AvvocatoPenalista H24
← Blog

Insight

XHLD is a scam: the "zero-risk stock" pushed in a chat and the pump-and-dump scheme

14 November 2026 · Avvocato Penalista H24

The firm has already handled this case: no fake platform, no bank transfer. Real shares bought from the victim's own securities account on a chat group's signals, with the stolen identity of a real educator. How the scheme works and what can be done.

Preliminary note: we are a law firm and we deal exclusively with online fraud and the unauthorised provision of financial services. This article arises from a real case handled by the firm and is published in anonymised form as regards the injured party, for public interest purposes. If you recognise yourself in what you read, you can submit your situation using the form at the bottom of this page.

The XHLD affair is different from all the others we describe, and for that very reason it is worth reading carefully.

There is no fake platform here. There is no site from which the money disappears. There is no transfer to a foreign account, no wallet, no invented balance on a screen.

The injured party bought real shares, listed on a regulated market, from their own securities account at a proper intermediary. One hundred and twenty-seven thousand euros. And lost almost all of it.

XHLD is a scam in the sense that matters to the reader: the way that stock was offered to her, the path that led her to buy it, and the reason she was told not to sell are a constructed deception. The firm has already handled this case, and here we explain how it works, why it is so hard to recognise, and what can be done.

What actually happened

The mechanism behind XHLD is known in the international literature as pump and dump — or, in the variant that hits European savers through messaging apps, ramp and dump.

It works like this. As with XHLD, someone accumulates in advance a thinly traded stock, typically a very small-capitalisation company listed on a foreign market. Then they build demand: messaging groups, "professors", "analysts", buy signals, charts, forecasts. When enough people buy at the same time the price rises — not because the company is worth more, but because the demand is artificial.

At that point whoever had accumulated sells. They sell precisely to the people buying on the strength of their advice.

And here is the point to understand about XHLD: your purchase is their exit. They are not stealing your money, they are selling you shares at a price they helped inflate, knowing it will collapse.

In the XHLD case one verifiable fact is worth adding: the stock has been the subject of public warnings by independent analysts and the specialised financial press, which discussed it precisely in terms of a possible manipulation scheme. These are documented circumstances, independent of the injured party's account, and they belong in a criminal complaint.

The signals, one by one

What makes the XHLD case valuable is that the messages received by the injured party contain, in almost textbook form, every marker of the scheme.

"Zero-risk stock". There is no such thing, and XHLD was no exception. No listed financial instrument is risk-free, and a micro-cap stock is among the riskiest of all. Anyone using that phrase is stating something false in reassuring words.

"Since we started trading these stocks we have never recorded a loss". A record without exceptions is not a credential: it is a red flag. Past performance, even when real, is never free of losses.

"Expected rise of 400–600%". A price target of that order is not analysis, it is bait.

"Do not sell on your own initiative, I will tell you when". This is the operational heart of the XHLD scheme. Whoever organises a pump needs the buyers to stay put while they exit. The instruction not to sell is not there to protect you: it is there to stop you getting out before they do.

"After the profit you will pay me the commission as agreed". A percentage of the gains is the signature of an unauthorised adviser. Anyone providing investment advice in Italy must be entered on a register and authorised; anyone asking for a commission on profits over a chat is not.

"If you have other idle funds, I will guide you into a new stock". Asking you to increase exposure while the previous position is still open is how damage becomes disaster.

The stolen face

There is an element in the XHLD affair that deserves to be stated plainly.

The injured party had long followed, on a video platform, a real and very well-known Italian finance educator. The messages that led her to buy exploited that trust: that professional's name, image and authority were used to lend credibility to a group he has nothing to do with.

It is an extremely common practice, and it strikes twice: the victim, who trusts a person who is not speaking to her, and the professional, who finds himself associated with a fraud without knowing it and is himself an injured party.

The check, fortunately, is simple and should always be made: a serious educator does not open private groups to give individual buy signals, does not ask for commissions on gains, does not manage anyone's money, and his official channels are linked from his verified profile. If the "professor's group" reached you through an advert or an invitation, that group is not his.

Why this case is hard (and why it is not hopeless)

The truth about XHLD must be told, because a wrong expectation does more damage than bad news.

Unlike XHLD, in a classic fraud the money leaves the victim's account and arrives in someone else's: there is a beneficiary, an IBAN, a wallet, a flow to freeze. Here there is none of that. The money was used to buy a real stock, through a proper intermediary, in a perfectly valid transaction. The loss is a market loss, brought about by deception.

That makes direct recovery far more complex, and anyone promising otherwise is lying.

