Protect your case: initiate contact through cryptocurrencyprofessor.com. Never share your seed phrase.

Category: Scam Brokers

Annotated readings of brokers and platforms the Cryptocurrency Professor has documented.

  • Casefile AOX Capitals, The Professor’s Note

    FROM THE CASEFILE, BERKAT FD SDN BHD

    The Professor opens the file on AOX Capitals the same way every casefile is opened, by treating the wallet history as text and the off-ramp endpoint as the citation a regulator can verify.

    From the marginalia, the deposit pathway:

    • Claimant-to-platform deposit transactions on the deposit chain used by AOX Capitals.
    • Operator-controlled forwarding wallets where deposits consolidate ahead of laundering or off-ramping.
    • Cross-chain bridge events to chains with deeper exchange liquidity.
    • Privacy-service interactions, where present in the trail.
    • Off-ramp wallet, the named centralised-exchange endpoint.

    From the lectern, off-ramp identification:

    • AOX Capitals off-ramps consistently to centralised exchanges, Coinbase, Kraken, and Gemini appear less often than the offshore venues; the casefile names the actual endpoint.
    • The AOX Capitals off-ramp address is matched to known compliance feeds, the Professor’s standing dataset plus chain-analytics references.
    • Compliance leverage is applied at the named counterparty for AOX Capitals, the packet meets the off-ramp’s published compliance standard.
    • When the AOX Capitals off-ramp does not respond, escalation runs through IC3 (for US claimants), state AG, and (above a dollar threshold) civil-discovery overlay.

    How a AOX Capitals casefile becomes a evidence filing:

    1. First read on AOX Capitals, incoming submission is reviewed against the no-go list and a written go/no-go is returned in writing.
    2. Wallet trace on AOX Capitals, deposit-to-off-ramp pathway is mapped across chains with verifiable hashes.
    3. Counterparty identification, the off-ramp endpoint for AOX Capitals is named to a centralised exchange wallet.
    4. Packet filing on AOX Capitals, IC3, state AG, off-ramp compliance desk; civil discovery if dollar value justifies it.
    5. Casefile follow-through, the Professor stays with AOX Capitals until a documented outcome or escalation step is on file.

    Reading-list, chains and exchanges in scope:

    • Deposit-side chains in AOX Capitals casefiles, typically the major chains (BTC, ETH) and the high-throughput stablecoin chains (Tron USDT, BSC USDT), with bridge crossings noted.
    • Off-ramps named in AOX Capitals packets, centralised exchanges that accept regulator-grade compliance filings.
    • Filing options on AOX Capitals, IC3 (US), state AG, off-ramp compliance desk, civil-discovery KYC where the dollar value warrants it.

    What is never asked of a claimant:

    • On the AOX Capitals casefile, never request a seed phrase. Ever.
    • On the AOX Capitals casefile, never request remote-access logins to a wallet or exchange.
    • On the AOX Capitals casefile, never demand an upfront cash retainer to scope the matter.
    • On the AOX Capitals casefile, never promise a guaranteed recovery. The trail does not promise one.
    • On the AOX Capitals casefile, never call the claimant unsolicited. Written-only.

    Open a free consultation

    Open a free first consultation, /contact-us/, written response within one business day.

    Open a Free Case Consultation   Submit Wallet for Trace

    Why this platform is on our casefile

    AOX Capitals has been flagged as a fake broker/platform by IOSCO I-SCAN (United Kingdom – Financial Conduct Authority). reported 2020-12-08. Jurisdiction: United Kingdom. It appears on an official regulator or fraud-warning list, which is a strong indicator of a scam operation. Treat any contact from this entity with caution. Reference: https://www.iosco.org/i-scan/

  • Office Hours on prénom.nom@cmacgm-investor.fr

    FROM THE CASEFILE, CTK NETWORK

    When deposits to prénom.nom@cmacgm-investor.fr via prénom.nom@cmacgm-investor.fr go quiet, the on-chain record stays loud. The Professor’s reading begins where the platform’s silence does, with the wallet that received the funds and the path it took afterward.

    Trace summary, funds that left prénom.nom@cmacgm-investor.fr:

    • Deposit confirmations from the claimant to prénom.nom@cmacgm-investor.fr’s receiving wallet at prénom.nom@cmacgm-investor.fr.
    • Forwarding-wallet pathway documented hop-by-hop with chain of custody hashes.
    • Cross-chain bridge transactions where the operator routed value out of the deposit chain.
    • Mixer or coin-join interactions, where applicable.
    • Final off-ramp at a centralised exchange, the compliance counterparty named in the recovery filing.

