Rockworld Mining Trust & RockWorldMining.com Investigation

Case Type: Cryptocurrency Scam / Pig Butchering Scam / Advance Fee Scam / Blockchain Investigation
Case ID: CASE-2026-007
Investigation Status: Open
Published: August 2026
Investigated By: Cyb3rsect

Executive Summary

Cyb3rsect.com has opened an investigation into Rockworld Mining Trust, also referred to as Rockworld, and the cryptocurrency trading platform RockWorldMining.com following an official consumer alert issued by the Washington State Department of Financial Institutions (DFI), Securities Division.

DFI published its alert on June 12, 2026, identifying Rockworld Mining Trust and RockWorldMining.com as subjects of a complaint involving an alleged cryptocurrency investment operation.

The agency categorized the matter as:

Cryptocurrency Scam

Pig Butchering Scam

Advance Fee Scam

DFI lists a reported loss of approximately $56,000. The agency expressly states that the factual details and reported losses contained in the complaint have not been independently verified.

According to the complaint summarized by DFI, an investor learned about Rockworld around April 2026 and communicated through WhatsApp with an individual identifying himself as Chris Greene.

Greene allegedly guided the investor in cryptocurrency investing and encouraged the investor to transfer Bitcoin and Ethereum to RockWorldMining.com.

The investor reportedly continued transferring cryptocurrency after being promised significant profits and was allegedly encouraged to use funds from cryptocurrency accounts, credit-card advances, savings, IRA accounts and personal bank loans.

According to the complaint, the investment appeared to generate substantial profits, but the investor was unable to withdraw any funds.

When a withdrawal was requested, the investor was allegedly instructed to pay a 10 percent “signal fee.”

No funds were reportedly recovered.

DFI states that the RockWorldMining.com website is now inactive.

Investigation Status: OPEN

1. Subjects Identified

The official Washington State DFI alert identifies:

Rockworld Mining Trust

and

RockWorldMining.com

DFI describes RockWorldMining.com as an alleged cryptocurrency trading platform.

The regulator’s June 12, 2026 alert identifies the reported loss as approximately:

$56,000

and categorizes the matter as:

Cryptocurrency Scam
Pig Butchering Scam
Advance Fee Scam

The inclusion of these subjects in a regulatory alert does not, by itself, establish criminal conduct.

2. Official Regulatory Warning

The Washington State Department of Financial Institutions received a complaint alleging that Rockworld Mining Trust and RockWorldMining.com may have been involved in fraudulent cryptocurrency activity.

DFI published its warning on June 12, 2026.

The agency’s statewide scam tracker separately records the case under cryptocurrency, pig-butchering and advance-fee scams.

DFI emphasizes that the allegations and reported losses have not been verified.

That qualification is important and is retained throughout this report.

3. Alleged Initial Contact

According to the DFI complaint, the investor learned about Rockworld around April 2026.

The investor reportedly communicated through WhatsApp with an individual identifying himself as:

Chris Greene

Greene allegedly provided cryptocurrency investment guidance and encouraged the investor to transfer digital assets to RockWorldMining.com.

Contact through WhatsApp is not itself proof of fraud.

However, private messaging platforms can make it difficult for investors to independently establish the identity, licensing status and corporate affiliation of someone presenting an investment opportunity.

4. Alleged Cryptocurrency Investment

According to DFI, Chris Greene allegedly convinced the investor to transfer:

Bitcoin
Ethereum

to RockWorldMining.com.

The investor reportedly continued sending cryptocurrency after being encouraged to invest additional funds.

According to the complaint, the investor was allegedly encouraged to exhaust existing cryptocurrency holdings and then obtain additional money through:

Credit-card advances
Savings
IRA accounts
Personal bank loans

This reported escalation is a significant investigative feature of the case.

5. Alleged Promise of Wealth

According to the complaint, Greene allegedly promised to make the investor a millionaire.

The investor reportedly saw significant profits displayed through the investment platform.

