KCEXMAD.com Scam Investigation: $3.95 Million Bitcoin and Ethereum Investor Warning
Washington State’s Department of Financial Institutions (DFI) published an official warning on March 18, 2026, concerning KCEXMAD.com, a purported cryptocurrency investment platform.
The complaint describes an investor who reportedly transferred $3,958,338 in Bitcoin (BTC) and Ethereum (ETH) between September 2024 and January 2025. After attempting to withdraw the investment, the investor was allegedly required to pay an additional fee and remained unable to withdraw funds.
dfi.wa.gov
Reported cryptocurrency transfers and loss
$3,958,338
Assets involved
BTC and ETH
Investment period
Sep 2024–Jan 2025
Withdrawal problem
Additional fee demanded
Based on a complaint published by Washington DFI. The allegations and reported loss have not been independently verified.
The distinctive feature of this case is that the regulator published three cryptocurrency receiving addresses. These provide specific transaction identifiers for potential blockchain analysis, although their publication does not establish who controlled them or where the funds ultimately went.
Complete, ready-to-publish Cyb3rsect blog
KCEXMAD.com Scam Investigation: $3.95 Million BTC and ETH Loss, AI Trading Claims and Withdrawal Fee Warning
KCEXMAD.com, a purported cryptocurrency investment platform claiming to use artificial intelligence and blockchain technology, has been identified in an official investor warning issued by the Washington State Department of Financial Institutions (DFI).
The warning, published March 18, 2026, describes an investor who reportedly transferred approximately $3,958,338 worth of Bitcoin and Ethereum to KCEXMAD.com between September 2024 and January 2025.
The investor first encountered the opportunity through an unsolicited text message from someone they did not know.
Communication subsequently moved to private messaging applications, including WhatsApp and Telegram.
According to Washington DFI, the investor was instructed to open a Coinbase account, made a small initial investment, and was shown profits.
The investor was then encouraged to deposit significantly more cryptocurrency.
When the investor attempted to withdraw the investment, KCEXMAD.com allegedly demanded an additional fee.
The investor reported being unable to withdraw any funds from the platform.
The regulator also published three cryptocurrency wallet addresses associated with the reported transfers.
Washington DFI categorizes the complaint as involving pig-butchering and advance-fee scams.
The regulator has not independently verified the allegations or reported financial loss.
This investigation examines the KCEXMAD.com warning, the platform’s artificial intelligence claims, the reported Bitcoin and Ethereum transfers, the withdrawal fee demand, and the evidence investors should preserve.
What Is KCEXMAD.com?
KCEXMAD.com presented itself as a cryptocurrency investment platform.
According to Washington DFI, the website claimed to be a “Web 3.0 AI Intelligent Quantification Blockchain.”
This description combines several concepts commonly associated with cryptocurrency and financial technology.
Web3 generally refers to internet applications and services built around blockchain technology and decentralized systems.
Artificial intelligence can be used to analyze data or generate trading signals.
Quantitative trading involves using mathematical models and data-driven methods to make investment decisions.
However, using these terms in promotional materials does not establish that a platform operates genuine trading technology.
Washington DFI does not independently verify the technical capabilities advertised by KCEXMAD.com.
It also does not establish that the platform executed genuine cryptocurrency trades on behalf of the investor.
Washington DFI’s Official KCEXMAD Warning
On March 18, 2026, Washington DFI’s Securities Division published an alert titled Alleged Cryptocurrency Trading Platform KCEXMAD.com May Be Fraudulent.
The regulator identified KCEXMAD.com as the subject of the complaint.
According to the warning:
- The investor received an unsolicited text message.
- Communication moved to WhatsApp and Telegram.
- The investor was instructed to open a Coinbase account.
- A small initial investment reportedly generated profits.
- The investor was encouraged to make larger deposits.
- Approximately $3,958,338 worth of BTC and ETH was transferred between September 2024 and January 2025.
- The investor attempted to withdraw the investment.
- KCEXMAD.com allegedly demanded an additional fee.
- The investor remained unable to withdraw funds.
The regulator lists a reported loss of $3,958,338.
The complaint has not been independently verified by DFI, and the alert does not establish a criminal conviction against an identified operator.
How the Investment Opportunity Began
The reported investment relationship began with a text message from an unknown person.
This is an important detail because the investor did not initially approach an established financial institution through a verified official channel.
Instead, the investment opportunity was introduced through unsolicited personal contact.
The conversation subsequently moved to WhatsApp or Telegram.
Both services are legitimate communication applications.
Their use does not automatically indicate fraud.
However, private messaging can make it difficult to verify the identity, qualifications, and financial interests of the person offering investment advice.
An investor may develop confidence in a contact over time without independently establishing who that person really is.
