Introduction and background:
As a trader on the now-defunct LocalBitcoins, my transactions and reputation were always lawful and ethical. Regrettably, criminals used my (and others') data to mislead potential investors and possibly obscure the paths leading to the true perpetrators of criminal activities.
During my activity on LocalBitcoins, I encountered various types of fraud. Often, fraudsters would initiate cryptocurrency purchase transactions and, upon receiving my transfer details, use this information to deceive others by suggesting I was the beneficiary of their payments for non-existent transactions. Consequently, my banking details and surname could be wrongfully associated with criminal activity, risking wrongful linkage to actions for which I bore no responsibility. I might describe the most spectacular cases with international scope in the future.
I initially conducted transactions without a company, but as the volume of transactions grew and I sought to address tax matters related to cryptocurrency income, I decided to establish my own company, which was described by the post author and erroneously linked to criminal activities. For this purpose, I collaborated with an agent who advertised as an expert in tax advice and optimization for the cryptocurrency industry. One of my first suspicions, for which I found no proof, fell on this agent due to their questionable standards.
Discovery of abuse:
Discovering that my company was exploited by fraudsters came as a shock. This information reached me through a friend who stumbled upon a forum post and decided to inform me. I immediately contacted the post's author to delve into the subject. My initial suspicions were various. The first suspect was the agent I collaborated with to establish the company, due to prior doubts about their safety and privacy standards. Another hypothesis was an attempt to deliberately discredit me, though further investigation found no direct evidence. I also considered that someone I personally knew or had traded with on LocalBitcoins could be behind the fraud. Ultimately, the analysis suggested that fraudsters were using data from various companies, choosing victims based on data availability rather than personal conflict, making my publicly available data an easy target.
Private Investigation:
In my private investigation, the starting point was information and links to websites mentioned in this thread, leading me to a deeper inquiry.
https://digitalassetsprogram.com
https://digitalasetgroup.com/
And in another related post(https://bitcointalksearch.org/topic/scam-alert-biteasyltdcom-fake-investment-scheme-5223764):
https://biteasyltd.com/
Using the Archive.org service, I was able to access archived versions of websites that no longer exist, enabling an analysis of their content and how fraudsters used false company data. Particularly revealing were snapshots of sites like biteasyltd.com and digitalassetsprogram.com, providing insights into the fraudsters' methods.
https://web.archive.org/web/20191118164602/https://digitalassetsprogram.com/">https://web.archive.org/web/20200502160244/https://biteasyltd.com/
https://web.archive.org/web/20191118164602/https://digitalassetsprogram.com/
I analyzed several websites where the use of similar templates and operational methods indicated they originated from the same perpetrators. The recurring appearance of the same registration data across various sites, along with errors in descriptions and corporate registration documents, further confirmed their fraudulent nature. Examples of sites identified as part of the fraud network include:
- https://www.dailyfxcryptotrader.com/?a=cust&page=about
- https://polaris-capital.org/?a=cust&page=about
- https://www.titan-royalfree.org/?a=cust&page=about
- https://www.corniscrypt.net/?a=cust&page=about
- https://ameriswissfxexchange.com/about
- https://coshmcapitals.us/
- https://algrowthcapitals.com/?a=cust&page=about
- https://apextradeplus.com/?a=cust&page=about
- https://www.venusfinancedigitaltraders.com/?a=cust&page=about
- https://bluetradingfx.com/?a=cust&page=about
- https://cointradevestlimited.com/?a=cust&page=about
- https://www.exparttrades.com/
- https://globe-trades.pro/?a=cust&page=about
The websites I'm going to describe are currently operational. The first one, www.dailyfxcryptotrader.com, uses a slightly modified template from https://digitalassetsprogram.com/. The certificate of incorporation indicates a British company, QOIN LTD, with the number: 13372090, but a completely different number (114921234), not found in Companies House, is mentioned in the description - https://find-and-update.company-information.service.gov.uk/company/13372090
The site occasionally displays enticing pop-ups like: "Someone from United Kingdom just Invested 27 000$", "Someone from Germany just Invested 6 000$".
In the footer of the website, despite indicating the certificate of the company QOIN LTD, the details do not match those in Companies House.
https://digitalassetsprogram.com/ - Nov 2018
https://web.archive.org/web/20191118164602/https://digitalassetsprogram.com/
www.dailyfxcryptotrader.com - 27.03.2024
footer address not match those in Companies House
QOIN LTD
Company number 13372090
Another website, https://polaris-capital.org/?a=cust&page=about, lists in its "about us" section the company behind the venture as "POLAND, (Company Number: 114921234, Stanislaw Kowalski 98 Shirley Street 4209." The site features a graphic purporting to be the company's certificate, which doesn't even resemble a template for Polish companies certificate; it's completely fabricated. Additionally, the address lacks a city, and the postal code doesn't match the Polish postal code format. Moreover, the number listed on the company's certificate is the same as on the previous site (www.dailyfxcryptotrader.com), used when referencing the company QOIN LTD.
