OneCoin Fraud Scheme

đź”´ High Risk

The OneCoin fraud scheme stands as a stark example of how the promise of cryptocurrency innovation can be exploited to orchestrate one of the largest global financial scams in recent history. Originating from Bulgaria, OneCoin masqueraded as a legitimate digital currency but operated as a massive Ponzi scheme that defrauded investors worldwide of billions of dollars. Central to its operation was an intricate web of international money laundering, leveraging shell companies, offshore accounts, and luxury asset purchases across multiple countries. This case not only highlights the vulnerabilities in global financial systems to sophisticated white-collar crime but also serves as a critical lesson on the necessity for robust regulatory and enforcement cooperation across borders to combat emerging digital financial frauds.

The OneCoin fraud is widely regarded as one of the largest and most sophisticated crypto-related Ponzi and money laundering schemes in history. Founded and orchestrated primarily by Bulgarian national Ruja Ignatova, OneCoin claimed to offer a revolutionary cryptocurrency – but in reality, no real blockchain or market existed. From 2014 onward, the company leveraged an aggressive multi-level marketing model to attract investors in more than 175 countries, with Bulgaria as its nerve center for operations and financial flows. Investor funds totaling over $4 billion were funneled through a labyrinth of corporate fronts and fictitious investment vehicles stretching from Sofia and London to Dubai, the Caribbean, and beyond. Courts and investigators confirmed that virtually all revenues were derived from new participant fees, with “returns” simply recycled from new inflows. Money was laundered using an intricate global web of shell companies and fake business transactions, abetting the purchase of high-end property, luxury goods, and offshore assets. Regulators in Europe, Asia, and North America took aggressive action, resulting in dozens of arrests and billions in asset freezes and criminal penalties. Despite the disappearance of Ruja Ignatova in 2017, international law enforcement continues to dismantle the remnants of OneCoin’s infrastructure and pursue all parties involved, with Bulgaria and its international conduits at the core of these illicit financial channels

Countries Involved

OneCoin was headquartered in Sofia, Bulgaria, and its fraudulent activities spanned the globe. The scam targeted and had significant recruitment in countries across Europe (such as Germany and the UK), Asia (including China), the United States, the United Arab Emirates, Australia, and many others. Law enforcement investigations, regulatory actions, and arrests related to OneCoin have been reported in Bulgaria, Germany, the US, China, Samoa, Dubai, and several other jurisdictions, underlining its international scale. Bulgaria not only served as OneCoin’s operational base, but also as a key hub for money movement and shell company registration, making it central to the laundering aspect of the scheme.

OneCoin began operations in 2014, and suspicions about its legitimacy started surfacing soon after, as mainstream cryptocurrency experts pointed out technical inconsistencies. Law enforcement interventions gained traction in 2016 and 2017, with multiple countries taking regulatory action. High-profile arrests began in 2018, shortly after the disappearance of the founder, Ruja Ignatova, in October 2017. Key criminal trials and sentences have spanned from 2018 to 2024. Notably, the full international criminal element and money laundering structures came more sharply into focus following the raids in Sofia, Bulgaria, in January 2018, led by local authorities at the request of German prosecutors.

OneCoin (non-existent cryptocurrency)

OneCoin constitutes a blend of fraud (pyramid/Ponzi scheme) and massive international money laundering. The crime involved obtaining billions from investors via false promises and then systematically laundering the proceeds through an extensive network of shell companies, offshore accounts, luxury real estate purchases, and fake investment funds across many jurisdictions.

Key entities included:
OneCoin Ltd. (Registered in Dubai, HQ in Sofia, Bulgaria)
OneLife Network Ltd. (Belize)
OneNetwork Services Ltd. (Sofia, Bulgaria)
Numerous associated shell companies in the British Virgin Islands, Cayman Islands, and Dubai.
Major individuals: Ruja Ignatova (founder), Karl Sebastian Greenwood (co-founder), Konstantin Ignatov (brother, took over the company), and Irina Dilkinska (head of legal and compliance). Complicit legal and financial professionals also played key roles (e.g. lawyer Mark Scott).