The Washington DFI warning does not identify the person who sent the initial message.
It also does not describe a romantic relationship or provide a complete timeline of the conversations.
Those details should not be assumed.
Why the Investor Was Told to Open Coinbase
According to the complaint, the investor was instructed to create a Coinbase account.
Coinbase is a legitimate cryptocurrency exchange and financial technology service.
Its involvement as a cryptocurrency purchasing or transfer platform does not mean that Coinbase operated KCEXMAD.com or endorsed the investment.
A cryptocurrency exchange can facilitate a customer’s purchase and transfer of digital assets.
Once those assets are transferred to an external wallet address, the exchange may not control the recipient.
This distinction is critical in suspected cryptocurrency investment fraud.
An investor may believe that using a well-known exchange makes the destination investment platform safe.
However, the legitimacy of the exchange does not establish the legitimacy of the recipient.
In the KCEXMAD complaint, Coinbase was reportedly used as the means of transferring BTC and ETH to the purported investment platform.
There is no basis in the DFI warning to accuse Coinbase of participating in the alleged misconduct.
The Small Initial Investment and Displayed Profits
Washington DFI reports that the investor began with a small investment.
The investment reportedly generated profits, after which the investor was encouraged to deposit more funds.
The public warning does not specify the amount of the initial investment.
It also does not establish whether the reported profits were actually withdrawn.
This distinction matters.
A platform may display profits inside an account dashboard without independently demonstrating that genuine market trading occurred.
A displayed increase in account value should not automatically be treated as a realized return.
The most reliable evidence is the investor’s original financial transaction history and independently verifiable asset movements.
In this case, the reported early profits appear to have preceded substantially larger cryptocurrency deposits.
How the Deposits Increased to $3.95 Million
The complaint describes cryptocurrency transfers totaling approximately $3,958,338.
These transfers reportedly occurred between September 2024 and January 2025.
The assets involved were Bitcoin and Ethereum.
The regulator does not publish a complete transaction-by-transaction breakdown.
It also does not specify how many individual deposits were made or the exchange rates used to calculate the reported dollar value.
An independent financial reconstruction would need to identify each transfer, its timestamp, the cryptocurrency amount, and its estimated value at the relevant time.
The reported $3,958,338 should be treated as a complaint figure rather than an independently audited financial loss.
It should not be combined with any hypothetical withdrawal fee as though that fee was also paid.
The Three Cryptocurrency Wallet Addresses Published by DFI
One of the most important aspects of the KCEXMAD warning is that Washington DFI identifies three wallet addresses to which the investor reportedly transferred cryptocurrency.
The addresses are:
Bitcoin address
3JRDEYDSwapUYfac8KhetgxNCbysiLs3kY
Ethereum-compatible addresses
0x4055C75e67b6C1F1B64BF7E34dc4c5708e347c5A
0xfed39cf141285af619eff7075ea8288b8348ee65
These addresses provide potential starting points for blockchain investigation.
However, the publication of a wallet address does not establish the legal identity of the person controlling it.
The public warning also does not provide a completed analysis of subsequent transactions.
The two hexadecimal addresses use a format common to Ethereum and other Ethereum-compatible networks.
Their format alone does not establish the exact network used for every reported transfer.
The underlying transactions would need to be independently verified before drawing conclusions about the flow of funds.
Why the Wallet Addresses Matter
Unlike cases in which regulators publish only the investment platform’s name, the KCEXMAD complaint includes specific blockchain identifiers.
This may help affected investors compare their own transaction records with the addresses identified in the warning.
For example, an investor may examine exchange withdrawal confirmations to determine whether funds were sent to one of the published addresses.
Blockchain transaction hashes may then provide additional evidence of the transfer.
However, matching a wallet address is only one step.
A blockchain address may receive funds from multiple sources and transfer assets through additional wallets or custodial services.
Investigators must distinguish directly observed transactions from assumptions about ownership or control.
The presence of these addresses in a regulatory warning should not be interpreted as proof that all funds passing through them originated from the reported investor.
Can the Bitcoin Transfers Be Traced?
Bitcoin transactions are generally recorded on a publicly observable blockchain.
A transaction analysis may identify the amount transferred, the time of the transaction, and the addresses involved.
However, Bitcoin transactions can involve multiple inputs and outputs.
This means that an address-to-address interpretation may require additional analysis.
An investigator may need to examine transaction structure, change outputs, consolidation activity, and subsequent transfers.
The public DFI warning does not provide transaction hashes for the reported Bitcoin deposits.
It would therefore be misleading to claim that the entire reported Bitcoin portion has already been traced.
The published Bitcoin address is an investigative lead, not a completed tracing result.
