China Business Journal issued a public warning on July 30 after fraudsters impersonating its reporters allegedly demanded Bitcoin from businesses, threatening to publish damaging coverage unless paid.
In a statement released on July 30, the Chinese financial newspaper said fraudsters contacted companies through Proton Mail accounts while falsely claiming to represent the publication. The emails allegedly warned recipients that undercover investigations had uncovered damaging information about their businesses and threatened to publish the findings unless Bitcoin was paid.
The newspaper stressed that the messages were entirely unauthorized and bore no connection to its editorial or commercial operations. While the publication believes the campaign constitutes fraud, it did not reveal whether any company paid the demanded cryptocurrency or identify the businesses that received the emails.
The incident highlights the growing use of cryptocurrency in extortion schemes, where attackers combine corporate impersonation with reputational threats to pressure victims into making irreversible digital payments.
Fraudsters allegedly used media identity to demand Bitcoin
According to China Business Journal, the fraudulent emails were sent from addresses hosted by Proton Mail and were designed to appear as legitimate correspondence from the newspaper.
The senders reportedly claimed they had gathered incriminating information through investigative reporting and warned that the findings would be published unless the targeted businesses transferred Bitcoin. The publication said it neither authorized the communications nor conducted the alleged investigations referenced in the emails.
The newspaper did not publish the complete messages, disclose the amount of Bitcoin requested, or reveal whether any deadlines accompanied the demands. Likewise, no Bitcoin wallet address or blockchain transaction details were released, making it impossible for independent blockchain analysts to determine whether any payments were made.
“This operation has no connection with our authorized reporting activities,” the publication said in its public notice, adding that it is collecting evidence and reserves the right to pursue both civil and criminal legal action against those responsible.
The alleged Bitcoin extortion scam reflects a well-established social engineering tactic in which criminals exploit the credibility of respected organizations to manipulate victims into making payments.
Authorities have seen similar extortion tactics before
Although no arrests or criminal charges had been announced in connection with the latest case as of July 30, Chinese authorities have previously prosecuted similar schemes involving fake journalists.
In a case published by China’s national news regulator in 2025, three individuals were convicted after allegedly posing as environmental reporters and extorting money from 16 companies by threatening to publish negative reports.
The latest incident follows the same pattern but substitutes cryptocurrency for traditional payment methods. Because Bitcoin transactions can be conducted directly between parties without relying on conventional banking systems, cybercriminals often view digital assets as an attractive payment option.
However, cybersecurity experts consistently note that cryptocurrency itself is not responsible for such crimes. Instead, criminals exploit its speed and global accessibility.
As Michael Saylor, Executive Chairman of MicroStrategy, has repeatedly argued, “Bitcoin is money powered by integrity,” emphasizing that criminal misuse reflects the actions of offenders rather than flaws in the technology itself.
Likewise, Chainalysis has consistently reported that illicit cryptocurrency activity represents only a small fraction of total blockchain transaction volume, despite high-profile criminal cases attracting significant public attention.
Even so, this Bitcoin extortion scam demonstrates how fraudsters continue adapting familiar extortion methods by incorporating digital assets into their demands.
Businesses urged to verify suspicious media requests
China Business Journal said its warning is intended to help businesses distinguish legitimate journalism from criminal impersonation.
Authentic media organizations may contact companies seeking comments on sensitive issues, but reputable news outlets do not demand cryptocurrency or any other payment in exchange for suppressing stories.
Executives receiving suspicious communications are encouraged to independently verify the sender’s identity using official contact information published by the organization rather than replying directly to unsolicited emails.
The use of Proton Mail does not identify the perpetrators. Like many encrypted email providers, Proton allows users to report phishing attempts and abusive messages through its security team. The company advises recipients to preserve the original email headers and submit complete copies when reporting suspected abuse.
At the time of publication, China Business Journal had not disclosed whether it had contacted Proton or Chinese law enforcement agencies regarding the fraudulent accounts. Any account suspension or criminal investigation would depend on cooperation between the email provider and the relevant authorities.
Growing crypto-related fraud keeps companies on alert
The latest Bitcoin extortion scam emerges against a backdrop of increasingly sophisticated cybercrime targeting businesses worldwide.
Earlier this year, U.S. federal prosecutors charged a teenager in connection with an alleged $8 million cryptocurrency ransom operation involving corporate intrusions and impersonation tactics. Separately, cryptocurrency exchange Coinbase disclosed that it rejected a $20 million ransom demand after attackers claimed to possess stolen customer information, choosing instead to cooperate with law enforcement.
While the methods differ, both incidents illustrate how cybercriminals increasingly blend psychological pressure, digital identities, and cryptocurrency into modern extortion campaigns.
China Business Journal, founded in 1985 under the supervision of the Chinese Academy of Social Sciences and organized by the academy’s Institute of Industrial Economics, acknowledged that its longstanding reputation may have made the fraudulent emails appear convincing to recipients unfamiliar with its official communication channels.
The newspaper said it will continue gathering evidence and provide updates if additional verified information becomes available. Future developments could come from law enforcement authorities, Proton, or businesses that received the fraudulent messages.
For now, investigators have confirmed only that unauthorized emails were sent while impersonating the newspaper. Without wallet addresses, transaction records, or confirmed victims, there is no independent evidence showing whether the Bitcoin extortion scam resulted in successful payments.
The case nevertheless serves as a reminder that businesses should treat any demand for cryptocurrency in exchange for suppressing negative publicity as an immediate warning sign. As cybercriminals refine their impersonation techniques, verifying the identity of senders through official channels remains one of the most effective defenses against falling victim to a Bitcoin extortion scam.