Police seize over 100 servers linked to investment fraud with more than €4 million in losses

When the platform vanishes

A German couple invested through what looked like a legitimate online trading platform. Their account showed profits. When they tried to withdraw the money, they couldn't. The platform, it turned out, was part of a fraud network ^[1].

In November 2026, Europol coordinated an operation across several countries that led to seven arrests and the seizure of over 100 servers. The network had caused losses of more than €4 million ^[1].

The interesting part is what happens to the evidence when a platform goes dark. It's like keeping your receipts in someone else's drawer. When they close the drawer and walk away, your receipts go with them.

The evidence question

Fraud cases turn on what was promised and what was delivered. In online investment schemes, that evidence lives in screenshots, account statements and conversations on the platform. When the platform is controlled by the people running the scheme, that record can be edited or deleted before anyone asks for it.

Even when law enforcement seizes servers, as they did here, the question remains: can you show that what's on the server now is what was there when the victim invested? Servers can be wiped, logs can be rewritten and backups can vanish.

For the victims, the problem is simpler. They have screenshots of their account balance and maybe some emails. The other side controls everything else. That's not a fair starting point.

What this means for you

If you run a platform where people make decisions based on what they see—trading, advice, offers, predictions—ask yourself: if someone questions what your platform showed them six months ago, could you prove it?

A few things to consider:

• Who keeps the record of what was shown to each user, and when?
• Can that record be quietly changed by someone with administrator access?
• If a dispute goes to court, would a screenshot be the only evidence, or do you have your own?

The question matters for platforms that handle money, but also for any service where a user acts on information your system gives them: a chatbot's advice, a model's prediction or an automatically generated document.

Sealing what the platform shows

Here, the thing to seal is each piece of content shown to a user: an account balance, an offer, a piece of advice or a generated document. Sealing takes a fingerprint of the record, not the content itself, so nothing leaves your systems. Each sealed record gets a witness ID.

When it is sealed matters. Seal it when the content is served to the user, or when the session ends, so the timing is part of the record.

Anyone you share the record with—an investigator, a court, your own compliance team—can check it by calculating the fingerprint again and comparing it with the sealed one. A single changed character makes the fingerprints differ.

What it shows is that the record of what your platform displayed at that time hasn't changed since it was sealed, even by someone with full access to your systems. What it doesn't show is that the content was accurate, lawful or what the user understood it to mean. It just proves the record itself is unchanged.

That gives both sides something to work from. The user has their screenshot, and you have a sealed record of what the platform actually served. Disputes can be about the substance, not about whether someone rewrote the logs.

How it would work

1. As your platform serves content to a user, it sends a fingerprint to WitniumChain through the REST API, the SDK or the MCP server, and gets a witness ID back.
2. The fingerprint and witness ID are stored alongside the content record, which stays in your own systems.
3. When the record is questioned, you or the person you share it with calculates the fingerprint again and checks it against the sealed one using the witness ID.

The first 2,000 witnesses a month are free. Read the documentation to get started.

What to watch

Fraud cases like this one highlight a pattern: when evidence lives on infrastructure controlled by one side, the other side starts from a weak position. That's true whether the other side is a victim, a regulator or a customer with a complaint.

For platforms, the evidence question is worth asking early: who will believe your records when it matters, and can you show they haven't been touched?