Recovery Doctrine: chain-of-custody · verifiable on-chain trail · regulator-ready packets verification chain: Etherscan · SlowMist · CertiK

64 claims under active investigation 108 wallet routes mapped this month Open a Free Recovery Consultation →

Tag: recovery company

Handelex — Annotated by the Professor

// FROM THE CASEFILE — HANDELEX

Handelex, operating from handelex.com, leaves a chain trail whether the platform answers email or not. The Professor reads that trail as a primary source — annotated, dated, cited.
Reading the wallets — Handelex casefile:

Deposit transaction hashes from the claimant wallet to the Handelex platform receiving address.

Forwarding wallets the platform consolidated through — typically two to four hops on the deposit chain (BTC / ETH / USDT-TRC20 / BSC / Polygon / Arbitrum / Optimism / Avalanche).

Bridge crossings between chains, where the operator moves value into a chain with deeper liquidity ahead of the off-ramp.

Mixer interactions — Tornado-Cash variants, Sinbad, and the smaller obfuscation services that operators rotate through under regulatory pressure.

Final off-ramp wallet — the centralised exchange deposit address that received the consolidated funds.
Off-ramp map — where the funds left the chain:

Off-ramp endpoint for Handelex resolves to a named centralised counterparty — the venue varies casefile to casefile, but the resolution always names a real exchange wallet.

Handelex’s off-ramp address is matched against the Professor’s compliance feed and against external chain-analytics datasets.

The compliance packet for Handelex is structured the way an off-ramp compliance reviewer expects to receive evidence — header, hashes, narrative, ask.

If the Handelex off-ramp counterparty does not respond inside the published window, escalation routes through IC3, state AG, and civil discovery.
Filing pathway — the next step after the off-ramp is identified:

Submission triage — Handelex casefile reviewed against the no-go list, written reply within one business day.

Pathway trace — Handelex deposit and forwarding wallets captured.

Endpoint identification — Handelex off-ramp wallet named.

Filing — Handelex packet delivered to IC3, state AG, off-ramp compliance, civil discovery as needed.

Ongoing follow — Handelex stays on file until a documented next step is reached.
What we read in a Handelex casefile:

Chains in scope for Handelex — the chains that handle the volume of casefile activity in this segment (BTC, ETH, Tron, BSC, plus L2s).

Off-ramps in scope for Handelex — named centralised exchanges with compliance leverage.

Filings supported on Handelex — IC3, state AG, off-ramp desk, civil discovery as applicable.
Lines we never cross — by published policy:

Boundary on Handelex — seed phrases are off-limits.

Boundary on Handelex — remote logins are off-limits.

Boundary on Handelex — upfront cash retainers are off-limits.

Boundary on Handelex — guaranteed-recovery promises are off-limits.

Boundary on Handelex — unsolicited outbound contact is off-limits.
Open a free consultation
Open a free first consultation — /contact-us/ — written response within one business day.
Open a Free Case Consultation Submit Wallet for Trace
June 3, 2026
Casefile DML Markets — The Professor’s Note

// FROM THE CASEFILE — DML MARKETS

When deposits to DML Markets via dml-markets.com go quiet, the on-chain record stays loud. The Professor’s reading begins where the platform’s silence does — with the wallet that received the funds and the path it took afterward.
The annotation reads — wallet trace:

Claimant deposit hashes — provided in the case submission and verified against the public ledger for DML Markets.

Forwarding wallets on the deposit chain — each hop documented with the forwarding tx hash and the consolidating wallet.

Bridge events into chains where the operator can off-ramp at scale.

Mixer or privacy-service interactions, where present, listed with the contract address and the deposit/withdraw side.

Off-ramp endpoint — the centralised exchange deposit address holding the compliance lever.
Off-ramp summary — DML Markets casefile:

DML Markets casefiles end at a centralised exchange — Bybit, KuCoin, OKX, or Gate.io are common; the casefile names the actual deposit address that received the consolidated funds.

