That's true for a company with money for lawyers but not random private person. They will be mostly covered by their bank in case of fraud, but other than that,

That's true for a company with money for lawyers but not random private person. They will be mostly covered by their bank in case of fraud, but other than that, there's not much you can do. It's like burglary. I know first hand that you go report it to the police and a month later you get a letter that they stopped investigating the crime. I don't live in the US or China and I find it naive to single out Chinese ip address as bad addresses while not thinking twice about IPs in the US. There is no basis to trust a random ip address in the US more than one in Russia or China. And again, these devices are developed in China so it's natural for them to have a call-home ip that's in China. Instead of reading too much into it, let's first consider the most likely explanation.