Monexa Holding Scam: Legal and Technical Analysis of a Structured Digital Fraud

IMPORTANT: This article analyzes the alleged Monexa Holding scam based on the available information and the technical, legal, and traceability evidence existing at the time of publication. Currently, any action should be evaluated based on the specific case, the current status of the websites and domains mentioned, any warnings in effect from the CNMV or other regulators, the most up-to-date traceability of funds, and the possible existence of ongoing legal proceedings or investigations.

The Monexa Holding scam is not an isolated incident or a one-off experiment in digital crime. It is the expression of a transnational fraud model, sophisticated in its social engineering and perfected through a combination of apparent professionalism, psychological pressure, corporate opacity, and financial triangulation with crypto-assets.

The case we are analyzing today, investigated by IN DIEM Abogados alongside traceability analysts from Cryptoveritas 360, allows us to understand from the inside how these structures operate. Above all, it reveals a pattern repeated in dozens of online investment scams: recruitment through supposed financial advisors, fake platforms simulating spectacular returns, and an ecosystem of shell companies and interconnected websites that channel funds toward difficult-to-trace destinations.

The Entry Point: Contact with Fake Financial Advisors

The plot begins in an apparently innocuous way. An affected party receives calls and messages from individuals presenting themselves as professionals in the financial sector, claiming to work for a solid company called Monexa Holding. They use technical language, references to conventional assets—tech stocks, precious metals—and a friendly tone that builds immediate trust.

What followed is a script repeated for hundreds of victims: sending screenshots of an “investment account” where the balance never stops growing, market evolution charts, and links to real news stories manipulated to reinforce credibility. Everything is designed to build an illusion of security and professionalism.

This first phase has a clear objective: for the investor to believe they are dealing with a regulated intermediary. In reality, they are facing an infrastructure operated by specialized criminal networks, whose sole purpose is the progressive capture of capital.

The Escalation: From a Test Bizum Transaction to a Massive Misappropriation of Funds

The second phase of the fraud is meticulously studied. The organization asks the affected party to make a small first payment as a test. The payment is made via Bizum to an individual located in Spain, acting as a “mule” or intermediary to receive funds without raising suspicion.

Once this psychological barrier is overcome, the supposed advisors guide the affected party to open an account on a regulated exchange. There, they make successive deposits in euros, which are converted into Ethereum (ETH). Once acquired, the crypto-assets are sent to external wallets controlled by the organization.

At that point, the affected party has already lost all control over their funds. However, the fraudulent platform simulates growing profits, showing returns that feed the need to continue investing so as “not to miss the opportunity.”

Psychological pressure, insistent calls, and supposed technical reports eventually push the victim into a spiral of increasingly larger contributions.

The network behind the fraud: individuals and affiliated companies

One of the most striking features of the Monexa Holding fraud is the complex corporate architecture that sustains it. The investigation has identified at least 13 individuals indirectly involved in the operation: administrators, directors, beneficial owners, or persons linked to the various companies used as a front.

Furthermore, at least 9 commercial companies connected to the core of the plot have been located. Notable among them are:

  • Subsidiaries and vehicles named “Monexa.”
  • Companies linked to the Century Financial brand.
  • Entities operated under the name Ultra-Asset.
  • An additional shell company providing corporate support functions.

All these structures serve the same purpose: to offer a solid corporate appearance, fragment responsibilities, and create layers of opacity to hinder the work of the authorities.

The Money Trail: Traceability on the Blockchain and Final Destination

One of the key pieces of the investigation has been blockchain forensic analysis. Starting from the Ethereum purchases made by the affected party, Cryptoveritas 360 has managed to trace the subsequent movements.

The analysis confirms that three main withdrawals were made from the regulated exchange to external addresses not controlled by the victim. From there, the funds were redirected through multiple hops and fragmentations, following typical digital laundering patterns.

The final destination of the crypto-assets appears concentrated in infrastructures belonging to five centralized exchanges:

  • Binance
  • MEXC
  • Bitget
  • HTX
  • ByBit

This finding is crucial: it allows lawyers to take legal action and request information on ownership, movements, and possible conversions or withdrawals associated with the diverted funds.

The Digital Engineering of Fraud: Phone Numbers, Domains, Web Hosting, and IP Addresses

The scam is not built solely on a convincing pitch. It is also supported by a sophisticated digital infrastructure designed to appear professional, legitimate, and multinational.

During the investigation, the following have been collected:

  • Spanish and British phone numbers used to contact the affected party.
  • WHOIS records for domains related to Monexa Holding, Century Financial, and Ultra-Asset.
  • IP address history linked to the hosting of the websites.
  • Hosting and provider data that allow for the inference of a common structure behind the multiple websites.

This set of technical evidence demonstrates that the different pages and brands are part of a coordinated ecosystem operated from the same control network.

An ecosystem of interconnected platforms

One of the keys to understanding the magnitude of the online investment scam represented by Monexa Holding is that it is not an isolated platform. The investigation reveals three perfectly differentiated levels of operation:

First Level: Monexa as the Main Front

Monexa Holding acts as the entry point for most victims. Its website—or websites, as several cloned versions exist—features a professional design and a convincing user panel. There is no clear information about the company, no regulatory licenses, and the legal documentation is generic. However, the appearance is sufficient to deceive individual investors without experience.

