We have already handled this case and we can help people who have fallen into the same scam. coinupy.com is a scam: a domain paid for one year only and never renewed, expiring on 30 November 2026. Anyone who still needs to save evidence has days. If this happened to you, fill in the form at the bottom of this page.
A note first: we are a law firm and we handle online fraud cases only. If you want our help, fill in the form at the bottom of this article.
We have already handled this case and we can help people who have fallen into the same trap. coinupy.com is a scam, and this article has a real deadline: the domain goes dark in a matter of days.
The domain expires on 30 November 2026
We checked the technical data of coinupy.com in November 2026. The domain was registered on 30 November 2025 through a Singapore registrar, for one year only, and it expires on 30 November 2026. It has not been renewed.
It is worth pausing on this date of coinupy.com, because it is the kind of information nobody looks at and that changes everything.
A company that means to trade registers its domain for several years and renews it in advance, because losing it would mean losing its customers, its email and its ranking. Whoever bought coinupy.com did the opposite: they paid for twelve months, once. It is not a business: it is a season, with a closing date decided before it opened.
And there is an immediate consequence. When the expiry arrives the site goes dark, and after the grace period the name can be taken by anyone. The content does not survive anywhere: it is not an archive, it is not a page that can be recovered later. Anyone who still has access to their dashboard on coinupy.com has a few days to photograph everything. After that there will be nothing left to photograph.
The same date matters to anyone working on the judicial side: a request to obtain or seize the content makes sense now, not in January. It is a deadline that can be written into a supplementary complaint, with the exact date.
Registered and configured in two hours, then never touched again
The second piece of technical data says the same thing from another angle. The nameserver configuration of coinupy.com was carried out on the day of registration, about two hours later, and from that moment it was never changed. Not once, in twelve months.
A real financial service changes, updates, moves, corrects. Here there was no maintenance because there was nothing to maintain: a page that displays numbers needs no work.
On top of that, no email is configured on the domain. It means whoever ran coinupy.com never wrote from an address on their own domain: they used free mailboxes, that is, addresses that cannot be traced back to any company and that are abandoned in a second.
The site's pages carry none of what an authorised intermediary must publish: no corporate name, no VAT number, no registered office, no licence number. Collecting money for investments in those conditions amounts to unauthorised financial activity under article 166 of the Italian Consolidated Law on Finance, which is a separate offence and is added to the fraud.
The file: five thousand euro in cryptocurrency
In the coinupy.com file the payments are concentrated in a short period, around August 2026, for about five thousand euro, with transfers abroad and cryptocurrency movements sent to a wallet. The injured party had already filed a criminal complaint in September 2026 and has had no contact with the fraudsters since.
It is the best situation among those we see, and we say so because it should serve as an example: he stopped early, he reported at once, he paid for no recovery.
The account was his wife's
There is a point in this story that concerns many families and that almost nobody considers.
The money sent to coinupy.com was taken from his wife's account. Technically, that means the person whose assets were depleted is not only the one who talked to the fraudsters: it is also, and directly, the account holder.
The practical consequence is simple and useful: she too is an injured party, she can file her own complaint, she can be admitted to assert her own position in the proceedings, and she can approach her own bank in person — something her spouse, formally, cannot do for her. In files where there are two accounts, the requests to the banks must be made by two people. It is the kind of detail that doubles the available information at no cost.
After the fraud, the fake recovery firm in Lugano
As in almost every file, after the loss on coinupy.com came the second wave. In this case the injured party turned to a self-styled debt-recovery company based in Lugano: they were fraudsters too.
It happens so often that it is worth setting a rule. A company that presents itself as a specialist in recovering money taken by investment platforms, that is based in a country where you cannot check it in your own language, that contacts you after the fraud, that is on no professional register and that asks for an advance or a percentage of sums not yet recovered, recovers nothing. It is the second withdrawal from the same person, and it targets someone already selected as willing to hope.
In Italy, recovering money from a fraud runs through the complaint, the public prosecutor, court orders and, for banking relationships, through complaints procedures and the Banking and Financial Arbitrator. It does not run through an email that arrived afterwards.
Cryptocurrency does not mean lost
Where the money from coinupy.com went to a wallet, the question always remains: can anything be done? The honest answer is that it depends on two things, and neither of them is the blockchain.
The first is the exchange you went through. If you bought the cryptocurrency on a regulated platform and then sent it, that platform holds your verified identity, the amount, the date and the destination address. That data is released to you on request and to the judicial authority on an order.
The second is where those funds were converted. A destination address, on its own, has no name; but when those sums are turned into cash they almost always pass through an operator that applies anti-money-laundering rules and therefore holds an identity document on file. That is where you act, with the seizure provided for by article 321 of the Italian code of criminal procedure, and that is why the complaint needs the transaction identifiers.
In plain terms: collect the transaction codes. They are the most valuable thing you have.
What to do now
You have a few days for the site. Screenshots of the coinupy.com dashboard, the balance, the history, the withdrawal page, with the address visible in the bar. After the expiry on 30 November 2026 there will be nothing left.
Retrieve the cryptocurrency transaction identifiers from the exchange you used, together with the destination addresses.
Ask your bank for the full trail of the transfers: destination IBAN and account holder, receiving bank, country, date and time. And for euro transfers made after 9 October 2025, the outcome of the verification of payee the bank is obliged to carry out.
If the account belonged to another member of the family, file two complaints. It is not a formality: there are two positions, two banks to question, two legal standings.
Pay for no fake recovery connected to coinupy.com and do not answer anyone who offers to help you afterwards.
Declare the documents you handed over: identity card, IBAN, utility bills. An identity document and a utility bill are enough to open an account in your name.
Similar cases we have handled
The coinupy.com pattern repeats under different names:
- h5.wxpostexxesoxm.buzz: the fake relationship and the disposable app
- eccfinvestigators.com: the fake fund-recovery investigators
- globalnbcfinance.com: the fake platform update
- bybiititac.com: the fake state taxes and the crypto payments
- nftcapitals.com: the fake broker with no company
- mh6215.it: three domains, two case files, one account
A warning that concerns us directly
We are aware that someone is telephoning defrauded people using our firm's name. We never call on our own initiative, we do not telephone in the evening or at night, we do not use foreign numbers and we never ask for money by telephone. If you receive a call like that, hang up and write to us through the form on this site.
If this happened to you, write to us
If you invested on coinupy.com, fill in the form at the bottom of this page, and do it in the next few days rather than next month: the domain expires on 30 November 2026 and everything that could still be photographed disappears with it.
Give the payment dates, the amounts, whether you went through an exchange, and whose account the money left from. We read every request and we answer.
Do you need legal assistance?
Tell us about your case: free assessment, no obligation.
