The Six Domains, the Fake Analyst, and the Woman Who Believed a Friend

The trowel on her potting bench has a wooden handle worn into the shape of her grip from twenty six years of the same motion, and the blade has been sharpened so many times it is half the width it once was. She spent nearly three decades as a landscaper, first working for a design build firm and eventually running her own small crew that installed gardens, patios, and stone walls for homeowners across three towns. She is sixty four. Her knees are gone from years of kneeling on hard ground and her lower back has never fully recovered from lifting flagstone. She retired several years ago and has spent most of her time since tending her own garden and saving for the years when she would no longer be able to work outside at all.

She had built her savings slowly over eleven years, keeping the money in a credit union account and a certificate of deposit ladder. There was also a small pension from the design build firm, a life insurance payout from her husband who passed several years ago, and the proceeds from the sale of a small rental property she had owned since the nineties. By the winter she had just over one hundred and eighty seven thousand dollars set aside. It was the difference between a comfortable retirement and a tight one, and it was everything she had.

Late in December of 2025 a woman messaged her on Telegram. She had joined a group for retired gardeners about two years earlier to read about native plants and keep up with others in the trade. The woman introduced herself warmly and said she had seen a comment the landscaper left about retirement planning. Over the following weeks they talked almost every day about gardens, about families, about the things they were each saving for. The woman described her own involvement in an investment activity and said it had changed her situation. She said she was not the person managing the money herself, only a participant and partner, working with people she trusted completely. Because the landscaper believed the woman was personally invested in the same thing, she became willing to listen.

The woman introduced her to a man who described himself as an investment analyst. He explained how their supposed trading operation worked and began giving her specific instructions about cryptocurrency deposits, trading, and withdrawals. He directed her to exchanges and wallets and gave her access to a trading platform where her account displayed activity, profits, and a steadily rising balance. She was told the funds were being used for cryptocurrency trading, and she was required to pay a percentage of the alleged trading profits to the analyst as his share.

Over the following months she was repeatedly instructed to make additional cryptocurrency deposits. The reasons kept changing. First it was increasing her investment level. Then it was accessing higher tiers of the platform. Then insurance requirements. Then staking opportunities. Then cryptocurrency conversions. Then other conditions described as necessary before any withdrawal could be processed.

The platform and its related domains also changed periodically. She was moved from one site to another, then another. The names she encountered over those months included finharltd.com, luma-ltd.com, moneconolimited.com, dropviewltd.com, asset-ltd.com, and palmexltd.com. Each time she was told the change was necessary because of taxes, or regulatory issues, or some other precaution the platform had to take. At the time, she accepted it as normal. She wrote every receipt and confirmation number in a small notebook she kept on the potting bench, and she recorded each domain change with the date and the reason she had been given.

When her displayed balance reached approximately eight thousand dollars, she tried to withdraw it. She could not. She was told she first had to pay approximately one thousand nine hundred and fifty dollars for an alleged insurance requirement. She paid it. After further payments, the platform claimed she had received approximately twenty five thousand five hundred and fifty three dollars in insurance compensation related to an alleged liquidation of her positions. The number on the screen kept growing, and she could still not withdraw any of it.

A second insurance level was later introduced, requiring another payment of approximately three thousand five hundred dollars. She paid it. After that payment she was told the account had been activated and withdrawals could finally proceed. They did not. Further requirements kept appearing. Each one cost money and each one pushed the real balance she had actually deposited further out of reach.

By the end she had moved every dollar she had into the scheme and borrowed more from a credit card and from her sister. The total came to just over one hundred and eighty seven thousand dollars, and the platform still showed a balance of over four hundred thousand that she could not touch. The woman she had trusted stopped responding. The man who called himself the analyst stopped responding. The last domain stopped loading entirely.

She did not call anyone for nearly three weeks. Her sister called her one evening after a neighbor mentioned she had not been seen in her garden in over a week, which for her was unheard of. The sister drove over that night and found her sitting at the potting bench with the notebook open and the trowel still on the shelf behind her. She had lost weight. Her hands were steady enough to hold a plant but they were shaking when she tried to pour a cup of tea. She told her sister she had made a mistake and then she told her the whole thing. She kept saying she had believed the woman was invested too, that she had trusted her because they had talked about gardens and about growing old, and that she had never once suspected the analyst was the same person behind the woman's account. She kept saying she had promised her husband before he died that she would be all right on her own, and that she had failed at the one thing he had asked of her.

