Cryptocule.com

Author: cryptocule

  • Frozen on Purpose: The $38,900 BetaCapitalX Withdrawal Trap

    Trail Audit · CCU-2026-046 · Vector: Fake Exchange · Frozen Withdrawal

    Frozen on Purpose: The $38,900 BetaCapitalX Withdrawal Trap

    A Houston rideshare driver moved his savings onto BetaCapitalX, a slick “exchange” promising easy USDT staking returns. When he tried to withdraw, the account froze behind a tax wall. Most of the funds had already been swept — this is the honest low.

    Recovery Brief
    Operator
    BetaCapitalX
    Vector
    Fake Exchange · Frozen Withdrawal
    Instrument
    Tether (USDT)
    Reported Loss
    $38,900 USD
    Recovery Route
    Single off-ramp branch frozen
    Trail Opened
    ≈12 weeks after first deposit
    Claimant
    Rideshare driver, 37 — Houston, TX
    Status · Recovered
    29% returned (partial)

    First Contact

    An ad for “effortless USDT staking” led him to BetaCapitalX, an exchange-styled platform with a clean app, live “order book,” and a referral bonus. It looked like a smaller version of the big exchanges he already knew.

    He moved his savings across in several deposits over three months, watching a “staking rewards” counter tick up daily. The interface felt legitimate, and a chat agent answered every question.

    Where the Trail Went Cold

    When he requested his first real withdrawal, BetaCapitalX demanded a “regulatory tax” equal to 20% of the balance, payable before release. Pay it, and a new “anti-money-laundering deposit” appeared. The balance was never his to take.

    By the time he stopped paying, his deposits had long since been swept off the platform — the “order book” and “staking counter” were just front-end theatre over an empty account.

    “It looked exactly like a real exchange. The staking number went up every day. Then withdrawing cost a tax I could never finish paying.”— Claimant statement

    Following the Trail

    01
    hop 01 · intake

    Document the platform

    We archived the BetaCapitalX app screens, his deposit transactions, and the “tax” demands before the account could be wiped.

    02
    hop 02 · trace

    Follow the deposits

    His USDT was swept from BetaCapitalX’s wallet shortly after each deposit and consolidated, then largely routed onward through a mixer.

    03
    hop 03 · branch

    Find the reachable slice

    One smaller branch of the consolidated funds went to a centralized exchange rather than the mixer — the only realistically recoverable portion.

    04
    hop 04 · file

    Exchange filing

    We submitted the labelled deposit address and hashes to that exchange’s compliance team with his police report attached.

    05
    hop 05 · partial

    Partial freeze

    The exchange froze the reachable branch. The mixed majority was unrecoverable, and we were clear about that from the outset.

    Trail’s End

    Recovered for claimant
    29%

    About $11,281 was returned — the single branch that reached a regulated exchange. Most of the deposits were swept into a mixer within hours, beyond reach. We took the case knowing the ceiling was low and said so.

    Trail Markers

    • An unfamiliar “exchange” found via an ad promising effortless staking returns.
    • A live-looking order book and a daily “rewards” counter you can’t verify on-chain.
    • A withdrawal blocked by a “regulatory tax” or “AML deposit” payable up front.
    • Each fee you pay simply reveals the next one.

    An “exchange” won’t let you withdraw without paying a tax?

    Speed decides how much is reachable. A Cryptocule case review is free and honest about what can and can’t come back.

    Open a Free Case Eval →

  • A Borrowed Registration: £73,500 and the RichPoint Capital Clone

    Trail Audit · CCU-2026-045 · Vector: Clone of a Regulated Firm

    A Borrowed Registration: £73,500 and the RichPoint Capital Clone

    A Manchester business owner moved savings into what looked like an FCA-regulated brokerage. RichPoint Capital used a real firm’s registration number and a near-identical site — but it was a clone. Combining APP-fraud reimbursement with an on-chain trace returned most of it.

    Recovery Brief
    Operator
    RichPoint Capital
    Vector
    Clone of a Regulated Firm
    Instrument
    Bank transfer → BTC
    Reported Loss
    £73,500 GBP
    Recovery Route
    APP reimbursement + exchange freeze
    Trail Opened
    ≈5 weeks after first transfer
    Claimant
    Business owner, 49 — Manchester, UK
    Status · Recovered
    87% returned

    First Contact

    A cold call led her to a comparison-site lookalike for RichPoint Capital. The “advisor” quoted a genuine FCA registration number and sent a cloned website and branded PDF brochures.

