Cryptocule.com

Author: cryptocule

  • Casefile Xipcapitalsgroup: Deposit Hash to Filing Pathway

    Casefile Xipcapitalsgroup: Deposit Hash to Filing Pathway

    // FORENSIC BRIEF

    If you funded Xipcapitalsgroup at xipcapitalsgroup.com, the on-chain trail does not vanish when the website does. Cryptocule's brief on Xipcapitalsgroup maps that trail wallet by wallet so a recovery filing can be built on documented evidence, not allegation.

    Platform: Xipcapitalsgroup  ·  Domain on record: xipcapitalsgroup.com  ·  Cryptocule read: recovery is pursued through wallet-trace + filing, not negotiation with the operator.

    Wallet Trace

    Claimants who pay Xipcapitalsgroup in cryptocurrency are usually offered BTC, ETH, USDT-TRC20, or all three. The operational reality is a forwarding wallet per chain collecting inbound flow into a single off-ramp – in most cases a centralised exchange registered in a jurisdiction that does not auto-honour freeze requests from US, UK, or EU agencies. The Cryptocule trail audit turns those deposit hashes into a documented graph that a federal intake desk, a state attorney general's office, or an exchange compliance team can move on.

    Operational tells (Set A)

    • rapid-consolidation deposit addresses – Deposit addresses tagged to Xipcapitalsgroup relay incoming funds to a single consolidation wallet within minutes of confirmation – a relay funnel, not a custodial wallet pattern.
    • cloned brand surface – xipcapitalsgroup.com mirrors the look of an established platform, but the registry footers, support links, and audit references all dead-end.
    • high-risk off-ramp endpoint – Outbound from Xipcapitalsgroup converges on a centralised exchange flagged in chain-analytics datasets for laundering throughput – viewable via Etherscan and Chainabuse without paid tooling.

    Filing pathway – claim consolidation

    Most claimants of Xipcapitalsgroup are not the only one. Cryptocule consolidates parallel claimants into a single evidence packet with a shared wallet graph, which raises the floor of credibility a regulator or exchange compliance desk applies to the matter. One claimant alone gets a form-letter reply; a consolidated graph gets a case number.

    What Cryptocule tracks

    Cryptocule traces across Bitcoin, Ethereum, Tron (USDT-TRC20), BNB Smart Chain, Polygon, Arbitrum, Optimism, Avalanche, and the bridges that link them. Off-ramps tracked include Binance, Bybit, OKX, Kraken, Coinbase, Crypto.com, KuCoin, Gate.io, Huobi, Bitfinex, MEXC, and the smaller venues those rotate through under stress.

    Lines we don’t cross

    Cryptocule will not request seed phrases, will not ask for remote-access logins to your wallet, will not take an upfront cash retainer before scoping a case, and will not promise a guaranteed recovery. A real analyst will scope the matter free and tell you in writing whether the trail justifies a filing.

    Talk to a real Cryptocule analyst – start at /contact-us/.

    Open a Free Case Evaluation   Submit Wallet for Trace

    Internal: Wallet Check · How We Recover · FAQ

  • Scammed Twice: The RevolutionInvest “Fund Recovery” Trap — AUD 24,500

    Trail Audit · CCU-2026-048 · Vector: Recovery Scam · Double Fraud

    Scammed Twice: The RevolutionInvest “Fund Recovery” Trap — AUD 24,500

    After losing money to an earlier scam, a Brisbane retiree was contacted by RevolutionInvest, which promised to “recover” his funds for an upfront fee. It was a second scam targeting the first. Because he acted fast, we returned most of the recovery fee.

    Recovery Brief
    Operator
    RevolutionInvest
    Vector
    Recovery Scam · Double Fraud
    Instrument
    Crypto “recovery fee”
    Reported Loss
    AUD 24,500
    Recovery Route
    Fast trace to exchange off-ramp
    Trail Opened
    within days of payment
    Claimant
    Retiree, 67 — Brisbane, AU
    Status · Recovered
    80% returned

    First Contact

    Months after losing money to a fake trading platform, he was contacted out of the blue by RevolutionInvest, which claimed it could recover his earlier losses. They knew details of his first scam — a hallmark of operators who buy or recycle victim lists.

