Skip to content

InvestIndependently confirmed2 publishers3 min readPublished

Brazilian police took $1.7M from self-custody wallets by finding the seed phrases in raids

Santa Catarina's civil police moved $1.7 million in crypto out of a phishing ring's self-custody wallets, the largest such recovery by Brazilian police. Self-custody left no company to serve with a freeze order. That protection ended once a search found the keys.

The Investor · Invest desk

How we use AISend a correction

Illustration accompanying Brazilian police took $1.7M from self-custody wallets by finding the seed phrases in raids
Generated illustration

What happened

  • The September 10 operation ran on 17 search-and-seizure orders and two arrest orders against the group's leaders, Bitcoin.com News reported.
  • Detective Eduardo Graebin said officers found four seed phrases in the raids, then imported and analyzed each wallet to identify its assets before moving them.
  • The funds left the group's wallets in 13 separate transactions, which investigators followed and confirmed with Chainalysis tracing tools.
  • Courts ordered freezes on bank accounts of up to R$93 million, and a further R$5 million of real estate was caught up in the judicial measures.
  • Cryptobriefing says other reports have identified roughly $218,000 in additional funds, and the released material has not explained how that sum relates to the main figure.

Why it matters

  • exposure A seed phrase stored where a search can reach it gives police the same power over a self-custody wallet that a court order gives them over an exchange account.
  • precedent Other Brazilian forces now have a worked sequence to copy: seize phrases, import wallets, identify assets with Chainalysis tools, and park the proceeds at a domestic exchange.
  • exposure With Foxbit holding state-seized assets, the recovery depends on a private exchange's security until courts settle what happens to the coins.

Divided across four seed phrases, the haul comes to about $427,000 a phrase, and the 13 transfers averaged roughly $131,000 each [17][18]. Cryptobriefing notes that police usually freeze crypto by serving a court order on the exchange that holds it, and that self-custody leaves no company to receive one [12]. Santa Catarina's officers had the phrases, so they could sign the transfers themselves [8].

In our view, the case shows that self-custody closed one route to the coins and left another open. The ring's setup did block the court-order route. A search warrant got to the same coins through the seed phrases. The counter-case is that blockchain analytics did the hard part, and Bitcoin.com News says Chainalysis supplied tools to help identify the assets [10]. Tracing finds coins, but only a key can sign for them. Graebin credited both skill and software. "This result demonstrates, in a concrete way, how specialized technical knowledge and the use of appropriate tools can represent the difference between locating or failing to seize more than one million reais in assets related to criminal activity," he said [13]. Evidence that police moved funds from a wallet whose phrase they never found would prove us wrong, and neither report describes such a transfer.

The roughly $218,000 flagged in other reports could supply that test [20]. Added to the main figure, it would lift the recovery to about $1.93 million [21]. Or it may sit at addresses investigators traced and could not open.

Next to the rest of the operation, the crypto is the smaller pot. R$8.78 million is about 9% of the up to R$93 million that courts froze in bank accounts [15]. At the R$5.14 per dollar implied by the crypto conversion, R$93 million is about $18.1 million, close to the nearly $18.5 million Bitcoin.com News reported [16][2]. The larger pot, roughly ten times the crypto, sat in bank accounts, where a court order could be served on the bank [1][12].

Santa Catarina's police did not set up their own custody for the coins. They went to an institutional account at Foxbit, a Brazilian exchange, so an intermediary of the kind the ring avoided now holds the proceeds for the state [6]. One way this develops is as a one-off that depended on a ring keeping its phrases where a raid could find them. Another is a template other Brazilian forces copy, with Chainalysis to find the assets and an exchange to store them. The third runs through policy. Cryptobriefing, citing research findings, frames the seizure as a sign of growing scrutiny of self-custody wallets [19]. Finance minister Fernando Haddad has said the government is preparing a regulatory overhaul aimed at criminal use of crypto, Bitcoin.com News reported [14]. We'd expect the template, since every step Graebin described is open to any force that finds the phrases [8].

What to watch

  • Whether the roughly $218,000 is folded into the official tally or turns out to sit in wallets police traced but could not open.
  • What courts decide for the coins held in Foxbit's institutional account, and how long they stay there.
  • The text of the regulatory overhaul Haddad has described, and whether it reaches self-custody wallets directly.

Clarity's read

What the record supports and how the coverage leans. The claims behind it follow.

Reality

Evidence60
Adoption
Insufficient
Hype gap+15
Incentives40
Confidence62
Why these scores

Claim ledger

Ranked by verification strength, evidence, and original report placement.

  1. [1]

    Courts ordered freezes on bank accounts totaling up to R$93 million; another R$5 million in real estate was caught up in the judicial measures.

  2. [2]

    The operation resulted in the freezing of nearly $18.5 million in bank accounts linked to the group.

  3. [3]

    The Civil Police of Santa Catarina seized US$1,708,534 in crypto from self-custody wallets linked to a phishing ring during Operacao ClickFix, carried out on September 10, 2026.

Sources

2 independent publishers whose own reporting we read for this story.

  1. cryptobriefing.com

    1 article · October 9, 2026

    Brazilian police seize $1.7M in crypto from phishing ring’s wallets
  2. news.bitcoin.com

    1 article · October 9, 2026

    Brazil Seizes Record Crypto Funds From Self-Custody Wallets

Share your take

Let Clarity write the post for you.

Signed-in readers get a short post drafted on this story in the register they choose — narrative, analytical, or a direct position — editable to the last word before it goes anywhere. The share buttons at the top of this story work without an account.

Topics and entities

Follow any of these and your For You feed starts watching them — no settings page required.

Entities

Loading related stories