Disclaimer: we are a law firm dealing exclusively with online fraud. This article arises from a real case handled by the firm and is published in anonymised form as regards the injured party, for public-interest purposes. The technical data reported comes from checks on the public domain registries carried out at the date of publication. If what you read sounds familiar, you can submit your case through the form at the bottom of this page.
When an unknown seller has to prove they really exist, they send a link to their location. It is the gesture that reassures most and that almost nobody verifies. In the case we describe, that link was map-ap-go.com.
map-ap-go.com is a scam: it is not a mapping service, it is not a location platform, it is not a business directory. It is a domain registered to manufacture fake proof of physical existence. Our firm has already handled this case — 7,000 euro paid for a motorhome never delivered — and in this article we explain how this kind of deception is taken apart.
Why map-ap-go.com is a scam: a .php page is not a map
Let us start with the document that made the difference in our file.
The client, who had asked where the seller was physically located, was sent this: an address of the map-ap-go.com form followed by a path and a file with a .php extension. Not a link to a known mapping service, not a location shared from a phone's own application: a web page built to resemble a map.
The difference between a map and a page like the one served by map-ap-go.com is everything, and it is visible to the naked eye once you know it.
A real location lives on the domain of the service providing it. When somebody shares a point on a map, the address you receive begins with the name of the mapping service, not with an invented name. If the link begins with a name you have never heard of — such as map-ap-go.com — and ends in a .php file, you are looking at a page somebody wrote, not at cartographic data.
And a page somebody wrote, like those served by map-ap-go.com, can say anything at all. It can show a panel with a grid of streets, a pin, a company name, an address, even a couple of five-star reviews. None of it is verified by anyone. There is no register behind it, no provider answerable for that data, no control. There is only whoever uploaded the file.
That is why map-ap-go.com is a scam in its very function: it exists to manufacture the one thing the remote buyer always asks for, namely proof that there is a real place at the other end.
In our case the same organisation used two variants of the same map-ap-go name, one with a single "p" and one with two. It is a detail worth knowing: those who work at scale register several similar spellings, so that when one is reported the other stays operational.
The registry check: three domains born in the same week
Here comes the single most important datum in the whole file, and one that should be deployed in full in a complaint.
We queried the domain registries starting from map-ap-go.com. The result is this:
map-ap-go.com was registered on 23 April 2026, expiring on 23 April 2027. The variant with two "p"s was registered on 22 April 2026. And the domain used as the "website and legal notice" of the self-styled company was registered on 24 April 2026.
Three domains, three consecutive days. All three with a one-year registration, the minimum term, the one that commits to nothing. All three resting on the same authoritative nameservers of the same hosting provider. All three with IP addresses of the same provider.
This is not a coincidence and not a weak indicator: map-ap-go.com is part of a kit. Whoever built this scam bought, at the same moment and from the same provider, the three pieces they needed — the fake map, its spare variant and the fake corporate site complete with a legal-notice page — and put them online together.
A caution: the fact that two sites share an IP address proves nothing on its own, because thousands of unrelated sites live on a single shared hosting server. The serious indicator is different, and it is the combination: the same authoritative nameservers, registrations concentrated within seventy-two hours, the same minimum term, the same provider. That set is attributable to a single account.
The investigative consequences are concrete and explain why one must move now.
Unlike many frauds we analyse, the domains of map-ap-go.com are still registered and still active, expiring in April 2027. That means that the registrar and the hosting provider hold, right now, the account name, the registration email, the payment method used, the access IP addresses and — the most valuable item of all — the list of other domains held in the same account.
That list is the real map, the one map-ap-go.com pretended to be. If, as we believe, this is a structure operating at scale, it contains the names used with the other victims. It is material obtainable only through a judicial request, and it must be expressly sought in the complaint, because nobody looks for it of their own motion.
There is finally one step to be taken immediately, which the client can perform himself: preserving the pages while they are online. At the date of this article the pages of map-ap-go.com are no longer reachable from our browser, although the domains remain registered and active in DNS. That is exactly what happens when a structure starts closing its shop windows: the name stays, the content disappears. Anyone who still has screenshots, or better a complete save of the page, holds evidence that cannot be created a month from now.
How it worked: the advertisement, Finland, then Poland
The mechanism in which map-ap-go.com was employed deserves telling in full, because anyone who recognises it stops in time.
It all begins with an advertisement on a social network: a motorhome at an attractive price, sold — so it is said — by a Northern European dealership. The person writing presents himself as an intermediary, with a first name, and for the whole negotiation he remains that first name: never a company name, never a registration number, never a VAT number.