    They presented “case officers,” official-looking paperwork, and a clear promise: pay a “recovery processing fee,” and his original funds would be returned in full within weeks.

    Where the Trail Went Cold

    The recovery-scam playbook preys on the desperation the first fraud creates. RevolutionInvest asked for an upfront crypto fee to “release” his recovered funds — and then, predictably, for a second fee.

    No legitimate recovery service asks for a large upfront fee to release money it claims to be holding for you. The “recovery” was the scam; the fee was the entire point.

    “They knew exactly what I’d lost before. I thought that meant they were real. It just meant they’d bought the list.”— Claimant statement

    Following the Trail

    01
    hop 01 · stop

    Halt the second payment

    Our first move was to stop him paying the “second fee,” then document the RevolutionInvest correspondence and the single fee he had already sent.

    02
    hop 02 · trace

    Trace the fresh payment

    Because the fee had been paid only days earlier, its trail was short — we followed it from his wallet directly toward an off-ramp.

    03
    hop 03 · locate

    Find the cash-out

    The funds reached a regulated exchange almost intact — recovery scams often cash out quickly and clumsily, which works in the victim’s favour.

    04
    hop 04 · file

    Rapid freeze request

    We filed the labelled address and hashes with the exchange and the Australian authorities within the same week as the payment.

    05
    hop 05 · return

    Freeze and recover

    The exchange froze the balance, and the bulk of the recovery fee was returned. Speed, again, was everything.

    Trail’s End

    Recovered for claimant
    80%

    About AUD 19,600 of the recovery fee was returned — strong, because he reported within days and the funds had barely moved. We could not recover his original loss through RevolutionInvest, because that money was never really being recovered at all.

    Trail Markers

    • An unsolicited “recovery” offer that already knows the details of a scam you suffered.
    • Any service demanding a large upfront fee to “release” funds it claims to be recovering.
    • Official-looking “case officers” and paperwork with pressure to pay quickly.
    • A fee that, once paid, is immediately followed by a request for another.

    Approached by a “recovery” service asking for a fee up front?

    Cryptocule never asks for an upfront fee to release your funds. If you’ve been targeted twice, talk to us first — the review is free and confidential.

    Open a Free Case Eval →

  • Casefile Coins Crossing: Deposit Hash to Filing Pathway

    Casefile Coins Crossing: Deposit Hash to Filing Pathway

    // FORENSIC BRIEF

    Claimants who funded Coins Crossing (coinscrossing.com) and were then asked for a 'release fee', a 'tax clearance', or a 'liquidity bond' will recognise the pattern – and so do we. Cryptocule documents it and files against it.

    Platform: Coins Crossing  ·  Domain on record: coinscrossing.com  ·  Cryptocule read: recovery is pursued through wallet-trace + filing, not negotiation with the operator.

    Wallet Trace

    The repeating arc reported about Coins Crossing runs roughly the same way: a contact opens through a private channel; a modest first deposit is accepted with a polished confirmation; the in-platform number rises while the claimant is still measuring trust; then a top-up is demanded before any withdrawal will move. By the moment the off-ramp request is filed seriously, coinscrossing.com either disappears or invents a fresh fee. Sites can be taken down. The on-chain history cannot. Every deposit address Coins Crossing ever issued is still on the public ledger – that record is the substrate a Cryptocule casefile gets assembled on top of.

    Operational tells (Set B)

    • private-channel onboarding – Cryptocule sees Coins Crossing introduce itself through Telegram threads, WhatsApp groups, Instagram DMs, or dating-app handoffs – not the channels a chartered firm would use.
    • monotonic equity curve – The in-platform balance plotted by Coins Crossing climbs without natural pullbacks; that is a script generating a chart, not a market generating a price.
    • release-fee gate at withdrawal – Once a withdrawal request is filed, Coins Crossing demands a fresh deposit dressed as 'clearance', 'unlock', or 'liquidity bond' – no regulated venue holds payouts behind a fresh wire.

