3FSFraud Desk
3FSFraud Desk
A $5,000,000,000 "International Bill of Exchange" drawn on a US Treasury debt-collection office, and a €12,000,000,000,000 "HSBC server-to-server upload" waiting for one more signature before it "mints" into a DeFi bridge. Below is every page, every number and every mark, checked against the documents themselves, Companies House, the IP registries, the Ethereum chain and the US Treasury's own fraud alerts.
Hashes let anyone who receives the same package confirm it is the same package. The files themselves are not republished here; the exhibits below are crops with personal data removed.
| File | Bytes | SHA-256 | Producer / notes REAL |
|---|---|---|---|
| ALM - IBOE # 67494 - Notorized (25 FEB 2021).pdf | 4,027,763 | e0a7416a…5a2852 | 28 scanned pages, no text layer, PDFium, created 2021-02-25. "67494" in the filename is the tail of a USPS tracking number. |
| CIS Sports Capital Partners.pdf | 620,303 | 2f875a65…0bb4 | 4 pages, Microsoft Word, internal title "CIS Sports Capital 2022", created 2025-02-19. Contains a passport scan (not published). |
| 12T_POF.pdf | 537,269 | fed88e48…d229 | 8 pages; pages 1–2 repeated four times byte-for-byte. Icecream PDF Editor 2.5.2 on macOS 15.5, created 2026-07-13, modified 2026-08-14. |
| 12TLiq.json | 4,708 | 7bf28662…1de1 | "Liquidity pool" and "DEX aggregator" object. Not valid JSON (unterminated string on the second route). |
| 12TLiquidityCrypto.json | 5,072 | bb95ea28…d081 | "SWIFT → bridge mint" object with three "validators". |
| VIDEO-2026-10-28-22-35-03.mp4 | 4,931,714 | 98c35faa…0215 | 72.7 s, 672×576 H.264. A blue "BANK REPORT CONSOLE / HSBC SYSTEM" screen recording dated 26 October 2026. |
Full hashes are in the method section. REAL = computed by us. DOC = printed in the counterparty's document (shows what they claim, not that it is true). UNVERIFIED = not checked in this pass.
Dated 15 February 2021, maturing 15 February 2036, issued by Putnam Group Ltd (Mahopac, New York) to ALM - Investment Holding Ltd (then of Finchley, London; Companies House 11904482), notarised in Dutchess County, New York, and wrapped in a UCC-1 filing, an "irrevocable bond power", affidavits, a Treasury release-of-information form and an apostilled copy of a UK incorporation certificate. DOC
A "SWIFT.COM internal banking copy" says HSBC UK Bank plc uploaded twelve trillion euro of "M1 funds" in "S2S upload format" from an account in the name of Sports Capital Partners Limited (Companies House 08274883). Two JSON files route it into a Uniswap pool and an "ACKBridgeToken" contract that will mint "ackUSD" once a third validator signs. A video shows a blue bank terminal confirming the balance. DOC
"base_amount": "12000000000000.00", "converted_amount": "2000115204718785.28", ← 2 quadrillion USDT "exchange_rate_applied": "1.15", "conversion_rate": "0.16", ← contradicts 1.15 "liquidity_pool": { "protocol": "uniswap_v3", "pool_address": "193.108.72.19", ← an IP, not a contract "reserves": { "ETH": "12300000000000.00" }, ← ~100,000× all ETH "fee_tier": "6000000000.00", "slippage_tolerance": "13800000000000.00", "utilization_rate": "66,67%" }, "api_integrations": { "price_oracle": { "provider": "Chainlink", "headers": { "Authorization": "Bearer YOUR_CHAINLINK_API_KEY" } }, "dex_aggregator_api": { "provider": "1inch", "headers": { "Authorization": "Bearer YOUR_CHAINLINK_API_KEY" } }, "blockchain_node": { "provider": "HSBC UK BANK PLC", "endpoint": "https://api.1inch.io/v5.0/1/swap" } }, "blockchain_transaction": { "input": "0xswap_eth_usdt_uniswapV3_allocation" }, ← not hex "audit_trail": { "validated_by": "Chainlink_Oracle_Audit_Node" }
"transaction": {
"uetr_hash": "0x7f4c2d1b…c712", ← a UETR is a UUID
"imad_number": "20260508EURFW9182736450",
"status": "PENDING_BRIDGE_MINT",
"confirmations_received": 0 },
"bridge": {
"contract_name": "ACKBridgeToken",
"contract_address": "0xA91B…0012", ← no code on mainnet
"quorum_required": 3, "processed": false },
"validators": [
{ "wallet": "0x1111111111111111111111111111111111111111", "signature": "0x8b3f…0111" },
{ "wallet": "0x2222222222222222222222222222222222222222", "signature": "0x7cc9…1222" },