No direct evidence of Politically Exposed Person (PEP) involvement has been published or confirmed as central to the core OneCoin case. However, OneCoin did use international connections, and its ability to move massive sums across major financial centers would likely have required, at minimum, complacent if not actively complicit banking and legal intermediaries.

OneCoin deployed an array of sophisticated money laundering techniques:
Use of hundreds of shell companies in multiple countries, particularly in Bulgaria, Dubai, British Virgin Islands, and Cayman Islands.
Creation of fake investment funds and offshore bank accounts to receive and distribute proceeds, masking ultimate ownership.
Complex layering: routing funds through a string of international wire transfers among opaque entities, with misleading documentation to conceal true sources.
Purchase of luxury real estate in global financial centers: London, Dubai, etc.
Use of professional services (law firms, accountants) to build and run the structures, frequently lying to banks to evade due diligence.
Transfer of illicit funds as “investment” or business payments among associated companies, making tracing of original fraud proceeds extremely difficult.
These methods made detection, freezing, and seizure of assets especially challenging for authorities internationally.

OneCoin reportedly generated more than $4 billion in global proceeds, with billions believed to have been laundered through their sophisticated criminal network. U.S. court proceedings alone accounted for at least $400 million laundered through U.S. and offshore institutions by individuals such as Mark Scott; broader investigations cite laundering efforts involving hundreds of millions in the UK, Bulgaria, Dubai, and other jurisdictions, and total sums laundered run into the multi-billion dollar range.

Investigations revealed an extensive pattern of cross-border wire transfers routed through networks of shell companies and “investment funds.” Many of these transactions showed classic “layering” behaviors to obscure the original criminal source. Known suspicious activity reports, for example at Bank of New York Mellon, flagged hundreds of millions in wire transactions with links to OneCoin shell entities, indicating deliberate structuring and misrepresentation of beneficial ownership to evade AML controls. Forensic tracing has documented luxury asset purchases, large cash withdrawals and wire transfers to account in banking secrecy hotspots, and extensive “payment for services” deals among OneCoin-linked firms used as laundering vehicles.

2017–2018: Police raids in Bulgaria (OneCoin’s HQ) with participation from German authorities and Europol.
BaFin (Germany) issued cease-and-desist orders for unauthorized trading and freezing millions in related proceeds.
Numerous arrests: co-founders, legal staff, and high-level promoters, including international extraditions.
US Federal indictments and convictions: Multi-decade sentences for Greenwood (20 years for fraud and laundering), Mark Scott (10 years for laundering), and others. Irina Dilkinska received four years.
Global asset freezes, especially following UK and EU inquiries and asset tracing, including real estate in London, Bulgaria, and Dubai.
Ongoing forfeiture processes in multiple jurisdictions with continued pursuit of Ruja Ignatova (FBI Most Wanted as of 2025).

OneCoin fraud
Case Title / Operation Name:
OneCoin Fraud Scheme
Country(s) Involved:
Australia, Belize, Bulgaria, China, Germany, United Arab Emirates, United Kingdom, United States
Platform / Exchange Used:
N/A
Cryptocurrency Involved:

OneCoin (non-existent cryptocurrency)

Volume Laundered (USD est.):
Over $4 billion
Wallet Addresses / TxIDs :
funds laundered through shell companies and offshore accounts
Method of Laundering:

Use of shell companies, offshore accounts, layering, fake investment funds, luxury real estate purchases, complex cross-border wire transfers

Source of Funds:

Fraudulent investments from global retail investors through Ponzi scheme

Associated Shell Companies:

Numerous shell companies in Bulgaria, Dubai, British Virgin Islands, Cayman Islands, Belize

PEPs or Individuals Involved:

Ruja Ignatova (founder), Karl Sebastian Greenwood (co-founder), Konstantin Ignatov, Irina Dilkinska, involved lawyers and promoters

Law Enforcement / Regulatory Action:
Investigations, raids in Bulgaria, BaFin cease-and-desist orders, multiple international arrests, US federal indictments and convictions, global asset freezes
Year of Occurrence:
2016–Present
Ongoing Case:
Ongoing
đź”´ High Risk