The Rise and Fall of Derek H.: A Counterfeit Money Experiment

A Denver man's attempt to launder counterfeit $100 bills through bank ATMs ended in arrest within weeks, despite initial success.

Sections
  1. 1. The initial purchase and promise
  2. 2. The ATM deposit strategy
  3. 3. How the bank identified the fraud
  4. 4. The arrest and investigation
  5. Why the scheme was doomed from the start
  6. Common questions
Fake money darknet marketplace interface screenshot
First published: Last updated: Oct 8, 2026Author: Evelyn Reed5 min read

Derek H., 29, from Denver, Colorado, believed he'd cracked a foolproof money-laundering method. In January 2025, he acquired 40 fake $100 dollar notes—2009 series—from a darknet vendor for $1,200 in cryptocurrency. The seller advertised them as "superdollar quality," claiming they featured functional UV protection, magnetic strips, and watermarks that would pass casual inspection. Derek's plan was straightforward: deposit the counterfeit $100 dollar bills into his bank account via cash-accepting ATMs, let the machine credit his balance, then withdraw or transfer the funds as legitimate digital currency. For a brief moment, the scheme appeared to work. Two ATMs processed $800 without issue. Then the third machine rejected a bill. The fourth accepted it but marked the transaction for review. By morning, his account was frozen. Three weeks later, the U.S. Secret Service arrested him. The question remains: what tripped up a plan that seemed, at least initially, to function?

Derek located the fake money site through a darknet marketplace in early January.

In short

  • Derek H. bought 40 fake $100 bills for $1,200 on a darknet marketplace in January 2025

  • Two ATMs initially accepted $800 in counterfeit currency before a third rejected a bill

  • Manual bank review and deposit pattern analysis exposed the counterfeit $100 dollar bill scheme within 24 hours

  • Blockchain tracing linked Derek's cryptocurrency payment to his real identity, enabling arrest

  • The case demonstrates that ATM acceptance doesn't guarantee escaping human fraud detection

1. The initial purchase and promise

Derek located the fake money site through a darknet marketplace in early January. The listing offered prop money dollars in various denominations, with the $100 notes priced at $30 each when bought in bulk. The vendor's profile boasted hundreds of positive reviews, with buyers praising the realistic fake money quality and discreet shipping.

The advertisement specifically mentioned features designed to fool automated systems: colour-shifting ink, raised printing, and security threads. For someone searching "prop money for sale nearby" on surface web forums, darknet vendors offered a far more sophisticated product than theatrical prop money. Derek paid 0.032 Bitcoin—roughly $1,200 at the time—and received the package within ten days.

2. The ATM deposit strategy

Cash-deposit ATMs scan bills using optical sensors, checking for basic security features like magnetic ink and UV markers. Derek's counterfeit $20 dollar bills and larger denominations were meant to pass these automated checks. The logic resembled using a photocopy of a concert ticket at an unstaffed gate: if the machine can't detect the forgery, it grants access.

The first two ATMs he visited—both standalone units in shopping centres—credited $800 to his account immediately. The fake money dollar bills triggered no alerts. The third machine, however, rejected one note outright, displaying a generic error message. The fourth ATM accepted the bill but flagged the transaction as "pending review," a status Derek noticed when checking his mobile banking app that evening.

3. How the bank identified the fraud

Banks don't rely solely on ATM sensors. Deposits flagged by machines—or randomly selected for audit—undergo manual inspection by tellers or fraud departments. Within hours, a bank employee examined Derek's recent deposits under UV light and with a counterfeit detection pen. The fake 100 dollar note failed both tests: the security thread was printed rather than embedded, and the paper lacked the distinct texture of genuine currency.

Moreover, banks track deposit patterns. Derek's account history showed sporadic cash deposits of $200–$300 monthly. Suddenly depositing $2,000 in $100 bills over three days raised algorithmic red flags. Financial institutions monitor for structuring—breaking large sums into smaller deposits to avoid reporting thresholds—but unusual spikes in cash activity also trigger scrutiny. The combination of suspicious behaviour and physical evidence of counterfeit $20 dollar bills (found in a separate deposit) prompted the bank to freeze the account and notify federal authorities.

4. The arrest and investigation

The U.S. Secret Service, which investigates currency fraud, traced Derek's cryptocurrency payment to the darknet vendor. Blockchain analysis revealed he'd used an exchange that required identity verification, linking his real name to the transaction. Investigators also recovered unopened packages at his residence containing additional buy fake dollars orders—20 counterfeit $20 dollar bills and prop money in Australian denominations, suggesting he'd considered expanding the scheme or had ordered from multiple vendors advertising "realistic fake money Australia."

Derek now faces federal charges carrying up to 20 years imprisonment. The fake dollar price he paid—$30 per $100 note—represented a 70% discount, but the legal cost far exceeded any potential profit. The vendor's listing, still active on the marketplace at the time of writing, continues to advertise buy counterfeit 20 dollar bills and other denominations, with no indication of law enforcement disruption.

Why the scheme was doomed from the start

Derek's case illustrates a common misconception about automated systems: passing an initial check doesn't mean escaping detection. ATMs function as the first filter, not the final arbiter. Human review, combined with pattern analysis and forensic tools, catches what machines miss. The appeal of darknet counterfeit currency lies in its surface-level authenticity, but banks have layered defences specifically because fraudsters assume technology alone verifies legitimacy. The "superdollar" Derek purchased might fool a cashier in a rushed transaction, yet it couldn't withstand the scrutiny banks apply to cash deposits. For anyone considering similar schemes, the takeaway is stark: the gap between a machine accepting a bill and a human approving the transaction is where most counterfeit operations collapse. Derek learned this lesson at the cost of his freedom.

Common questions

Why did some ATMs accept the fake money while others rejected it?

ATM sensors vary in sensitivity and calibration. Older machines may check fewer security features, while newer models scan for embedded threads and magnetic ink patterns. Derek's counterfeit $100 dollar bills likely passed basic optical checks but failed more rigorous scans on updated machines.

How do banks detect counterfeit money after ATM deposits?

Banks conduct manual audits of flagged or randomly selected deposits, using UV lights, detection pens, and texture analysis. They also monitor account activity for unusual cash deposit patterns, which trigger fraud investigations even if individual bills initially pass automated checks.

Can cryptocurrency payments for fake money be traced?

Yes. Blockchain analysis tools track transactions to exchanges requiring identity verification. Derek's payment was traced because he used a regulated exchange, linking his real name to the purchase of counterfeit currency from the darknet vendor.

What is the typical fake dollar price on darknet markets?

Vendors commonly charge 20–30% of face value. Derek paid $30 per $100 note, a 70% discount. Prices vary based on claimed quality, denomination, and bulk orders, with some sellers advertising realistic fake money Australia or euro notes at similar rates.

Further services. A few related services may help with the next step. Service directory