rfcofficial.io is a scam: the «Royal Finance Coin» token sold with guaranteed capital

Foreword: we are a law firm and we deal exclusively with online scams. We have already handled the case of a person who fell into the trap of rfcofficial.io and we can help anyone who has suffered the same scam: if you want to be assisted, fill in the request form at the bottom of this article.

rfcofficial.io is a scam: the site is the shopfront of the «Royal Finance Coin» (RFC) token, sold in a «presale» in 2024 with the promise of multiplying the capital tenfold in twelve months and with the guarantee, repeated orally and in writing, of getting the money back. The money, however, never went through the site. It was paid by bank transfer to an intermediary, an English company incorporated in January 2024 and dissolved in October 2025, which collected it as «fees» and as «investment». We do not write this from hearsay: we have examined the criminal complaint filed with the Public Prosecutor's Office, the signed contracts, the filing receipt, the conversations and voice notes in the file, and we have checked the domain registration and the UK companies register.

The conclusion is clear: rfcofficial.io is a scam because no serious issuer guarantees the capital invested in a crypto-asset, because no real investment yields a fixed 2 or 3% every month, and because, throughout the whole affair, nobody ever produced documentary proof that the tokens had been bought. The case has, however, an aspect that matters to those who work on the criminal side: here the site is not the place where the deception is consummated, but the tool that makes it credible. The conduct rests on a personal relationship of trust, and the difficulty, for the defence and for the prosecution, lies entirely in separating what is a commercial promise from what is artifice and deceit.

How rfcofficial.io works: a token «in presale» used to sell trust, not a crypto-asset

The script in the file on rfcofficial.io is linear and repeats identically in three different positions. In January 2024 a self-employed professional is put in touch with a self-styled financial intermediary through an acquaintance, who says he entrusted him with small sums and is satisfied. The contact moves quickly to Instagram and then to WhatsApp, with video calls. The interlocutor says he lives in Dubai, that he is a trader and the founder of a consultancy company, and within a few weeks builds a friendship: when he is in town he meets the person, who offers him her own professional services free of charge. The personal bond, in the story of rfcofficial.io, is not a narrative detail. It is the mechanism that replaces, in the victim's mind, any documentary verification.

The first product proposed before rfcofficial.io is not the token. It is the so-called «prop firms», that is, accounts presented as opened with online trading platforms and managed by «in-house traders». On 21 and 22 February 2024 three bank transfers totalling 10,000 euros are made: according to a voice note of 21 February, 6,000 euros were fees for the «organisational structure» and only 4,000 would have been the actual investment. A 60% charge at entry, communicated orally, is in itself a warning sign that a professional investor should not ignore. Whoever invests in the universe of rfcofficial.io will never manage to access the platforms on which their account was supposedly opened, and to requests for clarification will receive reassuring answers devoid of any detail.

In April 2024 the rfcofficial.io token appears. It is presented as a project not yet launched, with a website, a promotional video on social media and a time-limited presale phase. The intermediary pushes, in a voice message of 21 May 2024, because «the deadlines are tight» and the person risks «missing the presale», and goes as far as predicting, «in confidence» and «in the worst case», a tenfold multiplier in twelve months. In a second voice note of 18 June 2024 he adds that, even if things went badly, the capital would be «guaranteed» by a further investment fund of 200,000 euros to which more money was to be allocated. Between April and July 2024 the person pays, for the rfcofficial.io token, 59,000 euros, by bank transfer, to the intermediary's company «for the purchase of RFC»; tens of thousands of euros more follow for related initiatives, up to a total of about 280,000 euros, never returned.

On rfcofficial.io there is a point that the complaint grasps and that industry coverage usually overlooks: the URL promoting the token, rfcofficial.io, collects nothing. The artifices of rfcofficial.io are those of a showcase site, of a «payments» platform created ad hoc (the complaint calls it «RFC Pay», associated with the token) and of an interface in which the victims could only look at the balances, without being able to move them. The money was already elsewhere.