Off-ramp wallet for DML Markets is matched against compliance and chain-analytics datasets the Professor reads daily.

Compliance leverage applied to the named off-ramp for DML Markets — the packet is delivered in compliance-desk format.

Non-cooperative off-ramps trigger IC3 + state-AG + civil-discovery escalation on the DML Markets casefile.
Recovery pathway — how this casefile moves toward filing:

Casefile triage on DML Markets — the submission is read; a written assessment is delivered.

Forensic trace on DML Markets — every hop in the deposit pathway is captured and hashed.

Off-ramp identification — the DML Markets endpoint is named.

Recovery filing on DML Markets — packet delivered to IC3, state AG, off-ramp compliance, and civil discovery as applicable.

Continuing review of DML Markets — the Professor follows the casefile until next-step documentation exists.
What we read in a DML Markets casefile:

Chains in scope for DML Markets — the chains that handle the volume of casefile activity in this segment (BTC, ETH, Tron, BSC, plus L2s).

Off-ramps in scope for DML Markets — named centralised exchanges with compliance leverage.

Filings supported on DML Markets — IC3, state AG, off-ramp desk, civil discovery as applicable.
What the Professor will never do — by policy:

Recovery scammers do these things on DML Markets; the Professor never does — request seed phrases.

Recovery scammers do these things on DML Markets; the Professor never does — request remote logins.

Recovery scammers do these things on DML Markets; the Professor never does — demand upfront cash.

Recovery scammers do these things on DML Markets; the Professor never does — guarantee a recovery.

Recovery scammers do these things on DML Markets; the Professor never does — call you unsolicited.
Open a free consultation
The Professor reads claims at no charge to begin — open a consultation at /contact-us/.
Open a Free Case Consultation Submit Wallet for Trace
June 3, 2026
Reading the Chain: Kyber Network

// FROM THE CASEFILE — WORLD MARKETS

When deposits to Kyber Network via this platform go quiet, the on-chain record stays loud. The Professor’s reading begins where the platform’s silence does — with the wallet that received the funds and the path it took afterward.
On-chain reading — wallet flow for Kyber Network:

Claimant-to-platform deposit transactions on the deposit chain used by Kyber Network.

Operator-controlled forwarding wallets where deposits consolidate ahead of laundering or off-ramping.

Cross-chain bridge events to chains with deeper exchange liquidity.

Privacy-service interactions, where present in the trail.

Off-ramp wallet — the named centralised-exchange endpoint.
Off-ramp reading — exchange counterparty for Kyber Network:

Kyber Network casefiles end at a centralised exchange — Bybit, KuCoin, OKX, or Gate.io are common; the casefile names the actual deposit address that received the consolidated funds.

Off-ramp wallet for Kyber Network is matched against compliance and chain-analytics datasets the Professor reads daily.

Compliance leverage applied to the named off-ramp for Kyber Network — the packet is delivered in compliance-desk format.

Non-cooperative off-ramps trigger IC3 + state-AG + civil-discovery escalation on the Kyber Network casefile.
Recovery pathway — how this casefile moves toward filing:

Read the Kyber Network submission — written go/no-go returned.

Map the Kyber Network wallet trail — every hop captured with chain-of-custody hashes.

Name the Kyber Network off-ramp — endpoint counterparty identified.

Build and file the Kyber Network recovery packet — to IC3, state AG, off-ramp compliance, civil-discovery overlay.

Stay on the Kyber Network file — until written next steps exist.
What the on-chain reading covers:

Chains tracked on Kyber Network — Bitcoin and Ethereum at the deposit side; Tron USDT-TRC20 and BSC at the consolidation side; bridges crossed where the operator chases liquidity.

Off-ramps tracked on Kyber Network — named exchange counterparties with public compliance contacts.