Can the Ethereum Transfers Be Traced?
Ethereum transactions and many Ethereum-based token transfers are also publicly observable.
The two hexadecimal addresses published by Washington DFI may be relevant to an Ethereum-related investigation.
However, an investigator must verify the actual network, asset type, and transaction records.
The same address format may appear across multiple Ethereum-compatible networks.
A transfer may involve native ETH, an ERC-20 token, or another blockchain asset.
The DFI warning identifies BTC and ETH as the reported investment assets but does not provide transaction hashes or a network-by-network deposit schedule.
Any conclusion about where the Ethereum moved would require independent blockchain analysis.
The Withdrawal Fee Demand
According to Washington DFI, the investor attempted to withdraw the investment from KCEXMAD.com.
The platform allegedly responded by requiring an additional fee.
The investor reported being unable to withdraw any funds.
The public warning does not specify the amount of the fee.
It also does not explain whether the platform described the payment as a tax, processing charge, verification fee, or another type of obligation.
Those details should not be invented.
The supported concern is that the investor was asked to pay additional money before accessing an existing investment.
This is consistent with the advance-fee scam category assigned by Washington DFI.
Why Advance-Fee Demands Are Dangerous
An advance-fee investment scam involves requiring a person to pay additional money before receiving funds or another financial benefit.
The payment may be presented as necessary to release profits, complete verification, satisfy tax obligations, or unlock an account.
Such demands can be particularly persuasive when the investor believes a substantial balance remains available.
The investor may feel that paying one more fee is the only way to recover the original investment.
However, a platform demanding additional money may have no intention or ability to honor the withdrawal.
In the KCEXMAD complaint, Washington DFI reports that the investor remained unable to withdraw funds after the fee demand.
The warning does not establish that the investor actually paid the additional fee.
Why DFI Categorized the Case as Pig-Butchering
Washington DFI also categorizes the complaint as a pig-butchering scam.
This term commonly describes investment fraud in which an individual builds trust with a prospective investor before encouraging increasingly large financial transfers.
The trust-building relationship may be social, romantic, or professional.
In the KCEXMAD complaint, the reported sequence includes unsolicited contact, private messaging, a small initial investment, displayed profits, and encouragement to deposit substantially more money.
These details are consistent with the broad pattern identified by the regulator.
However, the public warning does not describe a romantic relationship.
It would therefore be inappropriate to characterize this specific case as a romance scam without additional evidence.
Was KCEXMAD’s Artificial Intelligence Trading Real?
The public warning does not independently verify the platform’s artificial intelligence claims.
A website may advertise advanced trading algorithms, quantitative strategies, or blockchain technology without providing evidence that the systems operate as described.
Genuine trading performance requires verifiable records.
These may include transaction confirmations, audited performance information, custody records, and independently identifiable financial counterparties.
In the KCEXMAD complaint, the regulator reports the platform’s claimed technology but does not verify its operation.
The existence of a trading dashboard or reported profits would not be sufficient to establish that genuine trades occurred.
An investigation should begin with actual cryptocurrency transfers and other independently verifiable records.
Is KCEXMAD.com Connected to KCEX?
The domain name KCEXMAD.com resembles the name of the cryptocurrency exchange KCEX.
However, similarity in naming does not establish that the two services are operated by the same company.
The Washington DFI warning identifies KCEXMAD.com, not the legitimate exchange operating at kcex.com, as the subject of the complaint.
The warning does not establish a corporate or operational connection between them.
Investors should carefully verify the exact domain name of any financial service they use.
An additional word, unusual suffix, or modified website address may indicate that a site is unrelated to a better-known brand.
It would be inappropriate to accuse the legitimate KCEX exchange of operating KCEXMAD.com without supporting evidence.
Is KCEXMAD.com Legitimate or a Scam?
The available regulatory evidence raises serious concerns.
Washington DFI has issued an official warning identifying KCEXMAD.com.
The complaint describes an unsolicited investment solicitation, communication through private messaging applications, substantial BTC and ETH transfers, and an additional fee demanded before withdrawal.
The investor reportedly remained unable to access the investment.
The regulator lists a reported loss of $3,958,338 and publishes three receiving wallet addresses.
However, the allegations and reported financial loss have not been independently verified.
The evidence-based conclusion is that KCEXMAD.com is the subject of a documented regulatory warning involving suspected cryptocurrency investment and advance-fee fraud.
The public warning does not establish a final criminal conviction against an identified operator.
What Evidence Should KCEXMAD Investors Preserve?
Anyone who transferred cryptocurrency to KCEXMAD.com should preserve the original records.