The first proposal, the one accompanied by the first map-ap-go.com link, is impeccable, and that is precisely its purpose. The client is invited to attend the dealership, is given the website, email and telephone of a genuinely existing dealer — authentic contact details, used without its knowledge — and is told in plain terms: no deposit, no advance payment, everything is paid on the spot after seeing and testing the vehicle.
It is a sentence built to lower defences, and it works because it says exactly what a prudent person wants to hear.
Then the vehicle "changes". The chosen one is no longer available, another is offered, and with the new vehicle the country changes too: no longer Finland but Poland. And above all the rule changes: now a 3,000 euro booking payment is required.
This step is the heart of the map-ap-go.com artifice. The reassuring promise is banked as credibility and then replaced, once the buyer is inside the negotiation, has invested time, has formed a view of the vehicle and feels in a relationship with a person.
Immediately afterwards comes the time pressure: the booking is free but expires within an hour, the vehicle is withdrawn from sale only for that period, the transfer must be made before then. An hour is not a commercial deadline: it is a deadline designed to prevent any verification.
The escalation: 3,000, then 4,000, then another 3,500
Here the map-ap-go.com case becomes exemplary, because it shows the mechanism that characterises this family of frauds: the payment is never the last one.
Having paid 3,000 euro on the strength of what map-ap-go.com displayed, the client receives a booking invoice and arranges the journey: a flight to Warsaw, a train to Białystok, an appointment fixed for 25 November. Then comes the message: the supplier is asking for 4,000 euro more by way of guarantee, because collection has been set for that date.
The client objects — correctly — that this was not the agreement, that he has already paid more than thirty per cent, that he is collecting the vehicle in person and holds nothing. And here appear, one after another, all the verbal instruments of this technique.
There is offence turned into assertion: "we are a company officially registered in Poland, with physical premises and a verifiable legal existence", followed by an invitation to avoid "denigratory statements". Anyone who really has a registration number writes it down: they do not take offence, they answer with the number.
There is the appeal to personal trust: it is I who collect the money, not the supplier, because I am your trusted person. A sentence which, read coldly, is a confession of the entire scheme.
Alongside the fake map of map-ap-go.com there is manufactured social proof: take a look at the reviews group. A group run by the person citing it is not a review, it is a shop window.
There is simulated abundance: many Italian buyers pay the full amount in a single transfer, sometimes as much as fifty thousand euro; I have ten buyers waiting for me.
There is aggression: I do not like complicated clients, if you want to play tough I can change my attitude too. This is the moment when the victim, who has already paid, fears losing what has been given and gives way.
And finally there is the bogus refund procedure: of course, refunding the 3,000 euro is possible, you simply start a dispute procedure which may take up to a month. There is no procedure: there is the need to buy four weeks of silence.
The client pays the 4,000 euro. A few days later the "supplier" returns and asks for another 3,500. At that point, after his own research online, the man understands and stops. Total paid: 7,000 euro, besides travel expenses already incurred.
Those expenses, it must be said, are recoverable loss: air and rail tickets purchased as a direct consequence of the deception must be documented and included in the complaint, not treated as a side issue.
The datum that dismantles everything: three different countries
In the map-ap-go.com file there is an element that should on its own have stopped the operation, and it applies to anyone about to pay a foreign seller.
The dealership indicated was in Finland. The self-styled company declared itself registered in Poland. The account for payment was held by a natural person at a French bank, with a French IBAN.
Three countries, three different subjects, and a fake map on map-ap-go.com holding them together: no coincidence at all between who sells, who claims to be the seller and who collects.
This is the most useful practical rule in the whole article: the money must go to the entity that sells, under the name appearing on the contract, into an account held by that entity. A private individual collecting on behalf of a company is an anomaly with no lawful explanation in the vehicle trade, where the seller must issue an invoice and payment must be traceable to it.
Add the detail of the imposed payment reference: the client was required to state a first name and an alphanumeric order number. An order number in a reference to a personal account does not identify a contract: it identifies a position in a series. It means there are others, and that the number is the key to finding them. The institution should be asked for the list of operations bearing references from the same series.
We do not publish here the account holder's name or the full IBAN. A person who lends an account is very often themselves recruited through a bogus job advertisement, or a victim of identity theft: their position must be established individually by the authorities, and the forum for that is a filed complaint, not a blog.
The technical good news in the map-ap-go.com case is that the receiving account is held at a bank established in the European Union. It is therefore reachable by European Investigation Order: the institution is required by law to retain the holder's identity, the account-opening documents, the access IP addresses and the full transaction history, and to transmit them on request from the authority.
