Profit-Trades: How the Fraudulent Investment Network Trapping Thousands of Users in Europe Operates

When a Spanish user saw a social media advertisement in March 2024 promising secure Bitcoin investments, they never imagined they were entering a sophisticated structure of recruitment, manipulation, and fund diversion. What began as a legitimate search for financial opportunities ended among fake dashboards, invented “AML blocks,” interconnected platforms, and cryptocurrencies disappearing in seconds toward third-party addresses.

The case —which has already been reported for criminal prosecution— has been reconstructed by IN DIEM Abogados with the technical support of Cryptoveritas 360. Both teams have shed light on an international framework that, according to the evidence provided, functions as an organized network of digital scams reusing the same technical infrastructure under different commercial names.

What follows is a journalistic account of the investigation, based on expert evidence, technical data, and the direct testimony of the affected party.

The Beginning: An Innocent Ad and a Network Ready to Capture Data

The victim’s first contact with the scheme occurred in March 2024. Instagram and Facebook displayed ads promoting alleged secure investments related to Bitcoin and an automated trading system. After clicking the link, the user was redirected to a site that appeared to belong to Quantfury, a well-known platform in the sector.

But the appearance was only the first layer.

A few days later, after having ignored the initial messages, they received new communications. “We have your data from a previous process and want to offer you a preferential opportunity,” they were told. This type of language—as experts explain—seeks to create urgency and a sense of exclusivity.

The affected party agreed to “test” it with 20 or 100 euros. It was an apparently innocuous gesture. They did not know that a meticulously planned operation was beginning behind the scenes.

The Key Contact: Telegram as a Gateway

On February 7, 2025, the decisive message arrived. It came from a Telegram profile called @Assistantteamblu_bot, presented as a Profit-Trades account advisor. It was the start of what experts describe as “the most delicate stage” of recruitment: the creation of a direct bond between the victim and the alleged advisor.

From then on, messages followed with apparent professionalism: charts, technical indications, purchase recommendations, and urgency due to “market moments.” The language was designed to inspire trust, but also to avoid questions.

The structure operated with three key elements:

1. High availability of the alleged advisor
   Constant messages, even outside of working hours.
2. Technical authority
   Use of complex financial vocabulary to create information asymmetry.
3. Psychological control
   Alternating between praise (“you are understanding everything very quickly”) and pressure (“if we don’t act now, we will miss a historic opportunity”).

By the time the victim realized, they had already executed several operations.

The Rise: Purchases on Quantfury and Bitnovo, and Systematic Conversion to BTC

The commercial narrative had one purpose: for the client to make cryptocurrency purchases.

Following the instructions of the alleged “managers,” they performed multiple operations:

• BTC and USDT purchases on Quantfury,
• additional purchases on Bitnovo,
• transfers to other linked gateways.

According to the technical report, all funds ended up converted to BTC and sent to addresses not linked to the client. This is key: the victim believed they were sending money to Profit-Trades; in reality, they were transferring it to wallets controlled by the network.

In just a few days, 11 withdrawals were executed. Each followed the same pattern: direct instruction, urgency, emotional pressure, and finally, sending to an unknown wallet.

Then came the blocks.

“Your account is temporarily halted due to AML policies.”
“We need an extra deposit to unlock the operation.”
“If you do not deposit today, you will lose all profitability.”

These phrases are repeated in dozens of digital scam cases across Europe.

The investigation reveals an international network: 19 individuals and more than 25 companies

The documentary and technical layer allowed for the identification of a structure much broader than it appeared at first glance.

Identified Individuals

• 19 linked profiles (duly identified by our team) directly involved in recruitment, support, and simulation of operations.
• They operated from different countries, using VPNs, fake profiles, and virtual phone numbers.

Legal Entities

More than 25 shell companies (likewise identified by our team) spread across:

• United Kingdom
• Cyprus
• Seychelles
• Netherlands
• Spain
• And other jurisdictions considered high-risk

These companies operated as:

• administrative fronts,
• payment gateways,
• intermediary platforms,
• providers of alleged technical services,
• or apparent legal representatives.

No names are being made public at this stage out of respect for the judicial proceedings, but all information has been submitted to the Civil Guard.

Tracing the Money: 4 BTC Addresses, a Mixing Process, and a Final Destination

Cryptoveritas 360 conducted a full analysis that reconstructed the path of the money on the blockchain.

Main Findings:

1. The 11 withdrawals were sent to 4 main addresses

None belonged to the client.
All are classified as “transit” addresses.

2. Mixing and Fragmentation Processes (Layering)

The funds were dispersed into small portions:

• through microtransactions,
• cross-transfers,
• high-turnover movements.

This behavior is typical of digital money laundering schemes.

3. Detected Final Destination

Once the BTC was fragmented, it ended up in several exchanges, including:

• HTX Exchange
• Other platforms identified by investigators

HTX —like any exchange subject to European AML regulations— is obliged to cooperate with judicial requests, so the complaint specifically requests the delivery of records, KYC, and transaction histories.