Filings supported on Kyber Network — IC3, state AG, off-ramp compliance, civil discovery — selected by the dollar value and the off-ramp’s responsiveness.
Recovery scammers do these things; the Professor never does:

On the Kyber Network casefile — never request a seed phrase. Ever.

On the Kyber Network casefile — never request remote-access logins to a wallet or exchange.

On the Kyber Network casefile — never demand an upfront cash retainer to scope the matter.

On the Kyber Network casefile — never promise a guaranteed recovery. The trail does not promise one.

On the Kyber Network casefile — never call the claimant unsolicited. Written-only.
Open a free consultation
Book a reading of your wallet — file at /submit-a-case/.
Open a Free Case Consultation Submit Wallet for Trace

Why this platform is on our casefile

Kyber Network has been flagged as a fake broker/platform by IOSCO I-SCAN (Singapore – Monetary Authority of Singapore). reported 2026-03-30. Jurisdiction: Singapore. It appears on an official regulator or fraud-warning list, which is a strong indicator of a scam operation. Treat any contact from this entity with caution. Reference: https://www.iosco.org/i-scan/
June 3, 2026
Office Hours on BARRON Crypto

// FROM THE CASEFILE — BTCUSDT INVESTMENT

When deposits to BARRON Crypto via https: go quiet, the on-chain record stays loud. The Professor’s reading begins where the platform’s silence does — with the wallet that received the funds and the path it took afterward.
Wallet trace — what the Professor maps:

Deposit transaction hashes from the claimant wallet to the BARRON Crypto platform receiving address.

Forwarding wallets the platform consolidated through — typically two to four hops on the deposit chain (BTC / ETH / USDT-TRC20 / BSC / Polygon / Arbitrum / Optimism / Avalanche).

Bridge crossings between chains, where the operator moves value into a chain with deeper liquidity ahead of the off-ramp.

Mixer interactions — Tornado-Cash variants, Sinbad, and the smaller obfuscation services that operators rotate through under regulatory pressure.

Final off-ramp wallet — the centralised exchange deposit address that received the consolidated funds.
The Professor’s off-ramp note:

BARRON Crypto’s off-ramp endpoint, in this casefile, is the centralised exchange that holds compliance leverage — typically named in the packet alongside the deposit address.

Chain-analytics datasets cross-reference the BARRON Crypto off-ramp wallet against historical laundering throughput.

The BARRON Crypto packet is delivered to the off-ramp compliance desk in a format the desk’s reviewers act on.

Escalation pathways for BARRON Crypto, where needed: IC3, the relevant state AG, and a civil-discovery overlay for KYC on the off-ramp wallet.
How a BARRON Crypto casefile becomes a regulator-ready filing:

Casefile triage on BARRON Crypto — the submission is read; a written assessment is delivered.

Forensic trace on BARRON Crypto — every hop in the deposit pathway is captured and hashed.

Off-ramp identification — the BARRON Crypto endpoint is named.

Recovery filing on BARRON Crypto — packet delivered to IC3, state AG, off-ramp compliance, and civil discovery as applicable.

Continuing review of BARRON Crypto — the Professor follows the casefile until next-step documentation exists.
Reading-list — chains and exchanges in scope:

Chains in scope for BARRON Crypto — the chains that handle the volume of casefile activity in this segment (BTC, ETH, Tron, BSC, plus L2s).

Off-ramps in scope for BARRON Crypto — named centralised exchanges with compliance leverage.

Filings supported on BARRON Crypto — IC3, state AG, off-ramp desk, civil discovery as applicable.
What the Professor will never do — by policy:

What the Professor will not do on BARRON Crypto — ask for a seed phrase.

What the Professor will not do on BARRON Crypto — request remote-access logins.

What the Professor will not do on BARRON Crypto — demand cash up front.

What the Professor will not do on BARRON Crypto — promise a guarantee.

