{"id":21231,"date":"2026-02-03T19:36:28","date_gmt":"2026-02-03T18:36:28","guid":{"rendered":"https:\/\/staging.in-diem.com\/ibermeridian-a-digital-structure-that-replicated-an-international-crypto-scam-pattern\/"},"modified":"2026-08-10T17:33:06","modified_gmt":"2026-08-10T15:33:06","slug":"ibermeridian-a-digital-structure-that-replicated-an-international-crypto-scam-pattern","status":"publish","type":"post","link":"https:\/\/www.in-diem.com\/en\/ibermeridian-a-digital-structure-that-replicated-an-international-crypto-scam-pattern\/","title":{"rendered":"Ibermeridian: A Digital Structure That Replicated an International Crypto Scam Pattern"},"content":{"rendered":"
\n

The Ibermeridian scam<\/strong> \u2014according to the evidence detailed in the complaint filed by IN DIEM Abogados<\/strong>\u2014 constitutes one of the most complex cases of digital fraud recently investigated in Spain. Although there is not yet a judicial resolution declaring the facts, the information provided by the affected party, the expert work of Cryptoveritas 360<\/a><\/strong>, and the legal analysis performed allow for a reconstruction of how the structure operated, the phases of recruitment, and how funds were diverted through cryptocurrencies. <\/p>\n\n

The Ibermeridian platform<\/em> does not appear in isolation, but is integrated into a network of interconnected websites, shell companies, and recruiters coordinated at an international level. The case illustrates the operation of one of the most widespread types of online investment scams<\/strong> in Europe in recent years. <\/p>\n\n

What follows is a journalistic account of the investigation, with a human, technical, and legal focus, based on the documentation provided, blockchain traceability, and the complaint already filed with the competent authorities.<\/p>\n\n

Getting Started: How Users Find Their Way to Ibermeridian<\/strong><\/h2>\n\n

The case begins when the affected party receives communications that appeared to come from a financial consultancy specialized in investments. The messages were presented with technical language, references to personalized market reports, and promises of professional guidance in supposedly secure operations. <\/p>\n\n

Through links sent by the supposed “advisors,” the user is directed to two websites that appear to be regulated investment platforms:<\/p>\n\n

    \n
  • ibermeridian.com<\/strong><\/li>\n\n\n\n
  • webtrader.ibermeridian.com<\/strong><\/li>\n<\/ul>\n\n

    Both sites show real-time charts, user panels, open trades, and an interface very similar to that of an authorized broker. One of the first signs of risk is the unilateral creation of credentials<\/strong>: the user receives an email indicating that their account is already activated, with a username and password generated by the “platform” itself. <\/p>\n\n

    From the very beginning, typical patterns of digitized financial scams<\/strong> are observed: pressure to trade immediately, pseudo-regulatory justifications, supposed AML monitoring, and references to European regulations that, in reality, are only used as an excuse to legitimize blocks or financial demands.<\/p>\n\n

    How the Numbers Are Rising: Social Engineering, Remote Control, and Cryptocurrencies<\/strong><\/h2>\n\n

    The complaint filed by IN DIEM Abogados describes three successive phases in the Ibermeridian scam<\/strong>, which allow for an understanding of how the fraud escalates from small amounts to significant sums.<\/p>\n\n

    Phase 1 \u2013 Bank Transfers to Crypto.com<\/strong><\/h3>\n\n

    The supposed advisors indicate to the affected party that, to operate on the Ibermeridian platform, it is necessary to work with cryptocurrencies. They explain that the “safest” procedure is to send funds from their bank account to their own account on Crypto.com<\/strong>, and then convert them into Bitcoin. <\/p>\n\n

    In total, nine bank transfers<\/strong> intended for the purchase of BTC are documented, always following telephone or remote instructions from the recruiters.<\/p>\n\n

    Phase 2 \u2013 Remote Control via AnyDesk<\/strong><\/h3>\n\n

    Once the funds are in the Crypto.com account, the recruiters request remote access to the affected party’s computer using AnyDesk<\/strong>. This is a legitimate technical assistance tool, but it is frequently used in cryptocurrency fraud<\/strong> schemes. <\/p>\n\n

