The Green Box Scam: How Two Men Sold a Fake Crypto Mine to Ordinary Investors and a Federal Court Just Refused to Let Them Walk
The Non-Financial Ledger: What It Actually Costs to Trust the Wrong People
Imagine you hear about an investment that sounds like the future. Somebody tells you, in an email, in a PowerPoint, in a room full of other people just like you, that you can pay $3,000 and walk away with a machine that earns $100 every single month. That is a 40% return in a year. That is the kind of number your financial advisor dreams about. And it comes from a real piece of hardware sitting somewhere, doing real work, mining real digital money. That is what they told you. That is not what they gave you.
You handed over three thousand dollars in good faith. Maybe it was savings. Maybe it was money you scraped together because you kept hearing that crypto was the future and you did not want to be left behind again, the way your parents were left behind when the stock market went up and wages did not. You trusted the pitch because it had details: specific numbers, a price per token, an email follow-up, a YouTube video you could watch again later. It felt documented. It felt real.
What you actually bought was a box. A physical object that the people selling it knew could not do what they said it would do, because the thing it was supposed to mine did not exist yet. The “Green Blockchain” was not under construction. There was no network of computers validating transactions and rewarding your machine for solving cryptographic puzzles. There was no blockchain. There were no puzzles. There was a man who would eventually create a token from scratch, months after your money was already in his account, and then hand out that token manually, to whoever he decided deserved it, in whatever amounts he chose.
The betrayal here is specific. It is the betrayal of language used to sound technical, to sound credible, to sound like the person talking knows something you do not, because they are counting on you to believe that the complexity is real and the returns are real and the machine humming in a server room somewhere is real. When the complexity is fake, when the machine cannot do what they said, when the numbers are invented, the person left holding the loss is you. The person collecting the $3,000 got exactly what they wanted.
There is also the specific humiliation of being told, months later, that accounts were “earning GREEN and it’s piling up.” Those are words written in a real email by a real person who either knew the earning process was a fiction he had designed, or knew so little about what was actually happening that he had no business collecting anyone’s money. Neither version of that story ends with the investor being made whole.
Legal Receipts: What the Court Found, Word for Word
The court record is unambiguous. These are direct quotes from the September 23, 2024 Memorandum Decision and Order, Case No. 2:23-cv-00159-AMA-CMR.
“GREEN did not exist in any form prior to October 16, 2018, and there is allegedly no Green Blockchain as of the date the Complaint was filed.”
Memorandum Decision and Order, p. 9 β Judge Ann Marie McIff Allen, U.S. District Court, District of Utah
What this proves:
- The core product being sold, a machine that mines GREEN cryptocurrency on a Green Blockchain, was physically impossible to deliver at the time of the earliest known sales pitches in April 2018. The blockchain did not exist. The currency did not exist. The technical infrastructure did not exist.
- Crucially, the court notes the Green Blockchain remained nonexistent at the time the SEC filed its complaint, meaning no infrastructure was built retroactively to make investors whole or validate the original pitch.
“Mr. Thurston allegedly took these actions intending ‘to create the appearance that the Green Boxes . . . were mining GREEN.’ Thus, these acts, of creating GREEN and distributing them in a manner intended to make investors believe they were obtained by mining rather than Mr. Thurston handing them out, constitutes a deceptive act in furtherance of the Green Box fraud.”
Memorandum Decision and Order, p. 10 β Judge Ann Marie McIff Allen
What this proves:
- Thurston’s distribution of GREEN tokens was a deliberate performance, designed to mimic the appearance of a real mining operation, not to actually create one. The court uses the word “appearance” directly, which is the legal language of deception.
- When Thurston distributed GREEN to investor accounts based on how many Green Boxes they owned, he was maintaining a fiction he himself had constructed. The court found this sufficient to constitute a deceptive act in furtherance of fraud.
“In a September 14, 2018 email to certain Green Box investors, Krohn stated ‘From what I can see, our accounts are earning GREEN β and it’s piling up!'”
Memorandum Decision and Order, p. 11 β quoting Defendant Kristoffer A. Krohn’s email, cited in SEC Amended Complaint
What this proves:
- Krohn sent this email on September 14, 2018, roughly two months before Thurston even created the GREEN token on October 16, 2018. Either Krohn was describing tokens that did not yet exist as if they were actively accumulating, or he was repeating claims he had no independent basis to verify.