What the Professor will not do on BARRON Crypto — call you out of the blue.
Open a free consultation
Open a free first consultation — /contact-us/ — written response within one business day.
Open a Free Case Consultation Submit Wallet for Trace

Why this platform is on our casefile

BARRON Crypto has been flagged as a fake broker/platform by IOSCO I-SCAN (United Kingdom – Financial Conduct Authority). reported 2025-08-22. Jurisdiction: United Kingdom. It appears on an official regulator or fraud-warning list, which is a strong indicator of a scam operation. Treat any contact from this entity with caution. Reference: https://www.iosco.org/i-scan/
June 3, 2026
Casefile Immediate Evista 6.0 — The Professor’s Note

// FROM THE CASEFILE — BERKAT FD SDN BHD

The Professor opens the file on Immediate Evista 6.0 the same way every casefile is opened — by treating the wallet history as text and the off-ramp endpoint as the citation a regulator can verify.
From the marginalia — the deposit pathway:

Claimant-to-platform deposit transactions on the deposit chain used by Immediate Evista 6.0.

Operator-controlled forwarding wallets where deposits consolidate ahead of laundering or off-ramping.

Cross-chain bridge events to chains with deeper exchange liquidity.

Privacy-service interactions, where present in the trail.

Off-ramp wallet — the named centralised-exchange endpoint.
From the lectern — off-ramp identification:

Immediate Evista 6.0 off-ramps consistently to centralised exchanges — Coinbase, Kraken, and Gemini appear less often than the offshore venues; the casefile names the actual endpoint.

The Immediate Evista 6.0 off-ramp address is matched to known compliance feeds — the Professor’s standing dataset plus chain-analytics references.

Compliance leverage is applied at the named counterparty for Immediate Evista 6.0 — the packet meets the off-ramp’s published compliance standard.

When the Immediate Evista 6.0 off-ramp does not respond, escalation runs through IC3 (for US claimants), state AG, and (above a dollar threshold) civil-discovery overlay.
How a Immediate Evista 6.0 casefile becomes a regulator-ready filing:

First read on Immediate Evista 6.0 — incoming submission is reviewed against the no-go list and a written go/no-go is returned in writing.

Wallet trace on Immediate Evista 6.0 — deposit-to-off-ramp pathway is mapped across chains with verifiable hashes.

Counterparty identification — the off-ramp endpoint for Immediate Evista 6.0 is named to a centralised exchange wallet.

Packet filing on Immediate Evista 6.0 — IC3, state AG, off-ramp compliance desk; civil discovery if dollar value justifies it.

Casefile follow-through — the Professor stays with Immediate Evista 6.0 until a documented outcome or escalation step is on file.
Reading-list — chains and exchanges in scope:

Deposit-side chains in Immediate Evista 6.0 casefiles — typically the major chains (BTC, ETH) and the high-throughput stablecoin chains (Tron USDT, BSC USDT) — with bridge crossings noted.

Off-ramps named in Immediate Evista 6.0 packets — centralised exchanges that accept regulator-grade compliance filings.

Filing options on Immediate Evista 6.0 — IC3 (US), state AG, off-ramp compliance desk, civil-discovery KYC where the dollar value warrants it.
What is never asked of a claimant:

On the Immediate Evista 6.0 casefile — never request a seed phrase. Ever.

On the Immediate Evista 6.0 casefile — never request remote-access logins to a wallet or exchange.

On the Immediate Evista 6.0 casefile — never demand an upfront cash retainer to scope the matter.

On the Immediate Evista 6.0 casefile — never promise a guaranteed recovery. The trail does not promise one.