    From the lectern, off-ramp identification:

    • prénom.nom@cmacgm-investor.fr casefiles end at a centralised exchange, Bybit, KuCoin, OKX, or Gate.io are common; the casefile names the actual deposit address that received the consolidated funds.
    • Off-ramp wallet for prénom.nom@cmacgm-investor.fr is matched against compliance and chain-analytics datasets the Professor reads daily.
    • Compliance leverage applied to the named off-ramp for prénom.nom@cmacgm-investor.fr, the packet is delivered in compliance-desk format.
    • Non-cooperative off-ramps trigger IC3 + state-AG + civil-discovery escalation on the prénom.nom@cmacgm-investor.fr casefile.

    Filing pathway, the next step after the off-ramp is identified:

    1. Submission triage, prénom.nom@cmacgm-investor.fr casefile reviewed against the no-go list, written reply within one business day.
    2. Pathway trace, prénom.nom@cmacgm-investor.fr deposit and forwarding wallets captured.
    3. Endpoint identification, prénom.nom@cmacgm-investor.fr off-ramp wallet named.
    4. Filing, prénom.nom@cmacgm-investor.fr packet delivered to IC3, state AG, off-ramp compliance, civil discovery as needed.
    5. Ongoing follow, prénom.nom@cmacgm-investor.fr stays on file until a documented next step is reached.

    What the on-chain reading covers:

    • Deposit-side chains in prénom.nom@cmacgm-investor.fr casefiles, typically the major chains (BTC, ETH) and the high-throughput stablecoin chains (Tron USDT, BSC USDT), with bridge crossings noted.
    • Off-ramps named in prénom.nom@cmacgm-investor.fr packets, centralised exchanges that accept regulator-grade compliance filings.
    • Filing options on prénom.nom@cmacgm-investor.fr, IC3 (US), state AG, off-ramp compliance desk, civil-discovery KYC where the dollar value warrants it.

    Lines we never cross, by published policy:

    • prénom.nom@cmacgm-investor.fr policy, seed phrases are never requested.
    • prénom.nom@cmacgm-investor.fr policy, remote-access logins are never requested.
    • prénom.nom@cmacgm-investor.fr policy, no upfront cash retainer to scope.
    • prénom.nom@cmacgm-investor.fr policy, no guaranteed-recovery language. None.
    • prénom.nom@cmacgm-investor.fr policy, no unsolicited calls. The Professor responds in writing only.

    Open a free consultation

    The Professor reads claims at no charge to begin, open a consultation at /contact-us/.

    Open a Free Case Consultation   Submit Wallet for Trace

    Why this platform is on our casefile

    prénom.nom@cmacgm-investor.fr has been flagged as a fake broker/platform by IOSCO I-SCAN (France – Autorité des marchés financiers). reported 2021-12-16. Jurisdiction: France. It appears on an official regulator or fraud-warning list, which is a strong indicator of a scam operation. Treat any contact from this entity with caution. Reference: https://www.iosco.org/i-scan/

  • Office Hours on Dandoo Express Group Plc (the scam entity)

    FROM THE CASEFILE, BTCUSDT INVESTMENT

    When deposits to Dandoo Express Group Plc (the scam entity) via https: go quiet, the on-chain record stays loud. The Professor’s reading begins where the platform’s silence does, with the wallet that received the funds and the path it took afterward.

    Wallet trace, what the Professor maps:

    • Deposit transaction hashes from the claimant wallet to the Dandoo Express Group Plc (the scam entity) platform receiving address.
    • Forwarding wallets the platform consolidated through, typically two to four hops on the deposit chain (BTC / ETH / USDT-TRC20 / BSC / Polygon / Arbitrum / Optimism / Avalanche).
    • Bridge crossings between chains, where the operator moves value into a chain with deeper liquidity ahead of the off-ramp.
    • Mixer interactions, Tornado-Cash variants, Sinbad, and the smaller obfuscation services that operators rotate through under regulatory pressure.
    • Final off-ramp wallet, the centralised exchange deposit address that received the consolidated funds.

