Key Highlights
- Indonesian hacker arrested for exploiting Markets.com flaw to steal $398K in crypto.
- Case emerges as the UK and the U.S. tighten enforcement against global scam networks.
- Investigation continues as authorities trace offshore wallets and potential laundering.
Indonesian police have arrested a local hacker accused of stealing roughly $398,000 (Rp 6.67 billion) in cryptocurrency from a London-based trading firm, Finalto International Limited, the operator behind Markets.com.
Authorities say the suspect, identified as HS, manipulated a flaw inside the platform’s deposit system, allowing him to mint USDT balances far above the amounts actually deposited. Investigators say HS used scraped Indonesian ID data to open four fake accounts and exploited a flaw in Markets.com’s deposit field that generated USDT for any value entered.
According to a report, police arrested him in Bandung on November 15, seizing a laptop, phone, ATM card, CPU, and a cold wallet holding 266,801 USDT (about Rp 4.45 billion). HS, a crypto trader since 2017, now faces cybercrime and money-laundering charges that carry penalties of up to 15 years in prison.
A case highlighting global fraud risks
The scheme was uncovered after Finalto reported suspicious activity to Indonesian authorities, prompting a cybercrime investigation into whether other users had exploited the same system weakness. Police say the flaw was contained, but the scale of the theft and the use of stolen IDs show how fast small platform bugs can trigger major losses.
The arrest arrives at a moment when regulators worldwide are tightening their oversight of crypto scams. Earlier this year, the U.S. and UK carried out their largest joint crackdown on Southeast Asian scam networks. The operations targeted money-laundering hubs linked to online fraud, crypto processing, and pig-butchering schemes responsible for billions in losses.
UK warns of rising scams as rules tighten
The UK, where the victim firm is headquartered, has become increasingly vocal about crypto fraud risks. Regulators have imposed stricter consumer-protection rules, requiring exchanges to display prominent warnings, verify user understanding, and halt incentive-based promotions.
Executives, including Kraken co-CEO Arjun Sethi, argue the rules are slowing transactions and restricting product availability. However, the government maintains the measures are designed to prevent precisely the kind of exploitation seen in the Markets.com case.
Investigation ongoing to track funds
Indonesian authorities say they are still tracing flows connected to the Markets.com breach and determining whether HS acted alone or with accomplices. Investigators are examining cross-border transfers, on-chain activity, and the possible movement of funds through overseas platforms.
For both Indonesia and the UK, the case highlights the same problem: crypto now sits between global finance and fragile digital infrastructure. As enforcement ramps up and rules evolve, exchanges face rising pressure to harden their systems, and governments must keep up with fast-moving attack methods.
Also read: Aave Founder Slams BoE’s £20K Stablecoin Cap, Calls UK ‘Losers’
