Digital fraud warning banner

Public Interest Warning

Alleged Chain Security Scam Evidence

A documented case study showing how fraudsters pressure victims into remote access, crypto transfers, and further payments.

Important: This website is intended to help people recognise scam behaviour. It presents evidence supplied by Andrew Wright and highlights warning signs so others can avoid similar harm.

The correspondence in this case shows a person calling themselves “Mark Adams” using a WhatsApp number +61 468 283 978. The messages include repeated attempts to make Andrew open banking and crypto accounts while connected through remote-access software such as AnyDesk.

Key Evidence Pull-Outs

These extracts show the most serious red flags: remote access pressure, requests to open financial accounts, abuse, mockery, and a further-payment demand.

“call me and connect me to anydesk”

Remote access request — 09/04/2026

“i want you open your bank on pc and crypto.com as well”

Financial account access pressure — 09/04/2026

“you need to connect me to your anydesk”

Repeated remote access pressure — 10/04/2026

“I took 1000”

Message sent after earlier denials — 21/04/2026

“Forget your money”

Mocking the victim — 21/04/2026

“put 500 gbp… i will put 1150 gbp”

Possible advance-fee style demand — 23/04/2026

What Happened: Timeline of Events

The timeline below turns a long chat into a clearer evidence trail. Personal bank details and sensitive identifiers have been redacted for safety.

📞 08 April 2026 — Contact Begins

The contact introduces himself as “Mark”. Andrew states that £1,000 has been taken and that he is speaking with his bank. The contact claims he is trying to protect Andrew from other scammers.

💻 09–10 April 2026 — AnyDesk Pressure

The contact repeatedly asks Andrew to connect through AnyDesk and open banking and crypto accounts. Andrew refuses, saying there is no reason to grant access.

⚠️ 15–16 April 2026 — More Download/Access Attempts

The conversation indicates another download was involved. The contact again says repayment requires AnyDesk plus Crypto.com or Kraken to be open.

🔥 21 April 2026 — Abuse, Mockery, and Admissions

The contact mocks Andrew, says “Forget your money”, refers to seeing transactions, and writes “I took 1000” while discussing other amounts allegedly taken by others.

💸 23 April 2026 — Further Payment Demand

The contact proposes that Andrew put another £500 into Crypto.com or Revolut before the contact will supposedly return £1,150. This is a classic warning sign: paying more money to recover earlier losses.

⚠️ 30th April 2026 — Intimidation Escalation

Scammers claimed they knew Andrew’s home address and had access to his passport.


Click to open full size

Andrew's passport image was likely taken during remote access (Autodesk session) and then it has been convincingly superimposed into an image of a masked man holding it inside a car. (Passport image has been pixelated for privacy reasons)

Andrew's local residence image likely taken from Google Maps as number plates were already blurred out.

Faces scribbled → staged intimidation.

Tactic: Fear + urgency → and £1,000 demand.

🏦 Alpina Payments: Fake Banking Portal Evidence

A connected part of the alleged Chain Security scam involved Andrew being directed to a supposed banking portal called Alpina Payments.

Why this matters

Andrew was asked to register for an account on alpinapayments.com. Screenshots from the portal show a professional-looking “client portal” and an account dashboard displaying a very large Ethereum balance. According to Andrew’s evidence, he was then asked to transfer £5,000 in order to release funds supposedly held in this fake account.

This matches a common advance-fee recovery pattern: the victim is shown a convincing balance or payout screen, but is told they must pay a fee, tax, compliance charge, or transfer amount before the funds can be released.

“Paying money to unlock, release, verify, or withdraw an alleged balance is a major fraud warning sign.”

⚠️ Public warning signs identified

  • The site claims to be a Swiss “licensed financial institution”, but the visible portal text provides no verifiable licence number.
  • Independent scam-checking sources show serious trust concerns, including very low trust scoring, a very young domain, and blacklist/risk indicators.
  • The screenshots display a large crypto balance, but the surrounding behaviour described by Andrew involved a demand for money before release — a known advance-fee tactic.

Visitors should not send money, install remote access software, or enter personal/banking details into sites presented by recovery agents, crypto “support” contacts, or unsolicited callers.

Note: Some abusive language in the transcript has been lightly censored for readability while preserving the meaning of the original messages.

Evidence Transcript

The full WhatsApp export can be published as a downloadable or expandable exhibit. For public safety, redact bank details, account numbers, recovery phrases, addresses, and any unrelated personal information before publishing.

