7 December 2025
The Instagram account of former American rap trio Migos was hacked with the aim of blackmailing Raj Gokal, co-founder of Solana. On May 27, Migos' account posted at least seven images, some of which have since been deleted. Two of the images showed Gokal holding his passport and driver's license, with his personal information clearly visible.
The hacker tagged Gokal in an image apparently of him, with the caption “you had that 40 BTC Another post, featuring Gokal again, read “it was only 40 BTC… you should have paid,” which seems to refer to a failed extortion attempt. The hacker also posted an image purporting to show Gokal’s wife, along with her driver’s license, and two more images were published with personal information, such as mobile phone numbers and email addresses.
The posted photos, which show an individual displaying personal identification documents with their face visible, are typically used by crypto exchanges as part of their Know Your Customer (KYC) checks. However, it is unknown how the shady origins of these images became the subject of a scandalous extortion scheme.
Gokal had warned on his X account on May 20 that attackers were trying to gain control of his email and social media accounts, encouraging his followers to be suspicious of any unusual messages.
It’s unclear whether artificial intelligence was used in the images, but deepfakes have been used in extortion attempts within the crypto sector before. In April, podcaster Scott Melker revealed that scammers had created a fake version of his driver’s license, which allowed them to steal at least $4 million from a victim. The way KYC information is collected and stored by crypto exchanges has been a recent focus of attention. Coinbase was recently sued by users who claimed the exchange violated local privacy laws by failing to disclose that it uses third parties to identify customers.
These events highlight the vulnerability of personal data within crypto ecosystems and the robust need for enhanced security measures. As the crypto market continues to grow in popularity, it is essential for both businesses and users to remain vigilant and implement preventative measures to protect their digital assets.
What are the risks of sharing personal information on social media?
Sharing personal information can lead to identity theft, extortion and other forms of cybercrime. Hacked accounts and leaked information can have serious consequences for the people involved.
How can I better secure my KYC information?
Make sure you use strong and unique passwords, leverage two-factor authentication, and only share your personal information with trusted platforms that are transparent about their data management.
What are the implications of deepfake technology for the crypto industry?
Deepfake technology has the potential to undermine the way identities are verified, leading to new forms of fraud and abuse. This highlights the need for advanced security protocols within the crypto space.
