Note: we are a law firm dealing exclusively with online fraud. If you were caught in the same trap and want help, you can write to us using the form at the bottom of this article.
Why we say bybiititac.com is a scam
We have already handled the case of a client who paid around twenty thousand euros in cryptocurrency to the people running bybiititac.com, between December 2025 and May 2026. Ten payments to bybiititac.com, each with a different stated reason, and not one successful withdrawal.
This case is particularly instructive because our client kept the complete list: date, amount, destination address and the reason each sum was demanded. It is the single most useful thing a victim can do, and it lets us show from the inside how the staircase of pretexts works.
The staircase of pretexts
We set out the sequence demanded by bybiititac.com, because it is the heart of the mechanism.
It starts on 7 December 2025 with 500 euros for "opening the account". Five days later come 1,100 euros for "linking the account" to a very well known international exchange, and 1,800 euros for "trading operations".
Then four months of silence. The relationship resumes in April 2026 with further payments for "trading operations": 549 euros on 13 April, 2,048 on the 15th, 1,501 on the 20th, 1,055 on the 27th.
At the end of April the demands change character: you no longer pay in order to trade, you pay in order to get out. 1,515 euros on 30 April for "linking the withdrawal account", then 2,959 euros on 5 May for a "withdrawal commission".
The last payment is on 11 May 2026: 4,009 euros, demanded as "taxes owed to the State".
None of these sums paid to bybiititac.com ever came back.
"Taxes owed to the State" are not paid into a private wallet
This is the point on which we want to be most blunt, because it is a lie that keeps working.
In Italy taxes are paid solely to the Revenue, through the F24 form and debited from an account in the taxpayer's own name. No platform, no broker, no intermediary collects taxes on the State's behalf, and in no case is a tax paid in advance in cryptocurrency to a private address. Any gains on crypto-assets are declared in the tax return, after they have been realised, and paid in the ordinary way.
Anyone who, as happened on bybiititac.com, asks you to pay taxes in order to unlock an account is lying to you, and that lie is itself an artifice relevant under article 640 of the Italian Criminal Code. If the person making it also claims a public capacity, impersonation under article 494 is added.
The same goes for the items that came before it: "account linking", "withdrawal commission", "security deposit". At an authorised intermediary withdrawing costs nothing.
The addresses change, the blockchain remains
The ten payments did not all go to the same place. In the bybiititac.com case at least four different destination addresses were used, rotated by phase: one for the initial December 2025 payments (bc1q03l5…v7d2), a second for the first April group (3DNWLRXv…iXCW), a third for the following group (3EJPp2fY…CQkZ) and a fourth for the withdrawal commission and the supposed taxes (34f48bun…93nkL).
Rotation is meant to break the link between the sums, and it is often the only thing a victim notices when rereading her own payments. But it produces the opposite of the intended effect: precisely because the addresses are recorded with dates and amounts, the sequence becomes a map. The blockchain is a public and permanent ledger: transactions are not deleted, they remain consultable by anyone, for ever. From those addresses one reconstructs where the money ended up and, when it reaches an operator subject to identification duties, the judicial authority can be asked to obtain the account holder's details.
If you have paid cryptocurrency to bybiititac.com or to similar platforms, keep every destination address and every transaction identifier. These are not technical details: they are the evidence.
The heaviest finding: the domain is born on the day of the last payment
We queried the public registers and the result deserves attention.
The domain bybiititac.com was registered on 11 May 2026, with a United States registrar, for the minimum term of one year, with its configuration completed a few seconds after purchase.
11 May 2026 is exactly the day of the last and largest payment, the 4,009 euros demanded as "taxes owed to the State".
This is a coincidence of dates that anyone can verify in the registers. The most reasonable reading is that the site our client was directed to in the final phase did not exist before that day: it was created to host the last act, once the previous platform had exhausted its credibility. It is behaviour we see often, and it explains why victims, retracing events, remember "a second site" appearing towards the end.
The name, and the absence of everything else
The domain name closely recalls, with a few extra letters, that of a very well known cryptocurrency exchange. We say this for clarity and to protect those who have nothing to do with it: that operator has no connection with bybiititac.com and is in no way involved. The resemblance is the tool, not a link.
For the rest, on bybiititac.com we found no company name, no VAT number, no registered office, no company registration number and no reference to any authorisation or supervisory body, and no entry in the registers kept by CONSOB, the Italian market authority, or among the EU intermediaries entitled to operate in Italy.
There is one last technical detail worth more than many words: the domain's mail server is the registrar's parking one. It means no real business mailbox was ever set up at that address. A company claiming to hold other people's capital that cannot receive an email at its own domain is not a company.
The criminal framework
The conduct of whoever ran bybiititac.com amounts to fraud under article 640 of the Italian Criminal Code, aggravated under the second paragraph no. 2-bis for exploiting the circumstance of distance referred to in article 61 no. 5, and by the aggravating circumstance introduced in paragraph 2-ter by law 90/2024, applicable because the facts run from December 2025 to May 2026.
The ten payments to bybiititac.com are not to be read as ten separate matters: they are episodes of a single criminal design, to be charged as a continuing offence under article 81, second paragraph. The aggravating circumstance of particularly serious financial harm under article 61 no. 7 must also be assessed.
To this are added the unlawful provision of investment services under article 166 of the Consolidated Law on Finance, punished by one to eight years' imprisonment, and — as regards whoever received and moved the cryptocurrency — money laundering under article 648-bis or self-laundering under article 648-ter.1.
As to tools and timing: aggravated fraud becomes time-barred after six years, up to seven years and six months with interrupting acts, and the civil claim for damages follows the longer term under article 2947, third paragraph, of the Civil Code. Crypto-asset service providers are subject to the customer due diligence and record-keeping duties of legislative decree 231/2007 and can receive requests from the judicial authority; where the funds leave the country the instrument is the European Investigation Order under legislative decree 108/2017, together with preventive seizure under article 321 of the Code of Criminal Procedure.
A four-month pause does not mean it is over
Between December 2025 and April 2026 the relationship with bybiititac.com had broken off. Then contact resumed and the payments started again.
It is a recurring pattern: these organisations let contacts settle and reactivate them months later, sometimes with the same interlocutor, more often with a new name and the promise of "recovering" what was lost before. If someone gets back in touch after months of silence about a frozen account, it is not good news: it is the same chain coming back.
What to do if you were caught by the same scam
Do not pay any more money to bybiititac.com, whatever reason is given, and above all never pay taxes to a platform. Put together, as our client did, the complete list of payments with date, amount, destination address and the reason given. Ask the exchange where you bought the cryptocurrency for a complete statement of operations. Keep the dashboard screenshots and the full chat histories. File a criminal complaint as soon as possible. And do not turn to anyone who contacts you promising immediate recovery in exchange for an advance payment: that is the second scam, and it almost always hits the same people.
We can help you
Our firm deals exclusively with online fraud and has already handled cases entirely comparable to bybiititac.com: fake exchanges, cryptocurrency payments to rotating addresses, non-existent withdrawal commissions and fake taxes.
If you have paid money or cryptocurrency to bybiititac.com or to a platform working the same way, contact us using the form at the bottom of this page: we will review the documents and tell you honestly what concrete prospects exist in your case.
You can read other comparable cases we have handled:
Do you need legal assistance?
Tell us about your case: free assessment, no obligation.
