CapitaGains is a scam: the fake crypto trading that diverts transfers to unknown wallets

Foreword: we are a law firm and we deal exclusively with online scams. We have already handled the case of a person who fell into the CapitaGains trap and we can help anyone who has suffered the same scam: if you want to be assisted, fill in the request form at the bottom of this article.

CapitaGains is a scam: the platform reachable at capitagains.com, presented as a cryptocurrency trading and investment service, is not an authorised intermediary but the terminal of a mechanism that makes people transfer money, first into their own accounts at cryptocurrency exchanges and then to unknown wallets, without that money ever being returned. We do not write this by hearsay. We have examined the criminal complaint filed with the competent public prosecutor's office, the later supplement with a blockchain analysis, the bank transfer receipts and the messages of the so-called operators, and we have checked the registration of the domain and the warnings issued by supervisory authorities.

The conclusion is clear: CapitaGains is a scam because no authorised intermediary asks a client to turn savings into cryptocurrency and to send it, under dictation, to wallet addresses communicated by e-mail or chat. And above all because the platform itself had already been flagged as unauthorised by the British Financial Conduct Authority in June 2024, four months before the first contact with the person we assisted.

How CapitaGains works: from the WhatsApp contact to the fake digital portfolio

The CapitaGains scheme, as documented, begins in October 2024 with a contact on WhatsApp. A user who presents himself as a financial operator proposes cryptocurrency investments through different platforms, CapitaGains among them, with continual references to well-known names of the sector such as Binance and Crypto.com, to give the impression of moving inside reliable circuits. The operator asks to continue all communication in chat and declares himself the personal contact for the management of the «digital portfolio». Shortly afterwards a second interlocutor appears, with a British number, who describes himself as a tutor and takes on the role of technical and operational consultant.

Both supply instructions, charts, simulated returns and screenshots of the platforms. This is the central artifice of CapitaGains: the person never sees a financial product, only an interface that displays numbers. And this is where the name of the platform ceases to matter, because in the case examined CapitaGains appears together with two other names, used by the same interlocutors in the same flow: the names change, the scheme stays identical.

The file contains no explicitly promised contractual rate of return: it contains charts, simulated returns and screenshots showing the investment growing. This too is typical. The profit is not promised in a document that could later be challenged: it is shown on screen, for as long as it serves to obtain further payments.

Domain, holder and warnings from the authorities: CapitaGains is not an authorised intermediary

On the CapitaGains domain, according to the RDAP register queried on 10 November 2026, capitagains.com was registered on 15 December 2023, expiring on 15 December 2026, through the registrar MainReg Inc. and with Cloudflare name servers. The record was last changed on 20 August 2026 and the domain appears to be active. The holder's data are not public. Using Cloudflare and a registrar that allows the holder to be hidden is not unlawful in itself: it becomes an indicator when added to the rest.

The interesting fact is another one, and it contradicts a widespread idea: CapitaGains is not a site born a few weeks ago. When the person is contacted, the domain is about ten months old. For those who run platforms of this kind that is a physiological period: it serves to build a credible shop window and to gather a pool of victims. The age of a domain, in other words, is not a sign of seriousness.

More significant is that the supervisory authorities had already moved. The British Financial Conduct Authority published a warning on CapitaGains on 19 June 2024, updated on 26 September 2024, stating that the firm is not authorised and that it may be providing or promoting financial services without permission, also targeting people in the United Kingdom. The warning covers the sites capitagains.com and capitagains.net. In September 2025 New Zealand's Financial Markets Authority published, and the international network of supervisory authorities IOSCO relayed, an alert on an entity called Capitagains, linked to the domains capitagains.net and capitagains.info, classified as an unregistered entity offering financial services and as a fraud case. These are reports by foreign authorities on sites linked to the same brand: they do not replace a judicial finding, but their existence, and their date, carry weight.