    With that access, the supposed managers:<\/p>\n\n

      \n
    • enter the affected party’s Crypto.com account,<\/li>\n\n\n\n
    • directly execute the BTC purchases,<\/li>\n\n\n\n
    • and prepare the transfer of funds to external wallets.<\/li>\n<\/ul>\n\n

      At the same time, the narrative of “professional custody” at Ibermeridian is reinforced, ensuring that the bitcoins will be “better protected” on the investment platform.<\/p>\n\n

      Phase 3 \u2013 Sending BTC to Third-Party Addresses<\/strong><\/h3>\n\n

      The final step consists of the affected party sending their BTC to a series of addresses provided by the recruiters. According to the expert report, none of these addresses belong to the client<\/strong>, which results in the effective loss of control over their crypto assets. <\/p>\n\n

      At this point, the online investment scam<\/strong> has been consummated: the affected party believes they have deposited their money in Ibermeridian, but in reality, they have transferred it to wallets controlled by the network.<\/p>\n\n

      Identified Individuals and Companies: A Multilevel Structure<\/strong><\/h2>\n\n

      The documentary and technical investigation included in the complaint allowed for the identification of a structure much broader than what a single investment website suggests.<\/p>\n\n

      Linked Individuals<\/strong><\/h3>\n\n

      In total, 23 individuals<\/strong> have been identified with some type of operational connection to the plot, including:<\/p>\n\n

        \n
      • recruiters who contact potential investors,<\/li>\n\n\n\n
      • supposed analysts,<\/li>\n\n\n\n
      • technical and support operators.<\/li>\n<\/ul>\n\n

        Many of these identities are associated with virtual phone numbers, digital profiles created specifically for this purpose, and, in some cases, connections from different countries via VPN.<\/p>\n\n

        Associated Companies<\/strong><\/h3>\n\n

        The complaint also records the existence of more than 30 legal entities<\/strong> related to the corporate structure that supports Ibermeridian and its linked platforms. These are companies spread across several jurisdictions, including: <\/p>\n\n

          \n
        • United Kingdom,<\/li>\n\n\n\n
        • Cyprus,<\/li>\n\n\n\n
        • Seychelles,<\/li>\n\n\n\n
        • Netherlands,<\/li>\n\n\n\n
        • Spain,<\/li>\n\n\n\n
        • and other territories commonly used for shell companies.<\/li>\n<\/ul>\n\n

          These companies function as administrative screens, payment gateways, intermediate platforms, or supposed providers of financial or technical services. No names are made public out of respect for the proceedings and the investigation phase, but all information has been forwarded to the Civil Guard. <\/p>\n\n

          Blockchain Traceability: The Path of Money to Exchanges<\/strong><\/h2>\n\n

          The centerpiece of the investigation is the blockchain traceability analysis conducted by Cryptoveritas 360<\/strong>, which has allowed for tracking the trail of the withdrawn BTC and determining their final destination.<\/p>\n\n

          Nine BTC Transfers and Consolidation in Exchanges<\/strong><\/h3>\n\n

          The analysis reveals the existence of nine (9) BTC transfers<\/strong> from the affected party’s account to various network addresses. These initial addresses do not belong to the client and function as transit nodes. <\/p>\n\n

          After successive movements and fragmentations, the funds end up consolidating in several centralized exchanges, including:<\/p>\n\n

            \n
          • HTX Exchange<\/li>\n\n\n\n
          • N. Exchange<\/li>\n\n\n\n
          • Binance<\/li>\n\n\n\n
          • WhiteBit<\/li>\n\n\n\n
          • Cryptomus<\/li>\n\n\n\n
          • ChangeNOW<\/li>\n\n\n\n
          • Bitstamp<\/li>\n<\/ul>\n\n

            Regarding all of them, investigative measures have been requested in the complaint to obtain KYC information, access logs, transaction history, and, where appropriate, the freezing of balances linked to the case.<\/p>\n\n

