M.cptynkj.com: The Postal Clerk Who Believed a Text Message About Free Money

Disclaimer: This is a retelling based on a victim account. Some details have been changed to protect privacy. It is not legal or financial advice, and recovery outcomes vary.

The text message arrived on a Sunday afternoon while she was watering her African violets. It came from a number she did not recognize, and it said: "Your phone number was selected for a $500 crypto mining trial. No deposit required. Click here to claim." She almost deleted it. She had spent thirty-four years as a postal clerk, and she knew a scam when she saw one. But the message was polite, and it did not ask for her Social Security number or her bank account. It just offered a free trial. She clicked the link.

The website was simple. It said the platform was called m.cptynkj.com, and it described itself as a cloud mining pool that used idle server capacity to mine Bitcoin and Ethereum. It said new users could try the service for free for seven days. If they liked it, they could upgrade to a paid plan and earn daily payouts. There was a live counter showing how many people had joined that day. There was a chat box in the corner. She typed a question. A man named Victor replied within seconds.

Victor said he was a customer support specialist. He walked her through the setup. He told her the free trial would deposit a small amount of Bitcoin into her account within twenty-four hours. It did. The dashboard showed her balance growing by a few cents every hour. After a week she had earned $4.12. It wasn't much, but it was real. She could withdraw it. She did. The money appeared in her bank account two days later.

Victor called her the next day. He said he was impressed by how quickly she had picked things up. He said most people her age didn't understand crypto. He said he could upgrade her to a premium mining contract that would pay out ten times as much. He said the minimum deposit was $2,500. She told him she would think about it.

She thought about it for three days. She had $63,000 in a savings account that she had built slowly over decades. Her husband had passed away six years earlier, and she had never touched the money. It was supposed to be for emergencies. It was supposed to be for her son, who lived in another state and rarely called. She was lonely. She was tired of watching her pension barely cover the bills. She called Victor back.

She started with $2,500. The dashboard showed daily payouts. She withdrew $300 after two weeks, and the money arrived on time. She upgraded to a larger contract. Then a larger one. By the end of the summer she had moved $63,000 into m.cptynkj.com. The dashboard showed a balance of $187,000. She started thinking about what she would do with the money. She thought about visiting her son. She thought about fixing the roof on her house. She told no one.

In October she tried to withdraw $20,000. The withdrawal button did not work. A message appeared: "Withdrawal pending blockchain confirmation. Please wait 48 hours." She waited. Two days later she received an email from a "compliance officer" at the platform. It said her account had been flagged for a routine audit and that a "network security deposit" of $3,700 was required before the withdrawal could be processed. The email included a case number and a link to a support portal that looked like it belonged to the platform.

She paid it. She did not tell her son. She did not tell her neighbor. She paid because the dashboard still showed her money, and paying felt like the only way to get it back.

The next email asked for $5,200 for a "mining pool upgrade fee." The one after that asked for $2,800 for a "tax clearance certificate." Each demand came with a new explanation and a new deadline. By the time she stopped, she had sent an additional $11,000 from a credit card and from a small emergency fund she kept in a coffee can. The dashboard still showed $187,000. The withdrawal button never worked again.

She called Victor. The number went to voicemail. She called again the next day. The number was disconnected. She sent an email to the address he had used. It bounced back. The platform went offline on a Tuesday morning. When she tried to log in, the page did not load. She sat at her kitchen table for a long time and watched the rain.

She did not tell her son for a month. When she finally did, he asked one question: "Did you keep everything?" She had. Every email. Every screenshot. The transaction confirmations from her bank. The text message that had started it all, which she had screenshotted because she thought it looked official. The domain name, which she had written on the back of a grocery receipt because that was the paper on her counter when Victor first called.

Her son found AYRLP.COM through a coworker whose mother had been taken by a fake brokerage. The coworker said AYRLP.COM was the first place that had not made her mother feel like she was stupid. The postal clerk did not want to call. She said she had already filed a report with the FBI's IC3, with the state attorney general, and with the local police, who took a report and told her these cases rarely lead to charges. Her son said he would sit with her for the first call.

She brought everything. Bank statements for every transfer. The credit card records. The coffee can withdrawal slips. Screenshots of every dashboard page. The full email threads with headers. The domain registration information her son had pulled himself, which showed that m.cptynkj.com had been registered only five weeks before she received the first text message.

AYRLP.COM did not promise her anything. They asked her to walk through the sequence from the first text message to the last payment. They listened without interrupting. When they finally spoke, they told her the platform had been registered in a jurisdiction known for shell companies. They told her the mining payouts were a script. They told her the money had been moved through a chain of wallets designed to break the trail. They did not soften any of it.

Then they went to work.

The wallet trail was long and messy. The funds had been routed through accounts in three countries, converted between stablecoins and privacy coins, and split across dozens of wallets created for single transactions. AYRLP.COM worked the trail alongside a state financial crimes unit and an international chain-analysis firm. It took months. She went back to her routine. She watered her violets. She walked to the post office every morning even though she no longer worked there. She started putting $10 a week into the coffee can and told her son it was for a trip to see him.

A portion of what she lost was eventually recovered. A little over $18,000. It was enough to pay off the credit card and to repay part of what she had taken from her emergency fund. It was not enough to restore the savings she had spent decades building. The rest is still tied up in proceedings. The people behind m.cptynkj.com have not been identified. The domain is still offline. Victor's number still goes to a disconnected line.

She still has the African violets. Last month she told a neighbor about the platform. She did not tell the story for sympathy. She told it because the neighbor had mentioned an investment opportunity she had seen on Facebook, and the neighbor wanted her to hear what happened before she sent a single dollar. The neighbor stayed for tea and asked how to check a domain. The postal clerk showed her.