Domain, holder and authorisations: what can really be seen behind rfcofficial.io

The RDAP registry, queried on 11 November 2026, reports for the rfcofficial.io domain a registration date of 6 July 2026, a transfer to the registrar on 12 July 2026, a last update on 11 August 2026 and an expiry on 6 July 2028. The registrar is a large US operator, the holder's data is shielded by a privacy service and the name servers are Cloudflare's, which hides the address of the destination server. The status of rfcofficial.io includes the «server hold» flag, which in registry language means that name resolution is suspended: on 11 November 2026 rfcofficial.io was not reachable. We do not know why the suspension was ordered, and we do not attribute to this circumstance a meaning we cannot prove.

There is, however, a discrepancy worth noting. An industry article published in July 2024, cited in the complaint and no longer reachable at its original address, reported that the domain had been bought on 29 March 2024. The creation date shown today by the registry is more than two years later. The simplest hypothesis is that the original domain expired and was registered again by someone, but it is, precisely, a hypothesis: we cannot say whether the new holder coincides with the previous one. For anyone assessing rfcofficial.io or a similar site, the fact is in any case a lesson in method. A domain's registration date does not tell you how reliable those who use it are, and a «young» domain proves fraud no more than an «old» one proves seriousness.

The same article, as reported in the complaint, pointed out three shortcomings of the original rfcofficial.io site: no cookie notice, no terms and conditions, no VAT number. It also claimed that the home page boasted a collaboration with a well-known Italian data-centre provider, denied by the provider when contacted, and that the whitepaper had been written almost entirely with an artificial-intelligence tool. We report these circumstances as stated by a source we can no longer consult directly, and we assess them accordingly: they are indications, not proof. They matter, however, because they were brought to the attention of those selling the token as early as July 2024. To the victim who, alarmed by the reading, asks for explanations, the answer given orally is that the initiative is serious and that the competent authorities have already been contacted. After that answer, more money is paid in, over 160,000 euros, between autumn 2024 and spring 2025.

As for the authorisations of rfcofficial.io and of those who promoted the token, the file shows no licence of the intermediary to provide investment services or services relating to crypto-assets: the injured persons state they have no evidence of any, and the open sources consulted report none. It is not definitive negative proof and we say so, but the picture is consistent with what the activity code declared by the English company suggests: a communications and consultancy company, not a financial operator. For a public offer of crypto-assets, since 30 December 2024 Regulation (EU) 2023/1114 (MiCAR) generally requires a white paper notified to the competent authority; for services provided to clients an authorisation is needed. In Italy the implementing penalty framework is in Legislative Decree 129/2024. The sums of April–July 2024, however, predate the application of Title II of the regulation, and this is a real difficulty that the complaint, correctly, tackles by working on art. 166 of the Consolidated Law on Finance (TUF) and on the characterisation of the activity as an offer of financial products.

Guaranteed capital and a fixed 2-3% a month: the anomaly that proves the artifice

The core of the rfcofficial.io fraud, in argumentative terms, is the combination of two mutually incompatible promises. The first is a fixed and «guaranteed» monthly return of 2 or 3%, that is 24 to 36% a year without risk. The second is full repayment of the capital upon withdrawal, which recurs in every contract and every informal communication. No market offers high returns without risk and, above all, no issuer of a crypto-asset can guarantee the return of what was invested to buy it: the price of a token is formed on the market, and a capital guarantee is by definition a promise of repayment that rests on the assets of the one who gives it. The one who gives it here is a newly incorporated consultancy company, with no significant capital and no supervision.

The argument has legal weight, not just common sense. The presence of a repayment guarantee and a predetermined return pushes towards characterising the transaction not as a sale of a virtual currency but as an offer of an investment product, and in this way brings the case within the Consolidated Law on Finance. The precedent cited in the complaint is Cass. pen., sez. II, no. 44378/2022, according to which the online sale of virtual currency advertised as a form of investment for savers is an activity subject to the requirements of arts. 91 et seq. TUF, the omission of which constitutes the offence of art. 166(1)(c) TUF. It is a ruling that, applied to rfcofficial.io, must be used with caution: it states a principle that applies to an offer advertised to savers, and one must ask how far a personalised proposal to three people, born of a relationship of trust, satisfies the advertising requirement. In our case the answer favours the prosecution because the token was promoted with social-media videos and a website, and because the fundraising appears repeated and organised. It remains, however, a matter to be proved, not taken for granted.

