South Korean Authorities Loses $48M In Bitcoin To Phishing Scam

South Korean authorities have launched an investigation after $47.7 million worth of seized Bitcoin has mysteriously vanished from government custody following a phishing attack. The loss was uncovered during a routine inspection of confiscated assets by the Gwangju District Prosecutors’ Office.

Local media reports say the Bitcoin disappeared after a password was leaked externally, allowing attackers to access the wallet holding the seized funds. Prosecutors believe the breach occurred when an agency employee unknowingly accessed a fake website, falling victim to a classic phishing scheme.

Phishing attacks typically involve spoofed emails or websites designed to trick users into revealing private keys or login credentials. While the tactic is common among retail crypto users, the incident shows even law enforcement agencies are vulnerable to social engineering.

The prosecutors’ office has declined to confirm the exact amount stolen or when the Bitcoin was originally seized, but hsa confirm that an investigation has been filed to search for the missing Bitcoin.

“We are tracking the circumstances and whereabouts of the seized items.”

The theft comes despite broader improvements in crypto security. According to Scam Sniffer, losses from phishing attacks fell more than 80% in 2025, dropping to $83.85 million, while victim counts declined nearly 70% year over year.

As governments seize increasing amounts of cryptocurrency, questions are mounting around how confiscated digital assets are stored and secured. Custody practices are rarely disclosed, leaving uncertainty over whether wallets rely on multi-signature setups, cold storage, or internal access controls.

South Korea is not alone in holding massive crypto stockpiles. In 2025, the U.S. Secret Service seized $225 million in scam-linked crypto with help from Coinbase, while UK authorities have debated whether to retain $6.4 billion in seized Bitcoin rather than return it to victims.

The Korean incident highlights a growing irony in crypto enforcement: even as authorities crack down on scams, phishing remains powerful enough to breach the institutions tasked with stopping it.