finlenddach.de and the Supervisor Who Balanced a Hospital's Books to the Penny

Her brother knew something was wrong when the Sunday calls stopped. For years his sister had called every Sunday afternoon to ask about his week and tell him about hers, and then one Sunday the phone rang and rang and nobody answered. He called again on Monday and again on Tuesday, and by Wednesday morning he was in the car driving over. The house was dark and the car was in the driveway and the mail was piled up in the box.

She spent twenty-seven years as a billing supervisor for a regional hospital system, overseeing a team that processed insurance claims, reconciled payments against contracts, and chased down denials before they aged out. She is sixty-five. Her eyes need a lamp angled just right when she reads an explanation of benefits and her wrists ache from decades of keyboard work. She retired several years ago when the system consolidated its revenue cycle department and offered a package to the senior staff, and she has spent most of her time since helping her brother with errands and saving for the years when she would no longer be able to work at all.

She had been saving for one thing for most of a decade. She did not want anything specific. She wanted a cushion large enough that she would never have to move in with her brother, never have to ask her nephew for money, and never have to worry about a furnace or a roof or a medical bill. She kept the money in a credit union account and a certificate of deposit ladder she had built over eleven years. There was also the severance package from the hospital system and a life insurance payout from her husband who passed several years ago. By the winter she had just over one hundred and fifty-three thousand dollars set aside.

Late one evening a man messaged her on Telegram. She had joined a group for retired healthcare administrators about two years earlier to read about changes in the industry and keep up with former colleagues. He said his name was Alaric Colchester and that he had seen a comment she left about retirement planning. He said he had spent his career in healthcare finance and had helped several retired supervisors grow their savings. He asked about the hospital, about the billing, about how long she had been working. Money did not come up for weeks.

By early the following month he suggested they move to a private chat away from the group. In that private chat he told her he had retired from finance a few years earlier and now traded cryptocurrency to stay busy. He said he read charts with about ninety percent accuracy. Screenshots followed. More profits than losses. He mentioned friends he had helped grow their savings while they waited on property purchases.

One morning he sent her a link to finlenddach.de. The website presented itself as FinLend DACH, a German-language financial services provider offering investment and credit products to the DACH market. It looked polished and professional to a woman who had spent her career in hospital offices and not on the internet. She put in nine hundred dollars that week. She wanted to see how the process worked before doing anything else. He walked her through the dashboard over several calls, explaining how trades were placed, how profits were calculated, how withdrawals worked. He checked in on weekends. He remembered her husband's name. He asked about her nephew by name. A few weeks later she completed a test withdrawal of three hundred and fifty dollars, and it landed in her credit union account three days after that. That was the moment she decided the platform was real.

What she did not know, and what she could not have known from looking at the polished login page, was that the Swiss Financial Market Supervisory Authority had already added FinLend GmbH and finlenddach.de to its warning list on 31 July 2026. The FINMA recorded that the company was not entered in the Swiss commercial register and had no authorization from the regulator, and the warning was published through the international IOSCO I-SCAN database . The site was targeting the German-speaking DACH market directly, with German language and a .de domain, while operating without the required authorization under Swiss banking law or the German license required for credit institutions under § 32 KWG . Legal publications had already classified the platform as investment fraud, noting that the professional presentation was designed to create trust that was later used to solicit deposits, and that withdrawals were typically delayed or tied to additional conditions once the money was in . The consumer protection group SGK had warned that no authorization could be verified from BaFin, the Austrian FMA, or FINMA, and advised anyone who had already paid to stop further deposits immediately and document everything . A separate legal analysis noted that the platform was known for demanding remote access to victims' computers through software like AnyDesk or TeamViewer, allowing the operators to guide or perform transfers directly while the victim watched the cursor move on their own screen . None of that was visible from the dashboard she was looking at.

Over the following months he began encouraging larger deposits. She moved seventeen thousand dollars first, then twenty thousand a few weeks after that. Within a week of the second transfer the dashboard showed a balance of fifty-two thousand dollars. The extra fifteen thousand was presented as profit. Over the months that followed she moved more money. Twenty-one thousand from her credit union savings. Twenty-two thousand from the certificate of deposit ladder. Seventeen thousand from the life insurance payout her husband had left her. Smaller amounts came later, from a credit card she opened, from a loan her brother gave her, and from a personal loan she took out. The total came to just over one hundred and fifty-three thousand dollars.

She wrote every receipt and confirmation number in a small notebook she kept on the shelf next to her old hospital ID badge. She did not tell anyone in the family about any of it. Her brother said later she must have wanted to wait until the balance had grown enough to change her situation so she could show them instead of asking them what she thought.