But it does not mean there is nothing to be done, for three reasons.

First: in the XHLD case the evidence is excellent. The injured party holds the documentation of her own securities account — orders, times, prices, quantities — and the conversation in which she was told what to buy and when. The correlation between the instruction received and the order executed minutes later is very strong evidence, which almost no other type of fraud offers.

Second: the parties involved are identifiable. Behind a messaging group there are phone numbers, accounts, administrators, and often a paid promotion network. That data can be obtained.

Third: for XHLD more than one authority has jurisdiction. The conduct is relevant in Italy as fraud and as the unauthorised provision of investment services; manipulation of the price of a stock listed on a foreign market is instead a matter for the supervisory authority of that market. These are two distinct tracks and both must be pursued, with a report to the Italian supervisory authority as well.

The legal framework

In the XHLD case the principal classification remains fraud (Article 640 of the Italian Criminal Code): the injured party was led into error by artifice and deception — the false status of the advisers, the "zero-risk" stock, the usurped identity of a real professional — and as a result of that error disposed of her assets. As the facts date from 2026, the aggravating circumstance of Article 640(2-ter) applies for commission at a distance by computer tools capable of obstructing identification, along with diminished capacity to defend oneself (Article 61(5)) and particularly serious financial loss (Article 61(7)).

In the XHLD case the unauthorised provision of investment services (Article 166 of the Italian Consolidated Law on Finance) is also separately relevant: investment advice is a reserved activity, and carrying it on without authorisation is an offence prosecuted ex officio. Using the name and image of a real professional amounts to impersonation (Article 494).

As for market manipulation, a clarification others omit is needed: the Italian market abuse rules concern instruments traded on European Union trading venues. For a stock listed on a non-European market, jurisdiction over manipulation lies with that country's supervisory authority, and the correct route is a report to that authority, in parallel with the Italian complaint. Saying so precisely avoids framing the case wrongly.

Beware: the second scam has already arrived

In the XHLD affair the second layer has already appeared, and readers should recognise it.

The injured party was asked, as a condition for starting a supposed compensation procedure, to send complete screenshots of the losses and a screen recording showing the portfolio, the entry prices and the amount lost.

No compensation procedure in the world, least of all on XHLD, works like that. That material serves one purpose only: to know exactly how much you have lost and how much you have left, in order to calibrate the next demand. It must not be sent.

Likewise, the injured party has already been contacted by a self-styled "fund tracing" company with foreign-accented operators. The usual rule applies: anyone asking for money in advance to recover lost sums must not be paid, and a lawyer is on a public roll anyone can consult. We have written about this in relation to amazon-smartinvestment.com.

What to do now

Anyone who recognises themselves in the XHLD affair should do the following, in this order.

Leave the group and cut off contact, but only after making a native export of the conversation using the application's function, with dates and times. It is the document that links the instructions received to the orders executed.

Do not send videos or screenshots of the losses to anyone who asks for them as a condition for compensation.

Download from your intermediary the complete statement of transactions: orders, executions, times, prices and quantities, in original format. It is the principal evidence.

Note the numbers, accounts and names used in the group, and keep the invitations and adverts you arrived through.

File a criminal complaint for fraud and unauthorised provision of investment services, with the request for information on registration under Article 335 of the Code of Criminal Procedure and the request for notice in the event of a request to shelve the case under Article 408(2), and consider with your lawyer a report to the Italian supervisory authority and to that of the foreign market.

Similar cases already handled by the firm

Anyone who has come across XHLD will also find useful our analysis of finomarkets.org, on a broker blocked by the authorities, and that of 2pmeuropesa.com, on those who use genuine tools to display false numbers.

If they are telling you to hold: sell the decision, not the stock

The picture is this. XHLD is a scam in the way it was sold: a small-cap stock offered as "zero risk" inside a messaging group, with the stolen identity of a real educator, with an explicit instruction not to sell, and with a commission on profits demanded by someone not authorised to demand it.

If someone is telling you to hold and wait for their signal, that is the sentence that should stop you. The decision to sell or hold is yours and your intermediary's, not a chat's.

The firm has already handled this case. You can submit your situation for a preliminary assessment.

If you have suffered the same scam, we can help you. Fill in the form at the bottom of this page.

Free case review

Do you need legal assistance?

Tell us about your case: free assessment, no obligation.

If you lost less than €5000 we cannot proceed · full confidentiality · no obligation.
Available now · 24 hours a day

Tell us about your case.
A lawyer replies — not a call centre.

Fill in the form: a lawyer from our firm assesses your case free of charge and tells you right away how we can help. Day or night, weekends included.