Publishing recommendation: Keep the transcript intact, but use redaction labels such as [BANK DETAILS REDACTED]. Do not publish Andrew’s bank details, sort codes, account numbers, or any information that could expose him to further harm.
Open the full WhatsApp transcript

08/04/2026, 13:34 - Messages and calls are end-to-end encrypted. Only people in this chat can read, listen to, or share them. *Learn more*

08/04/2026, 13:34 -

08/04/2026, 13:34 - +61 468 283 978:

08/04/2026, 13:34 - +61 468 283 978:

08/04/2026, 13:34 - +61 468 283 978: Hi

08/04/2026, 13:34 - +61 468 283 978: This is Mark

08/04/2026, 13:35 - +61 468 283 978: call me here

08/04/2026, 13:47 - Andrew Wright: I am talking to my bank I am not being scammed you have scammed me by stealing £1000 from me

08/04/2026, 13:47 - +61 468 283 978: 🤦‍♂️🤦‍♂️🤦‍♂️

08/04/2026, 13:48 - +61 468 283 978: Now i called you and you were talking to your Bank to lett your money go to your

wallets or revolute i don't know. but one those scammers that you are talking right now take your money, don't complain to me, okay ?

 

Can't you see that they just taking out your money ?

those money that you planning get on friday you will never get it back stupid

Now i am trying to protect you from scam, but you don't understand it

08/04/2026, 14:25 - +61 468 283 978:

08/04/2026, 14:27 - +61 468 283 978:

08/04/2026, 14:42 - +61 468 283 978:

08/04/2026, 14:43 - +61 468 283 978:

08/04/2026, 16:01 - Andrew Wright: My silence is off

09/04/2026, 08:46 - +61 468 283 978: Hi

i will try call you today

09/04/2026, 09:42 - Andrew Wright: What time

09/04/2026, 09:46 - +61 468 283 978: at 11;30

09/04/2026, 09:47 - Andrew Wright: I am at the hospital until 1 30pm

09/04/2026, 09:48 - +61 468 283 978: what time you will be available ?

09/04/2026, 09:49 - Andrew Wright: 1.30pm

09/04/2026, 09:49 - +61 468 283 978: Okay i will give call at that time

09/04/2026, 09:50 - +61 468 283 978: here is a dial

09/04/2026, 13:34 - +61 468 283 978:

09/04/2026, 13:52 - +61 468 283 978:

09/04/2026, 13:56 - +61 468 283 978: I am all ears tell me

09/04/2026, 13:56 - Andrew Wright: I will report your organisation to the international fraud

09/04/2026, 13:58 - +61 468 283 978: You will understand when those scammers take all your money and when you left only with your underpants

09/04/2026, 14:01 - Andrew Wright: F*ch you

09/04/2026, 14:01 - +61 468 283 978: F*ch off, f*ching Andrew

09/04/2026, 14:05 - +61 468 283 978: You want insult me more ?

09/04/2026, 14:06 - Andrew Wright: Send my £1000 back to crypto.com you can keep all the fairy funds in alpina bank

09/04/2026, 14:07 - +61 468 283 978: Here is a deal <This message was edited>

09/04/2026, 14:07 - +61 468 283 978: call me and connect me to anydesk

09/04/2026, 14:11 - +61 468 283 978: gonna connect ?

09/04/2026, 14:15 - Andrew Wright: There's no reason to connect

09/04/2026, 14:16 - Andrew Wright: Put my £1000 back and you can have alpina

09/04/2026, 14:26 - +61 468 283 978: To transfer money from Alpina as well my job, but if you want i will just put 1000 back even i didn't take it

09/04/2026, 14:26 - +61 468 283 978: i need to be connected

09/04/2026, 14:27 - Andrew Wright: What do you want

09/04/2026, 14:28 - +61 468 283 978: i want you open your bank on pc and crypto.com as well

09/04/2026, 14:29 - Andrew Wright: That is not going to happen I told you give me my money back and keep alpina for your self

09/04/2026, 14:31 - Andrew Wright: Do you think I am stupid

09/04/2026, 14:34 - +61 468 283 978: No i don't think so

09/04/2026, 14:34 - +61 468 283 978: And i am not trying to scam you

09/04/2026, 14:35 - Andrew Wright: Yes you are you stole my money from my account out it back then we will talk

09/04/2026, 14:37 - +61 468 283 978:

09/04/2026, 14:43 - +61 468 283 978: That is the best deal that i can give you right now

