OSINT Investigation:
Fernando Martinho
Serial crypto-Ponzi architect linked to Nimbus Platform rebrands and cross-border fraud allegations
Primary Jurisdictions
Estonia, UAE, Brazil, Portugal
Investigation Period
2019 – Present
Methodology
Open-Source Intelligence
Intelligence Metrics
70+
Sources Analyzed
BehindMLM investigations, El Mundo reporting, Forests & Finance disclosures, corporate registries
8+
Regulatory Actions
Warnings and freezes including Binance asset freeze and Spanish/Portuguese regulator alerts
7
Jurisdictions
Estonia, UAE, Brazil, Portugal, Spain, BVI, United Kingdom
12+
Verified Records
Corporate registrations, court filings, exchange enforcement actions
10,000+
Documented Victims
Affected investors across Nimbus Platform iterations in Europe and Latin America
€100M+
Estimated Losses
Aggregate alleged investor harm across Nimbus rebrands
Fernando Martinho is the central public figure behind the Nimbus Platform crypto ecosystem, which independent investigations including BehindMLM and El Mundo have classified as a serial Ponzi scheme operating across Estonia, UAE, and BVI structures. Three documented Nimbus iterations — Smart Tokens, NMBT, and GNBU — have collectively caused estimated losses exceeding €100M across more than 10,000 investors in Europe and Latin America.
Identity & Corporate Network Analysis
Identity Verification
Fernando Martinho is publicly identified as the founder and public face of Nimbus Platform, with reported ties to Portugal and Brazil. He is named in BehindMLM's investigative coverage and in El Mundo's July 2022 investigation into Nimbus-related losses among Spanish-speaking investors.
No verified financial services licenses have been publicly documented for Martinho or for the Nimbus-branded entities he is associated with, despite the platform's solicitation of retail capital under yield-bearing investment offerings.
Corporate Network Mapping
The Nimbus Platform OÜ entity was registered in Estonia in 2019 during the country's now-tightened permissive crypto licensing window. After initial regulatory and reputational pressure, the operation reportedly relocated operational gravity toward UAE/Dubai structures.
Successive rebrands — Smart Tokens (2019-2021), NMBT/Nimbus 2.0 (2021-2022), and Nimbus DeFi/GNBU (2022-2023) — share marketing channels, MLM affiliate networks, and operational personnel, consistent with a single underlying operator group cycling token branding.
Corporate Network
Entity Web — 6 Entities, 6 Relationships
Click any node to inspect · Drag to pan · Scroll to zoom · Edge colors: owns · manages · rebranded · affiliated
Beneficial Ownership & Control Analysis
Click on nodes or connection lines to reveal concealment tactics and red flags
The Nimbus corporate stack reportedly leverages Estonian incorporation, UAE free zone operational presence, and alleged BVI token-issuance vehicles — a multi-layered offshore architecture that obscures ultimate beneficial ownership and complicates investor recourse.
Operational control appears concentrated in a close-knit promoter circle around Martinho, with tiered MLM affiliate networks distributing recruitment liability across thousands of intermediaries while the core operator group retains administrative control over smart contracts and treasury wallets.
Systemic AML red flags include the use of MLM channels for cross-border solicitation, smart-contract administrative keys retained by operators, account freezes by Binance pursuant to internal compliance review, and the Brazilian Forests & Finance disclosure linking associated parties to cattle-finance laundering investigations.
Timeline of Financial Harm
From 2019 Estonian incorporation through 2023 Brazilian laundering disclosures, the Nimbus operation has progressed through three distinct rebrands while accumulating estimated losses exceeding €100M.
Venture Timeline
Cumulative Financial Harm
Systematic Pattern
Documented pattern: serial venture launches followed by collapse, immediate rebranding, and withdrawal restrictions coinciding with recruitment slowdowns.
Nimbus Platform 1.0
Active2019-2021
Genesis — 100% Annual ROI Promise
Scheme Premise
Marketed as an AI-driven trading platform delivering up to 100% annual returns via 'Smart Tokens' staking.
Collapse Signal
Withdrawal restrictions, regulator scrutiny, and inability to sustain promised yields.
Regulatory Actions (1)
Ponzi classification published
Nimbus Platform 2.0 (NMBT)
Rebranded2021-2022
First Rebrand — New Tokens, Same Mechanics
Scheme Premise
Relaunched with NMBT token and 'Ponzi Points' rewards structure following collapse of Smart Tokens.
Collapse Signal
Identified by analysts as same operators with new tokenomics; investor distrust spreads.
Regulatory Actions (1)
Repeated Ponzi warnings
Nimbus DeFi (GNBU)
Collapsed2022-2023
Second Rebrand — DeFi Veneer
Scheme Premise
Dual-token model adding GNBU governance token positioning the project as a 'DeFi protocol.'
Collapse Signal
Binance freezes associated wallets after fraud reports; subsequent lawsuit filed against exchange.
