revexglobal.net is a scam: five domains, five different providers

A note first: we are a law firm and we handle online fraud cases only. We are not a funds-recovery company and we never ask for an advance payment to unlock money. If you want our help, fill in the form at the bottom of this article.

We have already handled this case and we can help people who have fallen into the same trap. We say it straight away, because anyone searching for the name of this site after sending money needs to know one thing: you are not the first and you are not alone. revexglobal.net is a scam, and the person who brought us this case did not lose money on one site, but on five different domains, one after another.

An invented name that sounds like a financial operator

The name of revexglobal.net was built at a desk: three pieces that mean something in financial language (revenue, exchange, global) bolted together to produce a brand that looks like it has existed for years. It has not. There is no company behind revexglobal.net, no VAT number, no registered office, no registration number in any register.

The site's pages do not carry the information any authorised intermediary is obliged to publish: full corporate name, company-register number, registered office, supervisory authority, licence number. All of it is missing. That is not an oversight: it is the precondition for nobody being able to sue.

The domain: opened in August, still standing

We checked the domain's technical data in November 2026. It was registered on 1 August 2026 through a German registrar, Key-Systems GmbH. The last change dates to 31 October 2026: someone was still maintaining it a few weeks ago.

The site revexglobal.net is still live and answers from two addresses on the Cloudflare network, which acts as a screen in front of the real server. The domain also has its own dedicated mail server: whoever runs it sends and receives email at that address, and therefore writes to victims from an address that looks corporate.

Three months old and still online. Anyone reading now has time to save the screenshots: when revexglobal.net is switched off, and it will be, those screenshots will be the only proof that the site ever existed.

Five domains, five different providers

This is the part of the revexglobal.net case we think is most worth telling, because it explains how this kind of fraud works today.

The person who came to us, a pensioner and former physical-education teacher, was moved across five different sites in sequence. We checked the registration data of all five, one by one. The result:

• different registrars: one American, one German, one based in the Bahamas, one French;
• different nameservers, including an Icelandic provider that markets anonymity as its selling point;
• different extensions: .info, .com, .net;
• registration dates spread between August and September 2026.

We want to be honest about what this does and does not mean. The five domains are not technically linked to each other. They do not share a registrar, they do not share nameservers, they do not share a mail provider. Anyone looking for technical proof tying them together would not find it, and we are not going to invent it.

The link is a lived fact, not a technical one: a single person was routed through all five, from the same conversations, in the same period, with the same script. And the fragmentation is not accidental. It serves exactly this purpose: one report to one registrar brings down only one domain, and the other four keep working. Anyone who understands the mechanism stops chasing the site and starts following the money.

The script: from the fake exchange to the fake recoveries

The sequence we reconstruct from the documents is always the same, and revexglobal.net occupies the middle link.

It always starts from a real need, and revexglobal.net arrives when the person is already struggling. In the case we handled the need was a loan: home works to finish, a salary-assignment loan already running, finance adverts seen on social media. Then come the advance payments — file opening, insurance, codes to confirm — and the loan never arrives. After the advances comes the investment platform, where the money already lost appears to multiply on a dashboard nobody supervises. Finally come the people who say they have traced the funds and ask for another three or four thousand euro to release them.

Each link addresses the same person and uses the disappointment of the previous link as leverage. That is why the totals grow even when every single payment looks small.

No licence: what the law says

Collecting money from the public while presenting yourself as an investment platform without authorisation is a separate criminal offence in Italy, under article 166 of the Consolidated Law on Finance. It does not matter that the site claims to be regulated abroad: if the activity is directed at people in Italy, an Italian licence or a European passport is required. In the case of revexglobal.net there is neither.

On top of that sits fraud under article 640 of the Italian criminal code: artifice and deceit, a site built to look like something it is not, the victim induced into error, the payment. Where the victim is an elderly person, the aggravating circumstance of diminished defence makes the offence prosecutable by the State of its own motion: filing a complaint is not a step to weigh up cautiously, it is a step to take.

Where money was moved into cryptocurrency or pushed through third-party accounts, money laundering also comes into play, and one thing has to be said plainly, because we have seen it happen more than once: a person who lends their own bank account, even in good faith, risks ending up under investigation. That is not a theoretical scenario, it is a case we have defended.

What to do if you have paid revexglobal.net

If you have sent money to revexglobal.net, in this order and without waiting.

Save everything now. Screenshots of revexglobal.net while it is online, of the account page, of the chats, of the emails. Transfer and top-up receipts. The WhatsApp voice notes: they disappear more often than people expect.

Pay nothing more. No tax, no release fee, no advance. Anyone asking you for money in order to give you money back is defrauding you a second time, and they are doing it precisely because they know you have already paid once.

Ask your bank for the full payment trail: destination IBAN, account holder, receiving bank, date and time. The bank is required to keep this data for ten years and to give it to you. That is the material real work is done on.

Stop talking to them. Do not explain, do not threaten, do not announce the complaint. Every reaction of yours is information they use.

Similar cases we have handled

The revexglobal.net pattern repeats under different names:

• blockchain-databasewallet.info: the wallet database that does not exist
• uniswapv4.com: the fake domain migration
• eccfinvestigators.com: the fake investigators promising recovery
• luceviering.com: fake online loans with advance fees
• intfadservice.com: the fake UN agency and the fake recovery
• userportal.space: the fake blockchain certificate

A warning that concerns us directly

We are aware that someone is telephoning defrauded people using our firm's name. We never call on our own initiative, we do not telephone in the evening or at night, we do not use foreign numbers and we never ask for money by telephone. If you receive a call like that, hang up and write to us through the form on this site.

If this happened to you, write to us

If you have paid revexglobal.net, or one of the sites you were pushed towards afterwards, fill in the form at the bottom of this page. Give the payment dates, the amounts, how you paid and who you spoke to. You do not need to have everything in order: you need to tell us soon, because with bank transfers and card top-ups time is the variable that matters more than any other.

We read every request and we answer. Anyone reading this article before paying has already done the most useful thing: they stopped to search for the name of the site.