Moreover, the file contains no company name, VAT number or registered office attributable to CapitaGains: the interlocutors present themselves under invented names and communicate exclusively on WhatsApp. Anyone providing investment services to the public in Italy must be authorised, and the abusive exercise of that activity is punished by Article 166 of Legislative Decree 58/1998 (the Consolidated Law on Finance, TUF). For services relating to crypto-assets, since 30 December 2024 the regime of the MiCA Regulation and of Legislative Decree 129/2024 applies, which makes the activity of providers subject to authorisation. We have found no authorisation in the name of CapitaGains. Anyone wishing to check an entity before operating can consult the public registers of Consob and of crypto-asset service providers, bearing in mind that Consob may also order the blackout of abusive sites (Article 36, paragraph 2-terdecies, Decree-Law 34/2019).

Aspect Markets, CapitaGains and a third name: the same scheme under different brands

In the case we examined, the interlocutors operated through several brands: the first operator presented himself as an employee of a different platform, while CapitaGains appeared alongside a third name, always with the same reference to Binance and Crypto.com. Those who deal with these cases recognise the model: a single group runs several shop windows, alternates them according to context and to the reports that hit them and, when a brand is burned, opens another.

It is a fact that also weighs on the investigative side. If the brand is interchangeable, the structure that gives the payment instructions is not: the wallet addresses, the receiving accounts, the telephone numbers. Those elements, and not the name of the platform, make it possible to link several complaints to the same group and to support, in the presence of a stable structure, the hypothesis of criminal association (Article 416 of the Criminal Code).

The transfer to oneself: why the bank statement does not show the fraudster

The payment mechanism is the distinctive feature of the CapitaGains case, and what most surprises those who observe it from outside. The documented payments are nine, between 31 October 2024 and 4 September 2025, for a total of 9,838 euro, in amounts ranging from 80 to 3,333 euro. In many of these operations the beneficiary turns out to be the very person who ordered the payment.

This is not an error, nor a transfer in favour of the victim. On the operators' instructions, the person orders bank transfers to their own accounts at cryptocurrency exchanges, converts the euro into cryptocurrency, mainly Ethereum, and immediately forwards it to wallets whose addresses are communicated from time to time by the same operators, by e-mail or other channels. The sums never rest in wallets controlled by the person: they pass through and vanish. Some payments are instead directed to third-party accounts, including foreign ones.

This scheme has three practical consequences. The first: the bank sees a transfer to an account in the client's own name and the anti-fraud filters, calibrated on unknown beneficiaries, do not trigger. The second: the operation is authorised by the client, and therefore is not covered by the protection provided for unauthorised operations (Legislative Decree 11/2010). The third, the most serious: the money does not remain in accounts the bank could freeze, but leaves at once in the form of cryptocurrency, and every day of delay reduces the possibility of following its traces.

The «blocked deposit» of 5,682 dollars and the 2,200 dollars in ETH: the fee to unblock

The CapitaGains script provides, at some point, for the block. The person is forwarded a communication that appears to come from Crypto.com, according to which a deposit of 5,682 dollars is «temporarily blocked» and, to complete the security procedure, a further 2,200 dollars in Ethereum would have to be paid. This communication too is part of the fraudulent design: it serves to turn the capital already lost into the reason for paying more.

It is the technique of the fake block, well known to those who deal with online financial scams: the platform never allows the withdrawal and, at each request, raises a new obstacle, a new check, a new tax or fee to be paid in advance. No authorised intermediary, and no tax authority, asks you to pay in cryptocurrency to an address communicated in a chat a sum to «unblock» your own funds. In the case examined the person was never able to withdraw anything, despite repeated requests. Then contacts thinned out, replies became evasive and the interlocutors disappeared.

The second scam: the fake law firm that promises to recover the funds

When the injured person realised they had been scammed, they were contacted on WhatsApp by a self-styled lawyer, who presented himself as a member of a law firm linked to a «recovery» company bearing the wording «& Partners». The individual claimed to be able to recover the lost sums, showed professional documentation, sample contracts, references to registered offices abroad and technical information on wallets and crypto platforms, and asked, to start the procedure, for a preliminary payment of 300 euro into an account held by a natural person.