    The Professor’s off-ramp note:

    • Dandoo Express Group Plc (the scam entity)’s off-ramp endpoint, in this casefile, is the centralised exchange that holds compliance leverage, typically named in the packet alongside the deposit address.
    • Chain-analytics datasets cross-reference the Dandoo Express Group Plc (the scam entity) off-ramp wallet against historical laundering throughput.
    • The Dandoo Express Group Plc (the scam entity) packet is delivered to the off-ramp compliance desk in a format the desk’s reviewers act on.
    • Escalation pathways for Dandoo Express Group Plc (the scam entity), where needed: IC3, the relevant state AG, and a civil-discovery overlay for KYC on the off-ramp wallet.

    How a Dandoo Express Group Plc (the scam entity) casefile becomes a evidence filing:

    1. Casefile triage on Dandoo Express Group Plc (the scam entity), the submission is read; a written assessment is delivered.
    2. Forensic trace on Dandoo Express Group Plc (the scam entity), every hop in the deposit pathway is captured and hashed.
    3. Off-ramp identification, the Dandoo Express Group Plc (the scam entity) endpoint is named.
    4. Recovery filing on Dandoo Express Group Plc (the scam entity), packet delivered to IC3, state AG, off-ramp compliance, and civil discovery as applicable.
    5. Continuing review of Dandoo Express Group Plc (the scam entity), the Professor follows the casefile until next-step documentation exists.

    Reading-list, chains and exchanges in scope:

    • Chains in scope for Dandoo Express Group Plc (the scam entity), the chains that handle the volume of casefile activity in this segment (BTC, ETH, Tron, BSC, plus L2s).
    • Off-ramps in scope for Dandoo Express Group Plc (the scam entity), named centralised exchanges with compliance leverage.
    • Filings supported on Dandoo Express Group Plc (the scam entity), IC3, state AG, off-ramp desk, civil discovery as applicable.

    What the Professor will never do, by policy:

    • What the Professor will not do on Dandoo Express Group Plc (the scam entity), ask for a seed phrase.
    • What the Professor will not do on Dandoo Express Group Plc (the scam entity), request remote-access logins.
    • What the Professor will not do on Dandoo Express Group Plc (the scam entity), demand cash up front.
    • What the Professor will not do on Dandoo Express Group Plc (the scam entity), promise a guarantee.
    • What the Professor will not do on Dandoo Express Group Plc (the scam entity), call you out of the blue.

    Open a free consultation

    Open a free first consultation, /contact-us/, written response within one business day.

    Open a Free Case Consultation   Submit Wallet for Trace

    Why this platform is on our casefile

    Dandoo Express Group Plc (the scam entity) has been flagged as a fake broker/platform by IOSCO I-SCAN (Jersey – Jersey Financial Services Commission). reported 2026-03-16. Jurisdiction: Jersey. It appears on an official regulator or fraud-warning list, which is a strong indicator of a scam operation. Treat any contact from this entity with caution. Reference: https://www.iosco.org/i-scan/

  • Casefile Hartmangreycapital, The Professor’s Note

    FROM THE CASEFILE, HARTMANGREYCAPITAL

    The Professor opens the file on Hartmangreycapital the same way every casefile is opened, by treating the wallet history as text and the off-ramp endpoint as the citation a regulator can verify.

    Wallet trace, what the Professor maps:

    • Deposit transaction hashes from the claimant wallet to the Hartmangreycapital platform receiving address.
    • Forwarding wallets the platform consolidated through, typically two to four hops on the deposit chain (BTC / ETH / USDT-TRC20 / BSC / Polygon / Arbitrum / Optimism / Avalanche).
    • Bridge crossings between chains, where the operator moves value into a chain with deeper liquidity ahead of the off-ramp.
    • Mixer interactions, Tornado-Cash variants, Sinbad, and the smaller obfuscation services that operators rotate through under regulatory pressure.
    • Final off-ramp wallet, the centralised exchange deposit address that received the consolidated funds.

    The annotation continues, off-ramp endpoint:

    • On the Hartmangreycapital casefile, the off-ramp endpoint resolves to a centralised exchange, Bitfinex, MEXC, or Crypto.com seen often in this segment, with the larger venues routed through under stress.
    • The off-ramp wallet for Hartmangreycapital is run against chain-analytics datasets and the Professor’s own compliance feeds.
    • A evidence packet is delivered to the named counterparty, the Hartmangreycapital casefile is built to the off-ramp’s compliance standard.
    • Where the off-ramp will not engage, Hartmangreycapital escalates to IC3, state AG, and civil-discovery overlay.