The technical layer: IP addresses, phones, servers, mirror domains, and identical digital patterns

The work of Cryptoveritas 360 went beyond traceability.

The following were identified:

• phones used by recruiters,
• IPs associated with access and dashboards,
• shared servers and CDNs,
• domain registrations with similar patterns,
• replicated SSL certifications,
• mirror domains with identical design,
• cloned user dashboards,
• OSINT connections linking the platforms to each other.

All these coincidences show that the structure does not act in isolation, but as a coordinated digital organism.

The key element: a network of interconnected platforms operating under different names

The analysis demonstrates that Profit-Trades does not act alone, but within an ecosystem of websites that share infrastructure, design, and operations.

Identified Linked Platforms:

• zyno-group.com
• profit-trades.com
• ultimatetraders.com
• trading-ultimate.com
• cosmo-traders.com
• brokers-market.com
• platinum-markets.com

Common Traits Detected:

a) Technical Infrastructure

• identical dashboards,
• domains registered with repeated patterns,
• hosting on common providers,
• servers linked via DNS,
• use of similar SSL certificates.

b) Conversion Gateways

• Quantfury,
• Bitnovo,
• other European gateways,

…used to move funds and justify alleged AML policies.

c) Coordinated Recruiters

All employ:

• Telegram,
• corporate emails with the @zyno-group.com domain,
• remote control tools (AnyDesk),
• identical conversational scripts.

d) Final Destination of Money

After the transit route, the funds converge in:

• Binance
• KuCoin
• OKX

Investigators believe these platforms can provide decisive information.

The Complaint: Legal Action by IN DIEM Abogados

Once all evidence was gathered, IN DIEM Abogados filed a detailed complaint that includes:

• the traceability analysis from Cryptoveritas 360,
• the technical data obtained,
• client communications,
• conversation logs,
• withdrawal addresses,
• documentary evidence,
• preliminary identification of linked platforms.

The complaint requests specific proceedings:

• requests to exchanges for delivery of KYC information,
• analysis of access logs,
• preventive freezing of suspicious funds,
• international letters rogatory.

All of this has been carried out under strict compliance with the GDPR and Law 10/2010 on the Prevention of Money Laundering.

Conclusion: A case that reveals a complex structure and a growing challenge.

The Profit-Trades case presents all the elements of an international digital fraud scheme:

• recruitment through segmented advertisements,
• professional psychological manipulation,
• interconnected platforms operating under different identities,
• strategic use of cryptocurrencies and conversion gateways,
• dispersion of funds through advanced techniques,
• fake dashboards and invented blocks,
• coordinated recruiters in several countries.

Thanks to the joint efforts of Cryptoveritas 360 and IN DIEM Abogados, it has been possible to reconstruct the entire operation, identify key nodes, file a complaint with a solid technical basis, and activate the corresponding criminal procedure.

Most affected individuals arrive at the firm with a common feeling: that of having lost control. That is why our work is not only legal; it is also human.

At IN DIEM Abogados, together with the forensic analysis team at Cryptoveritas 360, we support victims of online investment scams and crypto fraud at every stage of the process:

• Initial assessment of the scam and case viability.
• Full traceability of movements on the blockchain.
• Identification of destination wallets and exchanges.
• Preparation of rigorous expert reports.
• Drafting and filing of the criminal complaint.
• Requests for investigative measures and international cooperation.
• Ongoing follow-up and expansion of the investigation over time.

At IN DIEM Abogados, along with our forensic analysis team from Cryptoveritas 360, we accompany victims of cryptocurrency scams through all phases of the process, from the first consultation to the full investigation and the filing of the complaint.

We assist both domestic clients and affected individuals resident in Europe, Latin America and other countries, providing a professional and technical response that remains close and accessible, in the face of fraud that is already operating on a transnational scale.

If you suspect you have been a victim of the Profit-Trades scam or any other fraudulent investment platform, act as soon as possible. Time is a key factor in traceability and the chances of recovery.

Contact us. We are here to help you.

Cryptoveritas 360: Our Technology Partner

Expert Cryptocurrency Lawyers: Málaga, Seville, Madrid, Las Palmas de Gran Canaria, Almería, Huelva, Marbella, Estepona,…

At IN DIEM Abogados and Cryptoveritas 360 we provide our services at all our offices and locations in Spain, offering direct and personalized coverage in Madrid, Seville, Málaga, Marbella, Las Palmas de Gran Canaria, as well as continuous service through our digital channels for clients throughout the country.

Our multidisciplinary team also advises international companies—including Europe, Latin America and Asia—that wish to establish or expand in Spain under the MiCA regulatory framework, whether through obtaining the CASP license from the CNMV or the incorporation of companies and compliance structures adapted to the European market.

Thanks to a hybrid working methodology (in-person and online), we guarantee the same level of quality, confidentiality and efficiency for both local and foreign clients, supporting each project from initial planning to effective regulatory authorization.

We are at your disposal for anything you need. You can reach us via IN DIEM Lawyers Phone (+34) 916 353 892. For urgent cases, you can contact us on IN DIEM 24-Hour Emergency Lawyers Phone: (+34) 610 667 452.