Another anomaly linked to rfcofficial.io, which the complaint points out, concerns the circuit of apparent returns. In the first months the persons see the value of their investments grow, receive trading reports for a few months and are invited to reinvest. In June 2025, when one of them asks for a detailed statement of movements ahead of tax deadlines, she receives evasive answers and no documents. In September 2025 comes the justification that closes the circle: a «massive theft» of the funds, already reported to a foreign authority, and the losses caused by the team of traders. On 14 October 2025 the company is dissolved and on 31 October 2025 the complaint is filed. In this scenario, which for rfcofficial.io recurs in all three positions, the payment of the «returns» is always postponed and made subject to the «performance of the funds», never paid. Anyone who has heard of pyramid or Ponzi schemes will recognise the structure, which here we cannot, however, characterise with certainty: such a hypothesis, to be upheld before a judge, requires a reconstruction of the financial flows, which the victim alone cannot carry out.

Aggravated fraud (art. 640 Criminal Code), serious damage and abuse of professional services: the criminal framework of rfcofficial.io

The conduct described for rfcofficial.io amounts, according to the reconstruction in the file, to the offence of fraud under art. 640 of the Criminal Code. The artifices and deceptions consist of the false professional competence, the simulated balances, the trading reports, the partnership with a data-centre provider denied by the provider itself, the guarantee of repayment of the capital and the subsequent story of the theft. The unjust profit is the money collected by the company and its collaborators. The damage, for the person we are talking about, is about 280,000 euros, and about 330,000 euros if the other two injured persons, linked to the first by professional and personal ties, are also considered.

The aggravating circumstance that the complaint relies on is that of art. 61 no. 7 of the Criminal Code, damage of particular gravity, together with art. 61 no. 11, abuse of professional services. On the latter the complaint cites Cass. pen., sez. II, no. 43729/2010, which requires a relationship of trust that pre-exists the offence and is such as to facilitate its commission. The point, for rfcofficial.io, is decisive: the intermediary did not merely propose an investment, he provided for months a «strategic» advisory activity that induced the victims to pay in growing sums. It is the quality of the service that determines reliance, and that same reliance that makes the deceit effective. The argument must, however, be cleared of a widespread misunderstanding. After the Cartabia reform (Legislative Decree 150/2022), which removed from art. 640, third paragraph, the reference to art. 61 no. 7, serious damage no longer makes fraud prosecutable ex officio: it remains an aggravating factor for the sentence, but does not affect prosecutability. To argue that the offence is prosecuted without a complaint, another aggravating circumstance among those of the second paragraph is needed, and it must be proved.

As regards remote conduct, art. 640, second paragraph, no. 2-ter of the Criminal Code, introduced by Law 90/2024, can be alleged where the act is committed with computer or telematic means capable of hindering the identification of the perpetrator. Here the perpetrators were identifiable and indeed identified, because they presented themselves with name and face on social media and met the victims in person. It is a useful example of how not every online fraud falls under no. 2-ter. The Court of Cassation, in judgment no. 27907/2026 (hearing of 14 July 2026), clarified that this aggravating circumstance concerns the manner of execution of the conduct and must be distinguished from the diminished defence of art. 61 no. 5 of the Criminal Code, which concerns the concrete vulnerability of the victim, and further stated that fraud so aggravated is prosecutable only upon complaint by virtue of the derogation introduced by Decree-Law 48/2025, converted by Law 80/2025. Judgment no. 18913/2026 (hearing of 26 March 2026) reaffirmed that proceedings are brought upon complaint if no. 2-ter applies and ex officio if art. 61 no. 5 applies. In the rfcofficial.io case the useful question is therefore not «online or not», but whether there are concrete elements of diminished defence, which must be alleged and not merely asserted.

