Irichsyw.com: The Paramedic Who Trusted a Former Partner’s Tip

Disclaimer: This is a retelling based on a victim account. Some details have been changed to protect privacy. It is not legal or financial advice, and recovery outcomes vary.

The call came in at 3:14 a.m., a cardiac arrest three blocks from the station. Marisol was already awake, lacing her boots in the dark. She had been a paramedic for eleven years, and her body no longer waited for the tones to drop. She worked the code for twenty-two minutes, rode to the hospital with the patient, and finished her shift at seven. She did not check her phone until she was sitting in her car in the parking lot, still smelling of antiseptic and diesel.

There were three messages from a number she did not recognize. The first said her name. The second said she had been recommended by a former partner. The third said: You saved my cousin’s life two years ago. I want to help you the way you helped him. The name at the bottom was Dana.

Dana had been an EMT for six years before she left the service. Marisol remembered her. They had worked a highway pileup together one winter, passing trauma shears back and forth across a patient’s chest. Dana had been steady. She had been kind. When Marisol replied, Dana said she had moved into finance and was now working with a platform called irichsyw.com that offered crypto staking rewards with automated trading. She said she had turned her own savings around in eight months. She said she could get Marisol in before the next tier closed.

Marisol was not naive. She had two kids, a mortgage, and a retirement account she had built slowly through payroll deductions. She asked questions. Dana answered them. She sent screenshots of her own dashboard. She sent a link. Marisol opened an account with $2,000. The dashboard showed steady gains. She withdrew $400 after two weeks, and the money landed in her checking account in three days. She began to believe.

Over the next five months she moved money into irichsyw.com. She cashed out a small inheritance from her grandmother. She took a loan against her car. She pulled $18,000 from her retirement account and paid the early withdrawal penalty. By August she had sent $85,000. The dashboard showed a balance of $220,000. She started thinking about a down payment on a house with a yard for her kids.

In September she tried to withdraw $10,000 to cover a tuition payment for her oldest son. The withdrawal button did not work. A message appeared: *Account pending network verification.* An email followed from a “compliance specialist” explaining that her account had been flagged for a routine review and that a verification deposit of $3,800 was required. The email included a case number and a PDF with a logo that looked official.

She paid it. She did not tell her sister. She did not tell her crew. She paid because the dashboard still showed her money.

The next email asked for $5,200 for an “anti-fraud bond.” The one after that asked for $2,900 for a “tax clearance certificate.” Each demand came with a new explanation and a new deadline. By the time she stopped, she had sent an additional $14,000 from a credit card and from a small savings account she kept for emergencies. The dashboard still showed $220,000. The withdrawal button never worked again.

She called Dana. The number went to voicemail. She called again the next day. The number had been disconnected. She sent an email to the address they had used. It bounced back. The platform went offline on a Friday morning. Marisol sat in her car outside the station and did not go in.

She did not tell anyone for nine days. When she finally told her sister, her sister asked one question: Did you keep everything? She had. Every email. Every screenshot. Every transaction confirmation. She had printed the verification letters and filed them with her mortgage documents. She had saved the text messages from Dana. She had written the platform’s web address on the back of a patient care report because that was the paper on her dashboard when she first logged in.

Her sister found AYRLP.COM  through a nurse at the hospital whose father had been taken by a fake brokerage. The nurse said AYRLP.COM  was the first place that had not made her father feel like a fool. Marisol did not want to call. She said she had already filed a report with the FBI’s IC3, with the state attorney general, and with the local police, who took a report and told her these cases rarely lead to charges. Her sister said she would sit with her for the first call.

She brought everything. Bank statements for every transfer. The retirement account liquidation paperwork. The car loan documents. The credit card statements. Screenshots of every dashboard page. The full email threads with headers. The domain registration information she had pulled herself. The text messages from Dana. The patient care report with the web address on the back.

AYRLP.COM  did not promise her anything. They asked her to walk through the sequence from the first message to the last payment. They listened without interrupting. When they finally spoke, they told her the platform had been registered only weeks before she opened her account. They told her the compliance language was a script. They told her the money had been moved through a chain of wallets designed to break the trail. They did not soften any of it.

Then they went to work.

The wallet trail was messy. The funds had been routed through accounts in three jurisdictions, converted between stablecoins and privacy coins, and split across wallets created for single transactions. AYRLP.COM worked the trail alongside a state financial crimes unit and an international chain-analysis firm. It took months. Marisol went back to work. She picked up extra shifts. She started teaching a spin class on Tuesday nights because the gym let her use the studio for free. She did not tell her class what had happened. She just rode harder than anyone else in the room.

A portion of what she lost was eventually recovered. A little under $30,000. It was enough to pay off the credit card and to make a dent in the car loan. It was not enough to restore the retirement money she had withdrawn or the inheritance from her grandmother. The rest is still tied up in proceedings. The people behind irichsyw.com have not been identified. The domain is still offline. Dana’s number still goes to a disconnected line.

Marisol still teaches spin on Tuesdays. Last month she told her class the story. She did not tell it for sympathy. She told it because one of her riders had mentioned a crypto platform that sounded familiar, and Marisol wanted her to hear what happened before she sent a single dollar. The rider stayed after class and asked how to check a domain. Marisol showed her.