OSINT Investigation:
Avi Itzkovich
Transnational binary options, forex, CFD and crypto fraud network architect
Primary Jurisdictions
Israel, Bulgaria, Germany, European Union
Investigation Period
2014 – Present
Methodology
Open-Source Intelligence
Intelligence Metrics
50+
Sources Analyzed
Investigative journalism, Europol releases, Bulgarian corporate registry entries
4+
Regulatory Actions
Europol, Eurojust, Israeli Police and Koblenz Prosecutor actions documented
3
Primary Jurisdictions
Israel, Bulgaria and Germany anchor the documented operations
7
Verified Entities
Corporate vehicles and branded platforms tied to Itzkovich
Thousands
Alleged Victims
Retail investors targeted across Western Europe, Asia and the Americas
€30M+
Documented Losses
Europol-linked investment scam value at time of 2022 arrest
Avi Itzkovich is identified by Europol, Eurojust, Israeli Police and German prosecutors as an alleged principal architect of a transnational investment-fraud network spanning binary options, forex, CFDs and cryptocurrency. The network — anchored by Tradorax and its successor brands KayaFX, KontoFX, UProFX and InstaFX — was operated through Bulgarian entities Raks Media and Mercure Group EOOD. Itzkovich was arrested in Germany in October 2022, assets were seized across multiple countries, and he subsequently pleaded guilty in proceedings brought by the Koblenz Prosecutor's Office.
Identity & Corporate Network Analysis
Identity Verification
Avi Itzkovich is an Israeli national identified by investigative journalists and international law enforcement as a central figure in transnational financial fraud. He is alleged to have co-established Tradorax as a global binary options platform together with Jack Wygodski (also known as James Henry Wygodzki).
No verified tier-1 financial services licences are associated with Itzkovich or the branded platforms. His operational footprint centred on Sofia, Bulgaria, with victim targeting extending to Western Europe, Asia and the Americas.
Corporate Network Mapping
The operational core of the network was Raks Media, a Bulgarian entity later rebranded as Mercure Group EOOD. Corporate filings list multiple Israeli managers and executives including Maor Ben-Zvi, Daniel Koen and Jonathan Grinfeld.
Through this Bulgarian corporate vehicle, the network allegedly operated the Tradorax binary options platform and — after Israel's 2017 binary options ban — the successor forex, CFD and cryptocurrency brands KayaFX, KontoFX, UProFX and InstaFX.
Corporate Network
Entity Web — 9 Entities, 9 Relationships
Click any node to inspect · Drag to pan · Scroll to zoom · Edge colors: owns · manages · rebranded · affiliated
Beneficial Ownership & Control Analysis
Click on nodes or connection lines to reveal concealment tactics and red flags
Beneficial ownership is alleged to be concealed through a combination of a Bulgarian EU corporate veil (Mercure Group EOOD), sequential rebranding of the operational entity (Raks Media → Mercure Group EOOD), and a network of shell companies and aliases specifically associated with the KontoFX structure.
Co-founder Jack Wygodski and the Israeli managers listed in Bulgarian filings provide additional concealment layers by distributing nominal control and obscuring the identity of ultimate beneficiaries of fund flows.
Systemic AML red flags include cross-border victim targeting disconnected from the operational jurisdiction, serial rebranding in response to regulatory pressure, the absence of any tier-1 financial services licensing, and documented use of EU registration as a legitimacy veneer rather than a regulatory permission.
Timeline of Financial Harm
From the mid-2010s launch of Tradorax through the 2017 Israeli binary options ban, the subsequent forex/CFD/crypto rebrands, and the October 2022 German arrest and guilty plea.
Venture Timeline
Cumulative Financial Harm
Systematic Pattern
Documented pattern: serial venture launches followed by collapse, immediate rebranding, and withdrawal restrictions coinciding with recruitment slowdowns.
Tradorax
Collapsedmid-2010s–2017
Genesis — The Binary Options Flagship
Scheme Premise
Binary options platform marketed globally as a high-return trading venue; allegedly manipulated to guarantee client losses while funds were siphoned rather than invested.
Collapse Signal
Israel's 2017 ban on the binary options industry forced a strategic pivot.
Regulatory Actions (1)
Industry-wide binary options ban
KayaFX & KontoFX
Rebranded2017–2020
Forex Rebrand — Exploiting Bulgaria's EU Veneer
Scheme Premise
Forex and CFD trading platforms marketed as EU-based; KontoFX network allegedly used shell companies and aliases to obscure beneficial ownership.
Collapse Signal
Regulatory scrutiny and investigative reporting exposed the shell structure and victim losses.
Regulatory Actions (1)
Investor warnings issued
UProFX & InstaFX
Collapsed2019–2022
Expansion — Forex, CFD and Crypto Offerings
Scheme Premise
Broadened product set including cryptocurrency offerings, targeting victims in Western Europe, Asia and the Americas.
Collapse Signal
Cross-border Europol/Eurojust/Israeli Police operation culminated in Itzkovich's October 2022 arrest in Germany.