    Recovery sequence, from on-chain reading to filed packet:

    1. Read the Hartmangreycapital submission, written go/no-go returned.
    2. Map the Hartmangreycapital wallet trail, every hop captured with chain of custody hashes.
    3. Name the Hartmangreycapital off-ramp, endpoint counterparty identified.
    4. Build and file the Hartmangreycapital recovery packet, to IC3, state AG, off-ramp compliance, civil-discovery overlay.
    5. Stay on the Hartmangreycapital file, until written next steps exist.

    What the casefile records, chains and counterparties:

    • Chains the Professor reads for Hartmangreycapital casefiles, BTC, ETH, Tron USDT, BNB Smart Chain, Avalanche, Polygon, Arbitrum, Optimism, plus the cross-chain bridges that link them.
    • Off-ramps named in Hartmangreycapital, major centralised venues with compliance desks that accept regulator-grade packets.
    • Filing pathways available on Hartmangreycapital, IC3 for US claimants, state AG offices, off-ramp compliance, and civil-discovery overlay for high-value loss.

    What the Professor will never do, by policy:

    • What the Professor will not do on Hartmangreycapital, ask for a seed phrase.
    • What the Professor will not do on Hartmangreycapital, request remote-access logins.
    • What the Professor will not do on Hartmangreycapital, demand cash up front.
    • What the Professor will not do on Hartmangreycapital, promise a guarantee.
    • What the Professor will not do on Hartmangreycapital, call you out of the blue.

    Open a free consultation

    Send the wallet for trace, /submit-a-case/, the Professor responds in writing.

    Open a Free Case Consultation   Submit Wallet for Trace

  • Office Hours on Global FXP Markets

    FROM THE CASEFILE, CTK NETWORK

    When deposits to Global FXP Markets via this platform go quiet, the on-chain record stays loud. The Professor’s reading begins where the platform’s silence does, with the wallet that received the funds and the path it took afterward.

    Trace summary, funds that left this platform:

    • Deposit confirmations from the claimant to Global FXP Markets’s receiving wallet at this platform.
    • Forwarding-wallet pathway documented hop-by-hop with chain of custody hashes.
    • Cross-chain bridge transactions where the operator routed value out of the deposit chain.
    • Mixer or coin-join interactions, where applicable.
    • Final off-ramp at a centralised exchange, the compliance counterparty named in the recovery filing.

    From the lectern, off-ramp identification:

    • Global FXP Markets casefiles end at a centralised exchange, Bybit, KuCoin, OKX, or Gate.io are common; the casefile names the actual deposit address that received the consolidated funds.
    • Off-ramp wallet for Global FXP Markets is matched against compliance and chain-analytics datasets the Professor reads daily.
    • Compliance leverage applied to the named off-ramp for Global FXP Markets, the packet is delivered in compliance-desk format.
    • Non-cooperative off-ramps trigger IC3 + state-AG + civil-discovery escalation on the Global FXP Markets casefile.

    Filing pathway, the next step after the off-ramp is identified:

    1. Submission triage, Global FXP Markets casefile reviewed against the no-go list, written reply within one business day.
    2. Pathway trace, Global FXP Markets deposit and forwarding wallets captured.
    3. Endpoint identification, Global FXP Markets off-ramp wallet named.
    4. Filing, Global FXP Markets packet delivered to IC3, state AG, off-ramp compliance, civil discovery as needed.
    5. Ongoing follow, Global FXP Markets stays on file until a documented next step is reached.

    What the on-chain reading covers:

    • Deposit-side chains in Global FXP Markets casefiles, typically the major chains (BTC, ETH) and the high-throughput stablecoin chains (Tron USDT, BSC USDT), with bridge crossings noted.
    • Off-ramps named in Global FXP Markets packets, centralised exchanges that accept regulator-grade compliance filings.
    • Filing options on Global FXP Markets, IC3 (US), state AG, off-ramp compliance desk, civil-discovery KYC where the dollar value warrants it.

