You Are the Target: Cybercrime and High-Net-Worth Families

Cybercrime Has Become a Wealth Preservation Problem

In 2025, the FBI confirmed that cybercrime losses in the United States crossed $20 billion for the first time in history — more than doubling since 2022.

Experts who track these trends closely say we are still in the early stages of this cycle.

If you are a founder, a family office principal, or a high-net-worth investor, you need to understand something that the cybersecurity industry often fails to communicate clearly: you are not a random target.

You are a specific one. Attackers research you, surveil you, and build operational plans around your routines, your relationships, and your transaction authority before they ever make a move.

As AI becomes more sophisticated, attacks are becoming faster, more personalized, and harder to detect. Criminals are using AI to clone voices, map family relationships, bypass authentication systems, and automate attacks at a scale that simply was not possible three years ago.

This article breaks down the exact threats we see in our practice, the legal realities most victims do not understand until it is too late, and the response framework that can mean the difference between recovery and permanent loss.

📺 Watch the full video

Who Is Max Dilendorf — and Why Does His Team Include Retired FBI Agents?

Max Dilendorf, Esq. is a New York attorney and founder of Dilendorf Law Firm, PLLC.

He has been practicing digital asset and crypto law since 2017 and focused specifically on cybercrime since 2019 — helping clients recover assets, manage high-stakes incidents, and coordinate with federal agencies.

What sets this practice apart is the team behind it.

On cybercrime matters, Max works alongside retired FBI and Department of Justice cybercrime enforcement agents — professionals who spent their careers building federal cases, coordinating with prosecutors, and deciding which investigations warranted federal resources. That institutional knowledge now works directly for clients.

Dilendorf Law Firm has handled more than 130 cybercrime matters and filed over 100 arbitration cases at the American Arbitration Association (AAA), JAMS, and National Arbitration and Mediation (NAM) — against Coinbase, Gemini, Kraken, T-Mobile, Verizon, AT&T, and major financial institutions.

The Hard Truth: Your Legal Structure Will Not Save You

This is the conversation most wealth advisors never have with their clients.

You can have the most sophisticated legal structure in the world — offshore trusts, layered entities, privacy-optimized holding companies across multiple jurisdictions.

But if your phone is compromised, if your credentials are stolen, if your device itself is the point of entry — the structure becomes irrelevant.

You are the endpoint of failure. And that is where attackers go first.

Effective protection requires both legal architecture and personal discipline. The structure matters. And so does every password, every authentication method, and every device you use to access your financial life.

Both have to be right. At the same time.

The 7 Threat Patterns Targeting High-Net-Worth Individuals

In our practice, we see the same attack patterns play out in real time. Here is exactly what we are dealing with right now.

Threat #1: Pre-Attack Surveillance

This is the one that surprises people most. Attackers do not strike immediately. They study you first — sometimes for weeks, sometimes for months.

They learn your communication style, your relationships, your decision-making patterns, and your daily routine.

A compromised phone gives an attacker real-time visibility into your movements. They know when you are flying from New York to Singapore. They know when your device goes offline at 35,000 feet. And they know that window — when you are unreachable, when your team cannot verify instructions — is exactly when to act.

By the time you land, the damage may already be done.

How Max Dilendorf’s team solves this: Retired FBI agents on our team understand surveillance methodology because they spent careers conducting and countering it.

When we take on a cybercrime case, forensic analysis of the pre-attack phase often reveals the digital trail attackers left during their reconnaissance — evidence that becomes critical in arbitration.

Threat #2: Smart Home and Physical Security Breaches

Properties today are controlled through mobile applications. Gates. Alarms. Cameras. Access points. If those systems are compromised through a hijacked phone or leaked contractor credentials, an attacker can disable your perimeter protections or unlock your access points remotely.

In early 2025, a breach at a U.S. coastal estate allowed attackers to disable alarms and gain physical entry while the family was present. The breach started with a compromised app. It ended at the front gate.

Digital compromise has become a physical threat. The boundary between cybersecurity and personal safety is gone.

How Max Dilendorf’s team solves this: We assess clients’ connected property infrastructure as part of our proactive protection reviews and recommend isolation protocols that prevent a single device compromise from cascading into physical security failure.

Threat #3: Kidnapping Risk and AI-Enabled Physical Targeting

AI now makes it significantly easier to identify high-net-worth individuals, map family relationships, and track real-time location signals — through compromised devices or public platforms like Instagram and LinkedIn. We are seeing increased demand for kidnapping insurance as a direct result.

This is not hypothetical. This is a documented, accelerating trend affecting ultra-high-net-worth families globally.

How Max Dilendorf’s team solves this: Our team coordinates with private security firms and insurance specialists to build integrated protection frameworks that address both the cyber and physical targeting vectors simultaneously.

Threat #4: Hacked Accounts on Regulated U.S. Cryptocurrency Exchanges

Coinbase. Kraken. Gemini. Binance.US. These are federally regulated platforms where clients completed full identity verification, linked their bank accounts, and trusted the exchange with serious money.

And clients on these platforms are still getting compromised.

A client wakes up to find their account accessed overnight. Two-factor authentication changed. Assets transferred out in minutes to wallets our team then has to trace across multiple blockchains.

The exchange’s response? Terms of service. File a police report.

How Max Dilendorf’s team solves this: We have arbitrated cases against every major U.S. exchange at AAA, JAMS, and NAM. These platforms have specific contractual obligations around security, authentication standards, and fraud detection. When they fail to meet those obligations — and their failure contributes to your loss — those failures may be actionable. We know exactly where their liability exposure lies.

