Bitcoin Stack Exchange is a question and answer site for Bitcoin users, developers, and enthusiasts. It only takes a minute to sign up.
Sign up to join this community
My btc-e account was hacked (or my passwords stolen from my computer). I was able to make screenshots while they were withdrawing my bitcoins. So i have the btc wallet adress where the money went to and I have the ip adress of the thief. Is there really nothing I can do? Can I find and contact the owner? how?
The ip is: 21211716315
The wallet is: 15M9rP1GshzBfMbqnHL77iqVcvmgbzVa4S
Unfortunately, there is not much you can do.
By design, it is very difficult to identify a person from a Bitcoin address. In principle, if the thief eventually transfers the coins to an exchange in order to sell them, it could be possible to trace the coins to that point, and the exchange might know who got the money. But they would probably not divulge this without a court order (if even then), and they may be in a different country with different laws. Moreover, the thief could use a mixing service or other techniques to make it much more difficult to trace the coins to the exchange.
The IP address is a little better (yours is missing some dots, by the way). You can use a tool such as whois to find the ISP to whom the address is registered, and their records would show which of their subscribers was using it at that time. But again, you'd need a court order, and they could be in a different country. Furthermore, there's a very good chance that the thief is not actually their subscriber, but someone who compromised their subscriber's computer and used it remotely. There could even be several layers of this.
Each of these steps would need the assistance of law enforcement, so it would be reasonable to report the theft to your local or national police agency, and give them the information you've shared with us. (It could take some work to educate them about Bitcoin, or find an officer who is already familiar with it.) But unless the thief has done a shoddy job of covering his tracks, it's unlikely he'll be caught, and even less likely that you'll be able to recover your coins.
Sorry.
I'm convinced the thief can be found, still today.
In 2013 only very few people understood how their transactions could be traced and their addresses clustered. So obviously as well 'your thief'. He used this address 15M9rP1GshzBfMbqnHL77iqVcvmgbzVa4S in 116 Transactions and received 380 BTC. And obviously he tried to obfuscate his traces by splitting larger amounts into smaller and did the mistake to use this address as well as change address. This makes the detective work much easier. There are in the meantime millions of exchange addresses known. So if one of the many transactions after one, two, three ... steps ends up at a known exchange address then you can go with this information to police and they can ask the exchange(s) if the owner of the related address was KYCed (if they have his id or bank account and transferred fiat after an exchange).
In case you got your coins already back it would be interesting to hear how the thief was caught. Btw I assume you weren't the only victim ...
