A $150 million-plus Ponzi scheme masquerading as a crypto trading platform stayed online and continued accepting deposits for nearly 12 months after multiple international regulators issued public fraud warnings.
The collapse of DSJ Exchange (DSJEX) and its sister operation BG Wealth Sharing Ltd. in late April 2026 has spotlighted a persistent gap in global crypto enforcement: public alerts often arrive too late — or lack the teeth — to stop fast-moving cross-border scams.
On-chain investigator ZachXBT revealed on May 5 that the scheme, which promised 1.3% to 2.6% daily returns through fake AI trading signals, had grown to over $150 million in victim losses before it finally unraveled. Between April 27 and May 3, per on-chain analysis, operators laundered more than $92 million across blockchains, with approximately $63 million routed to custody platform Cobo and roughly $30 million flowing to OKX-linked addresses.
In a rapid 72-hour response, ZachXBT coordinated with Tether, Binance Security, OKX, and U.S. law enforcement to freeze $41.5 million — including $38.4 million in USDT blacklisted by Tether across 19 addresses on the Tron network.
Yet the platform had been flagged as suspicious for nearly a full calendar year before the takedown.
Timeline of Warnings vs. Continued Operation
- May 2025: UK Financial Conduct Authority (FCA) publishes a warning, listing DSJ Exchange / dsjex.net as an unauthorized firm targeting UK consumers, classifying it as an unauthorized firm and noting that customers dealing with the firm would have no access to the Financial Ombudsman Service or compensation under the Financial Services Compensation Scheme.
- April 25, 2025 (issued earlier, last updated November 2025 and then in April 2026): New Zealand’s Financial Markets Authority (FMA) blacklists dsjoo.com under DSJ Exchange branding (associated with the TXEX operation), for entity impersonation, market manipulation, and fraud.
- December 2025: The National Reserve Bank of Tonga issues a public press release identifying BG Wealth Sharing / DSJEX as a fraudulent investment platform circulating online and targeting Tongan communities domestically and abroad.
- January 2026: British Columbia Securities Commission (BCSC) and The Canadian Securities Administrators adds BG Wealth Sharing to its investment caution list, noting the firm is not registered.
- February 2026: Alberta Securities Commission (ASC) and several other Canadian regulators issue formal investor alerts.
- March 2026: Saskatchewan’s Financial and Consumer Affairs Authority publicly warns about DSJ Exchange and BG Wealth Sharing alongside three other suspected scams.
- Early 2026: Warnings follow from the Philippines SEC, Australia’s ASIC, Utah Division of Securities, Washington State DFI, Tonga’s central bank, Samoa, and others — totaling 13 regulators across five continents.
- April 10, 2026: Washington DFI updates its alert, explicitly warning of an “advance fee scam,” the regulatory framing that would prove most prescient in less than three weeks before the collapse.
- April 23, 2026: U.S. law enforcement seizes the primary domain bgwealthsharing.com under Operation Level Up and the Scam Center Strike Force.
Despite this cascade of alerts, DSJ Exchange kept changing domains, hot wallets, and promotional channels on messaging apps. By the time of the collapse, the network had cycled through at least a dozen documented domains. It continued soliciting new deposits until early May, when operators demanded a 12% “tax” on account balances under the pretext of an upcoming IPO and regulatory compliance — the classic final stage of a Ponzi exit scam.
Note: The DSJ network is reportedly part of a larger fraud operation known as the TXEX, which regulators have linked to over 800 associated websites and 30+ shell entities. Some of those domains appeared within days of the DSJ collapse, with the operators simply migrating victims onto fresh URLs.
Why the Regulatory Lag?
Crypto scams like DSJ thrive in the gap between warning and enforcement. Public alerts from securities commissions are powerful awareness tools but are rarely binding across borders. Operators exploited this by:
- Operating through shell entities and frequently rebranding domains.
- Falsely claiming SEC licensing — they filed exempt forms, which the Washington DFI specifically noted do not equal registration.
- Using MLM-style recruitment via social media and messaging groups, where trust in “community leaders” often outweighed official warnings.
- Moving funds rapidly through bridges, mixers, and centralized custody providers before authorities could act.
Most fundamentally, securities regulators can publish warnings but cannot directly compel ISPs, DNS registrars, or hosting providers in foreign jurisdictions to take down websites. Effective takedowns require either domain-seizure authority — which only law enforcement holds — or voluntary cooperation from infrastructure providers. Neither moves at the speed of crypto.
Even after the April 23 domain seizure, the scheme simply pivoted to new URLs and kept running until the internal collapse triggered the coordinated freeze.
Also Read: $41.5 Million Frozen: Inside the Takedown of the DSJ Exchange Ponzi Scheme
The Takedown: Private Sector Speed vs. Regulatory Pace
The real shutdown came not from regulators alone but from a rare public-private collaboration. Per ZachXBT’s own account, his on-chain tracing began almost by accident after he noticed a USDD consolidation pattern while reviewing flows for an unrelated investigation, and traced it back to deposit points on Binance and OKX. Once the choke points were identified, Tether blacklisted the relevant USDT addresses, freezing approximately $38.4 million across 19 addresses on Tron, while Binance, OKX, and U.S. authorities moved within 72 hours to freeze the remainder.
This rapid response froze roughly 27–28% of the identified laundered funds — a significant disruption, but not the same as victim restitution. The frozen assets must still pass through legal proceedings, victim-claims processes, or government forfeiture actions before any portion can be returned to the victims. Based on comparable cases, that process can typically take anywhere between 6 to 24 months; and that timeline assumes the perpetrators can be identified and charged in the first place.
The incident underscores a broader 2026 reality: stablecoin issuers and major exchanges have become faster first responders than many government agencies when it comes to freezing illicit flows. Tether’s “blacklist” function, which is a centralized control built into the USDT smart contract that has drawn criticism in past contexts, proved decisive in this case.
Lessons for Investors and the Industry
DSJ is a textbook case of why “guaranteed daily returns,” pressure to recruit friends, and multi-level marketing (MLM) style models should trigger immediate skepticism. Regulatory warnings exist for a reason — ignoring them because a platform “looks professional” or offers high yields has cost thousands of retail investors dearly.
For the affected investors, three steps matter the most right now:
- File a police report in your local jurisdiction. This establishes an official legal record and is required for most compensation and forfeiture distribution processes.
- U.S.-based victims can file a complaint with the FBI’s Internet Crime Complaint Center (IC3) at ic3.gov. This is the primary federal intake for crypto-fraud victim documentation.
- Preserve all evidence; screenshots of DSJ or BG Wealth Sharing accounts, transaction IDs, and any communication from the fake, AI-generated CEO Stephen Beard or platform support. Stop paying any verification fees or tax demands, as these are classic extraction mechanisms and not paths to recovery. Beware of unsolicited “recovery agents;” these are almost always secondary scams targeting documented victims.
For the broader crypto ecosystem, the episode highlights two urgent needs:
- Faster cross-border coordination between regulators, particularly between securities watchdogs and the law-enforcement agencies that actually hold the takedown authorities.
- Better integration of on-chain intelligence into enforcement workflows so warnings translate into action before schemes reach nine-figure scale.
Until enforcement catches up with the speed of crypto, the best defense remains education and personal vigilance.
Crypto remains a high-risk space. When something sounds too good to be true — especially with daily guaranteed returns — it almost always is. Check official regulator lists before sending funds, and remember: if a platform demands extra fees to withdraw, it is almost certainly a scam.