However, a displayed balance or profit figure does not independently establish that equivalent assets actually existed.

A forensic investigation should distinguish between:

Displayed account value

and

independently verifiable cryptocurrency assets.

That distinction is particularly important when an investor is unable to withdraw the supposed balance.

6. The Alleged Withdrawal Problem

According to the DFI complaint, the investor attempted to withdraw funds from the RockWorldMining.com platform.

The investor reportedly discovered that the funds could not be withdrawn.

The investor was allegedly instructed to pay a:

10 percent signal fee

before the withdrawal could proceed.

No funds were reportedly recovered.

This is the central allegation underlying DFI’s classification of the matter as an Advance Fee Scam.

7. Reported Investment Sequence

Based on the complaint summarized by DFI, the reported sequence was:

WhatsApp contact

↓

Cryptocurrency investment opportunity

↓

Bitcoin and Ethereum transferred

↓

Additional cryptocurrency investments encouraged

↓

Investor allegedly uses savings, retirement funds, credit and loans

↓

Trading account displays significant profits

↓

Investor requests withdrawal

↓

Withdrawal reportedly unavailable

↓

10% signal fee allegedly demanded

↓

Investor reportedly receives no funds

This sequence is consistent with several recognized investment-fraud warning patterns.

The sequence remains an allegation and has not been independently verified by DFI.

8. Pig-Butchering Scam Indicators

DFI classified the case partly as a Pig Butchering Scam.

These scams commonly involve building trust with a victim before introducing an investment opportunity and encouraging progressively larger transfers.

In the reported Rockworld case, investigators should examine whether the relationship with the individual identified as Chris Greene involved:

Extended personal communication.
Trust-building.
Financial discussions.
Investment education.
Increasing deposit requests.
Pressure to invest additional money.
Promises of exceptional returns.
Pressure to borrow money.
Difficulty withdrawing funds.

The presence of one or more of these features does not independently prove fraudulent conduct.

The complete communications history is therefore important evidence.

9. The 10 Percent Fee

The reported 10 percent signal fee deserves particular attention.

Before paying an additional fee, an investor should establish:

Who is receiving the payment.
Why the payment is required.
Where the fee is disclosed in the original agreement.
Whether the recipient is a regulated financial entity.
Whether the fee can be independently verified.
Whether the supposed withdrawal can otherwise be demonstrated on-chain.

A legitimate tax obligation, trading fee or regulatory charge should be independently verifiable.

A demand for additional cryptocurrency before releasing an existing cryptocurrency balance is a major warning sign.

10. Cryptocurrency Wallet Addresses

One of the strongest aspects of this case is that the Washington State DFI alert identifies two wallet addresses to which the investor was instructed to transfer cryptocurrency.

The Bitcoin address identified by DFI is:

bc1q27y8agh9kk25vm77g6rjkwt7dtk345yfra4m4f

The Ethereum address identified by DFI is:

0xf6Ed9f7d732c0D04175176103EAf12D3E50693B1

These addresses appear directly in the official DFI alert.

Because wallet addresses are public blockchain identifiers, they provide a potentially valuable starting point for forensic analysis.

11. Blockchain Forensics Opportunity

The wallet addresses identified by DFI allow investigators to investigate the reported movement of cryptocurrency.

Potential blockchain analysis could include:

Transaction Reconstruction

Identify incoming and outgoing transactions associated with the reported addresses.

Timeline Analysis

Establish when cryptocurrency was received and when it was subsequently transferred.

Fund Flow Mapping

Follow cryptocurrency as it moves from the reported wallet into subsequent addresses.

Exchange Identification

Determine whether funds were subsequently transferred to known cryptocurrency exchanges.

Wallet Clustering

Examine whether multiple addresses appear to participate in related transaction activity.

Cross-Chain Analysis

Investigate whether assets moved between blockchain networks or were converted into different digital assets.

Blockchain analysis cannot automatically identify the individual controlling a wallet.