Another fraudulent website (https://www.titan-royalfree.org/?a=cust&page=about) in its "about" section points to a company registered in Argentina: Company Number: 114921234, YPF Tower, Macacha Güemes 515, Buenos Aires, Argentina. However, next to what they claim to be a British certificate, they list the same number previously mentioned on www.dailyfxcryptotrader.com pretending to be QQIN LTD, and on https://polaris-capital.org/ posing as a non-existent Polish company. On this website fraudster used same template as https://digitalassetsprogram.com/
At the address in Buenos Aires, there are many different companies. Below is a Street View of the office building at the indicated address.
Another fraudulent website - https://www.corniscrypt.net/?a=cust&page=about. On this website, in the "about us" section, the fraudsters claim that a Swiss company is behind the venture and provide its details: Switzerland registered company, (ISO Number: 36664:2022,5, Avenue Theodore Flournoy Geneva, 1207 Switzerland). During the preparation of this website, the scammers made a mistake in the code, and before the company details, the name of one of the variables is visible: $settings.site_name}. The graphic next to which the text "Switzerland Company Number" appears is not actually a certificate of a Swiss company; its appearance differs significantly from the official template. A street view for the address: Av. Théodore-Flournoy 5, 1207 Genève, Switzerland, indicates that it is a residential block.
Another fraudulent website - https://apextradeplus.com/?a=cust&page=about. On this website, in the "about us" section, the scammers do not specifically mention any company. Once again, a certificate pointing to the British company QOIN LTD appears, but they provide a previously recurring number that does not match the entry in the Companies House register.
After loading the page, a message also appears stating:
https://i.postimg.cc/66D5R6yz/screen11.png
Another scam website - https://www.venusfinancedigitaltraders.com/?a=cust&page=about. On this page, in the "about us" section, the scammers again refer to a company with the following details (Company Number: 114921234, 4 Luke Street, London, United Kingdom, EC2A 4XW), using the non-existent and recurring number 114921234. The graphic next to the text "UK Company Number: #114921234" contains the text "The state of Washington," despite the provided details supposedly indicating a British company. The address provided in the footer of this page is: 1333 2nd St, Santa Monica, California, United States, 90401.
https://i.postimg.cc/fTrFkkyT/screen13.png
Another fraudster's website - https://bluetradingfx.com/?a=cust&page=about. On this page, in the "about us" section, the scammers do not provide the company name. Once again, the non-existent UK Company Number #114921234 appears, while the certification indicates QQIN LTD as the company.
Another fraudster's website - https://cointradevestlimited.com/?a=cust&page=about, referring to the non-existent Companies House number 114921234 and the company QQIN LTD.
The last website I found - https://www.exparttrades.com/?a=cust&page=about, once again referring to the non-existent Companies House number and certificate of the company QQIN LTD. The website differs slightly in its graphic design, but the layout and template are identical to the other cases.
https://i.postimg.cc/wTnkNNpM/screen17.png
I also came across a Reddit post from a victim describing how the scammers operate.
https://www.reddit.com/r/Bitcoin/comments/r222oh/bitcoin_scam_by_valuetradeltd_registered_uk/
The website described in this case no longer exists, but its snapshot can be found on archive.org.
https://web.archive.org/web/20220614223127/https://valuetrade.ltd/
Bitcoin scam by VALUETRADE.LTD, registered UK Company
Hello good people.
I am 31 years old, and not very stupid, even though it might seem so when you finish this post.
I wish this doesn't happen to anyone else, and for that reason I write this here.
I will make it as short as possible. Excluding personal information
I was searching for opportunities to invest Bitcoin.
Found a company registered in the UK, number 08307335. Valuetrade LTD. In the past AAYAAN LTD. owned by Ali and Natasha Usman since 2012, seemed completely legitimate.
***They target people that invest in Bitcoin, through Telegram***
Diving in:
First, these are the facts:
They offer investment plans with earnings, in bitcoin, on a web-based system. Every investment plan has a price range, marked by fixed dollar margins:
Plans: (1) 0 - 499 (2) 500 - 2,999 (3) 3,000 - 14999 (VIP) 15,000+
Earning & Timelapse: (1) 10% in 1day (2) 30% in 2d (3) 50% in 7d (VIP) 100% in 21d
Rules: There are no deposit limits, no withdrawal fees, no delays.