    She did the careful thing and checked the FCA Register — the firm was genuinely listed. Reassured, she agreed to invest, and her first “statement” showed neat, steady growth.

    Where the Trail Went Cold

    The number was real; the people using it were not. RichPoint Capital was a clone firm — fraudsters impersonating an authorised business, quoting its real registration while operating from their own domain, phone and bank details.

    She was persuaded to transfer in tranches to a “segregated client account” that was in fact a money-mule account. The scammers converted each transfer into Bitcoin and moved it on. When she asked to withdraw, a “compliance hold” and a tax demand blocked her.

    “I checked the FCA register and the firm was real. What I didn’t know is the people calling me weren’t that firm.”— Claimant statement

    Following the Trail

    01
    hop 01 · verify

    Confirm the clone

    We showed that the genuine FCA entry’s contact details, domain and bank account did not match the ones RichPoint had given her — the textbook signature of a clone-firm impersonation.

    02
    hop 02 · bank

    Build the APP-fraud claim

    We assembled an authorised-push-payment reimbursement case for her bank under the UK reimbursement rules and flagged the receiving mule account for recall.

    03
    hop 03 · trace

    Trace the crypto conversion

    From the mule account we obtained the Bitcoin addresses it funded and followed them into a single consolidation wallet.

    04
    hop 04 · off-ramp

    Exchange filing

    The consolidation wallet cashed out through a regulated exchange. We submitted the evidence package and requested a freeze on the destination balance.

    05
    hop 05 · dual

    Dual recovery

    Bank reimbursement for the mule-account tranches combined with the exchange freeze on the crypto branch to return the bulk of her money.

    Trail’s End

    Recovered for claimant
    87%

    About £63,945 was returned — APP reimbursement plus the frozen exchange balance. A small early tranche had already been cashed out before tracing began and was lost. Two routes, run in parallel, made the strong result.

    Trail Markers

    • An “advisor” who quotes a real regulator number but contacts you from a different domain, phone or bank account.
    • Verify a firm only with the contact details published on the regulator’s own register — never the ones the caller gives you.
    • Requests to pay a “segregated client account” whose name doesn’t match the firm.
    • A “compliance hold” or surprise tax demand that suddenly blocks your withdrawal.

    Paid a “regulated” firm that turned out to be a clone?

    Clone-firm cases can move on two fronts at once — your bank and the blockchain. Start with a free, confidential Cryptocule case review to map both.

    Open a Free Case Eval →

  • The Withdrawal Fee That Never Ended: NZD 61,800 at CapitalGates

    Trail Audit · CCU-2026-044 · Vector: Fake-CFD Withdrawal Fee

    The Withdrawal Fee That Never Ended: NZD 61,800 at CapitalGates

    An Auckland nurse was cold-called into a high-leverage “crypto CFD” account at CapitalGates. The platform showed handsome profits — until she tried to withdraw, when a cascade of fees appeared. A mixed bank-and-chain recovery returned most of the reachable funds.

    Recovery Brief
    Operator
    CapitalGates
    Vector
    Fake-CFD Withdrawal Fee
    Instrument
    BTC + card top-ups
    Reported Loss
    NZD 61,800
    Recovery Route
    Card chargeback + exchange freeze
    Trail Opened
    ≈10 weeks after first deposit
    Claimant
    Nurse, 46 — Auckland, NZ
    Status · Recovered
    61% returned

    First Contact

    The first contact was a cold call about “managed crypto CFDs.” A polished “account manager” walked her through opening an account at CapitalGates and screen-shared while placing her first “winning” trades.

    She funded it partly by card and partly in Bitcoin. The dashboard showed her balance climbing into six figures on high leverage, and the manager encouraged “one more deposit” to unlock a higher tier.

    Where the Trail Went Cold

    When she asked to withdraw, CapitalGates required a “profit-release fee,” then a “liquidity margin,” then a “conversion tax” — each blocking the payout until paid. The displayed profits were never real; they were UI numbers designed to justify more deposits.