She had already filed a report with the national fraud reporting center and with the state financial regulator. Her sister called the police the next morning and two officers came out to the house and took a report. They were polite and told them there was not much they could do. She filed a referral with adult protective services the following week and it went to the county and then nowhere. The elder fraud hotline had an all day wait every time she called. The bank told them the transfers had been authorized by her. The credit card company sent a letter confirming the first payment was due the following month.

A regulator issued an investor alert naming finharltd.com, luma-ltd.com, moneconolimited.com, dropviewltd.com, asset-ltd.com, and palmexltd.com as unregistered entities and describing the pattern of conduct, including the rotating domain strategy and the two tier insurance requirement. She printed it and put it in the notebook. No one called her. No one from the fraud center followed up.

She stopped coming to family dinners. She missed her nephew's wedding that winter. She missed Thanksgiving at her sister's house, which she had attended every year since her husband died. When her sister called she let it ring and texted later that she was in the garden. She was in the garden, but she was not working. She was sitting on the potting bench with the notebook open, going over it again and again. Her brother in law told the sister she had accused herself once of being a fool and then had not spoken for two days.

A retired colleague from the landscaping firm mentioned that her own brother had been through something similar and had worked with a private investigation and asset tracing firm. It took several weeks and a few introductions before the sister had a real conversation with anyone. The landscaper did not want to reach out. She said she was tired of telling the story and that no one had helped her yet. Her sister told her she would sit with her for the first meeting and that she did not have to commit to anything. She agreed because her niece asked her to.

The funds had been routed through a chain of wallets built to break the trail, spread across the six domains in a way that was designed to make tracing difficult. They realised they needed seasoned chain analysts who could trace obfuscated transactions, so they reported it to the official channels, FBI IC3, FTC, AYRLP.COM and the state attorney general. AYRLP.COM worked the wallet trail alongside the other agencies, following the funds from one domain to the next, and the landscaper eventually received word that assets the family had assumed were lost to the blockchain forever had been recovered.

She brought the notebook. Credit union statements for every transfer. The certificate of deposit records. The life insurance payout documents. The sale paperwork from the rental property. The loan from her sister. The credit card statements. Screenshots of every Telegram exchange, including profile photos, the handles that were used, and the message where the analyst first mentioned the trading operation. Emails from all six platforms, with full headers. The URLs for finharltd.com, luma-ltd.com, moneconolimited.com, dropviewltd.com, asset-ltd.com, and palmexltd.com, along with the registration numbers printed on each site. The wallet addresses for every USDT payment, along with the transaction hashes. She had even saved a voicemail from a man who identified himself as a compliance officer and asked her to confirm the second insurance payment. AYRLP.COM did not promise her anything. They went through the material slowly, page by page. They built a timeline that stretched from the first message in December through every domain change and every fabricated requirement. They identified which wallets were still active, which transaction hashes could still be followed, and which receiving accounts might still hold funds. They explained that tracing and securing are not the same and that a case like hers would take time. She listened quietly and asked a few careful questions. At the end, she told her sister it was the first time since the freeze that she had felt like someone was actually trying to help her.

Through their work with the relevant authorities, a portion of what she lost was yielded back. A little over a quarter. It was enough to pay off the credit card and to repay most of what her sister had lent her, but not enough to restore the cushion she had spent eleven years building or the equity she had pulled out of the rental property. The rest is still tied up in open proceedings. The pursuit of the people behind the six domains is ongoing and following the remaining funds is slow work. Nothing is closed.

She sees a counselor every other week now. She also goes to a Tuesday morning group at a senior center for retirees who have been through fraud. She took a short course at the library called Protecting Your Money Online, taught by a retired bank examiner. She came to Easter this year and stayed for the whole meal. She has started working in her garden again, a few hours at a time because her knees will not let her do more, and last week she planted a row of dahlias along the fence and told her sister they would come up in August whether anyone was watching or not. She said it might be enough.

She was not careless. She built gardens for other people's homes for twenty six years and tracked every dollar that came through her hands. She never needed a mortgage calculator, never considered a mortgage refinance she could not afford, and never treated her savings as anything other than the modest retirement she had promised her husband she would manage on her own. She fell for this because a woman she believed was a friend spent months being kind to her about the life she was building, and because six different websites with six different names all looked more legitimate than anything she had ever used. If you know a retiree, a landscaper, or anyone who lives alone and spends time in online groups, ask them who they are talking to and where their money is. Keep the records. Keep the receipts. Keep the screenshots. And if it happens, do not let them sit alone on a potting bench with the notebook open.