2 3 4
5 UNITED STATES DISTRICT COURT WESTERN DISTRICT OF WASHINGTON 6 AT SEATTLE 7 8 UNITED STATES OF AMERICA, Case No. C25-611-RSM Plaintiff, ORDER GRANTING MOTION FOR 9 DEFAULT JUDGMENT v. 10 5.0096804 BTC, 5,327.090 USDT/ERC20, and 11 496,452.6472 USDT/TRC20, 12 Defendants.
13 I. INTRODUCTION 14 This matter comes before the Court on Plaintiff United States’ Motion for Default 15 Judgment. Dkt. #19. The Government requests the forfeiture of all interest, except for Claimant 16 Eigen Labs, Inc., in several cryptocurrency properties. Id. No defendants or potential claimant 17 has opposed the Motion or otherwise appeared. For the following reasons, the Court will grant 18 the Government’s Motion. 19 II. BACKGROUND 20 The Court includes the following relevant facts from the Government’s Complaint and 21 incorporates the provided cryptocurrency terms and definitions. See Dkt. #1 at ⁋⁋ 17-27. 22 Target Property 1 is a Virtual Currency Exchange account held at Payward Interactive, 23 Inc. (d/b/a “Kraken”) ending in account number BMYY. Id. Target Property 2 is an unhosted 24 1 address on the Tron blockchain. Id. at ⁋ 42. The collective Defendant Cryptocurrency consists of 5.0096804 BTC and 5,327.909 2 USDT/ERC20 (“Defendant Cryptocurrency 1”) and 496,452.6472 USDT/ERC20 (“Defendant 3 Cryptocurrency 2”). Id. at ⁋ 5-7. 4 The Internal Revenue Service—Criminal Investigation (“IRS-CI”) is investigating a 5 phishing scheme associated with Claimant Eigen Labs, Inc.’s virtual currency platform. Dkt. #1 6 at ⁋ 28. An estimated $6,000,000 in Eigen Labs’ virtual currency tokens were stolen. Id. Eigen 7 Labs, a software development company based in Washington, focuses on blockchain-based 8 infrastructure projects using Victim Tokens as “native tokens” for protocol, which are used to 9 pay for computational resources. Id. at ⁋ 29. Eigen Labs solicited investors to fund projects, and 10 investors received Victim Tokens as part of the investment. Id. Prior to the above theft, Eigen 11 Labs was in the process of transferring Victim Tokens to various custodians on behalf of the 12 investors, requiring investors to provide virtual currency addresses to receive payments. Id. 13 In September 2024, Investor 1 provided an address and was sent a test transfer. Id. at ⁋ 14 30. This address included the domain “iosg.vc.” Id. at ⁋ 31. In October 2024, Eigen Labs 15 received a nearly identical email allegedly from Investor 1 providing a different address to 16 receive payments. Id. at ⁋ 32. This email domain was slightly different from Investor 1’s: 17 “losg.vc.” instead of “iosg.vc.” Id. at ⁋ 33. The intended custodian email address was also 18 different: “anchoraqe.com” instead of “anchorage.com.” Id. at ⁋ 34-35. These phishing domains 19 were registered with the same registrar on the same day as the email to Eigen Labs. Id. at ⁋ 35. 20 Using these phishing domains, the attacker requested a test transfer, which Eigen Labs 21 sent in October 2024. Id. at ⁋ 36. Upon receipt of 1,673,644 Victim Tokens, the attacker began 22 converting them to “stablecoins,” such as USDT and USDC, through a decentralized Virtual 23 Currency Exchange (“VCE”). Id. From the decentralized VCE, the attacker further laundered 24 1 the funds by sending some of the now USDC and USDT to a non-custodial instant swapping VCE to convert them to approximately 15.5 BTC, worth roughly $954,000 at that time. Id. at ⁋ 2 37. Non-custodial instant swapping VCEs facilitate cryptocurrency swapping (such as trading 3 USDC for BTC) at high speeds, decreasing the chance of frozen funds. Id. The 15.5 BTC were 4 then transferred between five intermediary addresses in a “peel chain,” a series of transactions, 