Regulatory Actions (1)
Linked Itzkovich to ~€30M investment scam
Koblenz Criminal Case
Collapsed2021–2022
Conviction — Guilty Plea in Germany
Scheme Premise
Criminal proceedings culminating in guilty plea after charges filed by Koblenz Prosecutor's Office and October 2022 arrest.
Collapse Signal
Guilty plea entered; analysts characterise it as a tactical damage-limitation exercise.
Regulatory Actions (1)
Investment fraud charges and conviction
The Cycle Is Not Over
Latest scheme remains active. Zero successful prosecutions to date.
Tradorax Genesis (mid-2010s–2017)
Itzkovich and Jack Wygodski allegedly co-established Tradorax as a global binary options platform, operated through Raks Media in Sofia. Investigative reporting alleges customer funds were never genuinely invested and platforms were manipulated to ensure client losses.
Forex Rebrand (2017–2020)
Following Israel's 2017 binary options ban, the network pivoted into forex and CFD platforms including KayaFX and KontoFX. The KontoFX network is alleged to have used shell companies and aliases to obscure beneficial ownership and launder proceeds.
Expansion & Collapse (2020–2022)
Further branded platforms UProFX and InstaFX extended the network's footprint, reportedly adding cryptocurrency offerings. In May 2021 the Koblenz Prosecutor's Office filed investment fraud charges, culminating in Itzkovich's arrest in Germany in October 2022 in a cross-border operation coordinated by Europol, Eurojust and Israeli Police.
Europol linked Itzkovich to an approximately €30 million investment scam, and assets worth millions were seized across multiple countries.
Conviction & Ongoing Exposure (2022–2025)
Itzkovich pleaded guilty in the German case — a plea interpreted by analysts as a tactical damage-limitation exercise. A January 2025 UASEO investigation by Rohan Adukia detailed the network's structure, associates and alleged cover-up methods, and no public apology or victim restitution initiative has been issued.
Reputation Engineering & Information Suppression
The Itzkovich network is alleged to have leveraged Bulgarian EU registration to project regulatory legitimacy that its operations did not merit, deceiving both victims and — initially — some local authorities.
Despite the October 2022 arrest and subsequent guilty plea, no public apology, victim compensation initiative or statement of responsibility has been issued, leaving affected investors without a restitution pathway outside formal asset forfeiture.
Reputation Manipulation Timeline
Click any node to inspect evidence — 2020–2025
Information Environment & Investigative Coverage
Investigative outlets including UASEO (Rohan Adukia, January 2025), Orbitalc.com, Trinity Bugle and independent authors on Medium have published detailed analyses of the network. Analysts have characterised the guilty plea as a pragmatic strategy to cap sentence exposure and negotiate controlled asset forfeiture while potentially shielding hidden wealth.
Lumen Database Notice #34628019
False DMCA ClaimEvidence of bad-faith copyright claim used to suppress investigative journalism
Multiple investigative outlets including UASEO, Orbitalc, Trinity Bugle and independent Medium authors have documented the Itzkovich network.
Investigative Analysis
Coverage spans 2022 arrest reporting through 2025 investigative deep-dives naming Tradorax, KayaFX, KontoFX, UProFX and InstaFX.
The network is alleged to have leaned on Bulgarian EU registration (Mercure Group EOOD) to project regulatory legitimacy that the operations did not merit.
Investigative Analysis
CRITICAL: EU registration does not constitute a financial services licence; victims were allegedly deceived by this veneer.
Europol publicly linked Itzkovich to an approximately €30 million investment scam and coordinated the 2022 arrest operation with Eurojust and Israeli Police.
Investigative Analysis
This is authoritative law-enforcement attribution rather than unverified reporting.
Source: Lumen Database (lumendatabase.org) - Public record of online content removal requests
Comparative Fraud Analysis: Structural Parallels
The Itzkovich network shares structural DNA with high-profile investment frauds such as OneCoin (which also leveraged Bulgarian corporate infrastructure) and BitConnect, particularly in its use of offshore or regulatory-arbitrage jurisdictions, serial rebranding under pressure, and sustained platform operations absent genuine regulatory licensing.
Where OneCoin disappeared its founder and BitConnect executed a hard exit, the Itzkovich network's distinguishing feature is adaptive rebranding — pivoting from binary options into forex, CFDs and cryptocurrency in response to the 2017 Israeli ban rather than ceasing activity.
| Scheme | |||||
|---|---|---|---|---|---|
Itzkovich Network (Tradorax et al.) SUBJECTEXTREME RISK | |||||
OneCoin COMPARATOREXTREME RISK | |||||
BitConnect COMPARATORCRITICAL RISK |
Pattern Dimensions
5 / 5
Subject scheme assessed across all 5 fraud dimensions identified in historical comparators.
Rebranding Frequency
5 branded platforms
Key operational signature distinguishing this subject scheme from single-cycle historical comparators.
Comparator Schemes
2 analysed
Historical comparators: OneCoin, BitConnect.