Second Level: Century Financial and Ultra-Asset as Credibility Reinforcement

Here we find the most elaborate component of the fraud: the use of satellite brands presented as legitimate investment firms. In many cases, they even have a presence in digital media or social networks, which boosts investor confidence. However, they all share the same patterns: opacity, commercial aggressiveness, and warnings from foreign regulatory bodies.

Third Level: The Destination of Funds

Once the crypto-assets are captured, they always end up in the same centralized exchanges. The convergence of funds reveals an unequivocal pattern: behind the different websites lies a single framework that directs and controls all activity.

The platforms detected in this network include:

  • cab.monexaholdingltd.com
  • cab.monexahollding.com
  • monexa-holding.com
  • century.ae
  • ultra-asset.com

All exhibit common characteristics: nearly identical interfaces, replicated content, absence of licenses, and an aggressive digital recruitment strategy.

What does this case reveal about cryptocurrency scams?

The legal and technical analysis shows that the Monexa Holding scam reproduces a pattern already known in financial cybercrime:

  • Highly refined social engineering.
  • Use of fake platforms that simulate financial operations.
  • Diversion of funds in the form of crypto-assets to hinder traceability.
  • Corporate fragmentation and multi-domain use to hide the real management of the organization.
  • Psychological pressure to keep the affected party contributing capital.

The relevance of this case is that it allows for the reconstruction of the entire process and demonstrates that, despite its complexity, it is possible to take legal action, provide technical evidence, and pursue criminal liability.


How can IN DIEM Abogados help you?

At IN DIEM Abogados, we have supported numerous people affected by cryptocurrency scams and fake investment platforms. Our approach is based on two essential pillars:

Coordinated legal and technical research

We work alongside Cryptoveritas 360, specialists in crypto-asset analysis, blockchain traceability and identification of structures used in fraud. This allows us to:

  • Reconstruct the traceability of misappropriated funds.
  • Identify addresses, exchanges and receiving platforms.
  • Prepare comprehensive expert reports accepted in court.

Experience in economic crimes and digital fraud

Our lawyers have extensive experience in:

  • Complaints and private prosecutions for computer fraud.
  • Criminal liability of directors and beneficiaries.
  • International requests for information to exchanges.
  • Asset recovery and freezing of funds.

Personal and Professional Support

We know that those who come to us do so at a time of financial and emotional vulnerability. Our commitment is to provide close, transparent support, backed by a clear action plan.

Most affected individuals arrive at the firm with a common feeling: that of having lost control. That is why our work is not only legal; it is also human.

At IN DIEM Abogados, together with the forensic analysis team at Cryptoveritas 360, we support victims of online investment scams and crypto fraud at every stage of the process:

  • Initial assessment of the scam and case viability.
  • Full traceability of movements on the blockchain.
  • Identification of destination wallets and exchanges.
  • Preparation of rigorous expert reports.
  • Drafting and filing of the criminal complaint.
  • Requests for investigative measures and international cooperation.
  • Ongoing follow-up and expansion of the investigation over time.

At IN DIEM Abogados, along with our forensic analysis team from Cryptoveritas 360, we accompany victims of cryptocurrency scams through all phases of the process, from the first consultation to the full investigation and the filing of the complaint.

We assist both domestic clients and affected individuals resident in Europe, Latin America and other countries, providing a professional and technical response that remains close and accessible, in the face of fraud that is already operating on a transnational scale.

If you suspect you have been a victim of the Monexa Holding scam or any other fraudulent investment platform, act as soon as possible. Time is a key factor in traceability and recovery prospects.


Preguntas frecuentes sobre la estafa Monexa Holding y fraudes con criptomonedas

¿Cómo contactan este tipo de plataformas con las víctimas?

Habitualmente contactan mediante llamadas, mensajes o formularios online. Los supuestos asesores financieros utilizan un lenguaje técnico, un trato cercano y referencias a inversiones conocidas para generar confianza y convencer a la persona afectada de que está ante una entidad seria.

¿Cómo funciona el fraude de inversión online?

El fraude suele comenzar con una pequeña aportación inicial. Después, la plataforma muestra supuestas ganancias en una cuenta de inversión falsa y presiona al afectado para realizar nuevos pagos. En muchos casos, los fondos se convierten en criptomonedas y se envían a wallets controladas por la organización.

¿Por qué se utilizan criptomonedas en estas estafas?

Las criptomonedas permiten mover fondos de forma rápida y transnacional. Los estafadores las utilizan para dificultar la recuperación del dinero, fragmentar los movimientos y enviar los activos a distintas billeteras o exchanges. Aun así, las operaciones en blockchain pueden dejar rastro técnico útil para una investigación.

¿Qué es una “mule” o mula bancaria?

Una mula bancaria es una persona que recibe o mueve fondos por cuenta de terceros, a veces con pleno conocimiento del fraude y otras veces engañada. En este tipo de tramas puede utilizarse para recibir pagos iniciales mediante Bizum, transferencia u otros medios antes de enviar el dinero a la red criminal.