On the Immediate Evista 6.0 casefile — never call the claimant unsolicited. Written-only.
Open a free consultation
Open a free first consultation — /contact-us/ — written response within one business day.
Open a Free Case Consultation Submit Wallet for Trace

Why this platform is on our casefile

Immediate Evista 6.0 has been flagged as a fake broker/platform by IOSCO I-SCAN (Australia – Australian Securities and Investments Commission). reported 2024-03-14. Jurisdiction: Australia. It appears on an official regulator or fraud-warning list, which is a strong indicator of a scam operation. Treat any contact from this entity with caution. Reference: https://www.iosco.org/i-scan/
June 3, 2026
Office Hours on OR

// FROM THE CASEFILE — BTCUSDT INVESTMENT

When deposits to OR via https: go quiet, the on-chain record stays loud. The Professor’s reading begins where the platform’s silence does — with the wallet that received the funds and the path it took afterward.
Wallet trace — what the Professor maps:

Deposit transaction hashes from the claimant wallet to the OR platform receiving address.

Forwarding wallets the platform consolidated through — typically two to four hops on the deposit chain (BTC / ETH / USDT-TRC20 / BSC / Polygon / Arbitrum / Optimism / Avalanche).

Bridge crossings between chains, where the operator moves value into a chain with deeper liquidity ahead of the off-ramp.

Mixer interactions — Tornado-Cash variants, Sinbad, and the smaller obfuscation services that operators rotate through under regulatory pressure.

Final off-ramp wallet — the centralised exchange deposit address that received the consolidated funds.
The Professor’s off-ramp note:

OR’s off-ramp endpoint, in this casefile, is the centralised exchange that holds compliance leverage — typically named in the packet alongside the deposit address.

Chain-analytics datasets cross-reference the OR off-ramp wallet against historical laundering throughput.

The OR packet is delivered to the off-ramp compliance desk in a format the desk’s reviewers act on.

Escalation pathways for OR, where needed: IC3, the relevant state AG, and a civil-discovery overlay for KYC on the off-ramp wallet.
How a OR casefile becomes a regulator-ready filing:

Casefile triage on OR — the submission is read; a written assessment is delivered.

Forensic trace on OR — every hop in the deposit pathway is captured and hashed.

Off-ramp identification — the OR endpoint is named.

Recovery filing on OR — packet delivered to IC3, state AG, off-ramp compliance, and civil discovery as applicable.

Continuing review of OR — the Professor follows the casefile until next-step documentation exists.
Reading-list — chains and exchanges in scope:

Chains in scope for OR — the chains that handle the volume of casefile activity in this segment (BTC, ETH, Tron, BSC, plus L2s).

Off-ramps in scope for OR — named centralised exchanges with compliance leverage.

Filings supported on OR — IC3, state AG, off-ramp desk, civil discovery as applicable.
What the Professor will never do — by policy:

What the Professor will not do on OR — ask for a seed phrase.

What the Professor will not do on OR — request remote-access logins.

What the Professor will not do on OR — demand cash up front.

What the Professor will not do on OR — promise a guarantee.

What the Professor will not do on OR — call you out of the blue.
Open a free consultation
Open a free first consultation — /contact-us/ — written response within one business day.
Open a Free Case Consultation Submit Wallet for Trace

Why this platform is on our casefile

OR has been flagged as a fake broker/platform by IOSCO I-SCAN (Thailand – Securities and Exchange Commission). reported 2025-12-02. Jurisdiction: Thailand. It appears on an official regulator or fraud-warning list, which is a strong indicator of a scam operation. Treat any contact from this entity with caution. Reference: https://www.iosco.org/i-scan/
June 3, 2026
Reading the Chain: USANex

// FROM THE CASEFILE — WORLD MARKETS

When deposits to USANex via usanex.com go quiet, the on-chain record stays loud. The Professor’s reading begins where the platform’s silence does — with the wallet that received the funds and the path it took afterward.
On-chain reading — wallet flow for USANex:

Claimant-to-platform deposit transactions on the deposit chain used by USANex.

Operator-controlled forwarding wallets where deposits consolidate ahead of laundering or off-ramping.

Cross-chain bridge events to chains with deeper exchange liquidity.

Privacy-service interactions, where present in the trail.

