Aldisyn Investments Fraud: A Legal Analysis of a Digital Scheme Linked to Terrax, Club Nueva Piedra, and RMAM Vip

The rise of online investment platforms has created a climate of technological trust that, at times, becomes the perfect gateway for highly sophisticated financial fraud networks. Among these, the Aldisyn Investments fraud, and its branching into Terrax, Club Nueva Piedra, and RMAM Vip, is an illustrative example of how a well-designed digital structure can trap investors of various profiles, from inexperienced individuals to users with prior market experience.

This report reconstructs, from a legal, technical, and expert perspective, the operation of this digital scheme. Through case analysis, it explains how specialized investigation allowed for the articulation of a criminal complaint for fraud, misappropriation, money laundering, document forgery, misleading advertising, and criminal organization, supported by both banking and blockchain evidence.

What follows is the story of a real case, narrated with an informative and professional approach, for those seeking to understand how these networks operate, what patterns are repeated in this type of investment fraud, and what legal and technical tools exist for defense.

The first contact: training, academies, and the illusion of professionalism

Most victims of this scheme do not come across Aldisyn Investments by chance. The starting point is usually in environments presented as financial training academies, where supposed “professors” and analysts offer content and educational support that, apparently, have little to do with a scam:

• Stock market investment and risk management courses.
• Advanced trading and intraday operations workshops.
• Personalized sessions with “experts” who review the student’s portfolio.
• Access to alleged artificial intelligence systems for market operations.

In this specific case, the affected party was integrated into a digital community where several trainers presented a structured narrative around discipline, technical analysis, and the search for opportunities. Charts, screenshots of winning trades, and results were shared, which, at first glance, conveyed rigor and method.

According to the reviewed documentation, the real objective was not so much to train as to generate trust. An initially academic and “neutral” trust that, once consolidated, would allow the victim to follow without hesitation the instructions that would later grant access to the investment platforms linked to the scheme.

It is in this context that the door opens to the next link: entry into Aldisyn Investments.

Aldisyn Investments: the beginning of the funnel

Aldisyn Investments presented itself as an advanced investment platform, with an impeccable digital storefront: careful design, dynamic graphics, user panels with detailed metrics, alleged real-time market analysis, and tools like AURIX AI 4.0, in addition to its own token, AXIQ, which provided an additional appearance of technological innovation.

From the outset, the platform displayed a set of elements designed to reinforce the system’s credibility:

• Very high returns, but presented as plausible based on the platform’s “technology.”
• A discourse of “moderate and controlled” risk, supposedly backed by artificial intelligence algorithms.
• An interlocutor or account manager offering constant support and immediate resolution of doubts.
• Allegedly automated operations, with a significant portion of decisions attributed to the AI system.

Initial deposits were deliberately modest. The platform sought for the victim to verify “without risk” how the balance began to grow in a few days. According to the data examined, these gains were purely fictitious: the balance shown on screen did not correspond to real operations in regulated markets, but to a simulated environment controlled by the platform’s own operators.

That was the objective of the first phase of the funnel: for the investor to perceive that the strategy worked, and that, once convinced, they would be willing to advance to the “next level” of investment.

The escalation: Terrax, Club Nueva Piedra, and RMAM Vip

Once trust in Aldisyn Investments was consolidated, the scheme introduced the idea that there were more advanced strategies and opportunities reserved for profiles “with greater potential” or for clients who had demonstrated discipline and commitment.

At that point, other interconnected platforms were introduced:

• Terrax Vip, as a supposed evolution for higher-level investors.
• Club Nueva Piedra, described as an exclusive and select investment community.
• RMAM Vip and RMAM Pro, presented as platforms with access to quasi-institutional operations.

The narrative always followed the same script: each transition represented a step towards greater “professionalization” of operations, with new promises of risk control, better tools, and specialized internal teams. The investor was redirected through personalized links and, at all times, accompanied by the same advisors who had previously gained their trust.

However, the technical and legal analysis subsequently carried out by the teams at IN DIEM Abogados and Cryptoveritas 360 revealed a very different reality: all these platforms were interconnected, shared a digital structure, servers, related domains, and the same flow of fund acquisition and diversion. They were not autonomous projects, but pieces of the same digital mechanism.