Threat #5: Website Domain Takeovers

Attackers gain control of your website domain, take over your business email infrastructure, and shut down your company’s online presence. A professional attacker with admin access can redirect your domain, intercept your email communications, and impersonate your business — in under ten minutes.

How Max Dilendorf’s team solves this: We represent domain takeover victims against GoDaddy, Register.com, and other major hosting providers. We issue immediate evidence preservation demands, structure IC3 reports, and pursue arbitration against registrars whose security failures enabled the attack.

Threat #6: SIM Swap Attacks

Criminals convince your mobile carrier to transfer your phone number to a device they control. From that moment, every SMS-based authentication code — every verification text, every password reset — goes to them, not you. These attacks are executed through basic social engineering of a carrier support agent. They are surprisingly simple. And we see them constantly.

How Max Dilendorf’s team solves this: We have filed arbitration cases against T-Mobile, Verizon, and AT&T under Federal Communications Commission (FCC) authentication rules. When a carrier’s support agent improperly transfers your phone number to an attacker’s device, that failure may constitute breach of contract and gross negligence — and we have the arbitration record to prove it.

Threat #7: Data Theft and Intellectual Property Extortion

Sometimes used immediately for extortion. Sometimes held quietly for months and deployed later — often targeting executives, founders, celebrities, and public figures. The data is a weapon. And attackers are patient.

How Max Dilendorf’s team solves this: Our retired FBI agents coordinate dark web monitoring to detect whether stolen data has surfaced, and we preserve the evidentiary chain needed to pursue recovery and hold responsible parties accountable.

What Most Victims Do Not Know: Mandatory Arbitration

Here is where most people fundamentally misunderstand how the legal system works.

Every platform you rely on — your crypto exchange, your bank, your phone carrier, your payment processor — has buried mandatory, binding arbitration clauses in their terms of service. You agreed to them. You almost certainly never read them.

That means when something goes wrong, your dispute is not going to a public courtroom. It goes into private arbitration — behind closed doors, with no press, no public record, and no jury.

When the service provider tells you there is nothing they can do — that is often the beginning of the legal conversation, not the end of it.

Dilendorf Law Firm has filed more than 100 cybercrime-related arbitration cases at AAA, JAMS, and NAM. These cases are highly technical and evidence-driven — they turn on system logs, AI-driven compliance records, user agreements, liability frameworks, and expert witnesses.

Because these proceedings are private, they rarely become public. That makes how you build and present your case even more critical.

The Cyber Insurance Trap

Cyber insurance is not a guaranteed safety net.

Claims are increasingly being denied — often because multi-factor authentication was not fully implemented across all systems as required by the policy. The attack happened. The loss is real. But the insurer argues the contractual obligations of the policy were not met.

The policy exists. The coverage does not.

According to industry data, between 25 and 40 percent of cyber insurance claims are now being denied. If you have cyber coverage, the time to review whether it actually protects you is before an incident — not after.

The Critical 24–72 Hour Window

When a cyber incident happens, time is everything.

The first 24 to 72 hours determine whether assets can be frozen, evidence preserved, and federal investigators have a real chance to act. After that window closes, recovery becomes exponentially harder.

Most victims file with the FBI’s Internet Crime Complaint Center (IC3). That is the right first step. But thousands of complaints are filed every single day. Most go nowhere — not because the cases are invalid, but because the reports are poorly structured and lack actionable evidence.

This is where our retired FBI and DOJ agents change everything. They know exactly how federal investigators evaluate incoming complaints — because they spent careers making those decisions. They know how to present wallet addresses, IP data, transaction timelines, and attack patterns in the way that maximizes the probability of federal resources being assigned to your case.

A well-drafted report can get traction. A generic one will likely be ignored.

Our Response Protocol

When clients come to Dilendorf Law Firm, the response is immediate and coordinated:

Evidence preservation — We issue demands to exchanges, carriers, and hosting providers before critical logs are overwritten or deleted.

IC3 report structuring — Our retired FBI agents build reports designed to move federal investigators, not sit in a queue.

Federal and state law enforcement engagement — We coordinate directly with relevant agencies.

Asset tracing and dark web monitoring — We track where stolen assets move and whether compromised data has surfaced.

Ransomware negotiation — Where appropriate, we handle controlled negotiations with threat actors in full compliance with Financial Crimes Enforcement Network (FinCEN) guidance and Office of Foreign Assets Control (OFAC) sanctions regulations.

Arbitration — We represent clients against the institutions that failed them — crypto exchanges, financial institutions, telecommunications carriers, insurance carriers, and fintech platforms.

The goal is simple. Mitigate risk immediately. Maximize the probability of recovery. And make sure the institutions that failed you are held accountable.

What You Should Do Right Now — Even If You Have Not Been Attacked

At a minimum:

• Audit your digital footprint — including a dark web scan
• Secure your domain and registrar access with non-SMS authentication
• Stop using SMS-based two-factor authentication — switch to hardware keys or authenticator apps
• Separate your personal and financial communication channels
• Review your cyber insurance policy for MFA implementation requirements
• Establish a first-response protocol before anything happens — including having a cybercrime attorney identified and ready to engage

Cyber incidents do not announce themselves. They happen fast. And they escalate faster.

Contact Dilendorf Law Firm

If you are dealing with an active cyber incident — call us immediately.

If you want to get ahead of this before something happens — schedule a confidential consultation.

Max Dilendorf, Esq. Dilendorf Law Firm, PLLC 115 Broadway, 5th Floor New York, NY 10006

📞 212.457.9797 📧 info@dilendorf.com 🌐 dilendorf.com

Our team — attorneys, retired FBI agents, and DOJ cybercrime veterans — is ready to move the moment you call.

📺 Watch the full video: