Please note: we are a law firm that deals exclusively with online investment fraud and unauthorised financial activity. This article is based on a real case handled by the firm and is published in anonymised form as regards the victim, in the public interest. The corporate references reported are those appearing in the payment instructions received by the victim; each party's position must be verified individually. If you recognise your own situation in what follows, you can submit your case using the form at the bottom of this page.
In the bgc4invests case the fraud did not stop because the victim worked it out. It stopped because the bank noticed. The branch manager spots anomalous movements on the account, asks for explanations, ends up speaking on the telephone with the person receiving the money, and from that moment the payments cease. bgc4invests.com is a scam, and this file is also proof that banking controls, when they work, are worth more than any later recovery.
Why bgc4invests.com is a scam: the payment instructions said it already
Start with the infrastructure, which is quick. The bgc4invests.com domain today is not registered: the registry query returns 404 and DNS queries return no records. The site on which the victim watched her supposed investments no longer exists. No reviews, no public reports, no trace online at all: bgc4invests left no footprint, which confirms that clients were acquired by direct contact rather than through public channels.
But the most eloquent document in the bgc4invests file is not the website: it is the payment instructions the victim kept and sent to us. They are worth reading, because they already contain everything.
The beneficiary named in the bgc4invests instructions is Mediana Group Kft, a name carrying the corporate suffix used by Hungarian limited liability companies. The stated bank location is Belgium. The institution's identifying code corresponds to a European electronic money institution, not a traditional commercial bank. And the payment reference reads "According order" followed by a number: 62702 in one instruction, 63047 in another.
Each of these bgc4invests elements is, in isolation, lawful. Together they form a configuration no authorised operator ever presents.
A company with a Hungarian name collecting into a Belgian account is not in itself irregular, but it is a mismatch between corporate and banking jurisdiction that calls for an explanation, and no authorised intermediary would leave it unexplained. Using an e-money institution rather than a bank account held by the operator presenting itself as the contractual counterparty is the second divergence: those who operate lawfully collect in their own name, at their own institution, with a reference identifying the relationship. And the reference "According order" with a sequential number is the third: it does not identify a contract or a service, it identifies a position in a sequence. It is the reference of someone managing many numbered positions, not of someone with a client relationship.
We should be clear: the name reported is the one appearing in the instructions sent to the victim. Each company's position must be established individually — in this sector it is not unusual for genuine names to be misused by third parties — and the first step is a company-registry search.
The bank that stops the bgc4invests transfers: why that step must be secured
Here is the element that distinguishes the bgc4invests file from almost every other we handle, and the one complaints systematically omit.
During 2023, while the bgc4invests payments were running, the manager of the branch where the victim held her account notices anomalous movements, contacts her for explanations, and goes as far as speaking by telephone with the party receiving the money. From that moment the victim stops paying.
This produces, in the bgc4invests file, three legal consequences, all favourable.
The first is evidential. The branch's intervention means a documentary trail exists at the intermediary: the record of the anomaly, the internal report, any correspondence, and in all probability the content of that conversation or at least a note of it. This material can be obtained by the judicial authority using ordinary powers — a production order under art. 248(2) and acquisition under art. 256 of the Code of Criminal Procedure — and must be expressly requested in the complaint, because no one will look for it spontaneously.
The second concerns anti-money-laundering. An intermediary detecting suspicious activity is required, under art. 35 of legislative decree 231/2007, to send a suspicious transaction report to the Financial Intelligence Unit. If that report was sent, it exists and contains an obliged entity's reconstruction of the anomaly, in real time, while the events were unfolding. It is an element of enormous value that the victim could never obtain on her own.
The third is substantive. The fact that a professionally equipped obliged entity recognised the anomaly from the flows alone shows that the activity bore objectively recognisable signs of fraud. It is an argument that strengthens the charge and neutralises in advance the recurring objection that the victim should have noticed: a professional watching the movements noticed; the layperson watching a screen built to deceive her did not.
