A note first: we are a law firm and we handle online fraud cases only. We do not ask for advances to try to recover money. If you want our help, fill in the form at the bottom of this article.
We have already handled this case and we can help people who have fallen into the same trap. megachaint.com is a scam, and the file we hold is the heaviest of the series: one hundred and ten thousand euro, a pensioner of seventy, and three separate waves against the same person.
The three waves
The first wave of megachaint.com is from 2024: the cryptocurrency investment platform, the payments, the capital growing on screen. One hundred and ten thousand euro, paid out by Italian and foreign transfers and converted into cryptocurrency on an exchange.
The second wave is from 2026: along come the people who promise to recover the money lost. They do not ask you to invest: they ask you to pay in order to get it back. The file records a precise promise, the recovery of nine bitcoin, a figure bearing no relation to what was paid in and serving only to make the prize look bigger than the cost. The last payment is from July 2026.
The third wave of megachaint.com is now: the injured party is still in contact with them.
We write this because it is here, and not in the first fraud, that something can still be done. Anyone who lost money on megachaint.com in 2024 has a long road ahead; anyone talking to someone today can close that door tonight.
Both domains no longer exist
We checked the technical data of megachaint.com in November 2026, and the result is clear-cut to the point of being brutal.
megachaint.com is no longer registered. It has no addresses, no nameservers, and it does not appear in the .com registry. The link leads nowhere.
And it is not the only one. A second address appears in the file, eafin.org, used by the person handling the contacts: that one too is no longer registered. Two domains, two mailboxes — a support address on the first, a personal one on the second — and neither of them exists any more.
It means the entire visible infrastructure has evaporated. There is no page to photograph, no address to write to, no contact form to keep. The only documentation that exists on megachaint.com is what the injured party saved beforehand: and fortunately, in this case, he saved a great deal of it.
That is why we repeat the same thing in every article. Screenshots are not there to convince us: they are there because in six months they will be the only trace left in the world of a site that existed for two years.
The disposable identity
The person who handled the relationship on megachaint.com presented herself with an English name and an email address on the second domain, claiming to be in England.
It has to be said plainly: that name in all probability belongs to nobody. It is not an identity stolen from a real person, nor a company to look up in a register: it is a label, chosen because it sounds credible to an Italian, and abandoned along with the domain. When the domain dies the person dies too, because she was never born.
This has a practical consequence worth knowing: in a complaint you do not chase names, you chase accounts. The name declared by the operators of megachaint.com should be written down, because it can resurface elsewhere and it helps to link files; but the part that produces results is the transaction identifiers, the destination IBANs and the exchange the money passed through.
The recovery that recovers nothing
On the second wave of megachaint.com it is worth bringing in an outside source, because this is not the firm's opinion.
The Global Anti-Scam Alliance, an international organisation that works on online fraud, published an alert because its own name was being used by fraudsters to offer fake recoveries to people who had already been defrauded. The alert sets out the details that gave the fake representative away: he wrote from a free email address with the organisation's name misspelled, he used a virtual telephone number, and he claimed a "security department" that does not exist. And it makes the most important point clear: that organisation does not recover funds.
We report it for two reasons. The first is that it shows how structural the phenomenon is: even those who fight fraud find their name used to commit more of it. The second is that it applies exactly to us: we are aware that someone is telephoning defrauded people using our firm's name.
And a distinction almost nobody draws has to be added. A commercial crypto-recovery service that contacts you and asks for an advance or a percentage is not the same thing as the judicial route: the judicial route runs through the complaint, the public prosecutor, court orders on the accounts and on the exchanges. The first is almost always a fraud; the second is slow and guarantees nothing, but it is the only one with real tools.
"I pay no advances"
In the megachaint.com file there is a sentence from the injured party we want to quote, because it is the best rule he could have given himself: he wrote that he no longer pays anyone in advance and that he will pay on results only.
He is right, and after two frauds that is a clarity deserving respect. We add only one thing, because in his case it is the delicate point: the same rule applies to anyone presenting themselves as a friend, as an intermediary, or as someone who "knows a person". The moment an advance is requested is the moment the conversation ends, whoever is on the other side.
The offence, with a distinction that matters
What happens on megachaint.com amounts to fraud under article 640 of the Italian criminal code, and where the victim is an elderly person the aggravating circumstance of diminished defence makes the offence prosecutable by the State of its own motion: the complaint is to be filed, not weighed up.
Here, though, a technical point matters for the legal classification. The specific aggravating circumstance for fraud committed by computer or telematic means was introduced in July 2024. It does not apply to 2024 facts predating that date; it applies fully to the second wave, the one in 2026. This is not a detail for lawyers only: it means the two blocks of facts must be described separately, with their dates, because they fall under different frameworks.
The second fraud, the fake recovery, is an autonomous offence with recent facts: it is the part that can best be worked on, because the 2026 payments are still traceable. Where the money passed through an exchange, that operator holds the customer's verified identity, the amounts and the destination addresses, and hands them to the judicial authority on an order, including for the purposes of the seizure provided for by article 321 of the Italian code of criminal procedure.
A word about families
In the megachaint.com file, as in almost all the worst ones, there is a human aspect with a concrete effect on the work.
When the first fraud is discovered at home, the reaction is often anger. It is understandable, and it usually comes from fear. But it produces a precise effect: the person who was defrauded stops talking. And when the second wave arrives, the fake recovery, they hide it — because admitting it would mean proving the angry relative right.
That is how a hundred-thousand-euro loss becomes a hundred-and-ten-thousand-euro loss. If something like this has happened in your household, the most useful thing you can do is not to ask how they could have: it is to ask whether right now there is someone writing to them.
What to do now
Break off all contact with anyone writing from megachaint.com or in its name. No reply, no explanation, no announcement of a complaint.
Set the two phases out in order, with the dates: the payments to the platform and the payments to the fake recoveries. They are two complaints, or at least two chapters with distinct dates.
Retrieve from the exchange the transaction identifiers and the destination addresses, and ask your bank for the full trail of the transfers: IBAN and account holder, receiving bank, country, date and time.
Keep everything in original form, including the names and email addresses used: the domains have vanished, your copies have not.
Pay no advance, to anyone.
Similar cases we have handled
The megachaint.com pattern repeats under different names:
- coinupy.com: the domain that expires on 30 November 2026
- eccfinvestigators.com: the fake fund-recovery investigators
- intfadservice.com: the fake UN agency and the fake recovery
- apexroutecloud.com: cash by hand and a fake recovery
- sharecreditsecuritieslimited.com: the clone of an authorised firm
- h5.wxpostexxesoxm.buzz: the fake relationship and the disposable app
A warning that concerns us directly
We never call on our own initiative, we do not telephone in the evening or at night, we do not use foreign numbers and we never ask for money by telephone. If you receive a call of that kind in our firm's name, hang up and write to us through the form on this site.
If this happened to you, write to us
If you invested on megachaint.com, or if after a fraud someone promised to recover your money in cryptocurrency, fill in the form at the bottom of this page. Give the dates of the two phases, the amounts, the exchange you used and, if you have them, the transaction codes.
And if someone is writing to you right now: that is the conversation to close before you read the rest. We read every request and we answer.
Do you need legal assistance?
Tell us about your case: free assessment, no obligation.
