导 读
像其他货币和商品一样，比特币通常在交易所或者场外交易。
As in other currencies and commodities, bitcoins are usually traded on exchange or off-site.
场外交易常见于在某些场内交易无法交易的时候，或者一些超过五万美金的交易(即“大宗交易”) 。而在交易的过程中，骗局无处不在。
Off-site transactions are common when transactions cannot be traded in some arenas, or transactions that exceed $50,000 (i.e., “big deal”). In the course of the transaction, frauds are everywhere.
本文将为你揭秘几个场外交易的经典骗局。希望投资者们可以从这些案例中吸取教训。
This paper will reveal some of the classic frauds of off-the-shelf transactions.
成为一个场外交易者的门槛是非常低的，唯一的要求就是资金。
The threshold for becoming an off-site trader is very low, and the only requirement is funding.
根据交易规模，场外交易者通常选用网络平台，比如Coincola或者Localbitcoin，实体商店，或者简单的电报还有email 来执行商业交易。
Depending on the scale of the transaction, off-site traders usually choose a network platform, such as Coincola or Localbitcoin, a real store, or simply a telegram or email to carry out the business transaction.
交易方式也多种多样，一些平台同时接受现金和电汇，而有些可能只接受其中一种，还有一些会接受其他形式的付款，诸如西联汇款。
Transactions are also conducted in a variety of ways, with some platforms receiving both cash and wire transfers, while others may accept only one of them, and others receiving other forms of payments, such as Western Union remittances.
场外交易者要承担广泛的风险。
Off-site traders bear a wide range of risks.
首当其冲的是法律风险，比如不知情的交易者被卷入洗钱活动中。
Legal risks, such as the involvement of uninformed traders in money-laundering, are at the forefront.
即使比特币交易在包括香港在内的很多地方不受监管，现有的交易机构还是强制要求交易双方要与对方进行尽职调查。
Even though bitcoin transactions are not regulated in many places, including Hong Kong, the existing trading agencies impose due diligence on both parties to the transaction.
“警惕洗钱/恐怖主义融资风险!提高防范意识，对于不寻常和可疑的交易，积极评定是否是洗钱/恐怖主义融资行为”一份香港海关总署贴出的告示如是写道。
A circular issued by the Hong Kong Customs Administration reads as follows: “Aware of the risk of money laundering/terrorist financing! Raise awareness and actively evaluate unusual and suspicious transactions for money laundering/terrorist financing”.
但是即使交易场所一丝不苟的遵守KYC(知晓你的客户)原则和反洗钱流程，也并不能保护交易者免于无时无刻叮上来的骗局和陷阱。
But even strict adherence to the KYC (know your customer) principles and anti-money-laundering processes in the trading place does not protect traders from frauds and traps that come up from time to time.
常见的，网络钓鱼邮件能获取交易者的电子邮箱和云存储凭证。
Commonly, web-fishing e-mails can obtain e-mail and cloud storage vouchers from traders.
使用从被盗者收件箱里发现的信息，攻击者能够代替被盗者联系之前合作过的企业和个人，并将资金骗到自己的钱包里。
Using the information found in the stolen person's inbox, the attackers were able to substitute the stolen person for the company and individuals they had previously worked with and to lure funds into their wallets.
比如作为一个授信买家发布交易信息，要求先转比特币再付钱。
For example, as a buyer of letters, it is required to transfer bitcoin before paying for the transaction.
如果攻击者能够长时间的监听邮件，他们便可以介入被骗人的交易当中，并在合适的时机代替受害者与客户沟通，然后通过改变账户信息，引导客户将资金打到攻击者的账户中。
If the attackers are able to listen to the mail for long periods of time, they can intervene in the fraudulent transactions and, at the right time, communicate with the client in his place, and then, by changing the account information, they can direct the funds to the aggressor's account.
去年，香港发生了这样一类案件：场外交易者将骗来的收入转移为比特币，因为比特币转账交易更快捷，而且不会被抓捕到。
Last year, there were cases in Hong Kong where out-of-the-art traders transferred the stolen income to bitcoin, as it was made faster and would not be caught.