    By the time she contacted us she had paid three separate “fees” and the account had been quietly set to read-only.

    “The profits looked incredible. The moment I tried to take any out, there was always one more fee standing in the way.”— Claimant statement

    Following the Trail

    01
    hop 01 · intake

    Separate the rails

    We split her losses into the card-funded portion and the Bitcoin portion — each has a different recovery route, and timing mattered for both.

    02
    hop 02 · chargeback

    Build the card dispute

    For the card deposits, we assembled a chargeback case documenting the misrepresentation and the blocked withdrawals for her bank’s dispute team.

    03
    hop 03 · trace

    Trace the Bitcoin

    The BTC deposits were traced from CapitalGates’ receiving wallet to a consolidation address that fed a regulated exchange.

    04
    hop 04 · file

    Exchange freeze request

    We filed the labelled addresses and transaction hashes with the receiving exchange’s compliance team alongside her police report.

    05
    hop 05 · combine

    Dual recovery

    The card chargeback plus the frozen exchange balance combined to return the bulk of the reachable funds.

    Trail’s End

    Recovered for claimant
    61%

    About NZD 37,698 was returned — successful card chargebacks plus the frozen exchange balance. The earliest BTC tranche had already been cashed out before tracing began and was lost.

    Trail Markers

    • A cold call offering “managed” high-leverage crypto CFDs with a personal account manager.
    • Screen-shared “winning” trades used to push larger and larger deposits.
    • Withdrawals blocked by a chain of fees — “release,” “margin,” “conversion tax.”
    • An account quietly switched to read-only once you push to cash out.

    A “CFD” platform keeps inventing fees to block your withdrawal?

    If you funded by card or crypto, there may be more than one route back. A Cryptocule case review is free and maps every option honestly.

    Open a Free Case Eval →

  • Fxstockinterswitch — report and reference

    Casefile Fxstockinterswitch: Deposit Hash to Filing Pathway

    // FORENSIC BRIEF

    Wallets routed through Fxstockinterswitch at fxstockinterswitch.org consolidate quickly. Within minutes of a deposit landing, the funds move toward a single off-ramp – that pattern is what Cryptocule traces and packages for filing.

    Platform: Fxstockinterswitch  ·  Domain on record: fxstockinterswitch.org  ·  Cryptocule read: recovery is pursued through wallet-trace + filing, not negotiation with the operator.

    Wallet Trace

    The repeating arc reported about Fxstockinterswitch runs roughly the same way: a contact opens through a private channel; a modest first deposit is accepted with a polished confirmation; the in-platform number rises while the claimant is still measuring trust; then a top-up is demanded before any withdrawal will move. By the moment the off-ramp request is filed seriously, fxstockinterswitch.org either disappears or invents a fresh fee. Sites can be taken down. The on-chain history cannot. Every deposit address Fxstockinterswitch ever issued is still on the public ledger – that record is the substrate a Cryptocule casefile gets assembled on top of.

    Operational tells (Set A)

    • rapid-consolidation deposit addresses – Deposit addresses tagged to Fxstockinterswitch relay incoming funds to a single consolidation wallet within minutes of confirmation – a relay funnel, not a custodial wallet pattern.
    • cloned brand surface – fxstockinterswitch.org mirrors the look of an established platform, but the registry footers, support links, and audit references all dead-end.
    • high-risk off-ramp endpoint – Outbound from Fxstockinterswitch converges on a centralised exchange flagged in chain-analytics datasets for laundering throughput – viewable via Etherscan and Chainabuse without paid tooling.

    Filing pathway – civil discovery overlay

    Where the dollar value justifies it, the on-chain trail Cryptocule produces against Fxstockinterswitch can be lifted into a civil discovery filing – subpoena directed at the receiving exchange for KYC on the off-ramp wallet. That is how a chain trail converts to an identified counterparty.

    What Cryptocule tracks

    Cryptocule traces across Bitcoin, Ethereum, Tron (USDT-TRC20), BNB Smart Chain, Polygon, Arbitrum, Optimism, Avalanche, and the bridges that link them. Off-ramps tracked include Binance, Bybit, OKX, Kraken, Coinbase, Crypto.com, KuCoin, Gate.io, Huobi, Bitfinex, MEXC, and the smaller venues those rotate through under stress.

