We have already handled an evolutiongruop.co scam case: fifty thousand euros paid to a site with a misspelled name, no longer registered today, after granting the fake advisers remote access to the computer. If you were caught by the same scam we can help you: use the form at the bottom of this page.
Note: we are a law firm dealing exclusively with online fraud. If you were caught in the same trap and want help, you can write to us using the form at the bottom of this article.
Why we say evolutiongruop.co is a scam
We have already handled the case of a client who, between June and September 2026, paid fifty thousand euros into evolutiongruop.co, a platform presented as an investment operator. He is a pensioner, approached with the usual dedicated-adviser script, who today has neither the money nor anyone to talk to: since the end of October the supposed operators have vanished.
Two elements make the evolutiongruop.co case instructive for anyone: the name of the site and the remote access to the computer.
The misspelled name
The domain is not called "evolutiongroup": it is called evolutiongruop.co, with the "u" and the "o" swapped.
That is not a trivial detail. A name sounding like that of an international corporate group conveys solidity, and that is enough for many people not to read it letter by letter. The people who build these platforms know it and choose generic, reassuring names, often with a minimal distortion that avoids overlapping with existing trade marks and keeps the domain available for purchase.
It must be said clearly, also to protect those who have nothing to do with this: there are perfectly reputable companies whose name contains the word "Evolution", and none of them has any connection with evolutiongruop.co. The similarity of the name is precisely what the organisation was after.
The practical rule we draw from it is simple: before paying money, read the site's name letter by letter, then look for the company running it. If the name matches nothing verifiable, it is not a slip of the pen.
That domain no longer exists
We queried the registers in November 2026 and the result is unambiguous: evolutiongruop.co is no longer registered. The registry for the .co extension answers that the name does not exist. It is not merely a switched-off site: it is a domain allowed to lapse after the harvest.
This has three consequences worth knowing.
The first is that anyone looking for the platform today finds nothing, and often concludes that no possibility is left. That is false: the traces remain in bank accounts, in historical domain records and on devices.
The second is that a lapsed domain can be bought by anyone. Anyone holding old links or old emails pointing to evolutiongruop.co should treat them as dangerous and stop clicking them.
The third concerns evidence: precisely because the site has disappeared, the screenshots the victim kept become decisive. They must be saved, printed and attached to the criminal complaint before those are lost too.
Remote access: the most dangerous mistake
In the evolutiongruop.co case, besides an identity document, a tax code, contact details, a home address and bank account details, the supposed advisers were granted remote access to the computer through an ordinary assistance program.
This is the most serious element, and it deserves a proper explanation because it is always underestimated. Whoever takes remote control of a computer sees and can do everything its owner sees and does: they can open home banking while the user is logged in, read passwords saved in the browser, download personal documents, watch one-time codes arriving on the screen or on the phone lying next to it, and install software that stays active after the session ends.
In practice this conduct is not absorbed into the fraud: it is separately relevant as unauthorised access to a computer system under article 615-ter of the Italian Criminal Code and, where payment instructions were executed from outside, as computer fraud under article 640-ter. These are charges to be assessed case by case, but they belong in the complaint, because they change the scope of the investigation and allow technical examination of the device.
Emptying the account is not the answer
After the payments to evolutiongruop.co, fearing withdrawals by third parties, our client emptied his own bank account. It is an understandable reaction and we meet it often, but it does not solve the problem: if the computer is compromised, the risk is not in the balance, it is in the credentials and in the device.
What should be done instead is: tell the bank immediately that unauthorised remote access took place and ask for home banking credentials to be blocked and reissued; change every password from a different, clean device, starting with the email account; uninstall the remote assistance program and have the computer examined by a technician, if possible keeping it for any forensic checks; enable two-factor authentication on email and accounts; check that no beneficiaries or standing instructions have been added that the user does not recognise.
What we checked
We found no company name, no VAT number, no registered office and no reference to any authorisation connected to evolutiongruop.co, and no entry in the registers kept by CONSOB, the Italian market authority, or among the EU intermediaries entitled to operate in Italy. Collecting money from the public to invest it in financial instruments without authorisation is the offence of unlawful provision of investment services under article 166 of the Italian Consolidated Law on Finance, punished by one to eight years' imprisonment.
The transfers to evolutiongruop.co went abroad, the last one on 25 September 2026.
Shame and the complaint: a point to clear up
After the evolutiongruop.co fraud our client did not file a complaint, out of shame. It is the reason we hear most often, and it causes real harm, because time works against whoever lost the money.
There is, however, a technical aspect worth knowing, because it removes a needless worry. Simple fraud is prosecutable on the victim's complaint within three months; but where one of the aggravating circumstances of the second paragraph of article 640 of the Criminal Code applies — and that is the case for frauds committed at a distance, under no. 2-bis in relation to article 61 no. 5 — prosecution is automatic, under the third paragraph of the same article. A delay in reporting therefore does not prevent proceedings from starting.
We add this, because it is right to say it: among the people we assist there are professionals, entrepreneurs, teachers, public officials and pensioners. It is not a question of naivety. It is a question of scripts built and tested on thousands of people.
The criminal framework
In the evolutiongruop.co case, besides aggravated fraud under article 640 and unlawful financial activity under article 166 of the Consolidated Law on Finance, the following must be assessed: the aggravating circumstance of particularly serious financial harm under article 61 no. 7; the aggravating circumstance introduced in paragraph 2-ter of article 640 by law 90/2024, applicable because the facts date from 2026; unauthorised access to a computer system under article 615-ter and computer fraud under article 640-ter for the use of remote control; money laundering under article 648-bis or self-laundering under article 648-ter.1 as regards whoever moved the money.
Aggravated fraud becomes time-barred after six years, up to seven years and six months with interrupting acts; the civil claim follows the longer term under article 2947, third paragraph, of the Civil Code. Banking records can be obtained for ten years under article 119, fourth paragraph, of the Consolidated Banking Law, and intermediaries must keep identification data for the same period under legislative decree 231/2007. For transfers abroad the tools are the European Investigation Order under legislative decree 108/2017 and preventive seizure under article 321 of the Code of Criminal Procedure.
What to do now
Do not pay any more money to evolutiongruop.co or to anyone promising to unlock the account. Secure the computer and the credentials before anything else. Save and print every screenshot you have of evolutiongruop.co, because the site no longer exists. Ask your bank for complete copies of the payment records showing the beneficiaries' IBANs. File a criminal complaint even if time has passed. And do not turn to anyone who contacts you promising immediate recovery of your money in exchange for an advance payment: that is the second scam.
We can help you
Our firm deals exclusively with online fraud and has already handled cases entirely comparable to evolutiongruop.co: fake brokers, domains that vanish after the harvest, remote access granted to fraudsters and transfers abroad.
If you have paid money to evolutiongruop.co or to a platform working the same way, contact us using the form at the bottom of this page: we will review the documents and tell you honestly what concrete prospects exist in your case.
You can read other comparable cases we have handled:
Do you need legal assistance?
Tell us about your case: free assessment, no obligation.