5 before consolidating in a VCE account held at Kraken, Target Property 1. Id. at ⁋ 38; Dkt. #19 6 at 5. This “is a common method that criminals use to launder the funds by obscuring the control, 7 ownership, source, and purpose of the funds involved in the transfers.” Id. 8 Target Property 1 received four BTC traceable deposits on October 4 and 5, 2024, for 9 over 13.05 BTC or $310,000. Id. at ⁋ 39. Target Property 1 was created around September 23, 10 2022, using a Danish male’s passport to authenticate the account. Id. at ⁋ 41. The first three 11 deposits were converted from BTC to USDT and withdrawn to Target Property 2. Id. at ⁋ 39. 12 As of November 6, 2024, Target Property 2 holds 496,452 USDT or $496,717 and 1,245 TRX 13 (the Tron blockchain’s native currency, approximately $203). Id. at ⁋ 44. The combined value 14 of the Target Properties was approximately $883,000 at the time the seizure warrant was issued. 15 Id. 16 On November 8, 2024, United States Magistrate Judge Paula L. McCandlis issued two 17 seizure warrants for the contents of Target Properties 1 and 2. Id. at ⁋ 4. Around that same day, 18 IRS-CI served the first seizure warrant on Kraken, who then transferred Defendant 19 Cryptocurrency 1 to IRS-CI. Id. at ⁋ 5. Around November 9, 2024, IRS-CI served the second 20 seizure warrant on Tether, who transferred Defendant Cryptocurrency 2 to IRS-CI around 21 February 25, 2025. Id. at ⁋ 6. Valued at $416,140 and $496,452 as of April 2, 2025, Defendant 22 Cryptocurrency remains in IRS-CI custody. Id. at ⁋ 5-6. 23 The Government filed the Complaint, verified by an IRS-CI Special Agent, and provided 24 1 notice of this action to known potential claimants on April 4, 2025. Id. On April 7, 2025, the Clerk of Court entered a Warrant of Arrest In Rem to arrest and 2 seize the Defendant Cryptocurrency. Dkt. #3. Custody was confirmed on April 10, 2025. Dkt. 3 #4. 4 On May 8, 2025, Government counsel filed a declaration that Notice of Civil Forfeiture 5 was posted to an official government site (www.forfeiture.gov) for at least thirty consecutive 6 days, beginning on April 8, 2025. Dkt. #5. 7 On May 9, 2025, Claimant Eigen Labs filed its Claim, verifying its interest in the seized 8 Defendant Cryptocurrency, and filed its Answer on May 30, 2025. Dkts. #7, #14. 9 On July 1, 2025, the Government moved for default in this case. Dkt. #16. The Clerk 10 entered the Order for Default as to all potential claimants other than Eigen Labs the same day. 11 Dkt. #18. 12 On July 10, 2025, the Government filed the instant Motion. Dkt. #19. The Government 13 claims that Defendant Cryptocurrency is subject to forfeiture: (1) under 18 U.S.C. § 981(a)(1)(A) 14 for money laundering, in violation under 18 U.S.C. § 1956(a)(1)(B)(i); and (2) under 18 U.S.C. 15 § 981(a)(1)(C) for wire fraud, in violation of 18 U.S.C. § 1343. Dkt. #1 at ⁋ 45. 16 III. DISCUSSION 17 A. Jurisdiction and Procedural Requirements 18 Before entering a default judgment, the Court must confirm that it has subject matter 19 jurisdiction over the case, in rem jurisdiction over the defendant, and that all interested parties 20 were adequately served. See Peoples Bank v. Lou, CASE NO. 21-05720-LK, 2022 WL 503781, 21 at *2 (W.D. Wash. Feb. 18, 2022). The Court has subject matter jurisdiction under 28 U.S.C. § 22 1345, which provides original jurisdiction to district courts over all civil actions brought by the 23 United States. This Court has in rem jurisdiction over the Defendant Cryptocurrency because 24 1 the Court issued a Warrant of Arrest In Rem under Supplemental Rule G(5) of the Federal Rules of Civil Procedure, which was successfully served in this district. Dkts.
