The firm has already handled this case: a customer area on a one-year domain suspended by the registrar in October 2026, payments through an electronic payment service and demands for taxes in order to withdraw. What buyer protection does not cover.
Preliminary note: we are a law firm and we deal exclusively with online fraud and the unauthorised provision of financial services. This article arises from a real case handled by the firm and is published in anonymised form as regards the injured party, for public interest purposes. The technical data come from checks on the public domain-name registries carried out on the date of publication. If you recognise yourself in what you read, you can submit your situation using the form at the bottom of this page.
There are two details in the client.dualinvesting.com affair that recur in a great many cases and that almost no one thinks about: the payment was made through an electronic payment service, not a bank transfer, and the site presented itself with an address beginning "client.", like a real company's customer area.
Neither detail is accidental, and neither works the way the victim imagines.
client.dualinvesting.com is a scam, the firm has already handled this case, and here we explain why a professional-looking subdomain means nothing, what buyer protection on payment services actually covers, and why, despite everything, paying through one of those services leaves a better trail than many alternatives.
Why client.dualinvesting.com is a scam: the checks
Let us start with the registries, which here are particularly clear.
The domain on which client.dualinvesting.com runs was registered on 21 May 2026, expiring on 21 May 2027: one year, the minimum term. The registrar is a large international commercial operator and the name servers are those of a well-known content delivery network — a very common and lawful service, which proves nothing in itself but which has the practical effect of concealing where the site is really hosted.
The decisive fact is another: since 16 October 2026 the domain has been in clientHold, that is, suspended by the registrar. The name remains registered but is detached from the network and the site stops responding. It is a measure operators typically take following abuse reports: not a judgment, but external corroboration, documented and independent of the injured party's account.
The timing is worth noting: the injured party's last payment was in October 2026, and the site went dark in those same weeks.
And everything else is missing: no company, no VAT number, no registered office, no authorisation to provide investment services, no reference to any intermediary on a supervisory register.
"client." means nothing
This is the first practical contribution of the article on client.dualinvesting.com, and it applies to any address.
The part of an address before the domain name — "client.", "app.", "my.", "secure.", "area.", "portal." — is a subdomain. Whoever owns a domain can create as many as they like, within seconds, free of charge, and call them whatever they please.
There is no control, no verification, no authorisation behind a subdomain. "client." does not mean there are clients, "secure." does not mean there is security, "app." does not mean an application exists.
The rule is always the same: read the address from right to left, and the part that counts is the name immediately before the final extension. Everything before it is chosen by whoever registered the domain.
In the client.dualinvesting.com case there is an additional element that reinforces the suspicion: the main domain did not host a company website. The customer area existed, the company did not. We have documented the same pattern writing about webtrader.rdpsystem.pro.
Electronic payment: what protection covers, and what it does not
Here is the information that, in cases like client.dualinvesting.com, is always discovered too late.
Electronic payment services offer buyer protection programmes, very effective when you buy an item that never arrives or that arrives different from its description.
Those programmes, however, expressly exclude certain categories, and among them there are almost always investments, financial services and virtual currencies. A payment to a trading platform is not the purchase of goods: it does not fall within the protection.
There is a second exclusion, even more insidious: payments sent as "to a friend or family member", or in any case as a transfer between private individuals, are outside any protection by definition. And that is exactly the method the recipient asks you to use, often explaining that "this way there are no fees".
Hence a practical rule that always applies: when someone asks you to pay as though it were a gift to a friend, they are asking you to give up your protections. They are not doing it to save you the fees.
That does not mean nothing can be done. It means the right things must be done: open a dispute anyway within the time limits set by the service, request the complete statement of transactions and keep every receipt, even when you expect the dispute to be rejected. That material serves the criminal complaint, not just the refund.
The advantage many do not see
And here comes the positive part, because in the client.dualinvesting.com case it exists.
In the client.dualinvesting.com case the electronic payment service used is a supervised payment or electronic money institution, subject to anti-money-laundering obligations: it must identify its customers, retain transaction data for ten years and respond to requests from the judicial authority.
That means the account that received the payments is not anonymous. Behind it there is an identification, a document, an e-mail address, a bank reference for withdrawals.