A profile that practice underestimates is that of contractual fraud. Whoever signed contracts, and several are in the file here, between November 2024 and June 2025, for «fund management» with a repayment guarantee, will be told by the defence that this is civil non-performance, an investment that went wrong in a volatile market. It is the typical line of defence, and must be dismantled with proof of a deception prior to or contemporaneous with the signing. A contract that appears valid does not exclude deceit where the party, already at the time of the contract, had no intention of performing or knew they were unable to. Here the simulated balances, the unsupported reports, the victims' impossibility of accessing the platforms and the never-documented management of the funds point in this direction. With judgment no. 5191/2026 (hearing of 13 January 2026), moreover, the Court of Cassation reaffirmed that fraud is «of prolonged consummation» when the deceptive activity continues in order to create the reliance needed to obtain further profits: this is the logic of the successive transfers, which must be treated as a single course of conduct and not as so many separate episodes.

The criminal framework of rfcofficial.io does not end with art. 640. The complaint alleges criminal conspiracy (art. 416 of the Criminal Code), with a promoter and two participants, a division of tasks and a company as a screen, and cites Cass. pen., sez. I, no. 12681/2008, according to which the associative offence can be established even when the unlawful activity is planned for a limited time, provided there is an adequate organisational structure. Other hypotheses to be assessed are unauthorised financial activity (art. 166 TUF), already seen, money laundering (art. 648-bis of the Criminal Code) and self-laundering (art. 648-ter.1 of the Criminal Code) for those who channelled and used the proceeds, with the precedent of Cass. pen., sez. II, no. 27023/2022. These are characterisations that rest on a reconstruction of the flows, which are missing today because the file does not say where the money ended up.

Complaint, time limits and jurisdiction: why time and the organiser's residence decide everything

Fraud, in the forms that occur with rfcofficial.io, is today as a rule prosecutable upon complaint. The time limit is three months from the day on which the injured person learned of the fact (art. 124 of the Criminal Code), and the moment that counts is not that of the first payment but that in which the person realises they have been deceived. In this case the complaint was filed on 31 October 2025, a little more than a month after the voice message of 20 September 2025 announcing the «massive theft»: promptness is a strength and a model to imitate. Whoever keeps waiting, partly believing the story or staying in contact with the intermediary to obtain an «instalment» refund, gives the defence the argument that knowledge of the fact had been acquired much earlier. A repayment agreement signed with whoever collected the sums, like the one signed in August 2025 for monthly instalments of 1,500 euros, cures nothing and does not move the time limit: it shows, if anything, a further attempt to buy time.

As for jurisdiction in the rfcofficial.io case, the international element is strong: the organiser resides, according to the complaint, in Dubai, the company was English, part of the accounts was with a Maltese bank. But the transfers left the accounts of the injured persons, resident in Italy, and the deception took place in Italy: art. 6 of the Criminal Code grounds Italian jurisdiction without difficulty, and territorial competence is to be set out under arts. 8 and 9 of the Code of Criminal Procedure. Case law (among others, Cass. pen., sez. II, no. 14744/2017) has dealt with competence in frauds paid by bank transfer: the question between the place of payment and the place of collection remains debatable and should not be taken for granted. The enforcement phase is harder. An investigation concerning a person resident in the Emirates and a company dissolved in the United Kingdom depends on international judicial cooperation, which takes months and offers no guarantee. Whoever promises quick recovery is wrong, or worse.

The realistic measures are those indicated in the complaint: preventive seizure (art. 321 of the Code of Criminal Procedure) of the assets attributable to the suspects, to hinder the dispersal of the proceeds, and, in civil proceedings, conservatory attachment and restitution actions, following the scheme already illustrated in the solved case on recovery of undue payments after an online scam. On confiscation see the in-depth article on confiscation by equivalent in online scams. It should also be remembered that time works against those who have lost money: every month of waiting reduces the chances of intercepting the funds.