After the transfer new requests for money arrived at once, without any recovery activity being started. For a fraudster, the victim is a pool to be reused: whoever has already lost money is willing to pay again to get it back. It is a second scam, autonomous and consequent on the first, and so frequent that it deserves an analysis of its own: we have written about it in our review of fake fund-recovery services. A simple rule: whoever asks for an advance payment to recover sums lost in an online scam is almost always repeating the scam.

Aggravated fraud (Art. 640 Criminal Code), computer fraud and self-laundering: the criminal framework of CapitaGains

The conduct described amounts to the offence of fraud under Article 640 of the Criminal Code: the artifices and deceptions consist in the platform simulating operations and returns, in the charts and screenshots, in the reference to well-known names such as Binance and Crypto.com, in the false communications about a blocked deposit and in the step-by-step assistance of operators who indicate the destination wallets; the damage is the property paid by the injured person.

When the act is committed at a distance by means of computer or telematic instruments able to hinder identification of the perpetrator, the aggravating circumstance of Article 640, second paragraph, no. 2-ter, of the Criminal Code applies, introduced by Law 90/2024. With judgment no. 27907/2026 (hearing of 14 July 2026) the Second Criminal Section of the Court of Cassation clarified that this aggravating circumstance concerns the manner of execution of the conduct and distinguished it from the impaired defence of Article 61, no. 5, of the Criminal Code, tied to the concrete vulnerability of the victim, and held that fraud so aggravated is now punishable only upon complaint by the injured person, by effect of the derogation in the fourth paragraph of Article 640 as amended by Decree-Law 48/2025, converted by Law 80/2025. Judgment no. 18913/2026 (hearing of 26 March 2026) confirmed that proceedings are brought upon complaint if no. 2-ter applies and ex officio if Article 61, no. 5 applies. The practical point, for those scammed by CapitaGains, is that without a complaint the proceedings, in many of these cases, cannot continue. With judgment no. 5191/2026 (hearing of 13 January 2026) the Court further confirmed that fraud is an offence of «prolonged consummation» when the deceptive activity continues in order to create in victims the trust needed to obtain further profits: it is the logic of the successive payments to «unblock» the capital.

The framework alleged in the complaint also includes computer fraud (Article 640-ter of the Criminal Code). It must be said frankly that this is the most debatable classification. Computer fraud requires the alteration of the functioning of a computer system or unauthorised intervention on data or programs, and the mere creation of a platform that simulates returns is, more properly, the means of the artifice of the fraud. It makes sense to allege it as a precaution, but one should expect the hypothesis to be reclassified. The charge of impersonation (Article 494 of the Criminal Code) is sturdier: operators and tutors attribute to themselves professional qualifications and false identities to win the person's trust.

As for self-laundering (Article 648-ter.1 of the Criminal Code), the Court of Cassation, with judgment no. 27023/2022 of the Second Section, held the offence to be applicable to the conduct of whoever, as the perpetrator of the fraud, uses the sums credited by the victim by transferring them to a cryptocurrency exchange platform in order to buy cryptocurrency, thereby investing the proceeds in speculative financial operations capable of hindering traceability. The problem, in cases like this, is not abstract applicability but identifying the perpetrators, who are unknown: so too is the so-called consultant, because the identities supplied are invented.

There remains the question of territorial jurisdiction. In fraud cases with payments to foreign accounts, the Court of Cassation (Section II, 1 February 2017, no. 14744) held that, when even just one of the events of the offence took place in Italian territory, the court of the last place where one of those facts occurred has jurisdiction, and held correct the identification of the court of the place where the victim ordered the transfer to a foreign account. This point matters: it allows the complaint to be anchored in the injured person's place of residence even when the beneficiaries are abroad.

Blockchain analysis, seizure (Article 640-quater of the Criminal Code) and requests to exchanges: where recovery is decided

With CapitaGains, recovery does not go through the beneficiaries' accounts, because the funds never stayed in an identifiable Italian account: it goes through the blockchain. In the case examined, the criminal complaint was supplemented with a blockchain analysis that reconstructs the passages of virtual currency carried out to hinder traceability and identifies, on the basis of the results, wallets plausibly attributable to identifiable exchange platforms.

