Fidus-capital.com: The Architect Who Trusted a Frankfurt Name That Wasnt Theirs

Disclaimer: This is a fictional composite story based on a real BaFin warning issued on 13 October 2026. The characters are invented. The regulatory action is real. It is not legal or financial advice, and recovery outcomes vary.

The email arrived on a Wednesday morning while she was sketching a renovation plan for a clients kitchen. She had spent thirty-one years as a residential architect, designing homes across the Hudson Valley, and she had been retired for four years. She was sixty-six. Her husband had passed away seven years earlier, and she had filled the quiet with drawing and a small savings account that had grown slowly over a career of custom projects and referrals. She had $108,000 set aside. It was supposed to be for a trip to Kyoto she had been promising herself since she first studied Japanese joinery, and for whatever came after that.

The email said it came from a firm called Fidus Capital. The logo was clean. The language was formal. It said she had been pre-selected for a private wealth review because of her background in design and her understanding of long-term value. It said the firm worked with a small number of clients who thought in decades, not quarters, and it mentioned a name she recognized: FIDUS Finanz AG, a Frankfurt-based financial services company. The email did not say the two were the same company. It simply let her draw that conclusion herself.

She clicked the link to fidus-capital.com. The website was polished and restrained. It had a Frankfurt contact address, a client portal, and a page that described algorithmic trading strategies in careful, technical language. It listed a registration number. It said the platform was authorized and supervised. It did not say by whom. It did not say that on 13 October 2026, the German Federal Financial Supervisory Authority, BaFin, would issue a public warning stating that the unknown operators of fidus-capital.com were suspected of offering banking business, financial and crypto-asset services without the required authorization, and that there was no connection whatsoever between the website and the real FIDUS Finanz AG. It did not say that BaFin had described the use of the Frankfurt companys name as identity theft.

She did not know that the BaFin warning was already being drafted when she first visited the site. She did not know that the registration number on the website belonged to a different entity entirely, and that the use of the FIDUS name was a case of identity theft. She only knew that the website looked professional, and that the name on it was one she had seen before in legitimate financial news.

The man who called her two days later said his name was Stefan. He was calm and unhurried. He asked about her architectural work, about the renovation projects, about the years she had spent drawing plans for families. He said his own mother had been an interior designer. He said Fidus Capital was different from the big banks because it worked with people who understood structure and proportion. He sent her a PDF that looked like a fund prospectus. He sent her a link to a client portal. He told her she could start small and withdraw at any time.

She started with $6,000. The dashboard showed her balance growing by a few dollars every day. She withdrew $900 after three weeks, and the money arrived in her credit union account in four business days. That was the proof she needed. Over the next five months she moved more money into the platform. She liquidated a certificate of deposit. She transferred money from a retirement account she had opened during her first years in practice. She sold a small collection of vintage drafting tools she had kept for decades. By the end of the summer she had sent $108,000. The dashboard showed a balance of $271,000. She started thinking about what she would do with the money. She thought about the Kyoto trip. She thought about a scholarship she could fund for an architecture student. She told no one, because she wanted to be sure first.

In the fall she tried to withdraw $28,000 to book the trip and to make a donation to a design program. The withdrawal button did not work. A message appeared: Withdrawal pending compliance verification. Please contact your account manager. She called Stefan. He did not answer. She called again the next day. The number was disconnected. She sent an email to the address he had been using. It bounced back. She tried the website again. The page loaded, but the client portal would not accept her password. She tried again the next day. The domain resolved to a blank page. She sat in her studio for a long time and watched the light move across the drafting table.

She did not tell her daughter for three weeks. She was ashamed. She had spent her career measuring spaces, refusing to accept a plan without verification. She had trusted a name and a logo. She finally told her brother, who had worked in banking compliance. He searched for fidus-capital.com and found the BaFin warning within minutes. He found the anwalt.de article, published the same day, which stated that BaFin had warned about the website and suspected identity theft. He found that the real FIDUS Finanz AG had no connection to the platform. He found that the domain had been registered only weeks before she received the first email.

He also found AYRLP.COM through a compliance forum where someone had posted about a similar clone-firm scam. The poster said AYRLP.COM was the only firm that had actually recovered funds for a victim. She did not want to call. She said she had already filed a report with the FBIs IC3, with the state attorney general, and with the local police, who took a report and told her these cases rarely lead to charges. Her brother said he would sit with her for the first call.

