Kristijan Krstic hit with second superseding indictment

Two days after Kristijan Krstic’s sentencing was pushed back to November, the DOJ filed a second superseding indictment against him.

The indictment marks the third to be filed against Krstic in his Dallas District Court case. [Continue reading…]


iN8 promotion shifts to South America

A concerned BehindMLM reader from Colombia has shed light on iN8’s promotion efforts across South America. [Continue reading…]


RapidBit Exchange Review: Trading signals “click a button” Ponzi

RapidBit Exchange goes by a number of names, including RapidBitEx, RapidTex, RapidBit LTD and RapidBT Digital Asset Trading Platform.

RapidBit Exchange fails to provide ownership or executive information on its website.

RapidBit Exchange’s website domain (“rapidbitex.com”), was privately registered through an apparent Hong Kong address on May 12th, 2025.

Of note is RapidBit Exchange website’s use of Chinese fonts:

RapidBit Exchange’s official support app is hosted on the subdomain “coin5manager.aisms.info”. If we visit this subdomain directly we find more Chinese:

Renminbi (RMB), the official currency of China, is also referenced in RapidBit Exchange’s “how to” guides:

Despite clearly being run by Chinese admins and being barely a few months old, on its website RapidBit Exchange falsely claims its “a top international financial technology group ranked in the top 10 in the world” that’s “headquartered in USA”.

RapidBit Exchange is intertwined with Winchester Community, a “global, collaborative platform” that’s behind the “Darvis System”.

The Darvis System also goes by Darvis Interstellar Capital Alliance and Darvis Strategies LTD. We’ll cover how these entities fit into RapidBit Exchange’s marketing pitch in the conclusion of this review.

Winchester Community has a website set up on the domain “winchesterhs.com”, the private registration of which was last updated on May 14th, 2025.

Through the WayBack Machine we can confirm “winchesterhs.com” was redirecting to an unrelated domain in early 2025. Coinciding with the registration of RapitBit Exchange’s website domain, the “winchesterhs.com” domain was also acquired in or around May 2025.

Winchester Community is purportedly headed up by founder “Walter Cross”:

Despite Winchester Community only being a few months old, “Walter Cross” purportedly founded it back in 2021.

“Walter Cross” of course doesn’t exist, he’s played by a stock photo model.

Here’s the “Walter Cross” model playing a chef:

A doctor:

A physiotherapist:

And so on. Whoever he is, Winchester Community’s founder appears to be some random hired through an agency.

A Darvis System website was put together on the domain “darvisclub.com”, privately registered on July 22nd, 2025.

There’s not much on the website other than a few disabled download links and app design mock-ups.

Naturally in the Darvis System website source-code though we find more Chinese:

Putting all of this together, whoever is running RapidBit Exchange and Winchester Community obviously has ties to China.

And in case it wasn’t obvious, everything on the RapidBit Exchange, Winchester Community and Darvis System websites is baloney.

As always, if an MLM company is not openly upfront about who is running or owns it, think long and hard about joining and/or handing over any money. [Continue reading…]


Athene Network cops $100K trademark infringement judgment

Athene Network has received a $100,000 default judgment against it.

Athene Annuity was awarded damages on August 22nd, following a trademark infringement lawsuit filed in May 2024. [Continue reading…]



BitMart restricts APTM token trading in Lithuania

Following a complaint asserting Apertum Foundation’s APTM token isn’t MiCA compliant, BitMart has restricted trading activity in Lithuania. [Continue reading…]


Inside Blockchain Sports’ ATLA token staking Ponzi

Following news of Blockchain Sports’ ATLA token exit-scam on the equally dodgy MEXC crypto exchange, today we’re digging into the specifics of the fraudulent investment scheme. [Continue reading…]


Coinplex Ponzi collapses, initiates MiCA exit-scam

The Coinplex “click a button” app Ponzi has collapsed.

Following reports of delayed withdrawals, on August 23rd CoinPlex informed investors it was abandoning its current website domain.

Hoping to steal as much as they can from investors before disappearing, CoinPlex also announced a MiCA exit-scam. [Continue reading…]



Cactil secures MyChargeBack non-prosecution agreement

Recovery scammers MyChargeBack have secured a non-prosecution agreement from the DOJ.

As a result of the agreement, details of which have not been made public,  the DOJ has agreed to return MyChargeBack’s website domain to parent company Cactil LLC. [Continue reading…]


Marlinn Group Review: Boris CEO MLM crypto Ponzi

Marlinn Group fails to provide ownership or executive information on its website.

Marlinn Group’s website domain (“marlinn.io”), was privately registered on December 14th, 2024.

By July 2025 Marlinn Group had found someone to play fictional CEO Alejandro Morales:

The above is taken from a video published to Marlinn Group’s official YouTube channel on July 3rd.

“Alejandro Morales” is played by Lex Morales, a US expat comedian living in Thailand .

Morales works as a producer at The Comedy Joint, a Bangkok comedy club he co-founded. “Funwithlex” is another comedy business venture of Morales’.

Boris CEO schemes, where an actor is hired to play a fictional executive, are typically run by eastern European scammers (Russia, Ukraine and/or Belarus).

Thailand emerged as a hotspot for fleeing Russians after Russia invaded Ukraine in 2022.

Chinese scammers are also known for running Boris CEO scams:

Curiously, as of July 2025 SimilarWeb was tracking 100% of Marlinn Group’s website traffic from Bulgaria.

As always, if an MLM company is not openly upfront about who is running or owns it, think long and hard about joining and/or handing over any money. [Continue reading…]


Good Energy Co. Review: Revital U reboot + solar

Good Energy Co. fails to provide ownership or executive information on its website.

A corporate address in Plano, Texas is provided, however this appears to be a virtual mailing address owned by WeWork.

Further research reveals Andrew McWilliams citing himself as Good Energy Co.’s CEO on LinkedIn:

McWilliams is known to BehindMLM as founder and CEO of Revital U, a coffee MLM that launched in late 2016.

A visit to Revital U’s website domain reveals it now redirects to Good Energy Co.’s website.

Good Energy Co.’s website domain (“sharegoodenergy.com”), was registered in March 2024. A few months later Revital U’s official FaceBook page was renamed to Good Energy Co.:

For all intents and purposes, Good Energy Co. is a Revital U reboot.

Prior to Revital U, McWilliams was an ACN and LuxriLife promoter. After that McWilliams signed on as CEO of Momentis.

Why McWilliams isn’t disclosed as CEO on Good Energy Co.’s website is unclear.

As always, if an MLM company is not openly upfront about who is running or owns it, think long and hard about joining and/or handing over any money. [Continue reading…]