The Criminal Underworld Is Dropping Bitcoin for Another Currency

By Olga Kharif
January 2, 2018

Monero and others lure criminals as bitcoin’s privacy weakens

Some coins post fake blockchain entries to hamper surveillance

Bitcoin Starts 2018 With a Tumble

Bitcoin is losing its luster with some of its earliest and most avid fans -- criminals -- giving rise to a new breed of virtual currency.

Privacy coins such as monero, designed to avoid tracking, have climbed faster over the past two months as law enforcers adopt software tools to monitor people using bitcoin. A slew of analytic firms such as Chainalysis are getting better at flagging digital hoards linked to crime or money laundering, alerting exchanges and preventing conversion into traditional cash.

The European Union’s law-enforcement agency, Europol, raised alarms three months ago, writing in a report that “other cryptocurrencies such as monero, ethereum and Zcash are gaining popularity within the digital underground.” Online extortionists, who use ransomware to lock victims’ computers until they fork over a payment, have begun demanding those currencies instead. On Dec. 18 hackers attacked up to 190,000 WordPress sites per hour to get them to produce monero, according to security company Wordfence.

For ransomware attacks, monero is now “one of the favorites, if not the favorite,” Matt Suiche, founder of Dubai-based security firm Comae Technologies, said in a phone interview.

Monero's Rally
Monero outperformed bitcoin in the final months of 2017

Source: Coinmarketcap.com

Note: Figures shows percentage change in price compared with Oct. 31

Monero quadrupled in value to $349 in the final two months of 2017, according to coinmarketcap.com, placing it among a number of upstart coins that rose faster than bitcoin, the world’s most valuable digital currency. Bitcoin roughly doubled in the same period, data compiled by Bloomberg show. Monero’s price has climbed another 7 percent so far this year, according to coinmarketcap.com.

In monero’s case, criminals are snapping it up because bitcoin’s underlying technology can work against them. Called blockchain, the digital ledger meticulously records which addresses send and receive transactions, including the exact time and amount -- great data to use as evidence. Match an address to a crime and then watch the bitcoin universe carefully, and you can see the funds disappear and reappear in other locations.

Sleuths have developed databases and techniques for digesting that information to eventually nab wrongdoers. Say, for example, a coffee shop in Berkeley is known to have a certain bitcoin address, and a wallet used by an extortionist transfers the same amount there every morning at 9 a.m. Police can stop by and make an arrest.

Started in 2014, monero is very different. It encrypts the recipient’s address on its blockchain and generates fake addresses to obscure the real sender. It also obscures the amount of the transaction.

The techniques are so potent that software that flags coins suspected of being obtained through crime now tags just about anything converted into or out of monero as high risk, according to Pawel Kuskowski, chief executive officer of Coinfirm, which helps exchanges and other companies avoid tainted money. That compares with only about 10 percent of bitcoin, he said.

“What we treat ‘high risk’ is something that’s anonymizing funds,” he said in a phone interview. “How are you going to prove that these funds are not coming from illegal sources?”

Monero is one of many privacy-focused coins, each offering different security features. Its main competitor, Zcash -- which isn’t known to have a significant criminal following -- can offer even better privacy protection. Instead of creating fake addresses to hide senders, it encrypts their true address. That makes it impossible to identify senders by looking for correlations in addresses used in multiple transactions to pinpoint the real one -- a vulnerability for monero. Developers of the coin have made progress in reducing it, though.

Still, Princeton University researchers recently developed a tool that helps them analyze Zcash transactions at least to some extent -- but they haven’t been able to crack monero. And Zcash high-security features can’t be used on disposable burner phones, a favorite of criminals eager to stay anonymous.

Developers behind monero say they simply created a coin that protects privacy. Most people use it legitimately -- they just don’t want others to know whether they’re buying a coffee or a car, Riccardo Spagni, core developer at monero, said in a phone interview.

“As a community, we certainly don’t advocate for monero’s use by criminals,” Spagni said. “At the same time if you have a decentralized currency, it’s not like you can prevent someone from using it. I imagine that monero provides massive advantages for criminals over bitcoin, so they would use monero.”

‘Utility’ Too
Yet criminals are probably only a fraction of monero’s users, according to Lucas Nuzzi, a senior analyst at Digital Asset Research, which provides research to institutional investors.

“As with any disruptive technology, many of the initial use cases revolve around illicit activities,” he wrote in an email. But as everyday people grow concerned about privacy and surveillance, “there is utility in these currencies that go beyond just a means of exchange for illicit goods.”

credits: bloomberg