    Lines we don’t cross

    Cryptocule will not request seed phrases, will not ask for remote-access logins to your wallet, will not take an upfront cash retainer before scoping a case, and will not promise a guaranteed recovery. A real analyst will scope the matter free and tell you in writing whether the trail justifies a filing.

    Submit your wallet for a forensic trace at /submit-a-case/ – no upfront fees, no automated chatbot.

    Open a Free Case Evaluation   Submit Wallet for Trace

    Internal: Wallet Check · How We Recover · FAQ

  • Pumped and Dumped: Tracing CAD 52,400 from a GlobeTrend Invest Signal Group

    Trail Audit · CCU-2026-043 · Vector: Telegram Signal Group

    Pumped and Dumped: Tracing CAD 52,400 from a GlobeTrend Invest Signal Group

    A Toronto contractor joined a free Telegram “signals” channel that funneled members onto GlobeTrend Invest. The “VIP calls” were a coordinated pump-and-dump, and the platform’s withdrawals never opened. This is the honest, partial result.

    Recovery Brief
    Operator
    GlobeTrend Invest
    Vector
    Telegram Signal Group
    Instrument
    Ethereum (ETH)
    Reported Loss
    CAD 52,400
    Recovery Route
    Partial freeze at one off-ramp branch
    Trail Opened
    ≈7 weeks after deposits
    Claimant
    IT contractor, 41 — Toronto, CA
    Status · Recovered
    38% returned (partial)

    First Contact

    A free Telegram channel posted screenshots of “VIP signal” wins all day. After a few small public calls appeared to land, the admins steered members to deposit on GlobeTrend Invest to “act on the premium calls in time.”

    He funded the account with ETH in three tranches. The channel’s “calls” were timed around tokens the operators already held — classic pump-and-dump — and GlobeTrend’s dashboard showed his balance soaring as he “followed” them.

    Where the Trail Went Cold

    When the headline “call” collapsed, his GlobeTrend balance was suddenly locked behind a “liquidity verification” deposit. The signal channel went quiet, then deleted its history.

    The funds he had deposited were never traded on his behalf. They were swept off the platform almost immediately, split across wallets, and a large branch routed into a mixer before we were engaged.

    “The free calls really did win at first. By the time the big one tanked, the channel was gone and so was the withdrawal button.”— Claimant statement

    Following the Trail

    01
    hop 01 · intake

    Capture the channel & deposits

    We archived the Telegram channel, the call timestamps, and his three ETH deposit transactions to GlobeTrend before more evidence disappeared.

    02
    hop 02 · trace

    Follow the sweep

    His deposits were swept from GlobeTrend’s wallet within hours and split across several addresses — one dormant branch, one heading toward a mixer.

    03
    hop 03 · branch

    Separate reachable from lost

    We mapped which branch still touched a centralized exchange and which entered the mixer. Only the exchange-bound branch was realistically recoverable.

    04
    hop 04 · file

    Exchange touchpoint filing

    We submitted the labelled deposit address and transaction hashes to the receiving exchange and to chain-analytics partners flagging the GlobeTrend cluster.

    05
    hop 05 · partial

    Partial freeze

    The exchange froze the portion that had not yet been withdrawn. The mixed branch is, realistically, gone — we set that expectation early.

    Trail’s End

    Recovered for claimant
    38%

    About CAD 19,912 was returned — only the branch that touched a regulated exchange was reachable. Pump-and-dump proceeds that reach a mixer rarely come back, and we don’t pretend otherwise.

    Trail Markers

    • A free “signals” channel whose public wins are used to push you onto one specific platform.
    • “VIP” or “premium” calls that require depositing on a broker the channel recommends.
    • A platform balance that locks behind a “liquidity” or “verification” deposit when a call fails.
    • Channels that delete their history the moment a trade goes wrong.

    A “signals” group led you to a platform that won’t pay out?

    The faster we map the sweep, the more of it stays reachable. Start with a free, confidential Cryptocule case review.