Important evidence includes:
- The unsolicited text message that introduced the opportunity
- WhatsApp conversations
- Telegram messages
- The exact KCEXMAD.com website address
- Account registration information
- Screenshots of displayed investment profits
- Coinbase purchase confirmations
- Coinbase withdrawal records
- Bitcoin transaction hashes
- Ethereum transaction hashes
- Receiving wallet addresses
- Records of transfers between September 2024 and January 2025
- Customer support communications
- Withdrawal requests and rejection messages
- Notices demanding additional fees
- Any investment agreements or promotional materials
- Records of subsequent attempts to contact the platform
Where possible, preserve complete message exports and original exchange transaction records.
Never provide cryptocurrency recovery phrases, private keys, passwords, or authentication codes to anyone offering investigative or recovery assistance.
What to Do If KCEXMAD Refuses a Withdrawal
If you transferred cryptocurrency to KCEXMAD.com and cannot withdraw it, avoid sending additional funds solely because the platform claims a fee is required.
Preserve the exact fee demand and all related communications.
Contact the cryptocurrency exchange used to purchase or transfer the assets and report the suspected fraud.
If you used Coinbase, preserve your original transaction confirmations and contact Coinbase through its verified support channels.
Report the incident to the appropriate financial regulator or law-enforcement agency.
In the United States, internet-enabled investment fraud may be reported to the FBI’s Internet Crime Complaint Center.
Washington residents may also submit complaints to Washington DFI.
Be cautious of anyone promising guaranteed cryptocurrency recovery in exchange for another upfront payment.
A legitimate investigation should not guarantee recovery before reviewing the evidence.
How Cyb3rsect Can Assist With a KCEXMAD Investigation
Cyb3rsect provides digital-investigation and blockchain-forensics services relevant to suspected cryptocurrency investment fraud.
For a KCEXMAD-related case, an evidence review may begin with the investor’s original text messages, WhatsApp or Telegram communications, Coinbase records, and cryptocurrency transaction histories.
The objective is to reconstruct the investment timeline and distinguish verified cryptocurrency transfers from unsupported trading balances or performance claims.
The wallet addresses published by Washington DFI may provide reference points for comparing the investor’s own transaction records.
Where transaction hashes are available, relevant blockchain activity may be examined for additional investigative leads.
A case review may also document the fee demand, withdrawal attempts, and communications associated with the reported investment.
Any findings should clearly distinguish independently verifiable blockchain activity from allegations or assumptions.
A forensic investigation may assist with evidence preservation and reporting, but it cannot guarantee recovery.
Contact Cyb3rsect About KCEXMAD.com
If you invested through KCEXMAD.com and experienced withdrawal restrictions, preserve your original financial records and communications.
Cyb3rsect can assess the available digital evidence and determine whether further examination may be appropriate.
Useful starting information includes Coinbase withdrawal confirmations, BTC and ETH transaction hashes, receiving wallet addresses, screenshots of investment balances, and messages demanding additional fees.
Never provide private keys, wallet recovery phrases, or account passwords.
Contact Cyb3rsect to discuss an evidence-based review of a suspected cryptocurrency investment incident.
Final Assessment
The March 18, 2026 Washington DFI warning identifies KCEXMAD.com in a complaint involving suspected cryptocurrency investment fraud.
The investor reportedly received an unsolicited text message and subsequently communicated with individuals associated with the platform through WhatsApp and Telegram.
After opening a Coinbase account, the investor made a small initial investment and was shown profits.
The investor then transferred approximately $3,958,338 worth of Bitcoin and Ethereum between September 2024 and January 2025.
When the investor attempted to withdraw funds, KCEXMAD.com allegedly demanded an additional fee.
The investor remained unable to withdraw the investment.
Washington DFI lists a reported loss of $3,958,338 and identifies three cryptocurrency wallet addresses associated with the transfers.
The regulator has not independently verified the allegations or reported loss.
The case illustrates the risks of unsolicited investment offers, unverified AI trading claims, and additional payment demands imposed when investors attempt to withdraw cryptocurrency.
For affected investors, preserving original communications, Coinbase records, and blockchain transaction hashes is essential.
Official Sources
Washington State Department of Financial Institutions — KCEXMAD.com Investor Warning, March 18, 2026
https://dfi.wa.gov/alerts/alleged-cryptocurrency-trading-platform-kcexmadcom-may-be-fraudulent
Washington DFI — Consumer Information About Cryptocurrency and Digital Assets
https://dfi.wa.gov/consumers/virtual-currency
FBI Internet Crime Complaint Center
Editorial notice: This article summarizes a public regulatory complaint. It does not claim that Cyb3rsect independently verified the reported loss, identified KCEXMAD’s operators, traced the investor’s funds, or established any connection between KCEXMAD.com and the separate KCEX cryptocurrency exchange.