    Lines we never cross, by published policy:

    • Global FXP Markets policy, seed phrases are never requested.
    • Global FXP Markets policy, remote-access logins are never requested.
    • Global FXP Markets policy, no upfront cash retainer to scope.
    • Global FXP Markets policy, no guaranteed-recovery language. None.
    • Global FXP Markets policy, no unsolicited calls. The Professor responds in writing only.

    Open a free consultation

    The Professor reads claims at no charge to begin, open a consultation at /contact-us/.

    Open a Free Case Consultation   Submit Wallet for Trace

    Why this platform is on our casefile

    Global FXP Markets has been flagged as a fake broker/platform by IOSCO I-SCAN (Quebec – Autorité des marchés financiers). reported 2024-01-10. Jurisdiction: Quebec. It appears on an official regulator or fraud-warning list, which is a strong indicator of a scam operation. Treat any contact from this entity with caution. Reference: https://www.iosco.org/i-scan/

  • Office Hours on Trade Avita

    FROM THE CASEFILE, BTCUSDT INVESTMENT

    When deposits to Trade Avita via this platform go quiet, the on-chain record stays loud. The Professor’s reading begins where the platform’s silence does, with the wallet that received the funds and the path it took afterward.

    Wallet trace, what the Professor maps:

    • Deposit transaction hashes from the claimant wallet to the Trade Avita platform receiving address.
    • Forwarding wallets the platform consolidated through, typically two to four hops on the deposit chain (BTC / ETH / USDT-TRC20 / BSC / Polygon / Arbitrum / Optimism / Avalanche).
    • Bridge crossings between chains, where the operator moves value into a chain with deeper liquidity ahead of the off-ramp.
    • Mixer interactions, Tornado-Cash variants, Sinbad, and the smaller obfuscation services that operators rotate through under regulatory pressure.
    • Final off-ramp wallet, the centralised exchange deposit address that received the consolidated funds.

    The Professor’s off-ramp note:

    • Trade Avita’s off-ramp endpoint, in this casefile, is the centralised exchange that holds compliance leverage, typically named in the packet alongside the deposit address.
    • Chain-analytics datasets cross-reference the Trade Avita off-ramp wallet against historical laundering throughput.
    • The Trade Avita packet is delivered to the off-ramp compliance desk in a format the desk’s reviewers act on.
    • Escalation pathways for Trade Avita, where needed: IC3, the relevant state AG, and a civil-discovery overlay for KYC on the off-ramp wallet.

    How a Trade Avita casefile becomes a evidence filing:

    1. Casefile triage on Trade Avita, the submission is read; a written assessment is delivered.
    2. Forensic trace on Trade Avita, every hop in the deposit pathway is captured and hashed.
    3. Off-ramp identification, the Trade Avita endpoint is named.
    4. Recovery filing on Trade Avita, packet delivered to IC3, state AG, off-ramp compliance, and civil discovery as applicable.
    5. Continuing review of Trade Avita, the Professor follows the casefile until next-step documentation exists.

    Reading-list, chains and exchanges in scope:

    • Chains in scope for Trade Avita, the chains that handle the volume of casefile activity in this segment (BTC, ETH, Tron, BSC, plus L2s).
    • Off-ramps in scope for Trade Avita, named centralised exchanges with compliance leverage.
    • Filings supported on Trade Avita, IC3, state AG, off-ramp desk, civil discovery as applicable.

    What the Professor will never do, by policy:

    • What the Professor will not do on Trade Avita, ask for a seed phrase.
    • What the Professor will not do on Trade Avita, request remote-access logins.
    • What the Professor will not do on Trade Avita, demand cash up front.
    • What the Professor will not do on Trade Avita, promise a guarantee.
    • What the Professor will not do on Trade Avita, call you out of the blue.

    Open a free consultation

    Open a free first consultation, /contact-us/, written response within one business day.

    Open a Free Case Consultation   Submit Wallet for Trace

    Why this platform is on our casefile

    Trade Avita has been flagged as a fake broker/platform by IOSCO I-SCAN (United Kingdom – Financial Conduct Authority). reported 2025-06-18. Jurisdiction: United Kingdom. It appears on an official regulator or fraud-warning list, which is a strong indicator of a scam operation. Treat any contact from this entity with caution. Reference: https://www.iosco.org/i-scan/

  • Office Hours on TwitXOptions

    FROM THE CASEFILE, BTCUSDT INVESTMENT

    When deposits to TwitXOptions via twitxoptions.com go quiet, the on-chain record stays loud. The Professor’s reading begins where the platform’s silence does, with the wallet that received the funds and the path it took afterward.

