A note first: we are a law firm and we handle online fraud cases only. If you want our help, fill in the form at the bottom of this article.
We have already handled this case and we can help people who have fallen into the same trap. globalnbcfinance.com is a scam, and in this file we found a document that explains the mechanism better than any account of ours could: the message the fraudsters used to move the victim onto a new site, calling it an update.
The "update" message
We reproduce almost in full the message that introduced globalnbcfinance.com, because it has to be read word by word. It was written in Italian, in flawless bureaucratic prose:
> "Dear client, we hereby inform you that the platform update has been duly carried out. The procedure is therefore complete and the platform has been updated. For any checks, the platform can be accessed at the following link: https://globalnbcfinance.com/ Your access credentials remain the same as those already in use and have not been changed."
Impeccable, bureaucratic, reassuring. And it contains, in four lines, the confession of everything.
First: a real financial operator does not change its internet address in order to carry out an update. Updates are done on the site that already exists. Changing domain is not maintenance, it is a move — and you move when the old address can no longer be used: because it has been reported, suspended, blocked or simply burnt.
Second: the line about credentials staying the same is not technical information, it is a sedative. It exists to prevent precisely the act that would save the person: stopping for a moment to wonder why the site has changed its name. If you have nothing to redo, you do not stop to think.
Third: a message like this always arrives before a demand for money. In the file we hold, immediately after the invitation to log in to globalnbcfinance.com the fraudsters were waiting for a telephone call from the victim about a further payment. The update was there to reopen the channel.
The blocked withdrawal
The injured party in the globalnbcfinance.com case told us he had never suspected anything until the moment he could not make a withdrawal. It is the point at which everybody notices, and it is also the most misunderstood.
A blocked withdrawal is not a technical problem, not a check in progress, not a matter of missing documents. It is the end of the harvesting phase. Until that moment the globalnbcfinance.com dashboard was showing numbers: those numbers were not a balance, they were a caption. The money left the circuit at the very moment of the transfer, and no button can bring it back.
That is why a blocked withdrawal should be treated as a date: it is the day you stop paying and start gathering evidence.
Thirty thousand euro on an eight-hundred-euro pension
In the case we handled the sum paid is around thirty thousand euro. The person is a pensioner with a pension of about eight hundred euro a month. The transfers to globalnbcfinance.com began in June 2026 and the last one dates to the end of October 2026, all of them abroad.
We write those two figures side by side because they say something precise: that sum cannot come from income. It comes from a lifetime's savings, from help asked of relatives, sometimes from loans. Whoever runs globalnbcfinance.com did not defraud an investor: they emptied an old age.
In legal terms this carries weight. The victim's age and condition make out the aggravating circumstance of diminished defence, and aggravated fraud under article 640 of the Italian criminal code becomes prosecutable by the State of its own motion: it is not an option to weigh up, it is a complaint to be filed. And since all the events fall in 2026, the aggravating circumstance introduced in 2024 for fraud committed by computer or telematic means also applies.
The documents they hold
Part of this story concerns the future, not the past. Over the months, the platform was given an identity card, a tax code, an email address, a mobile number and an IBAN.
That data served no verification purpose: it serves them. With an identity document and a tax code you open accounts, activate SIM cards, apply for loans and build identities to use on the next victims. Anyone who handed their documents to globalnbcfinance.com must say so expressly in the complaint and must warn their bank — and, in the months that follow, check their position with the credit information systems from time to time, where a loan taken out in your name by somebody else shows up before the first demand letter arrives.
The domain: opened in May, moved in August, alive now
We checked the technical data of globalnbcfinance.com in November 2026.
The domain was registered on 11 May 2026 through a Vietnamese registrar, and runs until May 2027. The last configuration change dates to 20 August 2026: it is reasonable to read that date as the moment the domain, bought months earlier, was put into service.
The site is still live and answers from the Cloudflare network, which hides the real server's address. The domain's mail, however, is hosted with a large shared-hosting provider: it means whoever runs globalnbcfinance.com has working mailboxes on that domain, and writes to victims from addresses that look corporate — like the update message.
The site's pages carry none of what an authorised intermediary must publish: no full corporate name, no VAT number, no registered office, no licence number, no supervisory authority. And the name itself is built around a three-letter acronym that echoes a well-known international brand: it is there to borrow an authority that does not exist.
Offering investment services to people in Italy without authorisation is the offence of unauthorised financial activity under article 166 of the Consolidated Law on Finance, and it is added to the fraud. In the case of globalnbcfinance.com there is no licence, in any register.
A check the bank is now obliged to run
There is one step that became important in 2026 and that many people do not know about.
Since 9 October 2025, under Regulation (EU) 2024/886, banks must carry out verification of payee on euro transfers: they must compare the name given by the payer with the holder of the IBAN and flag any mismatch before execution.
It is a question to put to your bank at once, for every transfer made after that date: was the verification carried out? Did it produce a mismatch warning? Was that warning shown to you? The answer should be obtained in writing, because it bears on what can be argued against the bank. That is a separate track from the criminal complaint and it should be opened in parallel.
What to do now
Do not make that telephone call and do not pay anything more. If whoever runs globalnbcfinance.com is waiting for a call from you about a further payment, that call is the only thing they are missing. No payment unlocks a withdrawal.
Save everything, starting with the messages. The platform-update message is valuable evidence: it proves the change of domain and the intention to keep the relationship going. Save it in full, with sender, date and time.
Photograph the globalnbcfinance.com dashboard while it exists, with the balance it shows, the operations and the page of the refused withdrawal.
Ask your bank for the full trail of every transfer: destination IBAN and account holder, receiving bank, date and time, and for recent transfers the outcome of the verification of payee.
Declare the documents you handed over in the complaint: identity card, tax code, IBAN. That is how you protect yourself against their future use.
Talk about it with your family. In the case we handled it was the person himself who asked a relative more at ease with technology for help. That is not a weakness: it is the most effective move we have seen anyone make.
Similar cases we have handled
The globalnbcfinance.com pattern repeats under different names:
- uniswapv4.com: the fake domain migration
- zs8596.it: the second site and the domain rotation
- sharecreditsecuritieslimited.com: the clone of an authorised firm
- revexglobal.net: five domains, five different providers
- nftcapitals.com: the fake broker with no company
- eccfinvestigators.com: the fake fund-recovery investigators
A warning that concerns us directly
We are aware that someone is telephoning defrauded people using our firm's name. We never call on our own initiative, we do not telephone in the evening or at night, we do not use foreign numbers and we never ask for money by telephone. If you receive a call like that, hang up and write to us through the form on this site.
If this happened to you, write to us
If you invested on globalnbcfinance.com, or you received a message announcing a platform update with a new address and the same credentials, fill in the form at the bottom of this page. Give the transfer dates, the amounts, the destination country and whether you were asked for a further payment to unlock a withdrawal.
We read every request and we answer. And if you are reading before making that call, do not make it: it is the one thing you can still decide today.
Do you need legal assistance?
Tell us about your case: free assessment, no obligation.
