$5.4M UK crypto theft case ends with 11-year prison sentences

A brazen UK crypto theft case that involved fake police websites, impersonation of law enforcement officers, and $5.4 million in stolen cryptocurrency has ended with three men behind bars — and a paper trail of luxury spending that made investigators’ jobs considerably easier.

Key takeaways

• Three men posed as police officers and built fake police websites to steal $5.4 million in cryptocurrency from victims across the UK.
• Victims were told to deposit their crypto into wallet addresses presented as secure police accounts.
• Stolen funds were laundered and spent on a £60,000 car, designer goods from Harrods, Hermès, Louis Vuitton, and Rolex, and holidays to destinations including Thailand, Japan, and the Maldives.
• Police found £500,000 in cash in a safety deposit box linked to the gang.
• Hamza Bashir, Kevin Nwamma, and Anthony Ikenwe received sentences of six years nine months, eleven years, and eleven years respectively.

Elaborate Crypto Theft via Fake Police Impersonation

The scheme was built on a simple but devastating psychological lever: fear. According to the UK Metropolitan Police, the gang cold-called crypto holders and, while posing as police officers, warned them that their funds were under threat. The solution offered was to move the money — urgently — into what they described as secure police-controlled wallets.

It worked. Victims transferred their cryptocurrency into wallet addresses controlled by the gang, and in some cases also handed over the credentials to their own accounts.

How the Gang Deceived Victims

Impersonating law enforcement to commit financial fraud is not new, but this gang added a digital layer that made the con harder to detect. They created fake police websites designed to add credibility to their calls, giving victims a place to “verify” the legitimacy of the operation. The combination of phone pressure and a convincing web presence was enough to override skepticism.

This kind of social engineering — where the attacker manufactures urgency and institutional authority — is particularly effective against crypto holders, whose assets often exist outside traditional banking safeguards. There is no bank fraud team to call. No chargeback. Once the funds move to an external wallet, they are gone.

Method of Crypto Transfer and Laundering

After the funds were transferred, the gang moved quickly to obscure the trail. Much of the stolen cryptocurrency was converted into payment cards, a method that allows digital assets to be spent in ordinary retail environments with minimal friction. The laundered proceeds were then spent freely.

The spending was anything but subtle. Among the documented purchases: a £60,000 ($81,000) car, shopping at Harrods, Hermès, Louis Vuitton, and Rolex, and international trips to Thailand, Japan, Paris, Mykonos, the Maldives, and the Seychelles. Police also recovered £500,000 ($674,000) in cash from a safety deposit box connected to the group.

What makes this even more striking: one of the men had declared an annual income of just £444 ($600) to authorities. The gap between that figure and a globe-trotting, designer-label lifestyle was, ultimately, part of what unraveled them.

Discovery and Legal Proceedings

Investigation Leading to Arrest

The Metropolitan Police launched its investigation after a victim came forward in January 2025 to report being defrauded. That single report was the thread that unravelled the entire operation. Once detectives began pulling at it, the spending records, the safety deposit box, and the payment card conversions all came into view.

The case highlights an important dynamic in cryptocurrency fraud investigations: the blockchain itself may be pseudonymous, but the moment stolen funds touch the real economy — cars, hotels, designer stores — the paper trail becomes very human and very traceable.

Sentencing of the Criminals

Hamza Bashir, 23, was sentenced to six years and nine months in prison. Kevin Nwamma, 25, and Anthony Ikenwe, 29, each received eleven-year sentences. The disparity in sentencing likely reflects different levels of involvement, though the Metropolitan Police has not detailed each individual’s specific role.

Eleven-year sentences for cryptocurrency fraud in the UK send a clear signal about how seriously courts are treating this category of crime. As digital asset adoption grows, so does the sophistication of those who prey on holders — and, increasingly, so does the willingness of prosecutors to pursue maximum penalties.

For the broader crypto security conversation, this case is a reminder that the most effective attacks rarely exploit technical vulnerabilities. They exploit people. No hardware wallet or cold storage solution protects against a convincing voice on the phone telling you your money is already at risk.

FAQ

How did the gang steal the cryptocurrency?

They posed as police officers and created fake police websites, convincing victims to deposit their crypto into wallet addresses presented as secure police accounts. In some cases, victims also handed over access to their own accounts.

What happened to the stolen funds?

The stolen cryptocurrency was laundered and converted into payment cards, then spent on luxury holidays across destinations including Thailand, Japan, Paris, Mykonos, the Maldives, and the Seychelles, as well as a £60,000 car and goods from Harrods, Hermès, Louis Vuitton, and Rolex. Police also recovered £500,000 in cash from a safety deposit box linked to the gang.

When and how was the gang caught?

The gang was caught after a victim reported the fraud to the Metropolitan Police in January 2025. That report triggered an investigation that ultimately exposed the full extent of the operation.

What were the sentences given to the criminals?

Hamza Bashir received a sentence of six years and nine months. Kevin Nwamma and Anthony Ikenwe were each sentenced to eleven years in prison.

Article produced with the assistance of artificial intelligence and reviewed by the editorial team.