    Wallet trace, what the Professor maps:

    • Deposit transaction hashes from the claimant wallet to the TwitXOptions platform receiving address.
    • Forwarding wallets the platform consolidated through, typically two to four hops on the deposit chain (BTC / ETH / USDT-TRC20 / BSC / Polygon / Arbitrum / Optimism / Avalanche).
    • Bridge crossings between chains, where the operator moves value into a chain with deeper liquidity ahead of the off-ramp.
    • Mixer interactions, Tornado-Cash variants, Sinbad, and the smaller obfuscation services that operators rotate through under regulatory pressure.
    • Final off-ramp wallet, the centralised exchange deposit address that received the consolidated funds.

    The Professor’s off-ramp note:

    • TwitXOptions’s off-ramp endpoint, in this casefile, is the centralised exchange that holds compliance leverage, typically named in the packet alongside the deposit address.
    • Chain-analytics datasets cross-reference the TwitXOptions off-ramp wallet against historical laundering throughput.
    • The TwitXOptions packet is delivered to the off-ramp compliance desk in a format the desk’s reviewers act on.
    • Escalation pathways for TwitXOptions, where needed: IC3, the relevant state AG, and a civil-discovery overlay for KYC on the off-ramp wallet.

    How a TwitXOptions casefile becomes a evidence filing:

    1. Casefile triage on TwitXOptions, the submission is read; a written assessment is delivered.
    2. Forensic trace on TwitXOptions, every hop in the deposit pathway is captured and hashed.
    3. Off-ramp identification, the TwitXOptions endpoint is named.
    4. Recovery filing on TwitXOptions, packet delivered to IC3, state AG, off-ramp compliance, and civil discovery as applicable.
    5. Continuing review of TwitXOptions, the Professor follows the casefile until next-step documentation exists.

    Reading-list, chains and exchanges in scope:

    • Chains in scope for TwitXOptions, the chains that handle the volume of casefile activity in this segment (BTC, ETH, Tron, BSC, plus L2s).
    • Off-ramps in scope for TwitXOptions, named centralised exchanges with compliance leverage.
    • Filings supported on TwitXOptions, IC3, state AG, off-ramp desk, civil discovery as applicable.

    What the Professor will never do, by policy:

    • What the Professor will not do on TwitXOptions, ask for a seed phrase.
    • What the Professor will not do on TwitXOptions, request remote-access logins.
    • What the Professor will not do on TwitXOptions, demand cash up front.
    • What the Professor will not do on TwitXOptions, promise a guarantee.
    • What the Professor will not do on TwitXOptions, call you out of the blue.

    Open a free consultation

    Open a free first consultation, /contact-us/, written response within one business day.

    Open a Free Case Consultation   Submit Wallet for Trace

    Why this platform is on our casefile

    TwitXOptions has been flagged as a fake broker/platform by IOSCO I-SCAN (United States of America – Securities and Exchange Commission). reported 2026-06-04. Jurisdiction: United States of America. It appears on an official regulator or fraud-warning list, which is a strong indicator of a scam operation. Treat any contact from this entity with caution. Reference: https://www.iosco.org/i-scan/

  • Office Hours on Stealth AI Labs

    FROM THE CASEFILE, BTCUSDT INVESTMENT

    When deposits to Stealth AI Labs via stealthailab.org go quiet, the on-chain record stays loud. The Professor’s reading begins where the platform’s silence does, with the wallet that received the funds and the path it took afterward.

    Wallet trace, what the Professor maps:

    • Deposit transaction hashes from the claimant wallet to the Stealth AI Labs platform receiving address.
    • Forwarding wallets the platform consolidated through, typically two to four hops on the deposit chain (BTC / ETH / USDT-TRC20 / BSC / Polygon / Arbitrum / Optimism / Avalanche).
    • Bridge crossings between chains, where the operator moves value into a chain with deeper liquidity ahead of the off-ramp.
    • Mixer interactions, Tornado-Cash variants, Sinbad, and the smaller obfuscation services that operators rotate through under regulatory pressure.
    • Final off-ramp wallet, the centralised exchange deposit address that received the consolidated funds.