The fake fund recovery: the last deception awaiting those who have already lost with rfcofficial.io

Whoever has lost money with rfcofficial.io is the ideal target of a second deception: that of the self-styled «fund recovery service», which promises to trace the money with computer techniques or through foreign lawyers and asks for an advance. It is a phenomenon we have documented and which recurs regularly: whoever has already been scammed has damage to repair and every reason to believe that someone can repair it. We showed how it works in our review of a recovery company that scammed people trying to get their losses back and in the analysis of a fake crypto trading scam, where the «recovery» scheme closed the circle. No serious professional asks for money in advance to release other people's funds, nor guarantees the outcome.

What to do if you invested in RFC through an intermediary

If you bought the rfcofficial.io token, «Royal Finance Coin», or paid money to an adviser who proposed it, these are the steps we recommend, in order of urgency:

• do not pay any more money to anyone promoting rfcofficial.io or the RFC token, for any reason: not to «complete» the investment, not to «unlock» the payouts, not to join a fund that would guarantee what you have already paid;
• do not sign repayment agreements, instalment plans or releases without having a lawyer look at them: they often serve to buy time and, sometimes, to make you waive rights;
• keep everything: contracts, transfer slips with CRO or TRN and the beneficiaries' IBANs, trading reports, voice notes (also exporting them from the phone), complete chats, screenshots of balances, e-mails, phone numbers and social profiles of the people involved;
• ask the intermediary in writing for the complete statement of the sums paid and proof of the purchase of the tokens and of the transactions declared: any refusal is already evidence;
• ask your bank, in writing, to recall the transfers and report the transaction, giving dates and IBANs;
• file a complaint with the Public Prosecutor's Office or a judicial police office within three months of understanding the deception, attaching the documentation in order by date and amount, and report the case to the Postal Police and to Consob;
• beware of anyone who, after the loss, offers to recover your funds by asking for an advance.

How to recognise a «guaranteed» crypto-asset before paying money

Some warning signs, which in the rfcofficial.io case almost all occur, are enough to rule out a serious initiative:

• the capital is «guaranteed» and the monthly return is fixed: no market allows both to be offered;
• a close deadline, the «end of the presale», pushes you to decide quickly, with personal confidences about how extraordinary the opportunity is;
• the intermediary is also a friend, and personal trust takes the place of documents and checks;
• entry fees are very high and communicated orally;
• you cannot access the platforms where the account is supposedly opened, or you can only look without being able to move anything;
• profits are shown on screen or in reports, but cannot be withdrawn, and for every request there is a new product to subscribe to;
• when doubts emerge the answer is hacker attacks, thefts, sudden resignations of collaborators and instalment repayment plans;
• company name, authorisations, white paper and VAT number are not verifiable, or are contradicted by the source said to be involved.

rfcofficial.io is a scam: the closing warning

A single missing element might be an oversight. In the case of rfcofficial.io, verifiable authorisations, white paper and VAT number are missing; the capital is guaranteed and the return fixed, both at a level incompatible with any real investment; the tokens are never documented; access to the platforms was always barred to the people who paid; the trading reports were never backed by documents; the intermediary collected hundreds of thousands of euros, justified the failure to repay with a theft, and his company was dissolved seventeen days before the complaint; the domain is suspended and today shows a registration date later than the one that appeared in 2024. The picture, taken as a whole, is such that, absent proof to the contrary, prudence requires treating rfcofficial.io as a scam. Whoever runs rfcofficial.io or promoted the «Royal Finance Coin» token is free to reply with public documents, indicating the company, authorisations, white paper and the actual destination of the funds raised.

If you paid money because of rfcofficial.io to buy «Royal Finance Coin», if an adviser guaranteed you the capital or a fixed monthly return, or if you were offered to recover your losses with a new investment or a paid service, contact us by filling in the form at the bottom of this page: we are a law firm that deals only with online scam cases, we have already followed this case and we assess your position, including out of court, indicating the initiatives that are concretely feasible, without promising results that no serious professional can guarantee. If you have suffered the same scam, we can help you.