Free access — add to your briefcase to read the full text and ask questions with AI
2 3 4
5 UNITED STATES DISTRICT COURT WESTERN DISTRICT OF WASHINGTON 6 AT SEATTLE 7 8 UNITED STATES OF AMERICA, Case No. C25-611-RSM Plaintiff, ORDER GRANTING MOTION FOR 9 DEFAULT JUDGMENT v. 10 5.0096804 BTC, 5,327.090 USDT/ERC20, and 11 496,452.6472 USDT/TRC20, 12 Defendants.
13 I. INTRODUCTION 14 This matter comes before the Court on Plaintiff United States’ Motion for Default 15 Judgment. Dkt. #19. The Government requests the forfeiture of all interest, except for Claimant 16 Eigen Labs, Inc., in several cryptocurrency properties. Id. No defendants or potential claimant 17 has opposed the Motion or otherwise appeared. For the following reasons, the Court will grant 18 the Government’s Motion. 19 II. BACKGROUND 20 The Court includes the following relevant facts from the Government’s Complaint and 21 incorporates the provided cryptocurrency terms and definitions. See Dkt. #1 at ⁋⁋ 17-27. 22 Target Property 1 is a Virtual Currency Exchange account held at Payward Interactive, 23 Inc. (d/b/a “Kraken”) ending in account number BMYY. Id. Target Property 2 is an unhosted 24 1 address on the Tron blockchain. Id. at ⁋ 42. The collective Defendant Cryptocurrency consists of 5.0096804 BTC and 5,327.909 2 USDT/ERC20 (“Defendant Cryptocurrency 1”) and 496,452.6472 USDT/ERC20 (“Defendant 3 Cryptocurrency 2”). Id. at ⁋ 5-7. 4 The Internal Revenue Service—Criminal Investigation (“IRS-CI”) is investigating a 5 phishing scheme associated with Claimant Eigen Labs, Inc.’s virtual currency platform. Dkt. #1 6 at ⁋ 28. An estimated $6,000,000 in Eigen Labs’ virtual currency tokens were stolen. Id. Eigen 7 Labs, a software development company based in Washington, focuses on blockchain-based 8 infrastructure projects using Victim Tokens as “native tokens” for protocol, which are used to 9 pay for computational resources. Id. at ⁋ 29. Eigen Labs solicited investors to fund projects, and 10 investors received Victim Tokens as part of the investment. Id. Prior to the above theft, Eigen 11 Labs was in the process of transferring Victim Tokens to various custodians on behalf of the 12 investors, requiring investors to provide virtual currency addresses to receive payments. Id. 13 In September 2024, Investor 1 provided an address and was sent a test transfer. Id. at ⁋ 14 30. This address included the domain “iosg.vc.” Id. at ⁋ 31. In October 2024, Eigen Labs 15 received a nearly identical email allegedly from Investor 1 providing a different address to 16 receive payments. Id. at ⁋ 32. This email domain was slightly different from Investor 1’s: 17 “losg.vc.” instead of “iosg.vc.” Id. at ⁋ 33. The intended custodian email address was also 18 different: “anchoraqe.com” instead of “anchorage.com.” Id. at ⁋ 34-35. These phishing domains 19 were registered with the same registrar on the same day as the email to Eigen Labs. Id. at ⁋ 35. 20 Using these phishing domains, the attacker requested a test transfer, which Eigen Labs 21 sent in October 2024. Id. at ⁋ 36. Upon receipt of 1,673,644 Victim Tokens, the attacker began 22 converting them to “stablecoins,” such as USDT and USDC, through a decentralized Virtual 23 Currency Exchange (“VCE”). Id. From the decentralized VCE, the attacker further laundered 24 1 the funds by sending some of the now USDC and USDT to a non-custodial instant swapping VCE to convert them to approximately 15.5 BTC, worth roughly $954,000 at that time. Id. at ⁋ 2 37. Non-custodial instant swapping VCEs facilitate cryptocurrency swapping (such as trading 3 USDC for BTC) at high speeds, decreasing the chance of frozen funds. Id. The 15.5 BTC were 4 then transferred between five intermediary addresses in a “peel chain,” a series of transactions, 5 before consolidating in a VCE account held at Kraken, Target Property 1. Id. at ⁋ 38; Dkt. #19 6 at 5. This “is a common method that criminals use to launder the funds by obscuring the control, 7 ownership, source, and purpose of the funds involved in the transfers.” Id. 8 Target Property 1 received four BTC traceable deposits on October 4 and 5, 2024, for 9 over 13.05 BTC or $310,000. Id. at ⁋ 39. Target Property 1 was created around September 23, 10 2022, using a Danish male’s passport to authenticate the account. Id. at ⁋ 41. The first three 11 deposits were converted from BTC to USDT and withdrawn to Target Property 2. Id. at ⁋ 39. 