Hacker News Reader

The “live” ticker box transactions are randomly generated; see the source code:

And Yes, I understand that for each "in" transaction, an "out" counterpart is displayed so I'm obviously only wondering about the "in" ones.

The transactions in the live ticker are fake. You can see the real wallets/transactions referenced elsewhere in this thread.

Thanks. Wonder why they keep jumping wallets. Are they getting blocked as they go?

Speculation: they likely jump wallets so in case a victim gets curious and checks the address they won't notice that there are never "double" transactions sent back.

Open to other ideas! Looks like they switch every hour or so.

In terms of "blocked as they go", afaik there's no way to "block" a wallet, so that's not the reason.

Good point @reginold I am not familiar with Ether but if it's a cold wallet, you are right. If Ether is like Bitcoin and addresses can be derivations, would using these be enough to conceal the overall lack of return transactions?