    Open a Free Case Eval →

  • The Mentor in the Group Chat: €68,500 Routed to ApexPrime Investment

    Trail Audit · CCU-2026-042 · Vector: WhatsApp Investment Club

    The Mentor in the Group Chat: €68,500 Routed to ApexPrime Investment

    Added to a WhatsApp “wealth circle,” a Dublin marketing manager followed a charismatic mentor’s daily calls into a managed USDT account on ApexPrime Investment. The gains were real on screen and fabricated on-chain. Reporting in days, not weeks, changed everything.

    Recovery Brief
    Operator
    ApexPrime Investment
    Vector
    WhatsApp Investment Club
    Instrument
    Tether (USDT-TRC20)
    Reported Loss
    €68,500 EUR
    Recovery Route
    Traced-funds freeze at receiving VASP
    Trail Opened
    ≈9 days after withdrawal block
    Claimant
    Marketing manager, 34 — Dublin, IE
    Status · Recovered
    71% returned

    First Contact

    A wrong-number text turned into friendly conversation, and within a week “Emma” had added her to a buzzing WhatsApp group where forty members thanked their mentor for his daily trade calls.

    The first “signal” was free and appeared to pay off. Then the mentor opened a “circle pool” on ApexPrime Investment — members deposited USDT into a managed account he traded for them. Watching the group celebrate, she moved in stages until €68,500 sat in the ApexPrime dashboard, compounding nicely.

    Where the Trail Went Cold

    When she requested a withdrawal, ApexPrime demanded a “15% performance tax,” payable up front before any funds could be released. When she paused, her account was “locked for verification” and the mentor grew impatient.

    The group was the product. Most of those forty cheering “members” were the same operation — a manufactured crowd built to make a managed account she could never independently verify feel safe and ordinary.

    “It didn’t feel like a scam — forty real people in the chat were cheering each other on. Most of them turned out to be the same operator.”— Claimant statement

    Following the Trail

    01
    hop 01 · preserve

    Lock down the evidence

    Before the group could vanish, we exported the full WhatsApp thread, every ApexPrime deposit receipt, and the TRC20 addresses she had funded.

    02
    hop 02 · trace

    Map the USDT flow

    Her Tether transfers were traced from her wallet through two intermediary hop wallets used to break the obvious link to the destination.

    03
    hop 03 · locate

    Find the collection point

    Within 48 hours of her last transfer, the hops consolidated into a single deposit address at a regulated virtual-asset exchange — a reachable touchpoint.

    04
    hop 04 · escalate

    Rapid compliance escalation

    Because she reported in days, the funds were still on-platform. We filed a traced-funds freeze request with the exchange and a report with the Irish authorities.

    05
    hop 05 · release

    Freeze and return

    The exchange froze the residual balance against the police reference and, after review, released the majority back to the claimant.

    Trail’s End

    Recovered for claimant
    71%

    About €48,635 was returned. Speed was decisive — the funds were still on a regulated platform when our freeze request arrived. A small fraction already pushed through a mixer could not be recovered.

    Trail Markers

    • Being “added” to a high-energy group chat full of strangers posting non-stop profits.
    • A “mentor” who manages your money on a platform whose balances you cannot verify on-chain.
    • A withdrawal “tax,” “fee,” or “deposit” demanded before you can take profits out.
    • Urgency and verification “locks” the moment you try to cash out.

    Stuck behind a “performance tax” to withdraw?

    If a group-chat mentor is blocking your funds, the first 72 hours matter most. Cryptocule case reviews are free and confidential — reach out before the trail cools.

    Open a Free Case Eval →

  • Melrose & Greystone — report and reference

    Why a Melrose & Greystone Recovery Filing Holds – Cryptocule Brief

    // FORENSIC BRIEF

    Claimants who funded Melrose & Greystone (melroseandgreystone.com) and were then asked for a 'release fee', a 'tax clearance', or a 'liquidity bond' will recognise the pattern – and so do we. Cryptocule documents it and files against it.

    Platform: Melrose & Greystone  ·  Domain on record: melroseandgreystone.com  ·  Cryptocule read: recovery is pursued through wallet-trace + filing, not negotiation with the operator.