The legal framework: facts of November 2026
The payments in the map-ap-go.com case date from late October and early November 2026. Two consequences follow.
The first is favourable. As the facts post-date the entry into force of law 90/2024, art. 640 paragraph 2-ter of the Italian criminal code applies, aggravating fraud committed remotely by means of computer tools capable of hindering identification of the perpetrator. Here identification was hindered with surgical precision: a first name without a surname throughout, a fake mapping site, a fake corporate site, an account held by a third party in a further country.
To this are added the aggravating circumstance of particularly serious financial loss under art. 61 no. 7 and, where its conditions are met, that of diminished defence under art. 61 no. 5, recalled by art. 640 paragraph 2 no. 2-bis.
Also relevant are identity impersonation under art. 494, in respect of the use of a real dealer's authentic contact details to gain credibility, and misleading commercial practices under arts. 21, 22 and 23 of the Italian consumer code: falsely claiming trader status and the existence of premises are expressly listed among practices considered misleading in all circumstances.
The second consequence is a deadline. Simple fraud is prosecutable on complaint filed within three months of knowledge of the fact: with payments of early November 2026, that deadline falls at the beginning of February 2027. The aggravating circumstances in the second paragraph of art. 640 entail prosecution of the court's own motion, but building the case on that to cure a late complaint remains a weak choice when filing in time is perfectly possible.
And above all: it is the same window in which the domains are still registered and the data held by registrar and host is still intact.
How to check a foreign seller in five minutes
We close with the part that serves those who have not yet paid and have received a link like that of map-ap-go.com, because that is the part that prevents the loss.
Ask for the registration number, not for reassurance. Every European company has a public identifier in its country's business register. In Poland these are the KRS and the NIP, freely searchable online. A real company answers with the number in thirty seconds. Anyone answering with an indignant sentence is telling you they do not have one.
Check the age of the domain. A vehicle dealer trading for years has a domain that is years old. A domain registered a few months earlier, expiring in a year, is a temporary shop window.
Distrust any "location" that is not on a mapping service's own domain, starting with addresses like map-ap-go.com.
Never accept a change of beneficiary or of country. If the contract is with a company and the IBAN belongs to a natural person, the operation stops there. The same applies if the place of delivery moves after the agreement.
Refuse one-hour deadlines. No lawful sale of a vehicle worth tens of thousands of euro requires a transfer within sixty minutes. Urgency is the instrument, not the circumstance.
Pay, where possible, with instruments that offer protection. A bank transfer to a private individual is the least protected instrument there is.
What to secure immediately
Anyone caught up in the map-ap-go.com affair should keep receipts and confirmations for every transfer, with full beneficiary details, IBAN, BIC, country and payment reference, including the order number. A native export of the entire conversation, not screenshots: the export preserves numbers, timestamps and file identifiers. The original advertisement and the profile it came from, with the date. All links received, in their complete form, including those of map-ap-go.com and its variant. A complete save of the pages, if still possible. Any invoices or booking documents received. Air and rail tickets and every other expense incurred.
On that basis a complaint is drafted alleging aggravated fraud under art. 640 paragraphs 2 and 2-ter, with the aggravating circumstances under arts. 61 nos. 5 and 7, identity impersonation under art. 494 and, in relation to the receiving account, money laundering under art. 648-bis. Together with applications for acquisition from the registrar and the hosting provider of the domain registration data and of the list of domains attributable to the same account, acquisition of banking records, identification of the receiving account holder by European Investigation Order, and seizure.
Similar cases already handled by the firm
You may find useful our analyses of transwest-parcel, on the bogus courier and invented customs charges, of artisanworks.vip, on very short-lived domains, of eliteclouds.com, on the chain of payments that never ends, and of botongde.com. The second domain of this same structure is analysed in sienkosyn-com.pl.
If you paid after receiving a map-ap-go.com link
The picture is this. map-ap-go.com is a scam: a domain registered in April 2026 together with two others of the same series, devoid of any lawful function, used to manufacture proof of the physical existence of a seller who did not exist. Collection took place into a personal account in a third country, under a numbered reference, and the demands for money continued even after the main payment.
The facts are very recent, the domains are still registered and the data held by the registrar and the host can still be obtained. It is the best condition in which to act, but it does not last.
Our firm has already handled this case. You can submit your position for a preliminary assessment.
If you have suffered the same scam, we can help you. Fill in the form at the bottom of this page.
Do you need legal assistance?
Tell us about your case: free assessment, no obligation.