    The Professor’s off-ramp note:

    • Stealth AI Labs’s off-ramp endpoint, in this casefile, is the centralised exchange that holds compliance leverage, typically named in the packet alongside the deposit address.
    • Chain-analytics datasets cross-reference the Stealth AI Labs off-ramp wallet against historical laundering throughput.
    • The Stealth AI Labs packet is delivered to the off-ramp compliance desk in a format the desk’s reviewers act on.
    • Escalation pathways for Stealth AI Labs, where needed: IC3, the relevant state AG, and a civil-discovery overlay for KYC on the off-ramp wallet.

    How a Stealth AI Labs casefile becomes a evidence filing:

    1. Casefile triage on Stealth AI Labs, the submission is read; a written assessment is delivered.
    2. Forensic trace on Stealth AI Labs, every hop in the deposit pathway is captured and hashed.
    3. Off-ramp identification, the Stealth AI Labs endpoint is named.
    4. Recovery filing on Stealth AI Labs, packet delivered to IC3, state AG, off-ramp compliance, and civil discovery as applicable.
    5. Continuing review of Stealth AI Labs, the Professor follows the casefile until next-step documentation exists.

    Reading-list, chains and exchanges in scope:

    • Chains in scope for Stealth AI Labs, the chains that handle the volume of casefile activity in this segment (BTC, ETH, Tron, BSC, plus L2s).
    • Off-ramps in scope for Stealth AI Labs, named centralised exchanges with compliance leverage.
    • Filings supported on Stealth AI Labs, IC3, state AG, off-ramp desk, civil discovery as applicable.

    What the Professor will never do, by policy:

    • What the Professor will not do on Stealth AI Labs, ask for a seed phrase.
    • What the Professor will not do on Stealth AI Labs, request remote-access logins.
    • What the Professor will not do on Stealth AI Labs, demand cash up front.
    • What the Professor will not do on Stealth AI Labs, promise a guarantee.
    • What the Professor will not do on Stealth AI Labs, call you out of the blue.

    Open a free consultation

    Open a free first consultation, /contact-us/, written response within one business day.

    Open a Free Case Consultation   Submit Wallet for Trace

    Why this platform is on our casefile

    Stealth AI Labs has been flagged as a fake broker/platform by IOSCO I-SCAN (New Zealand – Financial Markets Authority). reported 2026-03-09. Jurisdiction: New Zealand. It appears on an official regulator or fraud-warning list, which is a strong indicator of a scam operation. Treat any contact from this entity with caution. Reference: https://www.iosco.org/i-scan/

  • From the Lectern: HaveTrade

    FROM THE CASEFILE, HAVETRADE

    Funds you sent to HaveTrade (havetrade.com) are still recorded on the public ledger; the question is no longer whether the money moved but where the off-ramp opened, and that is what the Professor reads.

    Wallet trace, what the Professor maps:

    • Initial deposit hashes to the HaveTrade receiving address at havetrade.com.
    • Hop-by-hop forwarding wallets across the deposit chain, captured with chain of custody hashes.
    • Cross-chain bridge events that move value into the chain where liquidity supports the eventual off-ramp.
    • Obfuscation events through mixer contracts and privacy services.
    • Centralised-exchange off-ramp wallets, the named counterparty that holds compliance leverage.

    Off-ramp map, where the funds left the chain:

    • HaveTrade off-ramps consistently to centralised exchanges, Coinbase, Kraken, and Gemini appear less often than the offshore venues; the casefile names the actual endpoint.
    • The HaveTrade off-ramp address is matched to known compliance feeds, the Professor’s standing dataset plus chain-analytics references.
    • Compliance leverage is applied at the named counterparty for HaveTrade, the packet meets the off-ramp’s published compliance standard.
    • When the HaveTrade off-ramp does not respond, escalation runs through IC3 (for US claimants), state AG, and (above a dollar threshold) civil-discovery overlay.

    The Professor’s recovery note for HaveTrade:

    1. Read the HaveTrade submission, written go/no-go returned.
    2. Map the HaveTrade wallet trail, every hop captured with chain of custody hashes.
    3. Name the HaveTrade off-ramp, endpoint counterparty identified.
    4. Build and file the HaveTrade recovery packet, to IC3, state AG, off-ramp compliance, civil-discovery overlay.
    5. Stay on the HaveTrade file, until written next steps exist.