12 As of November 6, 2024, Target Property 2 holds 496,452 USDT or $496,717 and 1,245 TRX 13 (the Tron blockchain’s native currency, approximately $203). Id. at ⁋ 44. The combined value 14 of the Target Properties was approximately $883,000 at the time the seizure warrant was issued. 15 Id. 16 On November 8, 2024, United States Magistrate Judge Paula L. McCandlis issued two 17 seizure warrants for the contents of Target Properties 1 and 2. Id. at ⁋ 4. Around that same day, 18 IRS-CI served the first seizure warrant on Kraken, who then transferred Defendant 19 Cryptocurrency 1 to IRS-CI. Id. at ⁋ 5. Around November 9, 2024, IRS-CI served the second 20 seizure warrant on Tether, who transferred Defendant Cryptocurrency 2 to IRS-CI around 21 February 25, 2025. Id. at ⁋ 6. Valued at $416,140 and $496,452 as of April 2, 2025, Defendant 22 Cryptocurrency remains in IRS-CI custody. Id. at ⁋ 5-6. 23 The Government filed the Complaint, verified by an IRS-CI Special Agent, and provided 24 1 notice of this action to known potential claimants on April 4, 2025. Id. On April 7, 2025, the Clerk of Court entered a Warrant of Arrest In Rem to arrest and 2 seize the Defendant Cryptocurrency. Dkt. #3. Custody was confirmed on April 10, 2025. Dkt. 3 #4. 4 On May 8, 2025, Government counsel filed a declaration that Notice of Civil Forfeiture 5 was posted to an official government site (www.forfeiture.gov) for at least thirty consecutive 6 days, beginning on April 8, 2025. Dkt. #5. 7 On May 9, 2025, Claimant Eigen Labs filed its Claim, verifying its interest in the seized 8 Defendant Cryptocurrency, and filed its Answer on May 30, 2025. Dkts. #7, #14. 9 On July 1, 2025, the Government moved for default in this case. Dkt. #16. The Clerk 10 entered the Order for Default as to all potential claimants other than Eigen Labs the same day. 11 Dkt. #18. 12 On July 10, 2025, the Government filed the instant Motion. Dkt. #19. The Government 13 claims that Defendant Cryptocurrency is subject to forfeiture: (1) under 18 U.S.C. § 981(a)(1)(A) 14 for money laundering, in violation under 18 U.S.C. § 1956(a)(1)(B)(i); and (2) under 18 U.S.C. 15 § 981(a)(1)(C) for wire fraud, in violation of 18 U.S.C. § 1343. Dkt. #1 at ⁋ 45. 16 III. DISCUSSION 17 A. Jurisdiction and Procedural Requirements 18 Before entering a default judgment, the Court must confirm that it has subject matter 19 jurisdiction over the case, in rem jurisdiction over the defendant, and that all interested parties 20 were adequately served. See Peoples Bank v. Lou, CASE NO. 21-05720-LK, 2022 WL 503781, 21 at *2 (W.D. Wash. Feb. 18, 2022). The Court has subject matter jurisdiction under 28 U.S.C. § 22 1345, which provides original jurisdiction to district courts over all civil actions brought by the 23 United States. This Court has in rem jurisdiction over the Defendant Cryptocurrency because 24 1 the Court issued a Warrant of Arrest In Rem under Supplemental Rule G(5) of the Federal Rules of Civil Procedure, which was successfully served in this district. Dkts. #3, #4, #5. 2 The Court must also ensure that the proper procedural requirements have been met. 3 Under 18 U.S.C. § 981(b)(2)(A), a seizure may be made without a warrant if the United States 4 files a complaint for forfeiture in the district court and if the court issues an arrest warrant in rem 5 pursuant to the Supplemental Rules for Certain Admiralty or Maritime Claims and Asset 6 Forfeiture Actions. The complaint must be verified, state the grounds for jurisdiction and venue, 7 describe the property “with reasonable particularity,” identify the forfeiture statute, and “state 8 sufficiently detailed facts to support a reasonable believe that the government will be able to meet 9 its burden of proof at trial. Supp. Adm. R. G(2)(a)-(f). The clerk must then issue a warrant to 10 arrest the property if it is in the government’s possession, custody, or control, and process must 11 be executed on the property. Id. at G(3)(b)-(c). The government must give notice to potential 12 claimants by publication and by sending direct notice of the pending action to any person who 13 reasonably appears to be a potential claimant. Id. at G(4)(a)-(b). 