In investigative terms, a payment to an account at a supervised provider is a better trail than a transfer to a wallet, and often faster than a bank transfer to a non-European account. What is needed is to ask for it in the complaint, specifying precisely the transactions, the dates and the destination account.
The "taxes and fees" that never end
In the client.dualinvesting.com sequence, after the payments came demands to pay taxes, fees and unlocking costs in order to withdraw. The injured party did not pay, and that decision spared them a far greater loss.
It is worth repeating, because in client.dualinvesting.com as elsewhere it is the avoidable part of almost all these affairs: there is no cost to pay in order to receive your own money. No serious operator asks a customer to pay in order to collect, and no tax authority collects into private accounts. The moment you are asked to send money in order to receive money is the moment the communication is false.
We have written about this in relation to veneziace.com and hmrevenue-agency.com.
The "fund recovery" advertising
There is one last point the injured party raised that deserves an answer, because many people experience it: after the fraud, social media fills up with adverts promising to recover the money.
It is not a coincidence, and it does not mean anyone "knows" what happened to you. It depends on how online advertising works: searching for information about scams, recovery and platforms builds an interest profile, and that profile is used to show you related adverts. Fake fund-recovery operators buy exactly that audience.
The test for judging them is simple and takes minutes: anyone asking for money in advance to recover lost sums must not be paid; a lawyer is on a public roll anyone can consult; no one can promise a result in criminal proceedings; and any sums seized are returned by the judicial authority, not collected by a private party.
The legal framework
The client.dualinvesting.com facts date from autumn 2026, and are therefore subsequent to Law 90/2024: Article 640(2-ter) of the Italian Criminal Code applies, aggravating fraud committed remotely by means of computer tools capable of obstructing identification of the perpetrator.
The aggravating circumstances of diminished capacity to defend oneself (Article 61(5)) and, above the threshold, of particularly serious financial loss (Article 61(7)) also apply; the repeated payments amount to a continuing offence (Article 81(2)).
Displaying balances and transactions that do not exist on a platform controlled by the perpetrators is also relevant as computer fraud (Article 640-ter). Offering investment services to the public without authorisation falls under Article 166 of the Italian Consolidated Law on Finance, prosecuted ex officio. The subsequent movement of the sums is relevant as money laundering (Article 648-bis).
Finally, it must be considered that the injured party was asked for, and handed over, an identity document, tax code and a household utility bill: enough, in the hands of whoever holds it, to attempt to open accounts in someone else's name. An express, dated disavowal of the documents handed over is therefore advisable, to be communicated to one's own bank as well.
What to do now
Anyone who has paid client.dualinvesting.com should obtain: the complete statement of transactions from the payment service used, with dates, amounts and destination account; the receipts for every single payment; the screenshots of the platform and the balance displayed, while they last; the native export of the conversations, done with the application's function; and the list of personal documents handed over, with dates and channels.
The complaint must contain the application for preventive seizure (Article 321 of the Code of Criminal Procedure), the request for information on registration under Article 335, the request for notice in the event of a request to shelve the case under Article 408(2) and the express request to obtain, from the payment service provider, the identifying data of the beneficiary account holder.
If contact with the organisation is still open, it must be closed: every extra message is another chance to persuade you to pay again.
Similar cases already handled by the firm
Anyone who has come across client.dualinvesting.com will also find useful our analysis of 2pmeuropesa.com, on another domain suspended by its registrar, and that of cryptoledgerx.top, on what reacting quickly achieves.
If you paid through a payment service: what remains
The picture is this. client.dualinvesting.com is a scam: a customer area on a domain registered in May 2026 for a single year and suspended by the registrar in mid-October 2026, behind which there never was a company or an authorisation.
Buyer protection does not cover investments, and it does not cover payments sent as a transfer between private individuals. But the account that received your money belongs to someone, at a supervised operator that keeps the data for ten years. That is the trail, and it must be requested from the authorities.
The firm has already handled this case. You can submit your situation for a preliminary assessment.
If you have suffered the same scam, we can help you. Fill in the form at the bottom of this page.
Do you need legal assistance?
Tell us about your case: free assessment, no obligation.