Off-ramp wallet — the named centralised-exchange endpoint.
Off-ramp reading — exchange counterparty for USANex:

USANex casefiles end at a centralised exchange — Bybit, KuCoin, OKX, or Gate.io are common; the casefile names the actual deposit address that received the consolidated funds.

Off-ramp wallet for USANex is matched against compliance and chain-analytics datasets the Professor reads daily.

Compliance leverage applied to the named off-ramp for USANex — the packet is delivered in compliance-desk format.

Non-cooperative off-ramps trigger IC3 + state-AG + civil-discovery escalation on the USANex casefile.
Recovery pathway — how this casefile moves toward filing:

Read the USANex submission — written go/no-go returned.

Map the USANex wallet trail — every hop captured with chain-of-custody hashes.

Name the USANex off-ramp — endpoint counterparty identified.

Build and file the USANex recovery packet — to IC3, state AG, off-ramp compliance, civil-discovery overlay.

Stay on the USANex file — until written next steps exist.
What the on-chain reading covers:

Chains tracked on USANex — Bitcoin and Ethereum at the deposit side; Tron USDT-TRC20 and BSC at the consolidation side; bridges crossed where the operator chases liquidity.

Off-ramps tracked on USANex — named exchange counterparties with public compliance contacts.

Filings supported on USANex — IC3, state AG, off-ramp compliance, civil discovery — selected by the dollar value and the off-ramp’s responsiveness.
Recovery scammers do these things; the Professor never does:

On the USANex casefile — never request a seed phrase. Ever.

On the USANex casefile — never request remote-access logins to a wallet or exchange.

On the USANex casefile — never demand an upfront cash retainer to scope the matter.

On the USANex casefile — never promise a guaranteed recovery. The trail does not promise one.

On the USANex casefile — never call the claimant unsolicited. Written-only.
Open a free consultation
Book a reading of your wallet — file at /submit-a-case/.
Open a Free Case Consultation Submit Wallet for Trace

Why this platform is on our casefile

USANex has been flagged as a fake broker/platform by IOSCO I-SCAN (New Zealand – Financial Markets Authority). reported 2025-09-15. Jurisdiction: New Zealand. It appears on an official regulator or fraud-warning list, which is a strong indicator of a scam operation. Treat any contact from this entity with caution. Reference: https://www.iosco.org/i-scan/
June 3, 2026
Reading the Chain: Afxgroups

// FROM THE CASEFILE — WORLD MARKETS

When deposits to Afxgroups via afxgroups.net go quiet, the on-chain record stays loud. The Professor’s reading begins where the platform’s silence does — with the wallet that received the funds and the path it took afterward.
On-chain reading — wallet flow for Afxgroups:

Claimant-to-platform deposit transactions on the deposit chain used by Afxgroups.

Operator-controlled forwarding wallets where deposits consolidate ahead of laundering or off-ramping.

Cross-chain bridge events to chains with deeper exchange liquidity.

Privacy-service interactions, where present in the trail.

Off-ramp wallet — the named centralised-exchange endpoint.
Off-ramp reading — exchange counterparty for Afxgroups:

Afxgroups casefiles end at a centralised exchange — Bybit, KuCoin, OKX, or Gate.io are common; the casefile names the actual deposit address that received the consolidated funds.

Off-ramp wallet for Afxgroups is matched against compliance and chain-analytics datasets the Professor reads daily.

Compliance leverage applied to the named off-ramp for Afxgroups — the packet is delivered in compliance-desk format.

Non-cooperative off-ramps trigger IC3 + state-AG + civil-discovery escalation on the Afxgroups casefile.
Recovery pathway — how this casefile moves toward filing:

Read the Afxgroups submission — written go/no-go returned.

Map the Afxgroups wallet trail — every hop captured with chain-of-custody hashes.

Name the Afxgroups off-ramp — endpoint counterparty identified.