“Europol, Eurojust, Israeli Police and German prosecutors identify Avi Itzkovich as a central architect of a serially rebranded investment-fraud network — from Tradorax through KayaFX, KontoFX, UProFX and InstaFX — that exhibited classic predatory dynamics: unsustainable return promises, platform manipulation against clients, heavy reliance on a Bulgarian EU corporate veil, and shell-company laundering through the KontoFX network.”
Red Flag Catalog
Severity Distribution — 6 Red Flags Documented
Investigative reporting alleges customer funds were never genuinely invested; platforms were manipulated to ensure client losses.
Legitimate trading venues execute trades on transparent markets; manipulation of price feeds or outcomes to guarantee client losses is a hallmark of binary options and CFD fraud.
Documented Examples
- Tradorax allegedly manipulated to ensure client losses
- KayaFX/KontoFX/UProFX/InstaFX operated under the same model per investigative reporting
Europol (2022)
“Linked Itzkovich to an approximately €30 million investment scam during the cross-border arrest operation.”
Post-2017 pivot from binary options into forex, CFDs and cryptocurrency under multiple brand names.
After Israel's 2017 binary options ban, the network is alleged to have rebranded rather than ceased operations, launching KayaFX, KontoFX, UProFX and InstaFX.
Documented Examples
- Raks Media rebranded to Mercure Group EOOD
- Tradorax lineage reconstituted into multiple forex/CFD brands
Bulgarian EU membership exploited to project regulatory legitimacy.
Mercure Group EOOD in Sofia provided an EU-registered facade that deceived victims and initially some local authorities, despite no tier-1 financial services licensing.
Documented Examples
- Mercure Group EOOD, Sofia
- Raks Media predecessor entity
Shell companies and aliases allegedly used to obscure beneficial ownership and launder proceeds.
Investigative reporting has identified a network of shell companies and aliases within the KontoFX structure designed to conceal ownership and fund flows.
Documented Examples
- KontoFX shell network
- Multiple Israeli managers listed in Bulgarian filings
Operations based in Bulgaria while targeting victims in Western Europe, Asia and the Americas.
Victim targeting was deliberately disconnected from the operational jurisdiction to exploit fragmented cross-border enforcement and slow international cooperation.
Documented Examples
- Sofia-based operations targeting Western European retail investors
- Asia and Americas marketing reach
Despite guilty plea, no public apology, compensation initiative or statement of responsibility has been issued.
The absence of any restitution framework alongside a tactical guilty plea suggests damage-limitation rather than genuine contrition, and leaves victims without a recovery pathway outside formal asset forfeiture.
Documented Examples
- No restitution programme post-conviction
- Guilty plea interpreted as sentence-cap strategy
Final Risk Assessment
Overall Classification
Risk Assessment Scorecard
Risk Vector Overview
Scores based on documented findings. Max = 100.
AML Risk
SEVEREShell-company network within KontoFX, Bulgarian EU corporate veil via Mercure Group EOOD, and multi-jurisdictional fund flows meet multiple FATF and FinCEN red flag thresholds.
Documented scam value
€30M+ (Europol)
Operational jurisdictions
Israel, Bulgaria, Germany, plus global victim pool
Law-enforcement agencies
Europol, Eurojust, Israeli Police, Koblenz Prosecutor
Shell network
Yes — KontoFX aliases and shells
AML Risk Classification: SEVERE. Shell-company use within the KontoFX network, a Bulgarian EU corporate veil via Mercure Group EOOD, and multi-jurisdictional fund flows linked to an approximately €30 million Europol-documented scam meet multiple international AML red-flag thresholds.
Aggregate Financial Harm: Europol publicly linked Itzkovich to an approximately €30 million investment scam at the time of arrest, with assets worth millions seized across multiple countries. Actual cumulative victim losses across the five branded platforms are likely materially higher.
Regulatory Evasion Pattern: The network demonstrates a textbook pattern of regulatory arbitrage: Israeli origin, Bulgarian EU operational base, global victim targeting, and serial rebranding from Tradorax into KayaFX, KontoFX, UProFX and InstaFX following the 2017 Israeli binary options ban.
Avi Itzkovich's October 2022 arrest and subsequent guilty plea in the Koblenz proceedings establish a high-confidence adverse profile, but investigative analysts describe the broader network as persistent and replicating. The absence of any public apology or victim restitution initiative, combined with the tactical framing of the guilty plea, supports a SEVERE overall risk classification and sustained monitoring of the wider associate network including Jack Wygodski, Maor Ben-Zvi, Daniel Koen and Jonathan Grinfeld.
Get Involved
Sign in to comment, reply and react
We moderate comments to keep this a respectful and safe place. We have a zero-tolerance approach to user-to-user personal abuse. Please follow the house rules.
COMMENT
Participate in discussion, add context, and respond to this report.
TIPS AND EVIDENCE
Submit verified tips, supporting evidence, or additional intelligence.
CORRECTIONS
Request factual corrections or submit verifiable updates for this report.
* This discussion is moderated. Keep comments factual, relevant, and constructive. All submissions are reviewed before publication.
No comments yet. Be the first to comment!