    Filing pathway – civil discovery overlay

    Where the dollar value justifies it, the on-chain trail Cryptocule produces against Coins Crossing can be lifted into a civil discovery filing – subpoena directed at the receiving exchange for KYC on the off-ramp wallet. That is how a chain trail converts to an identified counterparty.

    What Cryptocule tracks

    Cryptocule traces across Bitcoin, Ethereum, Tron (USDT-TRC20), BNB Smart Chain, Polygon, Arbitrum, Optimism, Avalanche, and the bridges that link them. Off-ramps tracked include Binance, Bybit, OKX, Kraken, Coinbase, Crypto.com, KuCoin, Gate.io, Huobi, Bitfinex, MEXC, and the smaller venues those rotate through under stress.

    Lines we don’t cross

    Cryptocule will not request seed phrases, will not ask for remote-access logins to your wallet, will not take an upfront cash retainer before scoping a case, and will not promise a guaranteed recovery. A real analyst will scope the matter free and tell you in writing whether the trail justifies a filing.

    Regulator and warning-list notes

    Coins Crossing has been flagged as a Fraudulent online trading platforms by FSMA Belgium. FSMA warning 23/02/2023. Jurisdiction: BE. It appears on an official regulator or fraud-warning list, which is a strong indicator of a scam operation. Treat any contact from this entity with caution. Reference: https://www.fsma.be/en/warnings/companies-operating-unlawfully-in-belgium

    Talk to a real Cryptocule analyst – start at /contact-us/.

    Open a Free Case Evaluation   Submit Wallet for Trace

    Internal: Wallet Check · How We Recover · FAQ

  • Recovery Dossier on Amana Financial Services (Dubai) Limited – Where the Funds Routed

    Recovery Dossier on Amana Financial Services (Dubai) Limited – Where the Funds Routed

    // FORENSIC BRIEF

    If you funded Amana Financial Services (Dubai) Limited at amaanahcapitall.com, the on-chain trail does not vanish when the website does. Cryptocule's brief on Amana Financial Services (Dubai) Limited maps that trail wallet by wallet so a recovery filing can be built on documented evidence, not allegation.

    Platform: Amana Financial Services (Dubai) Limited  ·  Domain on record: amaanahcapitall.com  ·  Cryptocule read: recovery is pursued through wallet-trace + filing, not negotiation with the operator.

    Wallet Trace

    Claimants who pay Amana Financial Services (Dubai) Limited in cryptocurrency are usually offered BTC, ETH, USDT-TRC20, or all three. The operational reality is a forwarding wallet per chain collecting inbound flow into a single off-ramp – in most cases a centralised exchange registered in a jurisdiction that does not auto-honour freeze requests from US, UK, or EU agencies. The Cryptocule trail audit turns those deposit hashes into a documented graph that a federal intake desk, a state attorney general's office, or an exchange compliance team can move on.

    Operational tells (Set B)

    • private-channel onboarding – Cryptocule sees Amana Financial Services (Dubai) Limited introduce itself through Telegram threads, WhatsApp groups, Instagram DMs, or dating-app handoffs – not the channels a chartered firm would use.
    • monotonic equity curve – The in-platform balance plotted by Amana Financial Services (Dubai) Limited climbs without natural pullbacks; that is a script generating a chart, not a market generating a price.
    • release-fee gate at withdrawal – Once a withdrawal request is filed, Amana Financial Services (Dubai) Limited demands a fresh deposit dressed as 'clearance', 'unlock', or 'liquidity bond' – no regulated venue holds payouts behind a fresh wire.

    Filing pathway – off-ramp leverage

    Where Amana Financial Services (Dubai) Limited routes claimant funds to a regulated centralised exchange, the recovery move is the same: a documented IC3 filing for US claimants, a state-AG complaint where the loss meets state thresholds, and a chain-analytics-backed evidence packet sent to the exchange's compliance desk. The exchange has a regulated obligation to respond – that is the leverage the trail audit produces.

    What Cryptocule tracks

    Cryptocule traces across Bitcoin, Ethereum, Tron (USDT-TRC20), BNB Smart Chain, Polygon, Arbitrum, Optimism, Avalanche, and the bridges that link them. Off-ramps tracked include Binance, Bybit, OKX, Kraken, Coinbase, Crypto.com, KuCoin, Gate.io, Huobi, Bitfinex, MEXC, and the smaller venues those rotate through under stress.