在这个案件中，诈骗分子往往售卖无形的商品，比如邮轮船票，或者景点门票。
In this case, fraudsters often sell intangible goods, such as cruise ship tickets or destination tickets.
诈骗犯要求一个毫无戒备的买家提供个人信息，包括姓名和护照副本。
The fraudster requested personal information, including names and copies of passports, from an unprepared buyer.
总之，这一切看上去像是一场正规的旅游产品购买过程。
All in all, it looks like a formal process of buying tourism products.
诈骗分子然后用受害人的名义联系场外交易者进行交易，要求购买上述门票费用等额的比特币。
The fraudster then made a transaction in the name of the victim by contacting the out-of-the-field traders and asking for the purchase of the above-mentioned bitcoin equal to the cost of the tickets.
诈骗分子会提交受害人的个人信息，并且要求交易者也提供个人信息，包括银行账户和护照扫描件(这是常见的尽职调查程序)。
Fraudsters submit the victim's personal information and require the dealer to also provide personal information, including bank accounts and passport scans (a common due diligence procedure).
诈骗分子用这些文件去取信受害人，受害人往往毫无知觉，汇款给交易者。
Fraudsters use these documents to convince victims, who are often unconscious and send remittances to traders.
因为他们以为得到了卖家的个人信息，也确认过汇款账户和姓名一致。
Because they thought they had received personal information from the seller, they also confirmed that the money transfer account and the name were the same.
他觉得万一交易出现问题，自己可以凭这些信息，从警察那儿得到帮助。
He felt that he could get help from the police on the basis of such information in the event of a problem with the transaction.
当受害者汇款给交易者，交易者收到钱，把比特币转给诈骗分子，然后诈骗分子就带着比特币跑了。
When the victim remits the money to the dealer, the dealer receives the money and transfers the bitcoin to the fraudster, who then runs away with the bitcoin.
而交易者和受害者因为从没有直接交流，他们会花不少时间才意识到被骗了。
As traders and victims never communicate directly, they spend a lot of time realizing that they have been deceived.
警察往往从交易者和受害者口中，调查不出什么有用的线索。
The police often fail to investigate any useful leads from traders and victims.
受害者能不能追回他们失去的金钱，要取决于他们是如何汇款的。
The ability of victims to recover the money they lost depends on how they remit it.
至于交易者，基本上没什么可能把他们的比特币拿回来了。
As for traders, there's hardly any way to get their bitcoin back.
最近在数字加密社区发生了一场特别奇葩的骗局。
A particularly bizarre scheme has recently taken place in the digital encryption community.
主要手段是通过一些不太熟悉数字加密货币规则和流程的人。
The main means is through people who are less familiar with the rules and processes of digital cryptography.
他们在LinkedIn和Facebook这些社交网络上收到陌生人的来信，宣传自己在寻找比特币交易者，帮助收购/出售从矿工或者机构投资者手中的数字货币，并给介绍人一笔佣金。
They receive letters from strangers on the LinkedIn and Facebook social networks, promoting their search for Bitcoin traders, helping to buy/sell digital money from miners or institutional investors, and providing a commission to presenters.
对那些没有数字货币交易概念的人对100，000比特币这个金额毫无概念。
For those who do not have the concept of a digital currency transaction, there is no concept of the sum of 100,000 bits.
这有点类似于著名的尼日利亚邮件事件，诈骗邮件经过特别的设计，确保剔除聪明和懂行的人。
This is somewhat similar to the famous Nigerian e-mail incident, where fraudulent mail is specially designed to ensure the removal of intelligent and knowledgeable people.
发送出成百上千的诈骗邮件没什么成本，但是要引诱那些上当的人，需要大量的人力和时间。
Sending hundreds of fraudulent mail is not costly, but it takes a lot of manpower and time to lure those who are in the wrong.
通过剔除掉精明不上当的对象，诈骗犯可以更高效的实施骗术。
Fraudsters can be more efficient in their deceptions by removing those who are ill-informed.
