I never scratched the private key, but 4.71 BTC vanished — did anyone else buy a “Coin Cold Card”?

In 2016 I was using a pre-generated physical Bitcoin paper-wallet card sold under the “Coin Cold Card” branding (coincoldcard.com was printed on the card).

The public address was printed on the front. The private key and its QR code were printed on the back under a scratch-off security layer. Before the funds disappeared, I had never removed that layer, scanned the private-key QR code, or imported the private key into a computer or phone.

On May 21, 2016, the wallet was emptied without my authorization:

Victim public address:

1Bwo42o7eDakFgJ6srxjZnh3y5gTHUehyA

Unauthorized transaction:

efc57c1e6640e8d28e137924eaf1c19c23ac34b1779dde1ecc899f5a17334dbc

Amount sent:

4.71064406 BTC (plus a 0.0002 BTC fee)

First receiving address:

1BTeq9DricViuNAoBMBWqCSUmGWappfwvZ

Transaction link:

https://www.walletexplorer.com/txid/efc57c1e6640e8d28e137924eaf1c19c23ac34b1779dde1ecc899f5a17334dbc

What makes this unusual is that the card contained a private key generated and printed before it reached me. An intact scratch layer could prevent later viewing, but it could not prevent the generator, printer, manufacturer, employee, or another party in the production chain from retaining a copy beforehand.

My current hypothesis is therefore a production/supply-chain compromise: the private key may have been copied, stored, or generated predictably before the card was sold. This is a hypothesis, not a proven accusation against any particular person or company.

The on-chain investigation shows that about 29 hours later my output was pooled with 15 other inputs. Several later descendant branches converged on an address historically announced by the operator of PocketRocketsCasino as a cold wallet. A related WalletExplorer cluster later transferred 1,496.33401461 BTC into another large treasury-like cluster. This does NOT prove that PocketRocketsCasino, BetKing, or any labeled service stole my BTC: the funds had already been mixed. It is included only as an investigative lead.

I am looking for other people who bought or received the same “Coin Cold Card” product, especially around 2013–2016.

If you had one, please reply with only non-secret information:

- approximate purchase year and country;

- where it was purchased;

- whether the scratch layer appeared intact;

- whether the wallet was later emptied without authorization;

- a public Bitcoin address or transaction ID, only if you are comfortable sharing it.

Never post or send your seed phrase, private key, or an unredacted photo of the back of the card. I will not pay anyone offering “recovery” services, and nobody should contact victims asking for keys or advance fees.

I still have the physical card, photographs, the original transaction data, and a structured evidence report. I am trying to determine whether this was an isolated incident or part of a larger pattern affecting other cards.