14 Here, the Government filed a verified Complaint, which provides all the required 15 information. Dkt. #1. The Clerk of Court issued an in rem warrant for the Defendant 16 Cryptocurrency, process receipt and return was posted, and the Government posted notice of this 17 forfeiture action on an official government site (www.forfeiture.gov) for at least 30 consecutive 18 days, beginning April 8, 2025. Dkts. #3-5. The Government also provided notice of the verified 19 Complaint to potential complaints. Dkt. #2. Accordingly, the Court finds that the all procedural 20 requirements have been met. 21 B. Default Judgment 22 Given the entry of default in this case, the Court may use its discretion to enter a default 23 judgment. See Fed. R. Civ. P. 55(b); LCR 55(b). When examining the merits of a default 24 1 judgment, the Court takes well-pled allegations in a complaint as true. See Fair Hous. of Marin v. Combs, 285 F.3d 899, 906 (9th Cir. 2002) (citing Geddes v. United Fin. Grp., 559 F.2d 557, 2 560 (9th Cir. 1977)). Though default judgments are “ordinarily disfavored, the Court analyzes 3 seven factors to determine whether default judgment is appropriate. Eitel v. McCool, 782 F.2d 4 1470, 1471-72 (9th Cir. 1986). Those factors are: (1) the possibility of prejudice to the plaintiff; 5 (2) the merits of plaintiff’s substantive claim(s); (3) the sufficiency of the complaint; (4) the sum 6 of money at stake in the action; (5) the possibility of a dispute concerning material facts; (6) 7 whether the default was due to excusable neglect; and (7) the strong policy underlying the Federal 8 Rules of Civil Procedure favoring decisions on the merits. Id. 9 In applying this test, the Court finds Plaintiff’s Complaint to be well-pled and therefore 10 takes its allegations as true. 11 (1) Possibility of Prejudice to Plaintiff 12 The Court finds that there is a great possibility of prejudice to the Government because 13 without a default judgment, the Government would be required to litigate even though no 14 potential claimants have appeared in this case or have no other remedy. See United States v. 15 391.5873617 in Bitcoin, No. 2:20-cv-11712-CAS(JCx), 2021 WL 1627694, at *3 (C.D. Cal. Apr. 16 26, 2021) (citing United States v. Approximately $194,752 in U.S. Currency, No. 11-cv-1400- 17 EMC, 2011 WL 3652509, at *3 (N.D. Cal. Aug. 19, 2011)). This factor weighs in the 18 Government’s favor. 19 (2) Merits of the Substantive Claims and 20 (3) Sufficiency of the Complaint 21 The second and third Eitel factors are generally analyzed together. See Curtis v. 22 Illumination Arts, Inc., 33 F. Supp. 3d 1200, 1211 (W.D. Wash. 2014). For civil forfeiture 23 actions, “the burden of proof is on the Government to establish, by a preponderance of the 24 1 evidence, that the property is subject to forfeiture[.]” 18 U.S.C. § 983(c)(1). The Government must also establish a “substantial connection between the property and the offense” if its theory 2 is that the property was used to commit or was involved in a crime. Id. at § 983(c)(3). 3 The Government claims that Defendant Cryptocurrency is subject to forfeiture: (1) under 4 18 U.S.C. § 981(a)(1)(A) for money laundering, in violation under 18 U.S.C. § 1956(a)(1)(B)(i); 5 and (2) under 18 U.S.C. § 981(a)(1)(C) for wire fraud, in violation of 18 U.S.C. § 1343. Dkt. #1 6 at ⁋ 45. 