- The court identified this alongside five other specific, dated statements from Krohn as meeting the legal standard for fraud allegations under Rule 9(b), which requires “who, what, where, when, and how.” Every element was present.
“Green United told investors ‘remote hosting by Green United was key to the venture’s profitability, because Green United possessed the “significant technical knowledge” required to operate Green Boxes and . . . access to inexpensive power, thus enabling each Green Box’ to be more productive.”
Memorandum Decision and Order, p. 5 β quoting SEC Amended Complaint, ECF No. 80
What this proves:
- The defendants explicitly told investors that their own technical expertise was the reason investors needed to keep paying for the hosting service. This framing locked investors into a dependency on Green United and was central to the court’s finding that a “common enterprise” existed under securities law.
- Claiming “significant technical knowledge” as a sales pitch, when the underlying technology being operated was allegedly fraudulent or nonexistent, forms a key pillar of the SEC’s case for scheme liability against Thurston.
SEC v. Shields, 744 F.3d 633, 641 (10th Cir. 2014), quoted in the court’s order denying dismissal
“Green United also allegedly pooled investor funds in a single account which it then used to finance the hosting operation.”
Memorandum Decision and Order, p. 6 β Judge Ann Marie McIff Allen
What this proves:
- This pooling of funds is what legally transformed individual Green Box purchases into a “common enterprise” under the Howey test for securities. Every investor’s money was combined with everyone else’s, meaning every investor’s outcome was tied to the decisions Thurston and Krohn made with that pooled money.
- The court ruled this arrangement satisfied even the strictest interpretation of horizontal commonality, the highest standard for what counts as a common investment enterprise. The defendants’ argument that this was just a product sale, not a securities offering, collapsed on this point.
Societal Impact Mapping: Who Gets Hurt When Crypto Is Used as a Weapon
Economic Inequality
The Green Box scheme targeted the economic aspirations of ordinary investors at a specific cultural moment. The documented harms to economic security include:
- Investors paid $3,000 per unit for a physical device that the defendants knew, or had reason to know, could not deliver the promised returns. For many households, $3,000 represents weeks or months of after-tax income.
- The hosting agreement structure created an ongoing financial relationship in which investors paid fees to Green United for a service (operating the Green Boxes) that depended on a blockchain that allegedly did not exist. Investors were paying for the maintenance of a fiction.
- The promised returns of 40-50% annually, or “100%+ ROIs,” were framed to appeal to people who had been structurally excluded from traditional high-yield investment vehicles. Crypto’s promise of democratized finance was weaponized to extract money from exactly the people that promise claimed to help.
- Because investor funds were pooled in a single account controlled by Green United, no individual investor had independent custody or visibility into how their specific $3,000 was being used. The pooling structure maximized the defendants’ control and minimized investor accountability.
- The token distribution mechanism, Thurston manually issuing GREEN based on how many Green Boxes someone owned, meant the dollar value of any given investor’s holdings was entirely dependent on Thurston’s unilateral decisions, not market activity or verifiable mining output.
Public Health
The documented public health dimension of this case centers on financial stress and the psychological toll of investment fraud, documented extensively in behavioral economics research as a distinct harm vector:
- Investment fraud disproportionately targets communities that are already financially stressed. The pitch language used here, specific monthly dollar returns, precise token valuations, accessible entry at $3,000, is characteristic of affinity fraud and retail investor exploitation, populations that research consistently links to elevated rates of anxiety, depression, and household instability following financial loss.
- The YouTube video component of Krohn’s April 2018 presentation meant the fraudulent claims had an ongoing digital presence, potentially reaching additional investors long after the initial in-person pitch, compounding the scope of harm beyond those directly present.
Environmental Degradation
The source document contains no specific environmental harm disclosures. The environmental dimension documented in the record is limited to the following:
- Green United explicitly claimed in its investor pitch that access to “inexpensive power” was a key advantage of its hosting operation, framing cheap electricity as a competitive benefit. The source document does not specify the source or origin of that power, and no environmental claims can be verified from this record alone.
- The broader proof-of-work cryptocurrency mining sector, which Green Boxes were ostensibly designed to participate in, is documented by multiple independent sources as a significant consumer of electricity, including in regions where that electricity comes from carbon-intensive sources. The alleged absence of any actual mining operation here means the environmental impact of Green Box operations specifically is [REDACTED – Not in Source].