Build and file the Afxgroups recovery packet — to IC3, state AG, off-ramp compliance, civil-discovery overlay.

Stay on the Afxgroups file — until written next steps exist.
What the on-chain reading covers:

Chains tracked on Afxgroups — Bitcoin and Ethereum at the deposit side; Tron USDT-TRC20 and BSC at the consolidation side; bridges crossed where the operator chases liquidity.

Off-ramps tracked on Afxgroups — named exchange counterparties with public compliance contacts.

Filings supported on Afxgroups — IC3, state AG, off-ramp compliance, civil discovery — selected by the dollar value and the off-ramp’s responsiveness.
Recovery scammers do these things; the Professor never does:

On the Afxgroups casefile — never request a seed phrase. Ever.

On the Afxgroups casefile — never request remote-access logins to a wallet or exchange.

On the Afxgroups casefile — never demand an upfront cash retainer to scope the matter.

On the Afxgroups casefile — never promise a guaranteed recovery. The trail does not promise one.

On the Afxgroups casefile — never call the claimant unsolicited. Written-only.
Open a free consultation
Book a reading of your wallet — file at /submit-a-case/.
Open a Free Case Consultation Submit Wallet for Trace

Why this platform is on our casefile

Afxgroups has been flagged as a fake broker/platform by IOSCO I-SCAN (United Kingdom – Financial Conduct Authority). reported 2025-07-15. Jurisdiction: United Kingdom. It appears on an official regulator or fraud-warning list, which is a strong indicator of a scam operation. Treat any contact from this entity with caution. Reference: https://www.iosco.org/i-scan/
June 3, 2026
Office Hours on Thomas Castle Management

// FROM THE CASEFILE — BTCUSDT INVESTMENT

When deposits to Thomas Castle Management via this platform go quiet, the on-chain record stays loud. The Professor’s reading begins where the platform’s silence does — with the wallet that received the funds and the path it took afterward.
Wallet trace — what the Professor maps:

Deposit transaction hashes from the claimant wallet to the Thomas Castle Management platform receiving address.

Forwarding wallets the platform consolidated through — typically two to four hops on the deposit chain (BTC / ETH / USDT-TRC20 / BSC / Polygon / Arbitrum / Optimism / Avalanche).

Bridge crossings between chains, where the operator moves value into a chain with deeper liquidity ahead of the off-ramp.

Mixer interactions — Tornado-Cash variants, Sinbad, and the smaller obfuscation services that operators rotate through under regulatory pressure.

Final off-ramp wallet — the centralised exchange deposit address that received the consolidated funds.
The Professor’s off-ramp note:

Thomas Castle Management’s off-ramp endpoint, in this casefile, is the centralised exchange that holds compliance leverage — typically named in the packet alongside the deposit address.

Chain-analytics datasets cross-reference the Thomas Castle Management off-ramp wallet against historical laundering throughput.

The Thomas Castle Management packet is delivered to the off-ramp compliance desk in a format the desk’s reviewers act on.

Escalation pathways for Thomas Castle Management, where needed: IC3, the relevant state AG, and a civil-discovery overlay for KYC on the off-ramp wallet.
How a Thomas Castle Management casefile becomes a regulator-ready filing:

Casefile triage on Thomas Castle Management — the submission is read; a written assessment is delivered.

Forensic trace on Thomas Castle Management — every hop in the deposit pathway is captured and hashed.

Off-ramp identification — the Thomas Castle Management endpoint is named.

Recovery filing on Thomas Castle Management — packet delivered to IC3, state AG, off-ramp compliance, and civil discovery as applicable.

Continuing review of Thomas Castle Management — the Professor follows the casefile until next-step documentation exists.
Reading-list — chains and exchanges in scope:

Chains in scope for Thomas Castle Management — the chains that handle the volume of casefile activity in this segment (BTC, ETH, Tron, BSC, plus L2s).

Off-ramps in scope for Thomas Castle Management — named centralised exchanges with compliance leverage.