            Mixing and Fragmentation Processes (Layering)<\/strong><\/h3>\n\n

            The expert report describes typical money laundering behavior with cryptocurrencies<\/strong>, using layering<\/em> techniques:<\/p>\n\n

              \n
            • dispersion of funds into small portions,<\/li>\n\n\n\n
            • chained micro-transactions,<\/li>\n\n\n\n
            • cross-transfers between multiple addresses,<\/li>\n\n\n\n
            • high turnover and absence of a linear pattern.<\/li>\n<\/ul>\n\n

              This type of operation is what is described by both the AMLD6 Directive and Europol reports on fraud and money laundering networks supported by crypto assets.<\/p>\n\n

              The Technical Layer: IP Addresses, Phones, Servers, and Mirror Domains<\/strong><\/h2>\n\n

              The work of Cryptoveritas 360<\/strong> went much further than following the BTC trail. The digital forensic investigation obtained a series of key data points that reinforce the existence of an organized structure around the Ibermeridian platform<\/strong>. <\/p>\n\n

              Among the technical elements collected, the following stand out:<\/p>\n\n

                \n
              • IP addresses associated with panel access and specific actions.<\/li>\n\n\n\n
              • Phone numbers used by recruiters and supposed managers.<\/li>\n\n\n\n
              • Wallet addresses linked to Ibermeridian and related platforms.<\/li>\n\n\n\n
              • DNS records and historical WHOIS of connected domains.<\/li>\n\n\n\n
              • Servers and CDNs shared between different websites.<\/li>\n\n\n\n
              • Mirror domains and fraudulent replicas with identical design.<\/li>\n\n\n\n
              • User panels cloned between different platforms.<\/li>\n\n\n\n
              • OSINT connections linking the global infrastructure of the network.<\/li>\n<\/ul>\n\n

                All this information has been integrated into a technical report of more than 57 pages that is part of the criminal complaint, handled in accordance with the GDPR and the LOPDGDD and made available to the Economic Crime Unit for forensic analysis.<\/p>\n\n

                Ibermeridian and its ecosystem of interconnected platforms<\/strong><\/h2>\n\n

                One of the most relevant findings of the investigation is that Ibermeridian does not act alone<\/strong>. The complaint describes a network of interconnected platforms that share technical infrastructure, panels, servers, and operational behavior. <\/p>\n\n

                Linked Platforms According to Technical Analysis<\/strong><\/h3>\n\n
                  \n
                • ibermeridian.com<\/li>\n\n\n\n
                • webtrader.ibermeridian.com<\/li>\n\n\n\n
                • interactiveltdpro.com<\/li>\n\n\n\n
                • interactive-proltd.com<\/li>\n\n\n\n
                • versamind.io<\/li>\n\n\n\n
                • quicktrade.ltd<\/li>\n<\/ul>\n\n

                  These websites share hosting providers, panel structure, source code fragments, SSL certificates, and domain registration patterns, indicating that they are part of the same infrastructure reused under different names.<\/p>\n\n

                  According to the complaint, Ibermeridian would function as the main brand<\/strong>, while the rest of the platforms would operate as:<\/p>\n\n

                    \n
                  • mirror platforms,<\/li>\n\n\n\n
                  • auxiliary recruitment tools,<\/li>\n\n\n\n
                  • transition gateways,<\/li>\n\n\n\n
                  • “exit scam” systems,<\/li>\n\n\n\n
                  • and fund dispersion mechanisms.<\/li>\n<\/ul>\n\n

                    All of this fits with the elements described in Article 570 bis of the Criminal Code<\/strong> regarding criminal organization and with the “Investment Fraud Networks” pattern identified by Europol.<\/p>\n\n

                    The Complaint: Representation by IN DIEM Abogados<\/strong><\/h2>\n\n

                    Given the magnitude of the facts and the technical complexity of the Ibermeridian scam<\/strong>, the affected party turned to IN DIEM Abogados<\/strong>, which has filed a criminal complaint incorporating all the evidentiary material collected by Cryptoveritas 360.<\/p>\n\n