The “Cost of a Life” Metric: What $3,000 Actually Bought
In return, they received a physical device connected to a blockchain that did not exist, promising to mine a currency that had not been created, managed by people who later distributed tokens manually based on their own discretion, with no automated mining process ever operating as described.
What Now? The Case Is Alive and the People Named Are Still in Business
The September 23, 2024 ruling means the SEC’s fraud case against these defendants survives and proceeds. Dismissal was denied on every argument. Here is who is named and what you can do.
Named Parties in This Case
- Wright W. Thurston: Named defendant. Alleged scheme architect. Created the GREEN token on October 16, 2018, and personally distributed it to investor accounts. Also controls Relief Defendant entities True North United Investments, LLC, and Block Brothers, LLC.
- Kristoffer A. Krohn: Named defendant. Alleged primary sales agent. Made specific, dated false statements to investors via email and in-person presentations as early as April 2018, including quoting the value of a currency that did not yet exist.
- Green United, LLC: Named defendant entity. Ran the Green Box operation, pooled investor funds, maintained the hosting agreement structure, and made representations about the “significant technical knowledge” required to operate the devices.
- True North United Investments, LLC and Block Brothers, LLC: Named as Relief Defendants, controlled by Thurston. Relief Defendants in SEC actions are typically entities that received fraudulently obtained funds without providing legitimate consideration.
Regulatory Watchlist
These are the bodies with jurisdiction over the conduct alleged in this case. If you or someone you know was solicited by Green United or purchased a Green Box, contact them directly:
- SEC Office of Investor Education and Advocacy: The SEC is the lead plaintiff in this case. File investor complaints at investor.gov. The SEC’s existing complaint is Civil No. 2:23-cv-00159-AMA-CMR, U.S. District Court, District of Utah.
- DOJ (Department of Justice): Securities fraud of this type can carry parallel criminal referrals. Monitor the DOJ’s fraud section at justice.gov/criminal/fraud for any related criminal proceedings tied to this case.
- CFPB (Consumer Financial Protection Bureau): If Green Box sales were made through financial intermediaries or affiliate networks, CFPB has jurisdiction over consumer financial product fraud. File at consumerfinance.gov/complaint.
- Utah Division of Securities: This case is in the District of Utah. The state’s own securities regulator maintains concurrent jurisdiction and a separate investor protection complaint process at securities.utah.gov.
- FBI Internet Crime Complaint Center (IC3): Cryptocurrency fraud with a digital sales component falls within IC3’s scope. File at ic3.gov. Your complaint helps build the statistical record that drives federal resource allocation toward crypto fraud enforcement.
What You Can Do Right Now
- If you purchased a Green Box: Document everything. Locate every email, every link to the YouTube presentation, every payment record. The court’s order confirms the SEC has a viable case. Your records may be relevant to the proceedings or to any future investor restitution process.
- Share this case with anyone in your community who invests in crypto: The legal test for what counts as a security, the Howey test, applies to an enormous range of crypto products being sold right now. A physical device plus a hosting agreement plus pooled funds plus promised returns equals a security under federal law. If it sounds familiar, it should.
- Support financial literacy mutual aid in your community: Organizations that run free, peer-led financial education, particularly in communities targeted by high-ROI investment pitches, are a direct countermeasure to the pipeline this case represents. Search for community development financial institutions (CDFIs) and cooperative financial education groups in your area.
- Follow the court docket directly: Case No. 2:23-cv-00159-AMA-CMR is publicly accessible through PACER (pacer.gov) and is mirrored on Dockets.Justia.com. You do not need a lawyer to read court filings. Following this case costs nothing and keeps you informed as it develops toward trial.
The source document for this investigation is attached below.
There are many new stories about this lawsuit that can be read, such as this one from Bloomberg: https://news.bloomberglaw.com/business-and-practice/sec-says-trio-hid-control-of-pot-stock-during-21-million-gain
My arch nemesis Law360 also wrote a thing about this lawsuit with American Green: https://www.law360.com/articles/2332045/sec-sues-over-cannabis-co-stock-manipulation-scheme
Explore by category
Product Safety Violations
When companies sell dangerous goods, consumers pay the price.
View Cases →Financial Fraud & Corruption
Lies, scams, and executive impunity that distort markets.
View Cases →