7 Taking the factual allegations in the verified Complaint as true, these factors favor default 8 judgment. The Complaint establishes that: Claimant Eigen Labs fell victim to an email phishing 9 scheme from two different domains, registered the same day; Eigen Labs thought these emails 10 were from legitimate investors, but the email’s domain names were slightly changed; upon 11 request from the attackers, Eigen Labs sent two test transfers totaling over 1.67 ERC-20 tokens; 12 the attackers then converted the tokens to USDT and USDC stablecoins through a decentralized 13 VCE, then further laundered the tokens by sending some via a non-custodial instant swapping 14 VCE and a peel chain to swap the currency at high speeds and conceal the nature, location, 15 source, ownership, and control of the stolen proceeds. Dkt. #1 at ⁋⁋ 28-38. An Internal Revenue 16 Service Special Agent verified these facts from his successful tracking of the funds. Id. at 17-18 17 (Verification of IRS Special Agent Allen). Accordingly, the Court finds that sufficiency and 18 merits of the Government’s claims favor default judgment. 19 (4) Sum of the Money at Stake 20 “In weighing this factor, courts take into account the amount of money requested in 21 relation to the seriousness of the defendant’s conduct, whether large sums of money are involved, 22 and whether the recovery sought is proportional to the harm caused by defendant’s conduct.” 23 Curtis, 33 F. Supp. 3d at 1212 (quotations omitted). 24 1 The “sum of the money at stake” here, as of recent valuation, is approximately $912,862. Dkt. #19 at 11. Though not an insubstantial amount, the Government has sufficiently 2 demonstrated that this sum of money was stolen or taken by wire fraud and involved in money 3 laundering transactions, in violation of federal law.” United States v. Approximately 4 3879.16242937 bitcoin, No. 21-cv-02103-AJB-JLB, 2022 WL 2128908, at *4 (S.D. Cal. Apr. 5 18, 2022). Considering the amount and conduct, this factor also weighs in favor of default 6 judgment. 7 (5) Possibility of Dispute as to Material Facts 8 Given the record here and the lack of appearance by any potential claimants except Eigen 9 Labs, the Court finds little possibility of a dispute concerning material facts. 10 (6) Excusable Neglect 11 The Court is satisfied by the Government’s compliance with notice requirements here, 12 and no potential claimants besides Eigen Labs have appeared. See United States v. 13 Approximately $72,000 in U.S. Currency, No. C 08-1305 JCS, 2009 WL 506866, at *4 (N.D. 14 Cal. Feb. 7, 2009) (finding “no evidence that default was due to excusable neglect given that . . . 15 Plaintiff provided adequate service and notice to the parties known to have interest in the 16 property”). This factor also weighs in favor of default judgment. 17 (7) Policy Favoring Decisions on the Merits 18 The Court agrees with the Government that where, as here, potential claimants’ failure to 19 appear makes a decision on the merits “an impractical if not impossible task.” Dkt. #19 at 13 20 (quoting United States v. Approximately $57,890 in U.S. Currency, No. C 10-01829 WHA, 2010 21 WL 3987397, at *4 (N.D. Cal. Oct. 12, 2010). Thus, any policy preference for deciding cases 22 on the merits does not preclude the Court from entering a default judgment. 23 In sum, the Eitel factors weigh in favor of granting the Government a default judgment. 24 1 IV. CONCLUSION Having reviewed the instant Motion and remainder of the record, the Court hereby finds 2 and ORDERS: 3 1. Plaintiff United States’ Motion for Default Judgment, Dkt. #19, is GRANTED. 4 2. Defendant Cryptocurrency (including 5.0096804 BTC, 5,327.909 USDT/ERC20, and 5 496,452.6472 USDT/ERC20) is fully and finally condemned and forfeited to the 6 United States, subject to the potentially superior interest of Claimant Eigen Labs, Inc. 7 3. No right, title, or interest in Defendant Cryptocurrency shall hereafter exist in any 8 party other than the United States, subject to the potentially superior interest of 9 Claimant Eigen Labs, Inc. 10
12 DATED this 27th day of October, 2025. 13 A 14 RICARDO S. MARTINEZ 15 UNITED STATES DISTRICT JUDGE
16 17 18 19
21 22 23 24