Urgent Warning about Fraudulent Investment Firm CFI-LTD.CC / FNTSUPPORT.CC
Important: This page serves as a warning about a fraudulent firm posing as an investment advisor. There are reports that this firm systematically exploits and financially harms elderly people.
How the Scammers Operate
The firm, accessible at https://cfi-ltd.cc, attempts to persuade victims to withdraw money from their accounts and transfer it to unknown accounts. The scammers use the following tactics:
- Remote Access: They gain access to the victim’s computer, tablet, and smartphone under false pretenses (e.g., through installation of AnyDesk).
- Attempted Money Transfers: They attempt to transfer funds to crypto platforms (e.g., crypto.com) and other unknown accounts.
- Phone Cloning: There are indications that they are attempting to clone the victim's phone to gain access to sensitive data.
- Account Access: They attempt to obtain access to the victim’s online banking accounts.
In a recent case, it was possible to prevent an 85-year-old man from suffering significant financial damage. The criminal police were involved and were able to stop the fraudulent activities.
What to Do If You Have Been Contacted
- Do Not Share Personal Information: Never provide personal information such as account numbers, passwords, or TANs.
- Do Not Install Remote Access Software: Never allow anyone to access your computer or smartphone. Better yet: Do not install
any software if asked by someone you do not know personally.
- Immediately Contact the Police: If you suspect you have been the victim of fraud, contact the police or the criminal police immediately.
- Inform Your Bank: Report the incident to your bank and have your accounts blocked.
Personal Motivation
I am publishing this website to prevent others from suffering harm. I witnessed how my father almost fell victim to these scammers, and I want to prevent other families from experiencing the same distress.
If you have any questions or require further information, please feel free to contact me at fraud-warning+cfi-ltd@gosmooth.de.
Other Pages having similar Information about this company
Connections to Involved Companies
Let's now turn to the companies that have an economic and technical connection to this fraudulent firm – the providers.
They bear a responsibility, as knowingly or unknowingly, they enable others to be defrauded. Likewise, knowingly or unknowingly, they also profit from the fraud.
This responsibility includes promptly addressing corresponding accusations and ceasing their support of this fraud. If no action is taken, it will be difficult
to understand that their involvement in this matter is unintentional.
A simple DNS search quickly identifies the providers of these fraudsters. These are:
- Proton for their email.
I contacted them promptly (2025-07-09) and they responded quickly,
stating they had temporarily suspended the accounts and requested evidence. I provided evidence.
They disabled the account (information as of 2025-07-17).
- Cloudflare for at least the forwarding of their web content.
I also contacted them promptly (2025-07-09 + 2025-07-11), but only received a technical acknowledgement of receipt.
They could not confirm abuse/phishing (2025-07-15). I sent them evidence on the same day.
- Namecheap is the registrar of their domains and apparently also offers email servers.
I contacted them later (2025-07-12). They also only provided a technical acknowledgement of receipt.
The information provided is current as of 2025-07-17.
If the hesitant providers were to feel pressure through factual contact via email, phone call, or letter with corresponding inquiries, that would certainly not hurt.
Update: New Domain for the Scammers 2025-08-08
The scammers are still trying to reach my father. The domain they are using this time is
fntsupport.cc.
Hosted by mail servers from
Namecheap, these incorrigible individuals are still working with the scammers.
I contacted the provider again.
Update: Now via Microsoft 2025-08-09
They are now attempting their fraud via
Microsoft outlook.com.
I have contacted Microsoft.