{ "wallet": "0x3333333333333333333333333333333333333333", "signature": null } ],
"network": { "server_global_ip": "193.108.72.19",
"ip_interface": "162.254.35.81", ← Namecheap shared host
"port": 21 },
"blockchain_execution": {
"block_number": null, "tx_hash": null,
"mint_status": "WAITING_FOR_FINAL_SIGNATURE" },
"result": { "message": "ALL ACCESS HAS BEEN GRANTED", "completion": "100%" }
The business model is in the status field. "Waiting for final signature", "pending bridge mint", "final release code: (blank)". The next message is always the same: a fee, a "ratio", an "insurance wrap" or a "SWIFT activation" payable in real money to release the imaginary one.
These marks belong to their owners and are shown because they appear on, or are named in, the documents. Their presence on a document is not their owner's endorsement of it, and none of these organisations is accused of anything. Crops are from the documents as received.
That question arrived after the dossiers. It is the tell that identifies the whole genre. Here is what each word means to the people who use it, and what it actually is.
| They say | What it is | What they mean |
|---|---|---|
| KTT / "analog KTT" / "manual KTT" | Key Tested Telex: the pre-SWIFT way banks authenticated telex messages with a shared test key. Retired decades ago. No bank settles value by telex today, "analog" or otherwise. UNVERIFIED citation | A transfer that cannot be traced, verified or reversed because it does not exist, "explained" by the counterparty's bank being too old-fashioned to show up on SWIFT. |
| S2S, server-to-server, IP/IP, IP-to-IP, "upload", "download" | Networking words. Real interbank payment traffic runs over SWIFT's network, RTGS systems (Fedwire, CHAPS, TARGET2) or card and ACH rails, every one of which produces a reference you can confirm with your own bank. | The "sender" will connect a server to your bank's server and push a balance across. Your bank will never see it. You will be asked to pay for the "receiver" or the "download fee". |
| M1 funds, M0/M1/M2, "fresh cut", "slightly seasoned" | M1 is a central-bank statistic for the money stock. It is not a grade of money and no account is denominated in "M1 funds". | Language that makes a fictitious balance sound like a technical category of real money. |
| Ledger-to-ledger, "off-ledger", "black screen", "grey screen", "money patch" | Nothing. Banks have one ledger. There is no off-ledger money and no screen colour that reveals hidden funds. | Why the balance will never appear on a statement or a SWIFT confirmation. |
| MT103 "one-way", "MT103/202 manual download", "GPI semi-automatic", "MT199 pre-advice" | MT103 is a real customer credit transfer message, MT202 a bank-to-bank one, MT199 free text, gpi a tracking service. None has a "one-way" or "manual download" variant. | A screenshot of a message that was never sent, offered as proof of a payment that never settled. |
| Ratios: 60/40, 70/30, 80/20, "receiver gets 40" | The split of the imaginary face value between "provider" and "receiver". | The fee. The receiver pays a percentage, an "activation", "insurance wrap" or "paymaster" cost in real, clean money to receive a percentage of money that does not exist. The ratio is the only number in the deal that is real. |
| Receiver, provider, mandate, paymaster, "fee protection agreement" | Role names from the private-placement-programme script. | Who pays (receiver), who collects (provider, via paymaster), and the contract that makes paying look safe. |
No. UnyKorn LLC does not transact by KTT, "analog KTT", S2S, IP/IP, ledger-to-ledger, "M1 funds" uploads, "money patch", one-way MT103 or ratio arrangements, and quotes no ratios, because none of those move money. We accept exactly three kinds of transfer, each one verifiable by us without your help: a SWIFT MT103 or ISO 20022 pacs.008 that our bank confirms as settled; a Fedwire or ACH credit that posts to our account; or an on-chain stablecoin transfer with a transaction hash on a public chain. If you hold the funds you describe, send a confirmable €1 test by any of those routes. Until then there is nothing to discuss, and no fee of any kind will be paid by us to anyone.