09/04/2026, 14:49 - Andrew Wright: I am preparing documented evidence to submit

09/04/2026, 14:56 - +61 468 283 978: To submit ? what do you mean ?\

09/04/2026, 15:00 - +61 468 283 978: See you tomorrow

09/04/2026, 15:00 - +61 468 283 978: Have a good night

10/04/2026, 11:35 - +61 468 283 978: Good morning

10/04/2026, 12:08 - +61 468 283 978:

10/04/2026, 12:12 - +61 468 283 978:

10/04/2026, 12:17 - Andrew Wright: This is the final time put the money back you will have a lot of S*it coming down the will S*it you faint

10/04/2026, 12:47 - +61 468 283 978: if you disagree with my condition and rulesi can't do anything

10/04/2026, 14:04 - Andrew Wright: This is the final time you are not ever gaining access to my computer I am not being dictated to by you let's see what happens when the authorities come down on you

10/04/2026, 14:06 - +61 468 283 978: Andrew

10/04/2026, 14:06 - +61 468 283 978: let me call

10/04/2026, 14:07 - +61 468 283 978: I will give you call in 10 min

10/04/2026, 14:23 - +61 468 283 978:

10/04/2026, 14:25 - +61 468 283 978:

10/04/2026, 14:27 - Andrew Wright: We have nothing to do talk about

10/04/2026, 14:27 - +61 468 283 978: I was about to retern your 1000 back <This message was edited>

10/04/2026, 14:31 - Andrew Wright: Then put it back

10/04/2026, 14:44 - +61 468 283 978: you need to connect me to your anydesk

10/04/2026, 17:12 - Andrew Wright: You don't need me to load up anydesk my crypto.com sort code [BANK SORT CODE REDACTED] account number [BANK ACCOUNT NUMBER REDACTED]

13/04/2026, 09:05 - +61 468 283 978: Good morning

13/04/2026, 13:01 - +61 468 283 978:

13/04/2026, 13:03 - +61 468 283 978: Text me when you got time

13/04/2026, 13:54 - +61 468 283 978:

14/04/2026, 10:39 - Andrew Wright:

14/04/2026, 11:03 - Andrew Wright: Today is a wonderful day you have no idea what awaits you the £1000 you stole will cost you beyond your wildest dreams

15/04/2026, 08:39 - +61 468 283 978: F*ch your £1000

15/04/2026, 08:39 - +61 468 283 978: It wasn't stolen by me

15/04/2026, 14:15 - +61 468 283 978:

15/04/2026, 14:29 - +61 468 283 978: text me here once you download

15/04/2026, 14:30 - Andrew Wright: It down loeded

15/04/2026, 14:30 - +61 468 283 978:

15/04/2026, 14:40 - +61 468 283 978:

15/04/2026, 14:41 - Andrew Wright:

15/04/2026, 14:43 - +61 468 283 978: call me again

15/04/2026, 14:43 - Andrew Wright:

15/04/2026, 14:45 - Andrew Wright:

15/04/2026, 14:45 - Andrew Wright:

16/04/2026, 10:25 - Andrew Wright: I have registered the domain name ( chain- securityscam.org) my web designer will create the website all your correspondence including alpina will be on the site being as the domain is so close to yours it will be prominent in the search I suggest you put the £1000 back into my account plus the registration fee for the domain £53 no more excuses just do it

16/04/2026, 11:16 - Andrew Wright: It will take approximately 3 weeks for the website to go live I suggest you talk to your colleagues to find a settlement fast as the website will cause you a lot of pain financially.yoy have a few days before the web designer starts work after that it will be too late there wivl be no stopping the website

16/04/2026, 13:46 - +61 468 283 978: Good afternoon Andrew, i do understand your concern, as i promised yesterday, i am going to return your 1000

16/04/2026, 13:48 - +61 468 283 978: But for this i will need your anydesk, and crypto.com or kraken to be opened

16/04/2026, 13:48 - +61 468 283 978: let me call you right now

16/04/2026, 14:07 - +61 468 283 978:

20/04/2026, 19:27 - Andrew Wright: I have some more food news for you I have a YouTube channel, I am going to devote a full program you and your scam organisation my channel is global

21/04/2026, 07:13 - +61 468 283 978: show me your channel

21/04/2026, 09:29 - Andrew Wright: F*ch off you will see it soon I am coming for you

21/04/2026, 09:32 - +61 468 283 978: F*ch your Channel

21/04/2026, 09:34 - +61 468 283 978: no one wanna see that bullsh*t on your channel