There is also a simpler bgc4invests point for anyone reading who has come across bgc4invests. When the bank calls and asks why you are making that transfer, tell the truth. Fraudsters routinely coach victims to declare false reasons — a purchase, a loan to a relative, a personal expense — precisely to neutralise that control. Here the control worked and stopped the bleeding. In a great many other cases it failed because the victim, on the fraudsters' instructions, lied to her own bank.
The identity pack handed to bgc4invests: not just documents
The victim sent the bgc4invests structure a set of data worth listing in full, because the sum is more dangerous than the parts: identity document, tax code, email address, mobile number, utility bill, bank details and residential address.
It is not a random list, and it is the same one bgc4invests requested. It is exactly the file required by the remote due diligence procedures of payment institutions and exchanges: document, proof of address, contact details, bank coordinates. Whoever holds it has everything needed to open accounts in someone else's name.
The consequences are impersonation under art. 494 of the Italian Criminal Code and, above all, the risk that funds from other frauds pass through accounts opened in the victim's name, with the paradoxical result of facing a money-laundering allegation under art. 648-bis. Anyone in this position has an interest in having the handover of their data dated and documented in a filed complaint: if an allegation ever arrives, that date is the defence.
Remote control software in the bgc4invests case too
The bgc4invests file also involves the installation of remote control software. It is the second element this case shares with the fake-broker case we analysed in axi24-cfd.com, and it deserves the same treatment.
Access to the bgc4invests victim's device, obtained with consent captured for different purposes and in any event exceeding the limits for which it was given, constitutes unauthorised access to a computer system under art. 615-ter, an autonomous offence. If during the remote session the operator intervened directly on the system — placing operations, altering data, operating on the account — computer fraud under art. 640-ter also opens up, which in ordinary fake-investment frauds would not be chargeable because the deception operates on the person and not on the machine.
And the same operational warning applies: do not format the computer, do not uninstall the software, do not clean up the device. Remote control programs log their sessions and retain the identifier of the connecting device. In a file where the bgc4invests site is switched off, it is one of the few traces pointing at a real physical machine.
Where the money went: why a European account is good news
There is a widespread and mistaken belief among those who paid bgc4invests that "transfers abroad" means money is gone. Here the opposite is true.
The bgc4invests funds were directed to an account at an electronic money institution established in the European Union. Such an institution is an obliged entity under anti-money-laundering law: it must identify the account holder, retain the due diligence documentation, record transactions and report suspicious ones. It therefore holds, by law, the identity of whoever opened that account, the documents used to open it, the access IP addresses and the complete history of movements in and out.
Above all, being established in the Union, it is reachable through the European Investigation Order under legislative decree 108/2017: no letters rogatory are needed, the timescales are those of a European instrument, and the requested authority is obliged to act.
That is a far better position than money sent to third countries, where conventional mutual assistance applies and timescales run into years. The complaint must therefore identify the institution, the identifying code and the country precisely, and expressly request the correct instrument.
There is also a detail worth exploiting: the reference with a sequential order number. That number is an internal reconciliation key. Asking the receiving entity for the list of operations bearing references in the same series could reveal the entire population of positions managed through that account — the kind of request that turns an individual file into proceedings with many victims, and therefore of a completely different investigative weight.
The "capital recovery" calls after bgc4invests: she was right not to answer
After the bgc4invests payments ended, the victim was contacted by several parties offering to recover the capital. She answered none of them.
That was the right decision, and it must be said clearly, because it is one of the hardest to take after losing money.
Fake debt recovery — the so-called recovery room — is run, in international practice, by the same organisation that carried out the primary fraud or by structures that buy its lists. Whoever calls already knows how much you lost, when and on which platform, because that data comes from the original fraud, and uses it to establish credibility. It is not a service left unperformed: it is an autonomous offence of fraud under art. 640, because the artifice consists in representing a recovery capability that does not exist, and the loss is complete on payment. We devoted a specific analysis to this in dam.w24platform.com.
No party legitimately engaged in recovering bgc4invests sums asks for advance payments, and none calls a victim out of the blue about a matter it should know nothing about. The mere fact that the caller knows the story is proof that it comes from the same supply chain.
Facts of 2022-2023: paragraph 2-ter does not apply, but limitation has not expired
The bgc4invests file requires two intertemporal points that decide how the filing is structured.
