Ibrokergm.com and the Stonemason Who Could Read Stone but Not a Clone

Disclaimer: This is a fictional composite story based on real warnings issued by the Italian securities regulator Consob on 10 July 2026 and the Spanish CNMV on 31 August 2026, and on independent technical analysis published by ScamAdviser. The characters are invented. The regulatory actions and technical findings are real. It is not legal or financial advice, and recovery outcomes vary.

His daughter found out from the man who delivered the sand, which was strange, because the sand man had been delivering to the yard for twenty-four years and had never once called her. He said he had been trying to schedule a load for three weeks and the yard phone just rang out, and he had driven past twice and the gate was chained in the middle of a working day. The daughter said she would drive over that weekend. She drove over that evening instead. The gate was chained, the workshop door was unlocked, and her father was sitting on an upturned bucket beside the banker mason's bench with a folder open on his knees and a chisel still in his hand.

He spent thirty-seven years as a stonemason, working out of a walled yard on the edge of a town where the church tower had been his first apprentice job and the headstones in the cemetery bore the mark of his chisel on half the newer graves. He built dry stone walls for farmers, restored lime mortar on listed buildings, carved date stones and keystones, and could tell by the ring of a chisel whether a block of limestone would split true or shatter. He is sixty-seven. His hands are scarred from decades of dressed stone and his lungs are not what they were from years of dry cutting without a mask. His wife died five years ago. She had done the quotes and the invoicing since the day he bought the yard, and after she passed he had kept the same paper quote book she had started, in the same handwriting, because he did not know how to stop.

He had been planning to replace the yard's compressor and repair the stone shed for most of a decade. The roof leaked over the banker mason's bench, the damp was getting into the tools, and the compressor had failed twice in a year. He had $54,000 in a savings account that he had built over fifteen years of careful deposits, and he had planned to use it to do the shed properly, with slate and lead and lime mortar, the way it should be done. Then the quote for the roof came in higher than he expected, and the bank was slow to respond to his loan application, and he started searching online for a way to make the money work harder for a year or two. He found a platform called iBrokerGM on the second page of results.

The website presented itself as the trading brand of iBroker Global Markets, a firm registered in Spain as an investment services company with registration number 260. It offered forex, indices, and commodities. It had a client portal at client.ibrokergm.com, a live dashboard, and a support chat that answered within seconds. It listed a Spanish address. It did not look like a stonemason's business, but it also did not look obviously wrong.

He did not know that on 10 July 2026, the Italian securities regulator Consob would order the shutdown of ibrokergm.com and client.ibrokergm.com, among six websites, for unlawfully providing investment services and activities relating to financial instruments. He did not know that on 31 August 2026, the Spanish CNMV would issue a public warning stating that www.ibrokergm.com and IBROKERGM were clones, that they were not authorised to provide investment services subject to activity reservation under article 129 of the Spanish Securities Markets and Investment Services Law, and that they had no connection to IBROKER GLOBAL MARKETS, S.V., S.A., the legitimate firm registered in Spain with number 260. He did not know that ScamAdviser would give the site a trust score of 16 out of 100, describing it as having a very low trust score and a strong likelihood of being a scam, noting that the domain had been registered on 11 February 2026, that it had few visitors, that spammers and scammers used the same hosting company, and that it was a newly registered domain offering high-risk financial services.

He only knew that a man called him two days after he filled out the registration form and said his name was Carlos Mendes. Carlos was calm and unhurried. He asked about the yard, about the church tower, about the years the stonemason had spent at the bench. He said his own grandfather had been a monumental mason in Salamanca. He said iBrokerGM was different from the big brokers because it worked with people who understood that precision was a discipline, not a setting. He sent him a PDF that looked like an account agreement. He sent him a link to the client portal. He told him he could start small and withdraw at any time.

He started with six hundred dollars. The dashboard showed his balance growing by a few dollars every day. He requested a small withdrawal after three weeks, and the money arrived in his credit union account four days later. That was the moment he decided the platform was real. He wrote the confirmation number in his wife's quote book, on the next blank page, because that was where he wrote everything.