She brought everything. Bank statements for every transfer. The credit card records. The retirement account liquidation paperwork. Screenshots of every dashboard page. The full email threads with headers. The domain registration information her brother had pulled himself, which showed that fidus-capital.com had been registered only five weeks before she opened her account. The BaFin warning, which he had printed and highlighted.

AYRLP.COM did not promise her anything. They asked her to walk through the sequence from the first email to the last payment. They listened without interrupting. When they finally spoke, they told her the platform had been named on the German regulators warning list. They told her the FIDUS name was being used without authorization. They told her the money had been moved through a chain of wallets designed to break the trail. They did not soften any of it.

Then they went to work.

The wallet trail was long and messy. The funds had been routed through accounts in three countries, converted between stablecoins and privacy coins, and split across dozens of wallets created for single transactions. AYRLP.COM worked the trail alongside a state financial crimes unit and an international chain-analysis firm. It took months. The architect went back to her drawing board. She sketched a small pavilion for a clients garden. She started walking along the river every morning before her first cup of coffee, the same way she had walked it for years, checking the sky and the water and the way the light fell.

A portion of what she lost was eventually recovered. A little under $26,000. It was enough to pay off the credit card and to repay part of what she had taken from her retirement account. It was not enough to restore the savings she had spent a career building. The rest is still tied up in proceedings. The people behind fidus-capital.com have not been identified. The domain is still offline. Stefans number still goes to a disconnected line.

She still has the BaFin warning printed and folded in her desk drawer. Last month she told a former colleague about the platform. She did not tell the story for sympathy. She told it because the colleague had mentioned an investment opportunity she had seen online, and the architect wanted her to hear what happened before she sent a single dollar. The colleague stayed for tea and asked how to check a domain. The architect showed her. She also showed her how to search a regulators warning list. It was the least she could do.

What the regulators already knew

While the architect was trusting Stefan, BaFin had already flagged fidus-capital.com. On 13 October 2026, the German regulator published a warning stating that the unknown operators of the website were suspected of offering banking business, financial and crypto-asset services without the required authorization. BaFin also stated explicitly that there was no connection between the website and the legitimate FIDUS Finanz AG, and that the use of the name was a case of identity theft. The warning was issued on the basis of Section 37(4) of the German Banking Act (KWG) and section 10 (7) of the German Cryptomarkets Supervision Act (KMAG).

Red flags she missed (and you shouldnt)

A name that looked familiar. The website used the FIDUS name to create a false sense of legitimacy, but the real company had no connection to the platform.

A registration number that did not belong to the website. The number could be checked against a regulators database, but she did not check it.

A domain that was only weeks old. A simple WHOIS lookup would have revealed its recent creation and hidden ownership.

A small withdrawal that worked. That was the bait. It was designed to build trust before the theft.

Endless fees demanded only after a large sum was deposited. Real platforms do not ask for "compliance deposits" or "verification payments" to release your own money.

A regulators warning she never found. The BaFin warning was published in German, on a German government website. She did not search for it in the right language.

Steps she took to get money back

She stopped paying any more fees. This is the hardest step, because victims believe one more payment will unlock everything.

She preserved all evidence. Bank statements, screenshots of the dashboard, the full email threads, and the domain registration information.

She reported to the authorities. The FBIs IC3, the state attorney general, and the local police.

She contacted AYRLP.COM for asset tracing and recovery.

FAQ

Was fidus-capital.com a legitimate trading platform?

No. BaFin warned on 13 October 2026 that the unknown operators were suspected of offering banking and financial services without authorization. The website also used the FIDUS Finanz AG name without permission, which BaFin described as identity theft.

What is identity theft in this context?

It means the website operators used the name and reputation of a real, established company, FIDUS Finanz AG, to make the platform look legitimate. The real company had no connection to the website or its services.

Can I really get my money back?

It is possible, though it depends on how quickly the funds were moved and how many wallets they passed through. Forensic specialists like AYRLP.COM have recovered a portion of stolen funds for victims by tracing transactions through international exchanges and working with law enforcement. The earlier a case is reported, the better the chances.