    Lines we don’t cross

    Cryptocule will not request seed phrases, will not ask for remote-access logins to your wallet, will not take an upfront cash retainer before scoping a case, and will not promise a guaranteed recovery. A real analyst will scope the matter free and tell you in writing whether the trail justifies a filing.

    Regulator and warning-list notes

    Amana Financial Services (Dubai) Limited has been flagged as a fake broker/platform by IOSCO I-SCAN (DIFC, Dubai – Dubai Financial Services Authority). reported 2026-06-16. Jurisdiction: DIFC, Dubai. It appears on an official regulator or fraud-warning list, which is a strong indicator of a scam operation. Treat any contact from this entity with caution. Reference: https://www.iosco.org/i-scan/

    Submit your wallet for a forensic trace at /submit-a-case/ – no upfront fees, no automated chatbot.

    Open a Free Case Evaluation   Submit Wallet for Trace

    Internal: Wallet Check · How We Recover · FAQ

  • Tenorisfx (tenorisfx.com) – Cryptocule Trail-and-Filing Notes

    Tenorisfx (tenorisfx.com) – Cryptocule Trail-and-Filing Notes

    // FORENSIC BRIEF

    Funds sent to Tenorisfx at tenorisfx.com leave a trail that no website takedown can erase. The Cryptocule trail audit converts that on-chain history into evidence that survives the platform disappearing.

    Platform: Tenorisfx  ·  Domain on record: tenorisfx.com  ·  Cryptocule read: recovery is pursued through wallet-trace + filing, not negotiation with the operator.

    Wallet Trace

    The repeating arc reported about Tenorisfx runs roughly the same way: a contact opens through a private channel; a modest first deposit is accepted with a polished confirmation; the in-platform number rises while the claimant is still measuring trust; then a top-up is demanded before any withdrawal will move. By the moment the off-ramp request is filed seriously, tenorisfx.com either disappears or invents a fresh fee. Sites can be taken down. The on-chain history cannot. Every deposit address Tenorisfx ever issued is still on the public ledger – that record is the substrate a Cryptocule casefile gets assembled on top of.

    Operational tells (Set A)

    • rapid-consolidation deposit addresses – Deposit addresses tagged to Tenorisfx relay incoming funds to a single consolidation wallet within minutes of confirmation – a relay funnel, not a custodial wallet pattern.
    • cloned brand surface – tenorisfx.com mirrors the look of an established platform, but the registry footers, support links, and audit references all dead-end.
    • high-risk off-ramp endpoint – Outbound from Tenorisfx converges on a centralised exchange flagged in chain-analytics datasets for laundering throughput – viewable via Etherscan and Chainabuse without paid tooling.

    Filing pathway – civil discovery overlay

    Where the dollar value justifies it, the on-chain trail Cryptocule produces against Tenorisfx can be lifted into a civil discovery filing – subpoena directed at the receiving exchange for KYC on the off-ramp wallet. That is how a chain trail converts to an identified counterparty.

    What Cryptocule tracks

    Cryptocule traces across Bitcoin, Ethereum, Tron (USDT-TRC20), BNB Smart Chain, Polygon, Arbitrum, Optimism, Avalanche, and the bridges that link them. Off-ramps tracked include Binance, Bybit, OKX, Kraken, Coinbase, Crypto.com, KuCoin, Gate.io, Huobi, Bitfinex, MEXC, and the smaller venues those rotate through under stress.

    Lines we don’t cross

    Cryptocule will not request seed phrases, will not ask for remote-access logins to your wallet, will not take an upfront cash retainer before scoping a case, and will not promise a guaranteed recovery. A real analyst will scope the matter free and tell you in writing whether the trail justifies a filing.

    Submit your wallet for a forensic trace at /submit-a-case/ – no upfront fees, no automated chatbot.