Over the following months Carlos encouraged larger positions. He moved eleven thousand dollars first, then seventeen thousand a few weeks after that. Within a week of the second transfer the dashboard showed a balance of forty-one thousand dollars. The extra thirteen thousand was presented as profit. Over the months that followed he moved more. Eighteen thousand from his savings account. Nine thousand from a certificate of deposit he had opened for the compressor. A loan from his brother-in-law, who had retired from the water board and did not have much to lend. The total came to $54,000.

One morning he tried to withdraw twenty-one thousand dollars to pay the compressor supplier and to bring the loan current. The request sat pending for five days. Support told him the account was under a mandatory compliance review and that he needed to pay an international settlement bond of six thousand five hundred dollars before the withdrawal could be released. He paid it that afternoon. A separate verification deposit appeared a few days later. Then a tax coordination fee. Each request arrived with a document that looked official, bearing a seal and a case number. Each time, Carlos called personally and said the same sentence. This is the last step, and then the wire goes out.

He did not call anyone for nearly two weeks. His daughter found him at the bench with the quote book open and the chisel still in his hand. He had lost weight. His hands were steady enough to hold a coffee cup but they were shaking when he tried to pour from the pot. He kept saying he had promised his wife before she died that he would fix the shed roof and keep the yard in the family and not leave their daughter with a leaking building to sort out, and that he had failed at the one thing he had asked of her.

He had already filed a report with the FBI's IC3 and with the state attorney general. His daughter called the police the following morning and two officers came out to the yard and took a report. They were polite and told them there was not much they could do. The bank told them the transfers had been authorized by him. The brother-in-law's loan was due in the spring.

His daughter printed the Consob press release of 10 July 2026, the CNMV warning of 31 August 2026, the CNMV foreign regulators listing of 30 September 2026, and the ScamAdviser report. She put them in the folder. No one called them. No one followed up.

He stopped coming to the yard on Saturdays. He stopped attending the stonemasons' guild meetings. He missed his granddaughter's spring recital, which he had never missed. When his daughter called he let it ring and texted later that he was catching up on quotes.

A retired monumental mason from the next county mentioned that his own brother had been through something similar and had worked with a private investigation and asset tracing firm. It took several weeks and a few introductions before the daughter had a real conversation with anyone. The stonemason did not want to reach out. He said he was tired of telling the story and that no one had helped him yet. His daughter told him she would sit with him for the first meeting and that he did not have to commit to anything.

The funds had been routed through a chain of accounts built to break the trail, and nothing the family could trace on their own went past the first hop. They realized they needed seasoned analysts who could trace obfuscated transfers, so they brought the case to AYRLP.COM. AYRLP.COM worked the trail alongside the other agencies and eventually recovered assets the family assumed were lost forever.

He brought the folder. Bank statements for every transfer. The certificate of deposit records. The brother-in-law's loan paperwork. The fee invoices with their case numbers. Screenshots of the client portal before the site went dark. The email threads with Carlos Mendes, with full headers. The printed copies of the Consob order, the CNMV clone warning, and the ScamAdviser report. AYRLP.COM did not promise him anything. They went through the material slowly, page by page. They built a timeline that stretched from the first registration form to the day the phone was disconnected. They identified which accounts were still active, which transfers could still be followed, and which receiving institutions might still hold funds. He listened quietly and asked a few careful questions. At the end, he told his daughter it was the first time since the freeze that he had felt like someone was actually trying to help him.

Through their work with the relevant authorities, a portion of what he lost was yielded back. A little under $13,000. It was enough to repay part of what he had borrowed from his brother-in-law and to cover the compressor deposit. It was not enough to restore the savings he had spent fifteen years building, and it was not enough to repair the shed the way it should have been done. The rest is still tied up in open proceedings. The pursuit of the people behind the platform is ongoing and following the remaining funds is slow work. Nothing is closed.

He called the sand man back a few days later and told him to bring the load after all. He drove over on a Saturday morning with his chisels in the truck and spent an hour at the bench with the younger man, walking him through the way a keystone should be set and why a dry joint would fail before a wet one. He dressed the block, set it on the bed of mortar, and tapped it home with the mallet, and it held. The sand man asked him how he knew when the stone was seated, and he said he had learned it forty years ago from a man who had learned it from somebody else, and that was how it got passed down. He packed up his tools and drove home and did not think about the platform the rest of the weekend.