The first concerns art. 640(2-ter), which aggravates fraud committed remotely through computer means capable of hindering identification, introduced by law 90/2024. The bgc4invests payments fall in 2022 and up to June 2023, before that reform entered into force: under art. 2 of the Criminal Code the circumstance cannot be pleaded. Including it anyway, as happens in mass-produced filings, exposes the complaint to an immediate objection.
The circumstances that can be pleaded are impaired defence under art. 61 no. 5, incorporated by art. 640(2)(2-bis), structural in a wholly remote relationship, and substantial financial loss under art. 61 no. 7, to be assessed on the facts.
The second is the good news. The limitation period under art. 157 is not less than six years from completion: with the last payment in June 2023, the period has not expired, and with the interrupting acts of art. 160 there is margin. The time that has passed does not bar action.
As to the complaint deadline, the three-month period under art. 124 has, for facts of that period, plainly expired as regards simple fraud. What makes the matter prosecutable is prosecution ex officio flowing from the circumstances in art. 640(2), and that inherent in unauthorised financial activity under art. 166 TUF, which is subject to no deadline.
"I don't remember the platform's name": why that is not an obstacle
There is a human fact in the bgc4invests file that deserves a technical answer: the victim does not precisely remember the platform's name, remembers little of the sequence, and has in the meantime become resigned.
This is extremely common, and it keeps many people who could perfectly well act away from a lawyer. So it must be said plainly: the platform's name is not what the case is built on.
Sites like bgc4invests are volatile by definition: registered in minutes, switched off overnight, replaced by identical ones. Reconstructing a fraud from the website means chasing what the organisation can make disappear on command. The stable element is the money flow: the transfer records exist at the ordering institution, carry beneficiary, IBAN, BIC, country, date and reference, and nobody can delete them. From those you reach the receiving account, from there the holder, from there the onward steps.
Anyone who kept even just their bank statements is in a position to act, whatever they remember of the site.
What to secure immediately
Statements and records of every bgc4invests transfer, with complete beneficiary details, IBAN, BIC, country and reference, above all those bearing the order number. The payment instructions received, in the original format in which they were sent. Native export of the conversations with the operators, with the telephone numbers used and contact dates. Any remaining screenshots of the platform, even partial. A list of the personal data handed to the structure, with the approximate date. The device on which the remote control software was installed, isolated and not cleaned up, with its session logs. Every trace of the exchange with the bank branch: communications, appointments, notes.
On that basis a complaint is drafted pleading aggravated fraud under art. 640(2)(2-bis) with the circumstance of art. 61 no. 5 — and not paragraph 2-ter — unauthorised access under art. 615-ter, where applicable computer fraud under art. 640-ter, impersonation under art. 494 and unauthorised financial activity under art. 166 TUF. With applications to obtain the banking documentation and any suspicious transaction report, for enquiries at the receiving e-money institution through a European Investigation Order, for seizure under arts. 253 and 321, and a request to be notified of any application to shelve the case under art. 408(2).
Related cases handled by the firm
Readers who recognise their own case may find useful our analyses of axi24-cfd.com and the fake broker with remote control, cryptoledgerx.top, sistemascientifico.com and unauthorised financial activity and money entrusted to an acquaintance.
If you invested through bgc4invests.com: what to do now
The picture is this. bgc4invests.com is a scam whose domain is not even registered today, which collected into an account at a European e-money institution in the name of a company with a foreign denomination, using sequentially numbered references, and which obtained from the victim the entire set of data needed to open accounts in her name, as well as remote access to her computer.
The payments stopped because the bank spotted the anomaly. That is why the loss stayed modest compared with what usually happens in these files, and the documentation of that intervention is today one of the strongest elements available.
The limitation period has not expired, and unauthorised financial activity is prosecuted ex officio: you do not need to remember the exact name of the site, you need your bank statements.
Our firm has already handled this case. You can submit your position for a preliminary assessment.
If you have suffered the same fraud, we can help you. Fill in the form at the bottom of this page.
Do you need legal assistance?
Tell us about your case: free assessment, no obligation.