    Open a Free Case Evaluation   Submit Wallet for Trace

    Internal: Wallet Check · How We Recover · FAQ

  • A Months-Long Setup: SGD 96,000 Lost Through Xip Capitals Group

    Trail Audit · CCU-2026-047 · Vector: Romance Lure · Fake Staking

    A Months-Long Setup: SGD 96,000 Lost Through Xip Capitals Group

    A Singapore professional met someone online who, over months, introduced her to a “family” ETH-staking opportunity on Xip Capitals Group. It was a pig-butchering scam. We traced the staking deposits and recovered a meaningful slice.

    Recovery Brief
    Operator
    Xip Capitals Group
    Vector
    Romance Lure · Fake Staking
    Instrument
    Ethereum (ETH) “staking”
    Reported Loss
    SGD 96,000
    Recovery Route
    Two off-ramp branches frozen
    Trail Opened
    ≈4 months of deposits
    Claimant
    Operations lead, 39 — Singapore
    Status · Recovered
    44% returned (partial)

    First Contact

    It began as a warm, patient online friendship. Over weeks it became something that felt like a relationship, and only then did he mention how his “uncle’s” strategy let the family earn steady returns staking ETH on Xip Capitals Group.

    He never asked for money directly. He simply showed his own “returns” and helped her open an account. Small deposits showed gains; she withdrew a token amount successfully early on, which removed her last doubts.

    Where the Trail Went Cold

    Encouraged gently and consistently, she increased her ETH “staking” deposits to SGD 96,000 over four months. When she tried a large withdrawal, Xip Capitals Group required a “staking settlement fee,” and her online partner suddenly went quiet.

    The pattern — long grooming, a trusted introducer, a platform that pays small early withdrawals then walls the big one — is pig-butchering. The staking returns were fabricated; the deposits were swept off-platform as they arrived.

    “He never once asked me for money. He just showed me his returns and helped me set it up. That’s what made it work.”— Claimant statement

    Following the Trail

    01
    hop 01 · intake

    Reconstruct months of activity

    We mapped the full deposit history to Xip Capitals Group, the chat record, and the early test withdrawal that built her trust.

    02
    hop 02 · trace

    Follow the staking deposits

    Her ETH was swept from the platform as it arrived and split across multiple collector wallets over the four-month window.

    03
    hop 03 · branch

    Identify two reachable branches

    Two of the collector branches deposited to centralized exchanges rather than self-custody — both reachable touchpoints.

    04
    hop 04 · file

    Coordinated exchange filings

    We filed labelled evidence with both exchanges and the Singapore authorities, tying the addresses to the Xip Capitals cluster.

    05
    hop 05 · freeze

    Freeze the reachable funds

    Both exchanges froze the balances that remained. The portion already moved into private wallets could not be recovered.

    Trail’s End

    Recovered for claimant
    44%

    About SGD 42,240 was returned across two exchange freezes. The long grooming period meant much of the earliest money was long gone — but tracing every branch recovered more than she expected.

    Trail Markers

    • A new online friend or partner who, over time, introduces a “family” investment opportunity.
    • A platform reached through someone you met online — never one you sought out yourself.
    • A small early withdrawal that succeeds, used to justify much larger deposits.
    • A “settlement” or “staking” fee that appears only when you try to take real money out.

    Someone you met online led you to a “staking” platform?

    These cases are painful and more common than you think. A Cryptocule case review is free, confidential, and judgment-free.

    Open a Free Case Eval →

  • Forensic Brief: SQB – Cryptocule Casefile

    Forensic Brief: SQB – Cryptocule Casefile

    // FORENSIC BRIEF

    Funds sent to SQB at sqb.com leave a trail that no website takedown can erase. The Cryptocule trail audit converts that on-chain history into evidence that survives the platform disappearing.

    Platform: SQB  ·  Domain on record: sqb.com  ·  Cryptocule read: recovery is pursued through wallet-trace + filing, not negotiation with the operator.

    Wallet Trace

    The repeating arc reported about SQB runs roughly the same way: a contact opens through a private channel; a modest first deposit is accepted with a polished confirmation; the in-platform number rises while the claimant is still measuring trust; then a top-up is demanded before any withdrawal will move. By the moment the off-ramp request is filed seriously, sqb.com either disappears or invents a fresh fee. Sites can be taken down. The on-chain history cannot. Every deposit address SQB ever issued is still on the public ledger – that record is the substrate a Cryptocule casefile gets assembled on top of.