21/04/2026, 09:38 - Andrew Wright: Just wait and see you worthless peice of S*it

21/04/2026, 09:42 - +61 468 283 978: Andrew why are you so mad ? 🤣

21/04/2026, 09:42 - +61 468 283 978: Relax man

21/04/2026, 09:42 - +61 468 283 978: Forget your money

21/04/2026, 09:44 - +61 468 283 978: pick up my call, i have something to talk

21/04/2026, 09:44 - +61 468 283 978:

21/04/2026, 09:45 - +61 468 283 978:

21/04/2026, 09:46 - Andrew Wright: It's about you S*it and your S*it criminal activities make no mistake I will cause you a lot of grief now f*ch off

21/04/2026, 09:47 - +61 468 283 978: Yea yea, whatever

21/04/2026, 09:47 - +61 468 283 978:

21/04/2026, 09:49 - +61 468 283 978: I took 1000, and now it is interesting how much the anothers

got from you,

21/04/2026, 09:50 - +61 468 283 978: I saw the thousands minus from your revolute and crypto.com

21/04/2026, 09:51 - +61 468 283 978: Now i see why you so mad f*ching stupid

21/04/2026, 09:58 - +61 468 283 978: tell this this to another scammers who took thousands

21/04/2026, 09:58 - +61 468 283 978: okay ?

21/04/2026, 12:02 - +61 468 283 978:

21/04/2026, 12:09 - Andrew Wright: 25bc6d4c28f3883454b3cf75bf45122a43a84d9e7f12214b36c3a4fc16c0ad09

21/04/2026, 12:45 - +61 468 283 978:

21/04/2026, 12:50 - +61 468 283 978: f*ch off f*ching stupid

21/04/2026, 12:50 - +61 468 283 978: Now i am happy because they took 4000 from your revolute

21/04/2026, 12:51 - +61 468 283 978: f*ching stupid you will never see it back

21/04/2026, 12:52 - +61 468 283 978: 🤣🤣🤣

21/04/2026, 12:53 - +61 468 283 978: And i saw even more transactions on kraken, OKX, and crypto.com

21/04/2026, 13:28 - +61 468 283 978: .

23/04/2026, 06:45 - +61 468 283 978: .

23/04/2026, 07:58 - Andrew Wright: Think very carefully about your next decision there will be web hosting fees web design YouTube Chanel cost per show the other party paid yesterday my bank Barclays sort code ,[BANK SORT CODE REDACTED] account [BANK ACCOUNT NUMBER REDACTED] do not contact me again pay up

23/04/2026, 11:08 - +61 468 283 978: Here is a deal, put 500 gbp to your crypto.com or to your revolute and from my part i will put 1150 gbp.

23/04/2026, 11:08 - +61 468 283 978: Otherwise no way!!! <This message was edited>

Scam Tactics Shown in This Case

These are common indicators of crypto recovery fraud and remote-access scams.

  • Fake helper role
    The contact claims to be protecting the victim from other scammers.
  • Remote access pressure
    AnyDesk is repeatedly requested as a condition of repayment.
  • Crypto account targeting
    Crypto.com, Kraken, OKX, and Revolut are referenced in the conversation.
  • Urgency and control
    Calls, deadlines, and demands are used to keep the victim under pressure.
  • Abuse and intimidation
    Insults are used when Andrew resists and threatens to report the matter.
  • Advance-fee recovery trap
    A demand for £500 is made before a supposed £1,150 repayment.

How to Protect Yourself

Never do these things

  • Never give AnyDesk, TeamViewer, or remote screen access to someone you do not fully trust.
  • Never open your banking app or crypto account while a caller is watching your screen.
  • Never pay an upfront “release”, “tax”, “unlock”, or “verification” fee to recover money.
  • Never share seed phrases, one-time passcodes, login links, or wallet keys.

Do these immediately

  1. End the call and stop replying.
  2. Disconnect your internet if remote access is active.
  3. Remove remote access apps and run a malware scan.
  4. Call your bank using the number on your card or statement.
  5. Change passwords from a clean device.

Report the Scam & Start Recovery Steps

Act quickly. The sooner banks, exchanges, and reporting bodies receive evidence, the better the chance of freezing accounts, tracing payments, or preventing further losses.

Who to contactWhat to provide
Your bankPayment dates, amounts, recipient details, screenshots, and a clear statement that this may be fraud.
Crypto exchangesTransaction hashes, wallet addresses, account emails, screenshots, and any support ticket references.
Action Fraud / local policeThe full chat export, phone numbers, websites, domains, wallet addresses, and payment records.
Hosting/domain providersEvidence showing impersonation, fraud, phishing, or unlawful misuse of brand names.

Legal Notice & Evidence Handling

Expanded evidence image