    What we read in a HaveTrade casefile:

    • Deposit-side chains in HaveTrade casefiles, typically the major chains (BTC, ETH) and the high-throughput stablecoin chains (Tron USDT, BSC USDT), with bridge crossings noted.
    • Off-ramps named in HaveTrade packets, centralised exchanges that accept regulator-grade compliance filings.
    • Filing options on HaveTrade, IC3 (US), state AG, off-ramp compliance desk, civil-discovery KYC where the dollar value warrants it.

    Recovery scammers do these things; the Professor never does:

    • On the HaveTrade casefile, never request a seed phrase. Ever.
    • On the HaveTrade casefile, never request remote-access logins to a wallet or exchange.
    • On the HaveTrade casefile, never demand an upfront cash retainer to scope the matter.
    • On the HaveTrade casefile, never promise a guaranteed recovery. The trail does not promise one.
    • On the HaveTrade casefile, never call the claimant unsolicited. Written-only.

    Open a free consultation

    Submit your wallet for a forensic reading, /submit-a-case/.

    Open a Free Case Consultation   Submit Wallet for Trace

  • Reading the Chain: Natthaphong

    FROM THE CASEFILE, WORLD MARKETS

    When deposits to Natthaphong via http: go quiet, the on-chain record stays loud. The Professor’s reading begins where the platform’s silence does, with the wallet that received the funds and the path it took afterward.

    On-chain reading, wallet flow for Natthaphong:

    • Claimant-to-platform deposit transactions on the deposit chain used by Natthaphong.
    • Operator-controlled forwarding wallets where deposits consolidate ahead of laundering or off-ramping.
    • Cross-chain bridge events to chains with deeper exchange liquidity.
    • Privacy-service interactions, where present in the trail.
    • Off-ramp wallet, the named centralised-exchange endpoint.

    Off-ramp reading, exchange counterparty for Natthaphong:

    • Natthaphong casefiles end at a centralised exchange, Bybit, KuCoin, OKX, or Gate.io are common; the casefile names the actual deposit address that received the consolidated funds.
    • Off-ramp wallet for Natthaphong is matched against compliance and chain-analytics datasets the Professor reads daily.
    • Compliance leverage applied to the named off-ramp for Natthaphong, the packet is delivered in compliance-desk format.
    • Non-cooperative off-ramps trigger IC3 + state-AG + civil-discovery escalation on the Natthaphong casefile.

    Recovery pathway, how this casefile moves toward filing:

    1. Read the Natthaphong submission, written go/no-go returned.
    2. Map the Natthaphong wallet trail, every hop captured with chain of custody hashes.
    3. Name the Natthaphong off-ramp, endpoint counterparty identified.
    4. Build and file the Natthaphong recovery packet, to IC3, state AG, off-ramp compliance, civil-discovery overlay.
    5. Stay on the Natthaphong file, until written next steps exist.

    What the on-chain reading covers:

    • Chains tracked on Natthaphong, Bitcoin and Ethereum at the deposit side; Tron USDT-TRC20 and BSC at the consolidation side; bridges crossed where the operator chases liquidity.
    • Off-ramps tracked on Natthaphong, named exchange counterparties with public compliance contacts.
    • Filings supported on Natthaphong, IC3, state AG, off-ramp compliance, civil discovery, selected by the dollar value and the off-ramp’s responsiveness.

    Recovery scammers do these things; the Professor never does:

    • On the Natthaphong casefile, never request a seed phrase. Ever.
    • On the Natthaphong casefile, never request remote-access logins to a wallet or exchange.
    • On the Natthaphong casefile, never demand an upfront cash retainer to scope the matter.
    • On the Natthaphong casefile, never promise a guaranteed recovery. The trail does not promise one.
    • On the Natthaphong casefile, never call the claimant unsolicited. Written-only.

    Open a free consultation

    Book a reading of your wallet, file at /submit-a-case/.

    Open a Free Case Consultation   Submit Wallet for Trace

    Why this platform is on our casefile

    Natthaphong has been flagged as a fake broker/platform by IOSCO I-SCAN (Thailand – Securities and Exchange Commission). reported 2026-01-23. Jurisdiction: Thailand. It appears on an official regulator or fraud-warning list, which is a strong indicator of a scam operation. Treat any contact from this entity with caution. Reference: https://www.iosco.org/i-scan/