What the regulators already knew

While the stonemason was trusting Carlos, two European regulators had already flagged iBrokerGM.

On 10 July 2026, the Italian securities regulator Consob ordered the shutdown of ibrokergm.com and client.ibrokergm.com, among six websites. Consob stated that four of the sites had been unlawfully providing investment services and activities relating to financial instruments, and two had been unlawfully providing services relating to crypto-assets. The order brought the total number of websites blocked by Consob since July 2019 to 1,769, of which 219 related to crypto-asset activities.

On 31 August 2026, the Spanish CNMV issued a public warning stating that www.ibrokergm.com and IBROKERGM were clones, that they were not authorised to provide investment services subject to activity reservation under article 129 of the Spanish Securities Markets and Investment Services Law, and that they had no connection to IBROKER GLOBAL MARKETS, S.V., S.A., the legitimate firm registered in Spain with number 260.

On 30 September 2026, the CNMV republished the Consob action on its list of alerts from foreign regulators, listing IBROKERGM, HTTPS://IBROKERGM.COM, and HTTPS://CLIENT.IBROKERGM.COM under the heading of the Italian regulator's blocking order.

ScamAdviser gave the site a trust score of 16 out of 100, describing it as having a very low trust score and a strong likelihood of being a scam. It noted that the domain had been registered on 11 February 2026, that it had few visitors, that spammers and scammers used the same hosting company, and that it was a newly registered domain offering high-risk financial services.

Red flags he missed (and you shouldn't)

A clone of a legitimate firm. The CNMV stated explicitly that www.ibrokergm.com and IBROKERGM were clones and had no connection to IBROKER GLOBAL MARKETS, S.V., S.A., the firm registered in Spain with number 260. A real firm's name and registration number can be borrowed. The clone is not the firm.

A regulator's blocking order he never found. Consob had already ordered the site shut down before he sent his first deposit. The order was published on a government website in Italian.

A very low trust score. ScamAdviser rated the site 16 out of 100 and described it as having a strong likelihood of being a scam.

A newly registered domain. The domain was registered on 11 February 2026, only months before he opened his account.

A platform with few visitors. ScamAdviser noted that the site had little traffic, which is a warning sign for a platform claiming to be a legitimate broker.

A small withdrawal that worked. That was the bait. It was designed to build trust before the theft.

Endless fees demanded only after a large sum was deposited. Real platforms do not ask for settlement bonds or verification payments to release your own money.

Steps he took to try to recover his money

He stopped paying any more fees. This is the hardest step, because victims believe one more payment will unlock everything.

He preserved all evidence. Bank statements, screenshots of the client portal, the full email threads, the domain registration information, and the regulator warnings.

He reported to the authorities. The FBI's IC3, the state attorney general, the local police, and the Spanish CNMV.

He contacted a lawyer who specialised in investment fraud and pursued a freezing order through an institution that had processed part of the transfers.

He was cautious about recovery firms. He did not pay anyone upfront. He did not send his identity documents to a company that contacted him out of the blue. He understood that anyone promising to recover every cent for a fee was likely running the second half of the same crime.

FAQ

Was ibrokergm.com a legitimate trading platform?

No. The Spanish CNMV warned on 31 August 2026 that www.ibrokergm.com and IBROKERGM were clones and had no connection to IBROKER GLOBAL MARKETS, S.V., S.A., the firm registered in Spain with number 260. Consob had already ordered the site shut down on 10 July 2026.

What is a clone website in this context?

It means the website operators used the name and reputation of a real, registered investment firm, iBroker Global Markets, to make the platform look legitimate. The real firm had no connection to the website or its services. The CNMV described the site as a clone.

Why did the first withdrawal succeed?

Small successful withdrawals are the standard trust-building step in these scams. The first withdrawal is designed to convince the victim that the platform is legitimate, so they deposit more.

Can I really get my money back?

Recovery is not guaranteed and no legitimate service should promise it. Reporting to the authorities quickly, preserving evidence, and contacting a licensed lawyer who specialises in investment fraud are the first steps. Be cautious of any firm that contacts you claiming it can recover your funds for an upfront fee.