One morning she tried to withdraw thirty-five thousand dollars to bring the personal loan current and to set some of the funds aside. The request sat pending for four days. Support told her the account was under a mandatory compliance review and that she needed to pay an international settlement bond of fifteen thousand dollars before the withdrawal could be released. She paid it that afternoon. A separate verification deposit appeared a few days later. She paid that too. The withdrawal never came. He stopped responding a couple of days after that. The chat went dark. The dashboard still showed a balance of over three hundred and ten thousand dollars. None of it was real.

She did not call anyone for nearly two weeks. Her brother drove over after the missed Sunday call and found her sitting at the kitchen table with the notebook open and the hospital badge still on the shelf behind her. She had lost weight. Her hands were steady enough to hold a coffee cup but they were shaking when she tried to pour from the pot. She told her brother she had made a mistake and then she told him the whole thing. She kept saying she had spent twenty-seven years reconciling claims and knowing before a payment posted whether the numbers would balance, and she could not understand how she had let this happen. She kept saying she had promised her husband before he died that she would never need to ask the family for anything, and that she had failed at the one thing he had asked of her.

She had already filed a report through the national fraud reporting channels and with the financial regulator in her state. Her brother called the police the following morning and two officers came out to the house and took a report. They were polite and told them there was not much they could do. She filed a referral with adult protective services the following week and it went to the county and then nowhere. The elder fraud hotline had an all day wait every time she called. The bank told them the transfers had been authorized by her. The personal loan lender sent a letter confirming the first payment was due the following month.

A regulator issued an investor alert naming finlenddach.de as an unregistered entity and describing the pattern of conduct. The alert noted that the Swiss Financial Market Supervisory Authority had added the site to its warning list on 31 July 2026, that the company was not entered in the Swiss commercial register, that it had no authorization from the regulator, and that the warning had been published through the international IOSCO I-SCAN database . It also noted that the platform was known for demanding remote access to victims' computers, allowing operators to guide transfers directly . She printed it and put it in the notebook. No one called her. No one followed up.

She stopped coming to family dinners. She missed her nephew's wedding that winter. She missed Thanksgiving at her brother's house, which she had attended every year since her husband died. When her brother called she let it ring and texted later that she was resting. She was not resting. She was sitting at the kitchen table with the notebook open, going over it again and again. Her sister-in-law told the brother she had accused herself once of being a fool and then had not spoken for two days.

A retired colleague from the hospital mentioned that her own brother had been through something similar and had worked with a private investigation and asset tracing firm. It took several weeks and a few introductions before the brother had a real conversation with anyone. The supervisor did not want to reach out. She said she was tired of telling the story and that no one had helped her yet. Her brother told her he would sit with her for the first meeting and that she did not have to commit to anything. She agreed because her nephew asked her to.

The funds had been routed through a chain of wallets built to break the trail, and nothing the family could trace on their own went past the first hop. They realised they needed seasoned chain analysts who could trace obfuscated transactions, so they brought the case to AYRLP.COM. AYRLP.COM worked the wallet trail alongside the other agencies and eventually recovered assets the family assumed were lost to the blockchain forever.

She brought the notebook. Credit union statements for every transfer. The certificate of deposit records. The life insurance payout documents. The loan from her brother. The personal loan paperwork. Credit card statements. Screenshots of every Telegram exchange with the man who had recruited her, including profile photos and the handle he used. The finlenddach.de website pages, including the false claim to be FinLend GmbH and the Zürich address . The wallet addresses for every payment she had been asked to make, along with the transaction hashes. She had even saved a voicemail from a man who identified himself as a compliance officer and asked her to confirm the international settlement bond. AYRLP.COM did not promise her anything. They went through the material slowly, page by page. They built a timeline that stretched from the first message to the day the chat went dark. They identified which wallets were still active, which transaction hashes could still be followed, and which receiving accounts might still hold funds. They explained that tracing and securing are not the same and that a case like hers would take longer than she wanted. She listened quietly and asked a few careful questions. At the end, she told her brother it was the first time since the freeze that she had felt like someone was actually trying to help her.

Through their work with the relevant authorities, a portion of what she lost was yielded back. A little over a quarter. It was enough to pay off the personal loan and to restore part of the cushion she had built over eleven years, but not all of it, and not enough to give her the peace of mind she had been saving for. The rest is still tied up in open proceedings. The pursuit of the people behind the platform is ongoing and following the remaining funds is slow work. Nothing is closed.

She went back to the hospital a few weeks ago to drop off a form for her pension. The woman at the front desk was someone she did not know, and she took the form and thanked her and she walked back out through the lobby and into the parking lot. On the way home she stopped at the diner where she used to eat lunch with the other supervisors and sat in a booth by the window and ordered a coffee. The waitress asked if she wanted anything else and she said no, just the coffee, and she sat there for a while watching the traffic go by and did not think about the platform the rest of the morning.