Offshore Lawsuits vs Real-World Recovery: Why Victims in the ICIJ “Nested Exchange” Case Should Radically Lower Their Hopes

ICIJ’s “Exchange Inside an Exchange” – A System Built for Plausible Deniability

The International Consortium of Investigative Journalists (ICIJ) has once again pulled back the curtain on the darker side of crypto infrastructure in its investigation “Hunt for missing millions unmasks one crypto exchange hidden inside another.”

The picture that emerges is familiar and deeply troubling:

• offshore shells and layered entities,

• “nested” operations buried inside bigger exchanges,

• regulatory no-man’s-land where everyone claims it’s someone else’s problem,

• victims losing millions while “recovery” efforts often generate more legal bills than actual refunds.

Scam-Or Project has been documenting such structures for years. Now, as new legal actions are launched – this time spearheaded by Dutch fund-recovery attorney Marius Hupkes – the hard questions return:

• Will victims realistically get their money back?

• Or are they entering yet another system where the primary winners are lawyers and consultants, not the defrauded customers?

Nested Exchanges, Offshore Shells, and Legal Dead Ends

The ICIJ reporting describes a clear operational pattern:

• Kyrrex, advertised as a regulated, EU-oriented crypto platform, quietly funneled customer flows through its St. Vincent entity, which in turn operated “inside” HTX (Huobi).

• Victim funds – including the US$1.5 million life savings of a Dutch model – were routed straight from fraud schemes into Kyrrex-branded wallets hosted on HTX.

• Blockchain tracing revealed billions in volume moving through these wallets between 2022 and 2025.

• Regulators largely took refuge behind jurisdictional boundaries:

• Malta pointed to St. Vincent,

• St. Vincent pointed to no one,

• Kyrrex claimed it could not tell that fraudulent operators were using its infrastructure.

None of this is accidental. It is a deliberate architecture:

• optimised for deniability,

• profitable so long as flows continue,

• and extremely resistant to post-factum enforcement or victim compensation.

How Kyrrex’s Dual-Entity Design Enabled the “Nested Exchange” Setup

To understand the ICIJ case, it is crucial to grasp how the Kyrrex group was structured. It relies on two key sister companies that serve very different functions – a familiar pattern in high-risk crypto and trading schemes.

1. Kyrrex Ltd – St. Vincent and the Grenadines (SVG)

This is the offshore engine of the operation.

Key characteristics:

• Operates under minimal or no meaningful regulatory oversight

• Can open, manage, and control crypto wallets without tight supervision

• Can interact with unregulated, controversial, or high-risk exchanges

• Can process large transaction volumes with limited compliance checks

According to the ICIJ investigation, the HTX wallet that received victim deposits and processed billions in transactions was held by this SVG entity.

2. Real Exchange (REX) Limited – Malta

This is the onshore façade.

Publicly presented as:

• A regulated entity under Malta’s Virtual Financial Assets (VFA) framework

• The “clean” and EU-friendly face of the Kyrrex brand

• A company used in marketing to reassure European users and partners

But in practice:

• It is legally distinct from Kyrrex Ltd (SVG)

• Maltese regulators focus on REX and do not supervise the SVG entity

• Responsibility for offshore actions can be disclaimed (“that’s not our company”)

3. Why This Split Is So Powerful – and So Dangerous for Victims

The functional division looks like this:

Offshore (SVG) – “Dirty Hands”

• Hosts wallets at HTX

• Handles flows linked to fraud and high-risk activity

• Runs operations that EU regulators would never approve on their watch

Onshore (Malta) – “Clean Face”

• Provides a regulated front

• Enables EU marketing and investor trust

• Serves as a shield against scrutiny, thanks to formal separateness

For victims, the illusion is simple but devastating:

• They see one brand: “Kyrrex”

• They assume:

• one company,

• one jurisdiction,

• one responsible counterparty.

The reality:

• The wallet is owned by Kyrrex Ltd (SVG)

• The brand and regulatory halo rest with REX in Malta

• Victims are stuck in the jurisdictional gap

• Regulators, in turn, insist the problem lies elsewhere

This legal and operational split is precisely what makes:

• enforcement extremely complex,

• litigation slow and uncertain,

• recovery highly unlikely.

When Litigation Starts – Does It Deliver Anything Beyond Paper?

Desperate victims now turn to the courts. Marius Hupkes, an established Dutch lawyer, has filed claims arguing that Kyrrex bears liability for failing to prevent fraudsters from using its exchange infrastructure.

By all available information:

• Hupkes is experienced,

• reputable,

• and does not typically bring frivolous claims.