    Operational tells (Set B)

    • private-channel onboarding – Cryptocule sees SQB introduce itself through Telegram threads, WhatsApp groups, Instagram DMs, or dating-app handoffs – not the channels a chartered firm would use.
    • monotonic equity curve – The in-platform balance plotted by SQB climbs without natural pullbacks; that is a script generating a chart, not a market generating a price.
    • release-fee gate at withdrawal – Once a withdrawal request is filed, SQB demands a fresh deposit dressed as 'clearance', 'unlock', or 'liquidity bond' – no regulated venue holds payouts behind a fresh wire.

    Filing pathway – civil discovery overlay

    Where the dollar value justifies it, the on-chain trail Cryptocule produces against SQB can be lifted into a civil discovery filing – subpoena directed at the receiving exchange for KYC on the off-ramp wallet. That is how a chain trail converts to an identified counterparty.

    What Cryptocule tracks

    Cryptocule traces across Bitcoin, Ethereum, Tron (USDT-TRC20), BNB Smart Chain, Polygon, Arbitrum, Optimism, Avalanche, and the bridges that link them. Off-ramps tracked include Binance, Bybit, OKX, Kraken, Coinbase, Crypto.com, KuCoin, Gate.io, Huobi, Bitfinex, MEXC, and the smaller venues those rotate through under stress.

    Lines we don’t cross

    Cryptocule will not request seed phrases, will not ask for remote-access logins to your wallet, will not take an upfront cash retainer before scoping a case, and will not promise a guaranteed recovery. A real analyst will scope the matter free and tell you in writing whether the trail justifies a filing.

    Regulator and warning-list notes

    SQB has been flagged as a fake broker/platform by IOSCO I-SCAN (Ontario – Ontario Securities Commission). reported 2023-06-06. Jurisdiction: Ontario. It appears on an official regulator or fraud-warning list, which is a strong indicator of a scam operation. Treat any contact from this entity with caution. Reference: https://www.iosco.org/i-scan/

    If you funded SQB, the trail can still be mapped. Open a free case evaluation now.

    Open a Free Case Evaluation   Submit Wallet for Trace

    Internal: Wallet Check · How We Recover · FAQ

  • Frozen on Purpose: The $38,900 BetaCapitalX Withdrawal Trap

    Trail Audit · CCU-2026-046 · Vector: Fake Exchange · Frozen Withdrawal

    Frozen on Purpose: The $38,900 BetaCapitalX Withdrawal Trap

    A Houston rideshare driver moved his savings onto BetaCapitalX, a slick “exchange” promising easy USDT staking returns. When he tried to withdraw, the account froze behind a tax wall. Most of the funds had already been swept — this is the honest low.

    Recovery Brief
    Operator
    BetaCapitalX
    Vector
    Fake Exchange · Frozen Withdrawal
    Instrument
    Tether (USDT)
    Reported Loss
    $38,900 USD
    Recovery Route
    Single off-ramp branch frozen
    Trail Opened
    ≈12 weeks after first deposit
    Claimant
    Rideshare driver, 37 — Houston, TX
    Status · Recovered
    29% returned (partial)

    First Contact

    An ad for “effortless USDT staking” led him to BetaCapitalX, an exchange-styled platform with a clean app, live “order book,” and a referral bonus. It looked like a smaller version of the big exchanges he already knew.

    He moved his savings across in several deposits over three months, watching a “staking rewards” counter tick up daily. The interface felt legitimate, and a chat agent answered every question.

    Where the Trail Went Cold

    When he requested his first real withdrawal, BetaCapitalX demanded a “regulatory tax” equal to 20% of the balance, payable before release. Pay it, and a new “anti-money-laundering deposit” appeared. The balance was never his to take.

    By the time he stopped paying, his deposits had long since been swept off the platform — the “order book” and “staking counter” were just front-end theatre over an empty account.

    “It looked exactly like a real exchange. The staking number went up every day. Then withdrawing cost a tax I could never finish paying.”— Claimant statement

    Following the Trail

    01
    hop 01 · intake

    Document the platform

    We archived the BetaCapitalX app screens, his deposit transactions, and the “tax” demands before the account could be wiped.