Steps: Sign On in the website www.valuetrade.ltd , choose a deposit amount and plan, and make a transfer of chosen amount to a fixed wallet
Their wallet for me is 1HEyxoXoA3Wqwex6WmZhdm2YcoFq1uhg2q
The site uses a system that marks the bitcoin decimals in any transaction by a fixed dollar price, but transactions are tied to bitcoin decimals. This makes it so when transferring to a certain plan, whatever arrives is what counts, not your intention.
Service is done through a telegram group. I followed the group for a while before investing. 1,800 members with usually 100 online, and a constant hype of successful deposits and withdrawals. The client service is done on private messages in Telegram too.
Second, this is what happened:
(Decimals are Bitcoin. Timestamps are -3 GMT)
Deposits:
(1) Oct-29-2021 06:24:08 AM - Deposit - .00833 btc (504$)
(1) Oct-31-2021 01:26:00 PM - Deposit Return and withdrawal - .01089 (668$)
(2) Oct-31-2021 01:36:00 PM - Deposit - .01454 btc (880$)
I requested withdrawal as shown above, and received the full sum with this information:
Wallet bc1q58z7gwl3g2mfx83j0gc5w0e7l9lr0ux2lzggh5kyjuf05cfe27fsgyzlwx
Hash 4fbf7e56c65ea713a4c49dab29f41e179106c9fed8c57e0dbb20d0dee47f759e
The second deposit was frozen because I wasn't eligible to invest in the level 2 plan again, only once is allowed (NEW RULE). I was then offered the option to invest a larger sum that will be added to the frozen sum (2), and reflected in the website. So I deposited:
(2) Nov-12-2021 01:16:21 PM - Deposit - .048585 btc (3,125$)
A total of 3,990$ did reflect on the website, in the level 3 plan, 7 day time lapse.
This brought trust, and I deposited a sum to be reflected in the level 2 plan:
(3) Nov-13-2021 2:46:39 AM - Deposit - .047 btc (at moment of transfer it was 2,990$)
This sum was frozen too because it arrived over the price margin. (3,003$)
A solution was offered, another deposit will solve the issue:
(4) Nov-13-2021 2:47:51 AM - Deposit - .03761 btc (2,395$)
2 days elapsed, and this last deposit made its profit:(4) Nov-15-2021 01:29:04 AM - Deposit Return and Withdrawal - .04746 (3,122$).
Wallet 3PWnRCpmRV6ijCnWKo9xrgV9HeUkywBTpb
Hash 82aceb16c9d94fb7b479e07ddbcbe3afc7b109703189c87be6f7f01ea3b53f3c
I deposited once more with what I withdrew as follows:
(5) Nov-15-2021 03:36:36 AM - Deposit - .04486 (2,952$)
Total Deposit so far: ±9,945$
Total Profit so far: ±890$
And here it starts for real:
On the 16th, I get an e-mail saying I am eligible for a bonus reward. A sum 97,650$
But, there is a massive Rule change. I am told by the admin that I cannot withdraw my past investments until I complete the requirements.
Requirements**:**
Buy VIP membership and invest in a plan. (1) a non-refundable payment of 1,500$, and (2) an investment of above 15,000$. This will reinstate my withdrawal capabilities.
I paid for the VIP membership, through a direct wallet to wallet transfer, without the web interface:
(6) Nov-18 1:59 AM- Payment - .0251 (1,500$)
Wallet: 17XLrLmeUon47b4RtP3YiweaXH18rWsNBW
Hash: 5636ee939815569f507bc3b79376f1b443525420d08d3c58a1a3e2ee5bf4413c
6 hours later I took care of the second step, I sent 15,050$, which delayed 4 hours in arriving and reflected as 14,840$ on their system after a big bitcoin price dip.
(7) Nov-18 8:04 AM- Deposit - .25128 (14,840$)
Wallet: 1HEyxoXoA3Wqwex6WmZhdm2YcoFq1uhg2q
Hash: 4991d314815ae7e827a20d5251a83f206cfd9a445dd2b6e4a5f97836f671ef73
I am told by the admin that he is unable to manipulate the system.
the solution is to deposit again. Until then, this amount and all else is frozen.
At this point I ran out of bitcoin, and so, asking for help in the same telegram group Valuetrade has, a member that doesn't know me offers to complete the amount I am missing, since he trusts the company. This person from Telegram sends the missing amount:
(Loan) Nov-21 04:22 PM - Receive - .07549 (4,450$)
Wallet: 3McUqozvq4Fo4G6hLPi9JfoWjEHdiVURCM
Hash: 2c80aa5bb58c99f47ddfecf2936d33518b149fe4e5da95965b3743959f0e7129
As this completed the requirement, I immediately make my last deposit on this ride:
( Nov-21-2021 6:18:00 PM - Deposit - .26431 (15,700$)
According to agreement, all is now available for withdrawal.