However, Scam-Or Project must underline an uncomfortable truth:

Winning on paper against an offshore crypto vehicle is not the same as actually getting money back.

Typical Pattern in Cross-Border Crypto Fraud Cases

Again and again, the process looks like this:

1. You win the case.

2. You obtain a favourable judgment.

3. The defendant has no attachable assets where the judgment is enforceable.

4. Enforcement turns into a multi-year pursuit across jurisdictions that offer little cooperation.

5. Throughout, legal fees continue – payable by the victims, not by the fraudsters.

Victims often tell themselves they are part of a strong, collective action with good prospects. In reality, the risk-return profile frequently looks like:

• Victim risk: high

• Victim cost: high

• Victim recovery: uncertain, often close to zero

• Lawyer’s outcome: fees are due regardless of the success of enforcement

This does not imply malicious intent on the part of lawyers. It exposes a structural misalignment:

• The system compensates process,

• not results.

The Deeper Problem: Offshore Entities Can Vanish at Will

For years, Kyrrex operated as a dual-track platform:

• a global site at kyrrex.com/global, and

• an EU-branded offering at kyrrex.com/eu,

a template well known from earlier binary options and CFD schemes.

Web archives show that until early 2025:

• the operator of kyrrex.com was Kyrrex Limited (SVG),

• with no mention of Malta-based Real Exchange (REX) Limited as site operator.

REX, by contrast:

• initially operated kyrrex.mt,

• later ran the kyrrex.com/eu portal,

• and appeared as the operator of kyrrex.com itself only in recent weeks.

At the start of 2025, yet another company surfaced:

• Kyrrex Operations LLC, a US entity registered with FinCEN as MSB #310024013725,

• briefly listed as the website operator.

By November 2025:

• the “global” portal at kyrrex.com/global had disappeared,

• Kyrrex Limited (SVG) had effectively vanished from the public-facing structure,

• only kyrrex.com and kyrrex.com/eu visibly remained.

Illustrative Overview of the Kyrrex Web/Entity Shifts

For litigation and recovery, this is a worst-case scenario:

• Operators change,

• entities disappear,

• domain governance shifts without clarity.

Even if Hupkes manages to obtain a judgment:

• The relevant Kyrrex entity is rooted in St. Vincent.

• Its practical operations are intertwined with HTX, an exchange with a long history of regulatory concerns.

• Funds have been commingled, mixed, moved, laundered, or dissipated long before proceedings even start.

• There was no timely asset freeze, which is the single most important precondition for meaningful recovery.

The logical conclusion:

The money is almost certainly gone – and has been for some time – regardless of what any court might later decide.

Offshore structures are built on exactly this premise:

• distance from regulators,

• fragmented jurisdictions,

• diffused accountability.

The Question Few Want to Raise: Who Really Gains from This Litigation?

From years of Scam-Or Project investigations, a harsh pattern becomes evident:

In cross-border crypto fraud cases, lawyers generally recover more than the victims do.

Victims, often exhausted and traumatised, understandably see litigation as their final option. But hope alone does not make a sound strategy. Before joining group claims or class-style actions, they should ask clear, concrete questions:

• Which Kyrrex entity is actually being sued?

• Where does that entity hold assets that can be realistically enforced against?

• How are legal fees structured – hourly, contingency, mixed?

• Are there caps on total legal costs, or could fees end up exceeding any recovery?

• What is the practical enforcement pathway against a company intentionally structured to evade accountability?

• What are the realistic odds of recovering even 10% of losses after costs?

Honest answers to these questions are likely to be sobering.

Conclusion: Justice Matters – But So Does Avoiding Manufactured Illusions

The ICIJ report is crucial reading. It exposes a system engineered to:

• exploit gaps between jurisdictions,

• hide behind offshore legal shields,

• maintain a thin veneer of legitimacy through onshore branding.

However, when it comes to actually reclaiming lost money, victims must stay ruthlessly realistic:

• Litigation can establish responsibility, but not necessarily restitution.

• Offshore crypto operators rarely pay simply because a court tells them to.

• Legal costs can wipe out the already slim chance of meaningful recovery.

Scam-Or Project’s stance remains unchanged:

• Victims deserve justice, but not manufactured hope.

• Before committing to costly, uncertain legal campaigns, they deserve full transparency on the true odds of getting real money back, not just symbolic victories.

Scam-Or Project will continue to monitor:

• the Dutch proceedings,

• the evolving role and structure of Kyrrex,

• and the relationship with HTX.

We also invite whistleblowers, insiders, and affected users to share documents and intelligence securely on our website.

Share Intelligence

Only verified data and transparency – not optimistic legal narratives – can dismantle the underlying infrastructure of crypto-enabled crime.