为了小小的佣金，接收者用他们的声誉和能量来寻找身边的数字货币交易者。
For a small commission, recipients use their reputation and energy to find the digital money traders around them.
诈骗者认为：
从老朋友口中推荐来的生意，以及想要促成这笔大交易完成的心愿会让场外交易者放下心理防备。 The business recommended from among old friends and the desire to facilitate the completion of this big deal will leave the out-of-the-horizon traders unprepared. 不由自主的交易者会自己跨过所有的障碍，然后这些诈骗者会说需要收到10万美金的小汇款来确任交易者的购买力，然后等到交易者完成转账，就没有然后了。 Unautonomous traders would cross all the barriers themselves, then the fraudsters would say that they would need $100,000 in small remittances to ascertain the dealer's purchasing power, and then wait until the dealer had made the transfer. Dave Chapman，场外交易公司Octagon Strategy的主席说他们公司从没被骗过 “这世道，愚蠢的投机者多的让骗子都忙不过来。” Dave Chapman, the chairman of the off-site trading company Octagon Strategy, said that their company had never been fooled, "This world is a place where stupid speculators can't get a con man." 同时他也表示，“我们基本每天都要碰到10个以上这样的骗子请求。” At the same time, he said, “We have to meet more than 10 such liars every day”. 核实资金来源的真实性在比特币交易中是没有意义的。 Verification of the true nature of the source of funds is meaningless in Bitcoin transactions. 其实，区块链系统的公开和透明性允许每个人去查看对方的信息。 In fact, the open and transparent nature of block chain systems allows everyone to view each other's information. 你能很简单的就知道，对方账户里是否有100，000以上的比特币数量(每个人最多只有3个收款地址存在)。 It is easy for you to know whether there are more than 100,000 bits in each other's accounts (there are only three receiving addresses at most). 如果你碰到有人说有比特币要出售，那就让他提供存放比特币的账户地址。 If you meet someone who says there's bitcoin for sale, let him provide the account address where the bitcoin is stored. 对卖家最好的确认方式，就是查看签名的脚本数据。 The best way to identify a seller is to look at the signed script data. 如果地址是以1开头，那么流程就很直接了当了，可惜目前还没有很好的手段针对多重签名地址和segwit地址。 If the address starts with 1 then the process is straightforward, but there is no good way to target multiple signature addresses and segwit addresses. 另外一个可选方案，是要求从那个地址中取一小笔钱，比如1美金。截图，银行或律师的信件，以及类似的东西都是毫无价值的，应该被看作是某种骗局的迹象。 Another option is to ask for a small amount of money from that address, like a dollar. A screenshot, a letter from a bank or a lawyer, and something like that, are worthless and should be seen as a sign of some kind of fraud. 一个可靠的托管程序在技术上要比比特币的多重签名技术便宜，但是它很难找到一个同时受买家和卖家信任的第三方中介。 A reliable hosting procedure is technically cheaper than Bitcoin's multiple signature technology, but it is difficult to find a third-party intermediary that is trusted by both buyers and sellers. 交易比特币，提供托管服务，或者成为区块链贸易服务商，需要你密切关注所在的法律环境，洞悉人类行为，以及聚焦于比特币之上的先进信息保密技术。 The trade in bitcoin, the provision of hosting services, or becoming a block chain trader require your close attention to the legal environment in which human behaviour is located, as well as to advanced information confidentiality techniques that focus on bitcoin. 诈骗者不会消失，他们始终试图通过智商上的优势，用各种骗术，骗取你的辛苦所得。 Fraudsters will not disappear, and they will always try to exploit your hard-earned gains through the advantages of IQs and with all kinds of tricks. 比特币的交易量会持续变大，并且带来巨大利润，但是同时要求你具备关键的技能和密切的关注。 Bitcoin transactions will continue to grow and generate huge profits, but at the same time it will require critical skills and close attention. 本文由现在财经（ID：lianhaicaijing）原创编译 This post was originally prepared by the Current Finance Agency (ID:lianhaicaijing).
注册有任何问题请添加 微信：MVIP619 拉你进入群
打开微信扫一扫
添加客服
进入交流群
发表评论