The movement of money: deposits, cryptocurrencies, and diversions

Initial deposits and fictitious balances

In an initial stage, the affected party made moderate deposits following the recommendations of their interlocutors. In return, the platform displayed alleged recurring profits on screen, reinforcing the idea that the operation was working and that it was reasonable to increase exposure.

According to the analyzed documentation, these positive balances did not correspond to real operations, but to an internal system designed to simulate profits, without the visualized amounts being backed by assets actually deposited or invested in regulated markets.

Bank transfers to third parties

The operation became more complex when the alleged advisors began to request transfers to third-party bank accounts, both of individuals and shell companies located in different European jurisdictions. These transfers were made, according to the instructions received, to take advantage of new opportunities or unlock certain investment “levels.”

Within the framework of the investigation, more than thirty bank transfers were identified, made under the instructions of the alleged trading team, directed to account holders who had no formal connection to the investment platform presented to the client.

Conversion to cryptocurrencies and diversion to wallets controlled by the network

The next step involved introducing the purchase of cryptocurrencies. The victim was instructed to acquire digital assets (primarily USDC) through regulated exchanges like Coinbase and then send those cryptocurrencies to addresses provided under the guise of wallets directly linked to the platform.

In total, 19 USDC withdrawals were documented from Coinbase to wallets that, according to expert analysis, were not under the victim’s control, but under the control of the investigated network. From there, the funds began to move through exchanges such as:

• Kraken
• Binance
• Coinbase
• Bybit
• Bitget

These successive movements, characterized by the fragmentation of amounts, sending to multiple addresses, and jumping between different exchanges, correspond to common patterns in concealment and money laundering strategies, making traceability and direct recovery of funds difficult.

An extensive human and corporate network

The investigation revealed that the scheme was not composed of a small group of individuals, but an organized structure with clearly differentiated roles, common in professional investment frauds:

• Recruiters and “trainers” who introduce the victim to the ecosystem.
• Alleged professors and analysts who provide the technical narrative and generate authority.
• Account managers and “customer service” personnel who accompany every decision.
• Wallet operators and collection managers, responsible for the financial and crypto aspects.

Likewise, more than ten interconnected companies were identified, some active and others already dissolved, distributed across various European jurisdictions. For procedural reasons, specific names are not detailed, but the reconstruction of this corporate network has been essential to establish evidence of organization, hierarchy, coordination, profit motive, and repeated criminal activity.

The digital structure: domains, servers, and total interconnection

The platforms involved were not isolated websites with independent projects, but pieces of the same digital mechanism. Among the domains analyzed within the framework of the investigation are, among others:

• aldisyn.com
• terraxvip.com
• nuevoorigen.com
• h5.rmampro.com
• h5.rmengine.pro
• rockyrmam.com

The technical investigation by Cryptoveritas 360 revealed, among other aspects, the following common elements:

• Shared hosting or direct relationships between services.
• DNS configurations with similar patterns.
• Coincidences and repetitions in WHOIS data.
• Reuse of IP ranges across different websites.
• Almost identical web architecture and cloned user panels.
• Constant rebranding, with domain closures and openings to prolong activity and evade complaints.

All of this, when evaluated together, points to a coherent criminal ecosystem, in which the websites function as different access points to the same internal structure, rather than as independent or incidental projects.

Fraudulent documentation and psychological pressure

As the relationship progressed, the affected party received increasingly exhaustive verification requests: submission of personal documentation, proof of income, transfer receipts, and other documents, citing security, regulatory compliance, or anti-money laundering requirements.

These demands not only served to collect sensitive data but were part of a mechanism of progressive psychological pressure, which can be summarized in several phases:

1. Generating a sense of professionalism and control, reinforced by “compliance” processes.
2. Justifying new contributions under technical, fiscal, or access-to-better-investment-levels pretexts.
3. Blocking fund withdrawals by alleging supposed additional requirements or administrative incidents.
4. Demanding new payments to unlock profits or avoid irreversible losses.

The result is that the investor is left in a position of emotional and financial dependence, willing to continue making payments in the hope of recovering what has already been invested, which exacerbates the final economic damage.