By the time the admin responds hours later, he insists I have delayed too long and for that reason, the rules change again. Now there is a FEE of 10% on withdrawals, paid up front.
This is where I realised FINALLY that it is a scam. This is my current position. I am just delaying right now.
The person who loaned me money is probably a part of it, or the same person.
Total invested so far: 0.67 bitcoin worth about ±39,250$, not all of which was mine to start with.
(Not including 1,500$ VIP payment, and the loan of .07549).
Supposed account balance to withdraw: 111,979.10$
No negotiation has proved fruitful. He insists he has no power to manipulate the system and only a 0.1 deposit will allow me to withdraw 1 bitcoin. A new 5,000$ deposit for 50,000$ withdrawal. This deposit is done in the same way the VIP payment was made, sort of off the books, wallet to wallet.
I ask for information, proof, time, my investment back, anything. To no avail.
All I get is threats to act fast and deposit, or else rules change again.
I do not know why I didn't stop before, apparently there is something for me to learn here.
A wise man once told me, "Bitcoin came to teach something, to all of us"
I am lucky to have the family I have.
Done
Questions to this awesome community:
Does anyone think this is legit? Am I wrongly accusing?
Do you think it is possible for me to recover my losses?
Do you think it advisable to take legal actions against this company?
Does anyone know someone that might help me and my family with this situation?
I filed a report on ic3.gov.
I added all information and proof I could gather from the website and telegram, added what I could to this post. I have further information available.
I can't believe they scam like this and leave so much information available.
Please help warn people.
Help me get my family's savings back
Thank you for your time and dedication
Archived
In addition to the sources mentioned earlier, I came across additional information related to the scammers by querying Google. I found posts on Russian-language Facebook groups. Additionally, on the YouTube platform, I came across a promotional video linked to the Company Number: 114921234, often associated with British entities. However, this time, the number was linked to coinvastfx.com, purportedly a company registered in the United States. I also found a report on the website https://www.scamscavenger.tech/projectinfo?project=tradetrust.ltd reporting one of the scammer's websites as a scam.
Description under the YouTube video
https://www.youtube.com/@coinvastfx1574
Russian-language posts on Facebook groups indexed in Google under the phrase of the recurring non-existent British company number.
https://www.facebook.com/groups/mansar14/posts/3066864483562813/?_rdr
https://www.facebook.com/groups/mansar14/
I also found information about one of the scam websites using a Russian hosting provider with the following details:
Server IP: 185.178.208.134
Provider: Ddos-guard LTD
Region: Rostov Oblast
City: Rostov-on-Don
This may indicate that the scam is orchestrated by someone from Russia, or this location was chosen due to limited cooperation between Russian law enforcement agencies and their counterparts in Western countries. However, it's also possible that both options are true simultaneously.
https://i.postimg.cc/YqWLbJx3/screen18.png
https://i.postimg.cc/zD7yVgrY/screen19.png
Confronting the Scammers
In confronting the scammers, several steps were taken to address the issue effectively. Notably, my friend initiated direct contact with the scammers via live chat on March 28, 2024 (screenshots provided below). The objective of this confrontation was to ascertain the wallet addresses used by the scammers for further analysis of fund flow.
As a result of the conversation, three wallet addresses were identified, with only the TRX wallet containing 12 TRX deposited 22 days ago.
Scammers' Wallets:
Bitcoin Wallet:
Ethereum Wallet:
USDT (TRC20) Wallet:
These actions mark a proactive effort to confront the scammers and gather crucial information regarding their operations, aiming to prevent further fraudulent activities and safeguard the community against potential harm. It is also important to note that, unfortunately, there is a lack of comprehensive accounts from victims online, and the available information is often fragmented.
https://imgur.com/mA2jcvX
https://imgur.com/yeUQimz
https://imgur.com/9PsDosk
https://imgur.com/W4WwydF
https://imgur.com/PFtQ6PP
https://imgur.com/fy3UOQM
https://imgur.com/6JxfP9g
https://imgur.com/92F46r3
https://imgur.com/q7PYrxS
https://imgur.com/McDizie
https://imgur.com/JwCslrw
https://imgur.com/jGJpk6R
https://imgur.com/vAmjReK
https://imgur.com/GSkQRfR
https://imgur.com/1v0gwnH
https://imgur.com/laeu72I
https://imgur.com/1oeVj0z
https://imgur.com/ww6JEOZ
https://imgur.com/JJx9lXK
The post will be updated with new information as it becomes available. Please contact me if you have been defrauded or have information about the wallet addresses or bank accounts used by the scammers.
I hope the information will benefit the community. I also hope that the perpetrators of this fraud will be brought to justice.