                    The complaint includes:<\/p>\n\n

                      \n
                    • Full technical report on blockchain traceability.<\/li>\n\n\n\n
                    • List of wallet addresses involved.<\/li>\n\n\n\n
                    • Domains and servers connected to the operation.<\/li>\n\n\n\n
                    • IP data, phone numbers, and communication channels.<\/li>\n\n\n\n
                    • Banking documentation and Crypto.com records.<\/li>\n\n\n\n
                    • Panels, screenshots, and communications with recruiters.<\/li>\n\n\n\n
                    • List of interrelated platforms and linked companies.<\/li>\n\n\n\n
                    • Request for investigative measures at national and international levels.<\/li>\n<\/ul>\n\n

                      Among the requested measures are requirements for exchanges, delivery of KYC information, access logs, possible freezing of funds, and letters rogatory to other countries when necessary.<\/p>\n\n

                      The drafting of the complaint has been carried out with a technical and prudent approach, allowing the judicial authority to determine the applicable crimes once all the evidence has been analyzed.<\/p>\n\n

                      \n\n

                      How Can IN DIEM Abogados Help You If You Suspect a Crypto Scam?<\/strong><\/h2>\n\n

                      If you believe you may be a victim of an online investment scam<\/strong> similar to Ibermeridian, it is essential to act quickly. Time is a critical factor in being able to trace funds, request blocks on exchanges, and properly document the evidence. <\/p>\n\n

                        \n
                      • Technical analysis and blockchain traceability<\/strong> alongside Cryptoveritas 360.<\/li>\n\n\n\n
                      • Preparation and filing of the complaint<\/strong> before the Civil Guard, National Police, or Courts.<\/li>\n\n\n\n
                      • Request for investigative measures from exchanges<\/strong> and financial entities.<\/li>\n\n\n\n
                      • Continuous legal assistance<\/strong> throughout the entire criminal investigation.<\/li>\n\n\n\n
                      • Support for national and international clients<\/strong> affected by crypto scams and online investment fraud.<\/li>\n<\/ul>\n\n

                        The sooner the legal and technical reaction begins, the greater the options for protecting your rights and, in some cases, recovering part of the funds.<\/p>\n\n

                        \n\n

                        IN DIEM Abogados. Legal Defense in Crypto Scams: <\/strong><\/h2>\n\n

                        At IN DIEM Abogados<\/strong>, together with the forensic analysis team at Cryptoveritas 360<\/strong>, we support victims of online investment scams<\/strong> and crypto fraud at every stage of the process:<\/p>\n\n

                          \n
                        • Initial assessment of the scam and case viability.<\/li>\n\n\n\n
                        • Full traceability of movements on the blockchain.<\/li>\n\n\n\n
                        • Identification of destination wallets and exchanges.<\/li>\n\n\n\n
                        • Preparation of rigorous expert reports.<\/li>\n\n\n\n
                        • Drafting and filing of the criminal complaint.<\/li>\n\n\n\n
                        • Requests for investigative measures and international cooperation.<\/li>\n\n\n\n
                        • Ongoing follow-up and expansion of the investigation over time.<\/li>\n<\/ul>\n\n

                          At IN DIEM Abogados, along with our forensic analysis team from Cryptoveritas 360<\/strong>, we accompany victims of cryptocurrency scams through all phases of the process, from the first consultation to the full investigation and the filing of the complaint.<\/p>\n\n

                          We assist both domestic clients<\/strong> and affected individuals resident in Europe, Latin America and other countries<\/strong>, providing a professional and technical response that remains close and accessible, in the face of fraud that is already operating on a transnational scale.<\/p>\n\n

                          If you suspect you have been a victim of the Ibermeridian scam<\/strong> or any other fraudulent investment platform, act as soon as possible. Time is a key factor in traceability and recovery possibilities. <\/p>\n\n

                          Contact us. We are here to help you. <\/strong><\/p>\n\n

                          \n\n