That is the complete reply. It does not argue, it does not insult, and it asks for the one thing the counterparty cannot produce.
| Identifier | Where it appears | Note |
|---|---|---|
| P17M74R3HSVETIERFW | Dossier B reference number | Same reference across PDF, JSON and video, six months apart. |
| GB73 HBUK 4002 44•• ••••71 · acct 738•••71 · sort 40-02-44 | Dossier B "sender account" | Masked here. Do not rely on it; do not pay to it. HBUKGB4B is HSBC's own BIC used as a prop. |
| HSBC-UK/SRT-NR-39 · 931025309370266313 · HBUKGB4BXXX9103819939919301034 | Dossier B document and transaction codes | Invented formats. |
| 0x9F4B61A7e4B2dC4cF4e7A3F89D9D0e8A8c1b9F11 · 0xA91B6C72D2d4f71A8A8b0B5C39d72D5A90fB0012 · 0x7A3F9c2D8E1b4F6a9C0d5E8b1A2c3F9e7D6b5A1C | Dossier B recipient, "ACKBridgeToken", signer | Never used on Ethereum mainnet; all fail EIP-55. |
| 162.254.35.81 · server1.hakimoverse.com | Dossier B "IP interface" | Namecheap shared hosting. The real origin of the "terminal". |
| 7018 3090 0001 3426 7494 · 9590 9402 3609 7305 1657 11 | Dossier A "certificate" and "control" numbers | USPS Certified Mail and return-receipt numbers. |
| UCC 202102158070462 (NY DOS) | Dossier A | Notice filing only. Not re-queried in this pass. |
| APO-1810978 | Dossier A apostille | Certifies a notary's signature on a company certificate copy. |
| Companies House 11904482 (dissolved 22 Sep 2026) · 08274883 (proposal to strike off) | Both dossiers | Check the live register before any dealing: find-and-update.company-information.service.gov.uk |
FBI Internet Crime Complaint Center, ic3.gov. Treasury Inspector General (bogus Treasury drafts), oig.treasury.gov. Your bank's fraud desk if any instrument was presented for deposit.
Action Fraud, actionfraud.police.uk. Financial Conduct Authority, fca.org.uk. HSBC UK's published fraud contact (from hsbc.co.uk, never from the counterparty). Companies House for misuse of a registered company's details.
Nothing to report yet: no transaction exists. If you are asked to send a "gas", "activation" or "bridge" fee to any address, stop. Check the address on a public explorer first; a fresh, empty address is the norm for this scheme.
Everything above is reproducible from the files and the public pages named. The full ledger of claims to sources is kept with this page's source.
e0a7416adb8ceb3cebb9271d8e168fbd6568a559bf59b4cd3380de878a5a2852 ALM - IBOE # 67494 - Notorized ( 25 FEB 2021 ).pdf 2f875a65fbba147b17ecf195dbb4b70b17be56061d7391d06091ffc661cf0bb4 CIS Sports Capital Partners.pdf fed88e48d198b0493fcdc7891dfcd8068cc02777fb8958cb88ade945a2a4d229 12T_POF.pdf 7bf28662cf58ee910cdbc7e35e3f2e3dac0fe85aef63cfd62ed59bf5d7451de1 12TLiq.json bb95ea2863f68bb84677548327fa40b31ee89b42e93ba09ddb243ccf47d0d081 12TLiquidityCrypto.json 98c35faa37e6159e632a3e3b9a963fcad0e4a07319430ed842573db692870215 VIDEO-2026-10-28-22-35-03.mp4