    02
    hop 02 · trace

    Follow the deposits

    His USDT was swept from BetaCapitalX’s wallet shortly after each deposit and consolidated, then largely routed onward through a mixer.

    03
    hop 03 · branch

    Find the reachable slice

    One smaller branch of the consolidated funds went to a centralized exchange rather than the mixer — the only realistically recoverable portion.

    04
    hop 04 · file

    Exchange filing

    We submitted the labelled deposit address and hashes to that exchange’s compliance team with his police report attached.

    05
    hop 05 · partial

    Partial freeze

    The exchange froze the reachable branch. The mixed majority was unrecoverable, and we were clear about that from the outset.

    Trail’s End

    Recovered for claimant
    29%

    About $11,281 was returned — the single branch that reached a regulated exchange. Most of the deposits were swept into a mixer within hours, beyond reach. We took the case knowing the ceiling was low and said so.

    Trail Markers

    • An unfamiliar “exchange” found via an ad promising effortless staking returns.
    • A live-looking order book and a daily “rewards” counter you can’t verify on-chain.
    • A withdrawal blocked by a “regulatory tax” or “AML deposit” payable up front.
    • Each fee you pay simply reveals the next one.

    An “exchange” won’t let you withdraw without paying a tax?

    Speed decides how much is reachable. A Cryptocule case review is free and honest about what can and can’t come back.

    Open a Free Case Eval →

  • A Borrowed Registration: £73,500 and the RichPoint Capital Clone

    Trail Audit · CCU-2026-045 · Vector: Clone of a Regulated Firm

    A Borrowed Registration: £73,500 and the RichPoint Capital Clone

    A Manchester business owner moved savings into what looked like an FCA-regulated brokerage. RichPoint Capital used a real firm’s registration number and a near-identical site — but it was a clone. Combining APP-fraud reimbursement with an on-chain trace returned most of it.

    Recovery Brief
    Operator
    RichPoint Capital
    Vector
    Clone of a Regulated Firm
    Instrument
    Bank transfer → BTC
    Reported Loss
    £73,500 GBP
    Recovery Route
    APP reimbursement + exchange freeze
    Trail Opened
    ≈5 weeks after first transfer
    Claimant
    Business owner, 49 — Manchester, UK
    Status · Recovered
    87% returned

    First Contact

    A cold call led her to a comparison-site lookalike for RichPoint Capital. The “advisor” quoted a genuine FCA registration number and sent a cloned website and branded PDF brochures.

    She did the careful thing and checked the FCA Register — the firm was genuinely listed. Reassured, she agreed to invest, and her first “statement” showed neat, steady growth.

    Where the Trail Went Cold

    The number was real; the people using it were not. RichPoint Capital was a clone firm — fraudsters impersonating an authorised business, quoting its real registration while operating from their own domain, phone and bank details.

    She was persuaded to transfer in tranches to a “segregated client account” that was in fact a money-mule account. The scammers converted each transfer into Bitcoin and moved it on. When she asked to withdraw, a “compliance hold” and a tax demand blocked her.

    “I checked the FCA register and the firm was real. What I didn’t know is the people calling me weren’t that firm.”— Claimant statement

    Following the Trail

    01
    hop 01 · verify

    Confirm the clone

    We showed that the genuine FCA entry’s contact details, domain and bank account did not match the ones RichPoint had given her — the textbook signature of a clone-firm impersonation.

    02
    hop 02 · bank

    Build the APP-fraud claim

    We assembled an authorised-push-payment reimbursement case for her bank under the UK reimbursement rules and flagged the receiving mule account for recall.

    03
    hop 03 · trace

    Trace the crypto conversion

    From the mule account we obtained the Bitcoin addresses it funded and followed them into a single consolidation wallet.

    04
    hop 04 · off-ramp

    Exchange filing

    The consolidation wallet cashed out through a regulated exchange. We submitted the evidence package and requested a freeze on the destination balance.

    05
    hop 05 · dual

    Dual recovery

    Bank reimbursement for the mule-account tranches combined with the exchange freeze on the crypto branch to return the bulk of her money.