    Wallet Trace

    What separates a Cryptocule trail audit from a generic 'recovery service' pitch is what arrives at the end. The audit ends with a packet: deposit hashes, forwarding wallets, the timestamped off-ramp transaction, screenshots preserved with chain-of-custody hashes, the matching melroseandgreystone.com ToS pages, and a recommended filing pathway – not a vague promise. That packet is what a regulator or a chain-analytics counterparty actually needs.

    Operational tells (Set C)

    • absent from every public registry checked – Melrose & Greystone fails lookup against the FCA register, SEC IAPD, FINRA BrokerCheck, and the NASAA-member state lists under the corporate name melroseandgreystone.com carries.
    • conflicting jurisdiction disclosures – Privacy page, ToS, and footer at melroseandgreystone.com disagree on governing jurisdiction – the textbook signature of a paper-shell operator.
    • ignored audit-trail requests – When asked in writing for proof of segregated accounts, an auditor letter, or an AML registration number, Melrose & Greystone doesn't reply – a regulated firm answers in a week.

    Filing pathway – civil discovery overlay

    Where the dollar value justifies it, the on-chain trail Cryptocule produces against Melrose & Greystone can be lifted into a civil discovery filing – subpoena directed at the receiving exchange for KYC on the off-ramp wallet. That is how a chain trail converts to an identified counterparty.

    What Cryptocule tracks

    Cryptocule traces across Bitcoin, Ethereum, Tron (USDT-TRC20), BNB Smart Chain, Polygon, Arbitrum, Optimism, Avalanche, and the bridges that link them. Off-ramps tracked include Binance, Bybit, OKX, Kraken, Coinbase, Crypto.com, KuCoin, Gate.io, Huobi, Bitfinex, MEXC, and the smaller venues those rotate through under stress.

    Lines we don’t cross

    Cryptocule will not request seed phrases, will not ask for remote-access logins to your wallet, will not take an upfront cash retainer before scoping a case, and will not promise a guaranteed recovery. A real analyst will scope the matter free and tell you in writing whether the trail justifies a filing.

    Regulator and warning-list notes

    Melrose & Greystone has been flagged as a fake broker/platform by IOSCO I-SCAN (United States of America – Securities and Exchange Commission). reported 2026-06-04. Jurisdiction: United States of America. It appears on an official regulator or fraud-warning list, which is a strong indicator of a scam operation. Treat any contact from this entity with caution. Reference: https://www.iosco.org/i-scan/

    Submit your wallet for a forensic trace at /submit-a-case/ – no upfront fees, no automated chatbot.

    Open a Free Case Evaluation   Submit Wallet for Trace

    Internal: Wallet Check · How We Recover · FAQ

  • The Hashrate That Never Hashed: Recovering $47,300 from CloudMiningCity

    Trail Audit · CCU-2026-041 · Vector: Cloud-Mining Contract

    The Hashrate That Never Hashed: Recovering $47,300 from CloudMiningCity

    A retired electrician was sold a “managed Bitcoin mining” contract by CloudMiningCity, complete with a daily-yield dashboard. The hashrate was never real, and every withdrawal triggered another fee. We traced the cash-out and returned just over half.

    Recovery Brief
    Operator
    CloudMiningCity
    Vector
    Cloud-Mining Contract
    Instrument
    Bitcoin (BTC)
    Reported Loss
    $47,300 USD
    Recovery Route
    Exchange freeze on cash-out wallet
    Trail Opened
    ≈16 weeks after first deposit
    Claimant
    Retired tradesman, 58 — Phoenix, AZ
    Status · Recovered
    53% returned

    First Contact

    It began in a Facebook “passive income” group, where a representative for CloudMiningCity explained that he could rent a slice of an industrial Bitcoin-mining farm and earn a fixed daily yield — no hardware, no power bills, just a dashboard ticking upward each morning.

    The onboarding looked professional: a signed “hashrate contract,” a branded portal, and a support agent who replied within minutes. When he requested a small $400 withdrawal early on, it landed the next day. That single honoured payout turned caution into confidence — and a test deposit into his retirement savings.

    Where the Trail Went Cold

    The dashboard showed steady daily BTC accrual climbing past $47,000. When he tried to withdraw the balance, the portal returned an error: a “pool maintenance fee” had to be cleared first, payable only in fresh Bitcoin.

