part of the November 2025 raids, officers grabbed 40 mobile phones along with records, wallets, and goods. That volume of devices is telling. It suggests rotating SIMs, burner accounts, and compartmentalised roles inside the group. It also gave the Metropolitan Police Cryptocurrency Team a lot of cross-references to work with when matching transfers to communications Decrypt.

Tracing the on-chain flows is rarely the hard part anymore. The bottleneck is mapping those flows to the humans holding the phones, bank cards, and pick-up points. That is what the warrants across London and Essex achieved.

Why this scam worked

Authority bias did the heavy lifting

People respond to badges and legal language. Online, a crest and a case number can feel as persuasive as a uniform at your front door. Once the victim buys the premise, the attacker does not need to be brilliant at crypto. They just need to keep the person moving.

Crypto’s self-custody gap

There is still confusion around what is normal in self-custody. A real police officer will never ask for a seed phrase, private key, or 2FA code. But the average person has not had that drilled into them the way the banks have drilled “don’t share your PIN.”

Friction that hides the drain

Blockchain transfers clear fast, but they can look abstract to a user staring at a “secure account” screen. The interface is the stage. If the script tells you this is isolation for your safety, the drain can be disguised as protection.

Mugshots of the three defendants supplied by the Metropolitan Police — official images confirming the identities of those jailed in the £4m fake‑police crypto scam. — Source: Metropolitan Police (photo published by The National)

Implications for UK crypto users and platforms

For individuals

Start with a rule you do not break: no law enforcement will ever ask you to move your assets to a “safe wallet,” share your seed phrase, or hand over 2FA codes. If someone says they are from the police, hang up, find the official non-emergency number, and call back. Do not use numbers supplied by the caller or on a site they point you to.

For exchanges and wallets

There is room to do more without tripping into surveillance. Rate limits and just-in-time prompts around sudden first-time withdrawals to fresh addresses could flag coaching patterns. Flagging transactions that coincide with live support calls may help, too. None of this is foolproof, but it buys time.

For UK regulators and platforms together

Clearer, standardised messaging across apps would help. Every wallet screen should repeat the same line in plain English: no one legitimate will ever ask for your seed or 2FA. Every exchange should make it easy to pause withdrawals with a single tap and a 24-hour hold if a user suspects pressure.

This case also underscores cross-border cash-outs. Investigators found significant cash in Dubai. Cooperation with foreign authorities is the gating factor when assets leave UK jurisdiction The National.

Risks and what could go wrong

• Copycat crews reuse the same scripts and site templates with minor tweaks to bypass newly flagged domains.
• Caller ID spoofing and SIM rotation make it hard to pin a single device to a suspect without a wider pattern of life.
• Victims may hesitate to report quickly, shrinking recovery odds as funds hop chains or are mixed.
• Excessive transaction friction could push users to riskier tools that promise fewer freezes or prompts.
• Cross-border cash-outs and cash pickups complicate confiscation, especially when funds land in jurisdictions with slower mutual assistance.
• Phishing that targets email recovery flows at exchanges may sidestep wallet hygiene entirely.

The next version rarely looks identical. Assume the script will adapt, not disappear.

If you want a steady read on security cases like this and the policy shifts that follow, Crypto Daily tracks the legal, on-chain, and user-safety angles in one place. See recent coverage and analysis at Crypto Daily.

Frequently Asked Questions

Who was sentenced and for how long?

Three men were jailed at Southwark Crown Court on 16 July 2026. Anthony Ikenwe, 29, and Kevin Nwamma, 25, each received six years for conspiracy to commit fraud and five years for money laundering, to run concurrently. Hamza Bashir, 23, received three years and nine months for conspiracy to commit fraud and three years for money laundering, concurrent Decrypt.

How much did the gang steal and how did they do it?

Investigators say more than £4 million was taken from eight victims. The group posed as police, directed people to fake law-enforcement websites, and walked them through supposed “secure” steps that authorised transfers or revealed access details The Block.

What did police recover?

Roughly £1 million linked to victim funds was traced. Officers also found about £500,000 in cash in a Dubai safety-deposit box, plus a car worth nearly £60,000 and luxury goods valued above £26,000 The National.

How did the investigation unfold?

Victims came forward in January 2025. In November 2025, officers executed coordinated warrants at seven addresses across London and Essex, arresting the three men and seizing 40 phones, crypto, and goods. Sentences followed in July 2026 Decrypt.

Can real police ever ask me to move my crypto to a safe wallet?

No. Law enforcement will never ask for your seed phrase, private keys, 2FA codes, or request that you transfer assets to a “police safe account.” If you are told otherwise, end the call and contact the force directly through verified numbers.

What should I do if I think I have been targeted?

Stop all transfers. Contact your exchange or wallet support to request a temporary withdrawal hold. Save screenshots, numbers, and URLs. Report to Action Fraud and your local police. Fast reporting improves the chance of freezing funds before they move again.

Will victims get all their money back?

Recovery varies. Some funds have been traced and assets seized, but crypto can move across services and borders quickly. Courts can order confiscations and compensation where possible, yet full restitution is not guaranteed.

Disclaimer: This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.