Filings supported on Thomas Castle Management — IC3, state AG, off-ramp desk, civil discovery as applicable.
What the Professor will never do — by policy:

What the Professor will not do on Thomas Castle Management — ask for a seed phrase.

What the Professor will not do on Thomas Castle Management — request remote-access logins.

What the Professor will not do on Thomas Castle Management — demand cash up front.

What the Professor will not do on Thomas Castle Management — promise a guarantee.

What the Professor will not do on Thomas Castle Management — call you out of the blue.
Open a free consultation
Open a free first consultation — /contact-us/ — written response within one business day.
Open a Free Case Consultation Submit Wallet for Trace

Why this platform is on our casefile

Thomas Castle Management has been flagged as a fake broker/platform by IOSCO I-SCAN (Singapore – Monetary Authority of Singapore). reported 2026-03-30. Jurisdiction: Singapore. It appears on an official regulator or fraud-warning list, which is a strong indicator of a scam operation. Treat any contact from this entity with caution. Reference: https://www.iosco.org/i-scan/
June 3, 2026
Reading the Chain: Phantomgap

// FROM THE CASEFILE — PHANTOMGAP

Funds you sent to Phantomgap (phantomgap.com) are still recorded on the public ledger; the question is no longer whether the money moved but where the off-ramp opened — and that is what the Professor reads.
Trace summary — funds that left phantomgap.com:

Initial deposit hashes to the Phantomgap receiving address at phantomgap.com.

Hop-by-hop forwarding wallets across the deposit chain, captured with chain-of-custody hashes.

Cross-chain bridge events that move value into the chain where liquidity supports the eventual off-ramp.

Obfuscation events through mixer contracts and privacy services.

Centralised-exchange off-ramp wallets — the named counterparty that holds compliance leverage.
The Professor’s off-ramp note:

Phantomgap off-ramps consistently to centralised exchanges — Coinbase, Kraken, and Gemini appear less often than the offshore venues; the casefile names the actual endpoint.

The Phantomgap off-ramp address is matched to known compliance feeds — the Professor’s standing dataset plus chain-analytics references.

Compliance leverage is applied at the named counterparty for Phantomgap — the packet meets the off-ramp’s published compliance standard.

When the Phantomgap off-ramp does not respond, escalation runs through IC3 (for US claimants), state AG, and (above a dollar threshold) civil-discovery overlay.
Filing pathway — the next step after the off-ramp is identified:

Submission triage — Phantomgap casefile reviewed against the no-go list, written reply within one business day.

Pathway trace — Phantomgap deposit and forwarding wallets captured.

Endpoint identification — Phantomgap off-ramp wallet named.

Filing — Phantomgap packet delivered to IC3, state AG, off-ramp compliance, civil discovery as needed.

Ongoing follow — Phantomgap stays on file until a documented next step is reached.
What we read in a Phantomgap casefile:

Chains the Professor reads for Phantomgap casefiles — BTC, ETH, Tron USDT, BNB Smart Chain, Avalanche, Polygon, Arbitrum, Optimism, plus the cross-chain bridges that link them.

Off-ramps named in Phantomgap — major centralised venues with compliance desks that accept regulator-grade packets.

Filing pathways available on Phantomgap — IC3 for US claimants, state AG offices, off-ramp compliance, and civil-discovery overlay for high-value loss.
What the Professor will never do — by policy:

Boundary on Phantomgap — seed phrases are off-limits.

Boundary on Phantomgap — remote logins are off-limits.

Boundary on Phantomgap — upfront cash retainers are off-limits.

Boundary on Phantomgap — guaranteed-recovery promises are off-limits.

Boundary on Phantomgap — unsolicited outbound contact is off-limits.
Open a free consultation
Submit your wallet for a forensic reading — /submit-a-case/.
Open a Free Case Consultation Submit Wallet for Trace
June 3, 2026