    Trail’s End

    Recovered for claimant
    87%

    About £63,945 was returned — APP reimbursement plus the frozen exchange balance. A small early tranche had already been cashed out before tracing began and was lost. Two routes, run in parallel, made the strong result.

    Trail Markers

    • An “advisor” who quotes a real regulator number but contacts you from a different domain, phone or bank account.
    • Verify a firm only with the contact details published on the regulator’s own register — never the ones the caller gives you.
    • Requests to pay a “segregated client account” whose name doesn’t match the firm.
    • A “compliance hold” or surprise tax demand that suddenly blocks your withdrawal.

    Paid a “regulated” firm that turned out to be a clone?

    Clone-firm cases can move on two fronts at once — your bank and the blockchain. Start with a free, confidential Cryptocule case review to map both.

    Open a Free Case Eval →

  • The Withdrawal Fee That Never Ended: NZD 61,800 at CapitalGates

    Trail Audit · CCU-2026-044 · Vector: Fake-CFD Withdrawal Fee

    The Withdrawal Fee That Never Ended: NZD 61,800 at CapitalGates

    An Auckland nurse was cold-called into a high-leverage “crypto CFD” account at CapitalGates. The platform showed handsome profits — until she tried to withdraw, when a cascade of fees appeared. A mixed bank-and-chain recovery returned most of the reachable funds.

    Recovery Brief
    Operator
    CapitalGates
    Vector
    Fake-CFD Withdrawal Fee
    Instrument
    BTC + card top-ups
    Reported Loss
    NZD 61,800
    Recovery Route
    Card chargeback + exchange freeze
    Trail Opened
    ≈10 weeks after first deposit
    Claimant
    Nurse, 46 — Auckland, NZ
    Status · Recovered
    61% returned

    First Contact

    The first contact was a cold call about “managed crypto CFDs.” A polished “account manager” walked her through opening an account at CapitalGates and screen-shared while placing her first “winning” trades.

    She funded it partly by card and partly in Bitcoin. The dashboard showed her balance climbing into six figures on high leverage, and the manager encouraged “one more deposit” to unlock a higher tier.

    Where the Trail Went Cold

    When she asked to withdraw, CapitalGates required a “profit-release fee,” then a “liquidity margin,” then a “conversion tax” — each blocking the payout until paid. The displayed profits were never real; they were UI numbers designed to justify more deposits.

    By the time she contacted us she had paid three separate “fees” and the account had been quietly set to read-only.

    “The profits looked incredible. The moment I tried to take any out, there was always one more fee standing in the way.”— Claimant statement

    Following the Trail

    01
    hop 01 · intake

    Separate the rails

    We split her losses into the card-funded portion and the Bitcoin portion — each has a different recovery route, and timing mattered for both.

    02
    hop 02 · chargeback

    Build the card dispute

    For the card deposits, we assembled a chargeback case documenting the misrepresentation and the blocked withdrawals for her bank’s dispute team.

    03
    hop 03 · trace

    Trace the Bitcoin

    The BTC deposits were traced from CapitalGates’ receiving wallet to a consolidation address that fed a regulated exchange.

    04
    hop 04 · file

    Exchange freeze request

    We filed the labelled addresses and transaction hashes with the receiving exchange’s compliance team alongside her police report.

    05
    hop 05 · combine

    Dual recovery

    The card chargeback plus the frozen exchange balance combined to return the bulk of the reachable funds.

    Trail’s End

    Recovered for claimant
    61%

    About NZD 37,698 was returned — successful card chargebacks plus the frozen exchange balance. The earliest BTC tranche had already been cashed out before tracing began and was lost.

    Trail Markers

    • A cold call offering “managed” high-leverage crypto CFDs with a personal account manager.
    • Screen-shared “winning” trades used to push larger and larger deposits.
    • Withdrawals blocked by a chain of fees — “release,” “margin,” “conversion tax.”
    • An account quietly switched to read-only once you push to cash out.

    A “CFD” platform keeps inventing fees to block your withdrawal?

    If you funded by card or crypto, there may be more than one route back. A Cryptocule case review is free and maps every option honestly.

    Open a Free Case Eval →