The outcome: blocking, demand for new payments, and disappearance

When the affected party tried to withdraw some of the alleged profits, the platforms began to present increasing obstacles: demanding payments to release funds, alleged tax verifications, withholdings of between 20% and 40%, or warnings of penalties if new financial requirements were not met.

Finally, access was blocked, and effective communication ceased. According to experience accumulated in similar cases, this pattern is repeated in a large part of online investment frauds: first profitability is promised, then pressure is increased, and when the victim can no longer or does not want to contribute more money, the account is closed, and the platform disappears or is reconfigured under another name.

The legal response: criminal complaint

Following the specialized technical investigation into digital asset traceability and analysis of the scheme’s digital structure, a criminal complaint was filed with the competent authorities. The preliminary legal classification included the following offenses, which will be evaluated by the judicial authority:

• Aggravated fraud.
• Misappropriation.
• Money laundering.
• Document forgery.
• Misleading advertising.
• Criminal organization.

The combination of on-chain traceability, server and domain analysis, reconstruction of the corporate structure, and the victim’s statement has allowed for a solid expert report to be provided, supporting the existence of allegedly organized, professional, and transnational activity, now subject to the scrutiny of criminal jurisdiction.

Lessons from this case: warning signs

This case allows for the identification of a series of key indicators that are repeated in many investment frauds with or without cryptocurrencies:

• Unrealistic or “guaranteed” returns.
• Platforms without regulation or registration with official bodies.
• Request to send cryptocurrencies to wallets not in the investor’s name.
• Use of training and academies as a commercial lure and trust builder.
• Redirection to multiple websites and “new opportunities” in a short time.
• Demand for additional payments to withdraw alleged profits.
• Constant changes in interlocutors, phone numbers, and communication channels.

These are unequivocal signs of a potentially fraudulent investment that should trigger all alarms and prompt immediate consultation with specialized professionals.

How can IN DIEM Abogados help you?

Most affected individuals arrive at the office with a common feeling: having lost control and not knowing where to start. That is why our work is not only legal: it is also human.

At IN DIEM Abogados, together with the forensic analysis team at Cryptoveritas 360, we support victims of online investment scams and crypto fraud at every stage of the process:

• Initial assessment of the scam and case viability.
• Full traceability of movements on the blockchain.
• Identification of destination wallets and exchanges.
• Preparation of rigorous expert reports.
• Drafting and filing of the criminal complaint.
• Requests for investigative measures and international cooperation.
• Ongoing follow-up and expansion of the investigation over time.

At IN DIEM Abogados, along with our forensic analysis team from Cryptoveritas 360, we accompany victims of cryptocurrency scams through all phases of the process, from the first consultation to the full investigation and the filing of the complaint.

We assist both domestic clients and affected individuals resident in Europe, Latin America and other countries, providing a professional and technical response that remains close and accessible, in the face of fraud that is already operating on a transnational scale.

If you suspect you have been a victim of the Aldisyn Investments fraud or any other fraudulent investment platform, act as soon as possible. Time is a key factor in traceability and the possibilities of recovery.

Contact us. We are here to help you.

Cryptoveritas 360: Our Technology Partner

Expert Cryptocurrency Lawyers: Málaga, Seville, Madrid, Las Palmas de Gran Canaria, Almería, Huelva, Marbella, Estepona,…

At IN DIEM Abogados and Cryptoveritas 360 we provide our services at all our offices and locations in Spain, offering direct and personalized coverage in Madrid, Seville, Málaga, Marbella, Las Palmas de Gran Canaria, as well as continuous service through our digital channels for clients throughout the country.

Our multidisciplinary team also advises international companies—including Europe, Latin America and Asia—that wish to establish or expand in Spain under the MiCA regulatory framework, whether through obtaining the CASP license from the CNMV or the incorporation of companies and compliance structures adapted to the European market.

Thanks to a hybrid working methodology (in-person and online), we guarantee the same level of quality, confidentiality and efficiency for both local and foreign clients, supporting each project from initial planning to effective regulatory authorization.

We are at your disposal for anything you need. You can reach us via IN DIEM Lawyers Phone (+34) 916 353 892. For urgent cases, you can contact us on IN DIEM 24-Hour Emergency Lawyers Phone: (+34) 610 667 452.