¿Qué señales pueden indicar que una plataforma de inversión es fraudulenta?

Algunas señales de alerta son promesas de rentabilidad elevada o garantizada, presión para invertir rápido, ausencia de licencia regulatoria, dificultad para retirar fondos, webs clonadas, supuestos asesores muy insistentes, pagos a personas físicas y falta de información clara sobre la empresa responsable.

¿Qué papel tiene la trazabilidad blockchain en estos casos?

La trazabilidad blockchain permite seguir el recorrido de los criptoactivos desde el exchange inicial hasta las wallets de destino. Este análisis puede identificar movimientos, fragmentaciones, saltos entre direcciones y posibles exchanges centralizados donde terminaron los fondos desviados.

¿Se puede recuperar el dinero enviado a una plataforma fraudulenta?

La recuperación no siempre es sencilla, pero actuar rápido aumenta las posibilidades. Es importante recopilar pruebas, realizar un informe de trazabilidad, presentar denuncia y solicitar medidas judiciales dirigidas a identificar titulares, bloquear fondos o requerir información a exchanges y entidades implicadas.

¿Qué pruebas debe conservar una víctima de estafa cripto?

Conviene conservar capturas de la plataforma, conversaciones con los supuestos asesores, justificantes de Bizum o transferencias, movimientos del exchange, direcciones de wallets, correos electrónicos, números de teléfono, contratos, enlaces web y cualquier documento que acredite la inversión y el destino de los fondos.

¿Qué son las sociedades pantalla en una estafa de inversión?

Son sociedades utilizadas para aparentar legalidad, profesionalidad o solvencia, pero que pueden tener una función meramente instrumental. Su objetivo suele ser fragmentar responsabilidades, dificultar la identificación de los responsables reales y dar credibilidad a la plataforma fraudulenta.

¿Qué pueden hacer los exchanges si reciben fondos procedentes de una estafa?

Cuando los fondos llegan a un exchange centralizado, puede solicitarse judicialmente información sobre cuentas, titulares, movimientos y posibles retiradas. En determinados casos, también pueden pedirse medidas urgentes para intentar bloquear activos vinculados al fraude.


Cryptoveritas 360: Our Technology Partner

A Bitcoin coin on a tech-themed background featuring the Cryptoveritas 360 logo, representing blockchain and cryptocurrencies.
Bitcoin and blockchain technology: cryptocurrency solutions and analysis with Cryptoveritas 360.

Expert Cryptocurrency Lawyers: Málaga, Seville, Madrid, Las Palmas de Gran Canaria, Almería, Huelva, Marbella, Estepona,

At IN DIEM Abogados and Cryptoveritas 360 we provide our services at all our offices and locations in Spain, offering direct and personalized coverage in Madrid, Seville, Málaga, Marbella, Las Palmas de Gran Canaria, as well as continuous service through our digital channels for clients throughout the country.

Our multidisciplinary team also advises international companies—including Europe, Latin America and Asia—that wish to establish or expand in Spain under the MiCA regulatory framework, whether through obtaining the CASP license from the CNMV or the incorporation of companies and compliance structures adapted to the European market.

Thanks to a hybrid working methodology (in-person and online), we guarantee the same level of quality, confidentiality and efficiency for both local and foreign clients, supporting each project from initial planning to effective regulatory authorization.

We are at your disposal for anything you need. You can reach us via IN DIEM Lawyers Phone (+34) 916 353 892. For urgent cases, you can contact us on IN DIEM 24-Hour Emergency Lawyers Phone: (+34) 610 667 452.


Did you know that Abogados IN DIEM offers online and expedited services?

We offer our clients the option of receiving assistance via video call or videoconference, as well as by phone, depending on their preference, so that the assistance is as personalized as possible, provided immediately, and without the need to travel. This service is complemented by communication via email, which facilitates the review and delivery of documentation.

In addition, for businesses and individuals, IN DIEM Abogados offers urgent services and 24-hour support for matters that require a quick response.


Would you like to know more about IN DIEM Abogados? Here is this short introductory video…

To acknowledge some of you, here’s this link.

You can find us in Seville, Madrid, Las Palmas de Gran Canaria, Málaga, Tomares, Coria del Río, Dos Hermanas, Mairena del Alcor, Estepona, Marbella, and Mairena del Aljarafe. We look forward to serving you.

Leave a Reply

Your email address will not be published. Required fields are marked *

Legal Vision

Other posts on our blog that might interest you

BNEXT Is Unable to Operate: Issues with the Token and Legal Analysis Under MiCA. Real-Life Case

Errors in Crypto Tax Software: How Our Technical Debugging Prevented €27,600 in Unnecessary Taxes

Swiss Capital case: legal and technical analysis of a fraudulent investment platform

Deka Group Case: Legal and Technical Analysis of a Fraudulent Investment Platform

Ibermeridian: A Digital Structure That Replicated an International Crypto Scam Pattern

Penalties, Non-Compliance, and Legal Defense Against DAC8