Blockchain investigator ZachXBT announced on June 13 that he is declining all requests from Canadian crypto fraud victims, citing weak enforcement and asset seizure failures by Canadian authorities. He called Toronto a top 5 global cybercrime hub and stated that Canada's government agencies may be more negligent than those in India or Nigeria. The statement highlights a gap between blockchain evidence capabilities and offline enforcement mechanisms required for victim fund recovery.
ZachXBT Cites Two Ignored Case Examples
ZachXBT made the comments in a series of posts on June 13, arguing that Canadian authorities routinely fail to prosecute offenders or seize frozen assets for fraud victims. He wrote that Canadian mainstream media would not dare to report about how Toronto has grown into a top 5 hub globally for cybercriminals, and that law enforcement fails to prosecute or seize frozen assets for its victims of fraud, adding that he had to start declining all victims from Canada.
He cited two cases to support the claim. First, he said Canadian law enforcement ignored a report about a threat actor running phishing scams who now ransoms companies for millions of dollars. Second, he described an instance in which authorities did not act on evidence he provided, stating that the evidence he has for the first example is the exact same type of evidence used to successfully prosecute threat actors in two other jurisdictions.
ZachXBT did not name the specific threat actors in his posts, citing the sensitivity of ongoing matters, but noted the gap as one of will and capacity rather than evidence.
Investigator's Prior Work Targets Exchanges and Law Firms
The remarks fit a wider campaign by ZachXBT, who has built a reputation for pressing exchanges, law firms, and regulators he accuses of shielding or ignoring illicit funds. Last month, Bitcoin.com News reported on his investigation accusing Kucoin of shielding $13 million in stolen crypto from German investigators, and on his exposure of a U.S. law firm's $71 million grab of frozen funds tied to the North Korean Lazarus Group. He has also published leaked data on a North Korean payment pipeline that moved crypto into fiat currency.
Canada has logged a string of high-profile cybercrime cases recently. Toronto police announced what they called unprecedented arrests in an SMS blaster fraud investigation, the first known use of the device-spoofing technology in the country. The Royal Canadian Mounted Police (RCMP) has also touted takedowns of prolific scam operations with thousands of victims. The Canadian Centre for Cyber Security's National Cyber Threat Assessment for 2025-2026 has flagged fraud and ransomware as escalating threats to Canadians.
Victims Face Recovery Barriers Without Court Action
ZachXBT's decision to decline Canadian cases means victims defrauded in that jurisdiction may have fewer avenues to recover funds, even when blockchain evidence is unambiguous. Blockchain analysis can identify suspects and trace stolen money with unusual precision, but recovery still depends on courts, police, and asset-freezing powers in the offline world. Without that follow-through, even airtight evidence stalls.
ZachXBT has previously used the tactic of naming names and publishing evidence to push exchanges and firms into acting. Whether this technique of public pressure prompts a response from Canadian authorities remains to be seen.
FAQ
What did ZachXBT announce on June 13?
ZachXBT announced on June 13 that he is declining all requests from Canadian crypto fraud victims, citing weak enforcement and asset seizure failures by Canadian authorities.
Why does ZachXBT compare Canadian agencies to India or Nigeria?
ZachXBT stated that Canada's government agencies may be more negligent than those in India or Nigeria, arguing that Canadian authorities routinely fail to prosecute offenders or seize frozen assets for fraud victims despite receiving evidence.
What two case examples did ZachXBT cite?
ZachXBT cited two cases: Canadian law enforcement ignored a report about a threat actor running phishing scams who now ransoms companies for millions of dollars, and authorities did not act on evidence he provided that was the same type used to successfully prosecute threat actors in two other jurisdictions.