Attribution requires additional evidence such as exchange records, account information, communications or other investigative material.

12. RockWorldMining.com Is Now Inactive

DFI states that the RockWorldMining.com website is now inactive.

This creates an important digital-forensics opportunity.

When a website disappears, investigators may still be able to locate historical evidence through:

Web archives.
DNS history.
Historical IP addresses.
Hosting records.
SSL certificates.
Domain-registration records.
Website source code.
Screenshots.
Search-engine caches.
Historical advertisements.
Email infrastructure.
Associated domains.

Preserving historical copies of a website can be important because the content shown to investors may no longer be available from the live domain.

13. Domain History

Independent website-reputation services report that rockworldmining.com was registered on March 28, 2025. Scam Detector describes the domain as having a very low trust score and labels it “Suspicious. Young. Untrustworthy.”

Gridinsoft similarly reports that the domain was created on March 28, 2025 and classified it as a potential financial scam.

These automated reputation services should be treated as secondary evidence, not as proof of fraud.

The stronger evidence in this case remains the official Washington State DFI alert.

14. Technical Infrastructure

Historical DNS information reviewed by third-party infrastructure databases associates RockWorldMining.com with the nameserver:

ns1.tkchost.com

Historical domain records show RockWorldMining.com among domains observed using that nameserver infrastructure.

This information may be useful for infrastructure research.

However, sharing a nameserver or hosting provider does not establish that websites have common ownership.

Further technical evidence would be necessary to establish any relationship between domains.

15. Website Privacy Information

A historical Rockworld Mining Trust privacy-policy page remains indexed online.

The page identifies the website as:

rockworldmining.com

and states that the service could collect personal information including:

Name
Email address
Phone number
Address
Usage data
IP address
Device information

The policy also lists social-media login options including Google, Facebook and Twitter.

The page is therefore potentially useful as historical evidence concerning the information the website claimed to collect from users.

Because the site is now inactive, investigators should preserve copies of any remaining historical pages.

16. Evidence Classification

For this investigation, information is classified as follows.

VERIFIED

Washington State DFI published an official alert concerning Rockworld Mining Trust and RockWorldMining.com on June 12, 2026.
DFI lists a reported loss of $56,000.
DFI classifies the matter as a cryptocurrency scam, pig-butchering scam and advance-fee scam.
DFI reports that an investor communicated with an individual identifying himself as Chris Greene.
DFI reports that Bitcoin and Ethereum were transferred to addresses associated with RockWorldMining.com.
DFI identifies a Bitcoin wallet address.
DFI identifies an Ethereum wallet address.
DFI reports that the RockWorldMining.com website is now inactive.
DFI explicitly states that the allegations and reported losses have not been verified.

REPORTED / ALLEGED

Chris Greene allegedly guided the investor in cryptocurrency investing.
Greene allegedly promised to make the investor a millionaire.
The investor allegedly transferred increasing amounts of cryptocurrency.
The investor allegedly used savings, retirement funds, credit-card advances and personal loans.
The investment allegedly displayed significant profits.
The investor allegedly could not withdraw the funds.
A 10 percent signal fee was allegedly demanded.

UNVERIFIED

The true identity of Chris Greene.
The identity of the operators controlling Rockworld Mining Trust.
The identity of the person or entity controlling the identified wallet addresses.
Whether the purported trading profits represented actual assets.
The final destination of the cryptocurrency.
Whether other wallet addresses are connected to the reported addresses.
Whether other investors experienced similar losses.
Whether any cryptocurrency remains recoverable.

17. Key Warning Signs

The reported circumstances contain multiple warning indicators:

Investment solicitation through WhatsApp.
Cryptocurrency investment instructions from an online contact.
Promises of exceptional financial gains.
Encouragement to continue depositing money.
Encouragement to use loans and retirement funds.
A trading account displaying substantial profits.
Inability to withdraw.
An additional 10 percent fee allegedly demanded before withdrawal.
An investment website that is now inactive.