    He paid it. Then came a “hashrate upgrade fee,” then a “tax clearance deposit,” each larger than the last and each blocking the withdrawal until paid. This is the advance-fee wall — the displayed balance is just a number in a database CloudMiningCity controls, and every “fee” is another deposit into their wallet.

    “Every time I got close to my money, there was one more small fee. I’d already paid so much that stopping felt insane.”— Claimant statement, intake call

    Following the Trail

    01
    hop 01 · intake

    Reconstruct the timeline

    We logged every deposit, captured the dashboard screenshots, and listed each Bitcoin address he had sent funds to — the raw material for an on-chain trace.

    02
    hop 02 · trace

    Follow the deposits on-chain

    Each payment was traced from his exchange withdrawals into CloudMiningCity’s receiving wallets. The “fees” all flowed one direction — toward a single consolidation address.

    03
    hop 03 · cluster

    Cluster the operator wallets

    That consolidation address batched victim deposits and forwarded them in regular sweeps — a behavioural fingerprint we could follow rather than guess at.

    04
    hop 04 · off-ramp

    Identify the cash-out point

    The sweeps deposited into the hot wallet of a regulated exchange. Matching amounts and timestamps tied CloudMiningCity’s cash-out to a specific platform and account.

    05
    hop 05 · freeze

    Evidence package & freeze request

    We delivered a labelled evidence file to the exchange’s compliance team and filed reports with IC3 and local police. The balance still resident on the platform was frozen against the case reference.

    Trail’s End

    Recovered for claimant
    53%

    About $25,069 was returned — the portion still on the exchange when the freeze landed. Funds CloudMiningCity had already swept into private self-custody were beyond reach, and we said so from day one.

    Trail Markers

    • “Guaranteed” fixed daily mining returns — real mining yield swings with network difficulty and price; it is never a flat daily figure.
    • A withdrawal that unlocks only after new, ever-larger fees payable in fresh crypto.
    • A small early withdrawal that “works,” used to justify a far larger deposit.
    • No verifiable facility, pool address, or audited hashrate — only a dashboard the operator alone controls.

    Sold a “mining contract” you can’t withdraw from?

    If a yield dashboard is demanding fees before it releases your funds, the trail is still warm. A Cryptocule case review is free and confidential.

    Open a Free Case Eval →

  • Xeodis — report and reference

    Why a Xeodis Recovery Filing Holds – Cryptocule Brief

    // FORENSIC BRIEF

    If you funded Xeodis at xeodis.com, the on-chain trail does not vanish when the website does. Cryptocule's brief on Xeodis maps that trail wallet by wallet so a recovery filing can be built on documented evidence, not allegation.

    Platform: Xeodis  ·  Domain on record: xeodis.com  ·  Cryptocule read: recovery is pursued through wallet-trace + filing, not negotiation with the operator.

    Wallet Trace

    Claimants who pay Xeodis in cryptocurrency are usually offered BTC, ETH, USDT-TRC20, or all three. The operational reality is a forwarding wallet per chain collecting inbound flow into a single off-ramp – in most cases a centralised exchange registered in a jurisdiction that does not auto-honour freeze requests from US, UK, or EU agencies. The Cryptocule trail audit turns those deposit hashes into a documented graph that a federal intake desk, a state attorney general's office, or an exchange compliance team can move on.

    Operational tells (Set B)

    • private-channel onboarding – Cryptocule sees Xeodis introduce itself through Telegram threads, WhatsApp groups, Instagram DMs, or dating-app handoffs – not the channels a chartered firm would use.
    • monotonic equity curve – The in-platform balance plotted by Xeodis climbs without natural pullbacks; that is a script generating a chart, not a market generating a price.
    • release-fee gate at withdrawal – Once a withdrawal request is filed, Xeodis demands a fresh deposit dressed as 'clearance', 'unlock', or 'liquidity bond' – no regulated venue holds payouts behind a fresh wire.

    Filing pathway – civil discovery overlay

    Where the dollar value justifies it, the on-chain trail Cryptocule produces against Xeodis can be lifted into a civil discovery filing – subpoena directed at the receiving exchange for KYC on the off-ramp wallet. That is how a chain trail converts to an identified counterparty.