On this basis, the supplement asks the prosecutor's office, under Article 640-quater of the Criminal Code, for the seizure of the virtual currency possibly allocated on those wallets, by means of a request to the platforms, and for the collection of any information useful to identify the holders. This is where the identification and customer due diligence obligations of Legislative Decree 231/2007 and the regime of crypto-asset service providers allow the judicial authority to trace who opened an account at an exchange. If the platform is based in a Member State of the Union, the tool is the European Investigation Order; elsewhere a letter rogatory is needed, with far longer times.

To say that all this ensures recovery would be incorrect. It depends on how much time has passed, on whether funds are still sitting on the wallets and on the cooperation of the platform. That is why time decides: the deadline for filing a complaint is three months from the day on which the injured person learned of the fact (Article 124 of the Criminal Code), but waiting means allowing the funds to move on. In civil proceedings, conservatory attachment (Article 316 of the Code of Criminal Procedure, with joinder as civil party) and, against whoever collected the sums without entitlement, the recovery of undue payment (Article 2033 of the Civil Code) remain available, as we showed in the solved case on recovery of undue payment after an online scam. For confiscation, see also the study on confiscation of equivalent value and online scams. A similar case, in which the money flowed into an exchange, is the one described in the analysis of Botongde and the fake exchange.

What to do if you have already paid money to CapitaGains

The first step is to stop paying, whatever deadline is imposed and whatever «tax» or «unblocking fee» you are asked for: the more you pay, the more money you have to recover. The second is to preserve every element before it disappears:

• the WhatsApp chats with the operators and the tutors, saved in full and with dates;
• the e-mails with the addresses of the wallets to which you transferred the cryptocurrency and the declared profits;
• the receipts of the transfers to the exchanges and to third-party accounts, with IBAN, account holder, reference and time;
• the transaction history on your exchange accounts, with the transaction identifiers (TXID) and the destination addresses;
• the screenshots of the platform and of the portfolio shown on screen.

The third is to report the matter to the bank and to the exchange within hours and not days. The criminal complaint follows, drafted so as to allow the prosecutor's office to act on the wallets, with a request for a blockchain analysis to trace the funds. On why to entrust the complaint to a professional we have written in this guide on how to entrust the complaint to a lawyer expert in online scams.

Finally, be wary of anyone who offers to «recover» the funds for an advance payment: after the first scam the second always comes.

How to recognise a fake cryptocurrency trading service before paying

Before paying money to a platform that promises cryptocurrency investments, the check takes a few minutes:

• look up the name, registered office and VAT number of whoever runs the service and check the registers of Consob and of crypto-asset service providers;
• search for the platform's name together with the word «warning» on the websites of supervisory authorities, such as the British FCA, and on the IOSCO portal;
• distrust anyone who contacts you on WhatsApp or Telegram and guides you step by step, especially if they present themselves as a «tutor» or «consultant»;
• never send cryptocurrency to wallet addresses communicated in a chat or by e-mail by whoever proposes an investment;
• never pay to «unblock» a withdrawal: a fee to unblock your own funds is the surest sign of a scam.

CapitaGains is a scam: the closing warning

A single missing element could be an oversight. In the CapitaGains case there is no company name, no VAT number, no authorisation and no registered office; the platform was flagged as unauthorised by the British authority as early as June 2024, and a New Zealand authority relayed in 2025 an alert on a site linked to the same brand; the operators communicate only on WhatsApp, with invented numbers and identities; the transfers pass through cryptocurrency exchanges and end up in unknown wallets; withdrawal is never allowed and is replaced by requests for new payments. The picture is such that, in the absence of proof to the contrary, prudence requires treating CapitaGains as a scam. Whoever runs it is free to reply with public documents, indicating company, authorisations and registered office.

If you have paid money to CapitaGains, or to linked platforms, have transferred cryptocurrency to wallets indicated by operators or have been asked to pay to unblock a withdrawal, contact us by filling in the form at the bottom of this page: we are a law firm that deals only with online scam cases, we have already followed this case and we assess your position, also out of court, indicating the initiatives actually available, without promising results that no serious professional can guarantee. If you have suffered the same scam, we can help.