These indicators should cause investors to stop sending additional funds and independently verify the platform and individuals involved.

18. What Investors Should Preserve

Anyone who interacted with RockWorldMining.com should preserve all available evidence.

Important evidence may include:

WhatsApp messages.
Emails.
Screenshots.
Website URLs.
Investment instructions.
Wallet addresses.
Transaction hashes.
Bitcoin transaction records.
Ethereum transaction records.
Exchange statements.
Bank records.
Credit-card records.
Loan documents.
Withdrawal requests.
Fee requests.
Account statements.

Preserve the original files wherever possible.

Do not edit screenshots or alter original transaction records.

Never provide investigators with passwords, seed phrases, private keys or authentication codes.

19. Digital Investigation Priorities

A comprehensive investigation into RockworldMining.com should prioritize:

Priority 1 — Blockchain

Trace the Bitcoin and Ethereum addresses identified by DFI.

Priority 2 — Communications

Preserve and analyze the WhatsApp communications with the individual identifying himself as Chris Greene.

Priority 3 — Website Reconstruction

Recover historical versions of RockWorldMining.com.

Priority 4 — Domain Investigation

Establish historical registration, DNS and hosting information.

Priority 5 — Identity Verification

Determine whether the identity used by Chris Greene can be independently established.

Priority 6 — Financial Records

Reconstruct the investor’s deposits and determine whether they correspond to blockchain transactions.

20. Investigator’s Assessment

Rockworld Mining Trust and RockWorldMining.com warrant further investigation based on the official Washington State DFI warning, the reported $56,000 loss, the alleged withdrawal restriction and the specific cryptocurrency wallet addresses published by the regulator.

The wallet addresses provide an unusually useful starting point for blockchain investigation.

The reported demand for a 10 percent signal fee is also a significant investigative detail because it allegedly occurred only after the investor attempted to withdraw funds.

The website’s current inactivity creates additional urgency around preserving historical digital evidence.

At the same time, DFI explicitly states that the factual allegations and reported losses have not been verified.

Cyb3rsect therefore does not present the allegations as established criminal findings.

Our current classification is:

INVESTIGATION STATUS: OPEN

EVIDENCE STATUS: OFFICIAL REGULATORY ALERT / BLOCKCHAIN, DIGITAL AND IDENTITY VERIFICATION REQUIRED

21. Have You Encountered RockWorldMining.com?

If you interacted with Rockworld Mining Trust, RockWorldMining.com or an individual identifying himself as Chris Greene, you may submit information to our investigation team.

Potentially useful evidence includes:

WhatsApp communications.
Emails.
Cryptocurrency wallet addresses.
Transaction hashes.
Bitcoin transactions.
Ethereum transactions.
Screenshots.
Investment instructions.
Withdrawal requests.
Fee demands.
Bank statements.
Credit-card records.
Loan records.
Names or aliases.
Phone numbers.
Dates and amounts involved.

Do not send passwords, private keys, seed phrases or authentication codes.

Official Source

Washington State Department of Financial Institutions — Securities Division

Title: Alleged Cryptocurrency Trading Platform, RockWorldMining.com, Suspected of Fraud

Date: June 12, 2026

Subjects: Rockworld Mining Trust; RockWorldMining.com

Reported Loss: $56,000

Categories: Cryptocurrency Scams; Pig Butchering Scams; Advance Fee Scams

Official alert:

https://dfi.wa.gov/alerts/alleged-cryptocurrency-trading-platform-rockworldminingcom-suspected-fraud

Investigation Notice

This report is based on publicly available information and material reviewed by Cyb3rsect at the time of publication.

The principal allegations described in this report originate from an official consumer alert issued by the Washington State Department of Financial Institutions.

DFI states that the factual details and reported losses have not been verified.

The inclusion of a person, company, website, wallet address or platform in this investigation does not by itself establish criminal conduct or fraud.

Where information could not be independently established, it has been identified as reported, alleged or unverified.