    What Cryptocule tracks

    Cryptocule traces across Bitcoin, Ethereum, Tron (USDT-TRC20), BNB Smart Chain, Polygon, Arbitrum, Optimism, Avalanche, and the bridges that link them. Off-ramps tracked include Binance, Bybit, OKX, Kraken, Coinbase, Crypto.com, KuCoin, Gate.io, Huobi, Bitfinex, MEXC, and the smaller venues those rotate through under stress.

    Lines we don’t cross

    Cryptocule will not request seed phrases, will not ask for remote-access logins to your wallet, will not take an upfront cash retainer before scoping a case, and will not promise a guaranteed recovery. A real analyst will scope the matter free and tell you in writing whether the trail justifies a filing.

    Talk to a real Cryptocule analyst – start at /contact-us/.

    Open a Free Case Evaluation   Submit Wallet for Trace

    Internal: Wallet Check · How We Recover · FAQ

  • Hd.stockmarket — report and reference

    Forensic Brief: Hd.stockmarket – Cryptocule Casefile

    // FORENSIC BRIEF

    Funds sent to Hd.stockmarket at https: leave a trail that no website takedown can erase. The Cryptocule trail audit converts that on-chain history into evidence that survives the platform disappearing.

    Platform: Hd.stockmarket  ·  Domain on record: https:  ·  Cryptocule read: recovery is pursued through wallet-trace + filing, not negotiation with the operator.

    Wallet Trace

    The repeating arc reported about Hd.stockmarket runs roughly the same way: a contact opens through a private channel; a modest first deposit is accepted with a polished confirmation; the in-platform number rises while the claimant is still measuring trust; then a top-up is demanded before any withdrawal will move. By the moment the off-ramp request is filed seriously, https: either disappears or invents a fresh fee. Sites can be taken down. The on-chain history cannot. Every deposit address Hd.stockmarket ever issued is still on the public ledger – that record is the substrate a Cryptocule casefile gets assembled on top of.

    Operational tells (Set B)

    • private-channel onboarding – Cryptocule sees Hd.stockmarket introduce itself through Telegram threads, WhatsApp groups, Instagram DMs, or dating-app handoffs – not the channels a chartered firm would use.
    • monotonic equity curve – The in-platform balance plotted by Hd.stockmarket climbs without natural pullbacks; that is a script generating a chart, not a market generating a price.
    • release-fee gate at withdrawal – Once a withdrawal request is filed, Hd.stockmarket demands a fresh deposit dressed as 'clearance', 'unlock', or 'liquidity bond' – no regulated venue holds payouts behind a fresh wire.

    Filing pathway – civil discovery overlay

    Where the dollar value justifies it, the on-chain trail Cryptocule produces against Hd.stockmarket can be lifted into a civil discovery filing – subpoena directed at the receiving exchange for KYC on the off-ramp wallet. That is how a chain trail converts to an identified counterparty.

    What Cryptocule tracks

    Cryptocule traces across Bitcoin, Ethereum, Tron (USDT-TRC20), BNB Smart Chain, Polygon, Arbitrum, Optimism, Avalanche, and the bridges that link them. Off-ramps tracked include Binance, Bybit, OKX, Kraken, Coinbase, Crypto.com, KuCoin, Gate.io, Huobi, Bitfinex, MEXC, and the smaller venues those rotate through under stress.

    Lines we don’t cross

    Cryptocule will not request seed phrases, will not ask for remote-access logins to your wallet, will not take an upfront cash retainer before scoping a case, and will not promise a guaranteed recovery. A real analyst will scope the matter free and tell you in writing whether the trail justifies a filing.

    Regulator and warning-list notes

    Hd.stockmarket has been flagged as a fake broker/platform by IOSCO I-SCAN (Thailand – Securities and Exchange Commission). reported 2026-02-06. Jurisdiction: Thailand. It appears on an official regulator or fraud-warning list, which is a strong indicator of a scam operation. Treat any contact from this entity with caution. Reference: https://www.iosco.org/i-scan/

    If you funded Hd.stockmarket, the trail can still be mapped. Open a free case evaluation now.

    Open a Free Case Evaluation   Submit Wallet for Trace

    Internal: Wallet Check · How We Recover · FAQ