Regulatory Actions (1)
Asset freeze on Nimbus-linked accounts
Post-Freeze Litigation Phase
Rebranded2023-Present
Reversing Liability — Suing the Exchange
Scheme Premise
Continued retail promotion alongside Binance lawsuit seeking unfreezing of allegedly Ponzi-linked funds.
Collapse Signal
Operations persist despite enforcement actions; project pivots to litigation narrative.
Regulatory Actions (1)
Cattle-finance laundering links reported
The Cycle Is Not Over
Latest scheme remains active. Zero successful prosecutions to date.
First Venture Genesis (2019–2021)
Nimbus Platform OÜ launched in Estonia in 2019 marketing 'Smart Tokens' with promises of up to 100% annual ROI through purportedly AI-driven trading strategies.
BehindMLM's earliest analyses flagged the platform's mechanics as inconsistent with sustainable trading economics, identifying it as a Ponzi structure dependent on continuous affiliate-driven inflows.
Rebrand and Expansion (2021–2022)
Following withdrawal pressure on Smart Tokens, the operation relaunched as Nimbus 2.0 with NMBT tokens and a 'Ponzi Points' rewards mechanic — terminology that independent analysts characterized as remarkably on-the-nose.
Collapse and Escalation (2022–2023)
El Mundo's July 2022 investigation brought mainstream Spanish-language attention to Nimbus losses, while Binance subsequently froze Nimbus-linked accounts amid fraud reports.
Nimbus pivoted by suing Binance over the frozen funds — a defensive narrative shift framing the operator as wrongfully aggrieved rather than addressing underlying Ponzi allegations. A further pivot to Nimbus DeFi/GNBU continued the rebrand cycle.
Current Activity and Legal Exposure (2023-Present)
Forests & Finance's 2023 disclosure linking associated parties to Brazilian cattle-finance laundering investigations added a real-economy laundering nexus to the digital-asset allegations, expanding potential AML exposure significantly.
Reputation Engineering & Information Suppression
The Nimbus operation has consistently presented itself as a fintech innovator and AI-trading pioneer, with marketing materials emphasizing technological sophistication while opaque-ing the absence of any verified regulatory licensure.
The reversal litigation strategy against Binance — positioning the operator as a victim of exchange overreach rather than as the subject of legitimate compliance review — represents a notable reputational pivot designed to deflect from underlying scheme analysis.
Reputation Manipulation Timeline
Click any node to inspect evidence — 2020–2025
Documented Critical Coverage
Despite the Nimbus operation's promotional narrative, BehindMLM has published multiple analyses across all three Nimbus iterations classifying the platform as Ponzi-structured, while El Mundo and Forests & Finance have provided mainstream investigative scrutiny that resists narrative suppression.
Lumen Database Notice #34628019
False DMCA ClaimEvidence of bad-faith copyright claim used to suppress investigative journalism
Investigative content covering Nimbus Platform's alleged Ponzi mechanics has reportedly been targeted by takedown requests aimed at suppressing critical analysis.
Investigative Analysis
Such requests typically target BehindMLM, news outlets, and independent analysts producing fraud-warning content.
Allegations that lawful investigative reporting on Nimbus operations has been targeted for removal under pretextual copyright or defamation claims.
Investigative Analysis
Suppression of fact-based fraud analysis is itself a documented red flag for sophisticated Ponzi operators.
Source: Lumen Database (lumendatabase.org) - Public record of online content removal requests
Comparative Fraud Analysis: Structural Parallels
Nimbus exhibits structural parallels with OneCoin (multi-rebrand multi-jurisdiction crypto Ponzi) and BitConnect (daily-return MLM crypto scheme), particularly in its use of unrealistic ROI claims, MLM-driven recruitment, and offshore concealment architecture.
Unlike BitConnect's single-exit collapse, Nimbus has demonstrated a OneCoin-style serial rebrand pattern — extending operator capture of investor capital across multiple iterations rather than a single defined Ponzi cycle.
| Scheme | |||||
|---|---|---|---|---|---|
Fernando Martinho / Nimbus SUBJECTEXTREME RISK | |||||
OneCoin COMPARATOREXTREME RISK | |||||
BitConnect COMPARATORCRITICAL RISK |
Pattern Dimensions
5 / 5
Subject scheme assessed across all 5 fraud dimensions identified in historical comparators.
Rebranding Frequency
3 rebrands in ~4 years
Key operational signature distinguishing this subject scheme from single-cycle historical comparators.
Comparator Schemes
2 analysed
Historical comparators: OneCoin, BitConnect.
“Independent investigations identify Fernando Martinho as the central public architect of Nimbus Platform — a series of crypto ventures that, according to BehindMLM and El Mundo reporting, exhibited classic Ponzi-scheme dynamics: 100% annual ROI promises, MLM-driven recruitment, withdrawal restrictions, repeated rebrands across token names, and reliance on Estonia/UAE/BVI structures to evade regulatory scrutiny.”
Red Flag Catalog
Severity Distribution — 6 Red Flags Documented
Promises of up to 100% annual ROI — mathematically inconsistent with legitimate trading.
Nimbus marketing claimed AI-driven trading bots could deliver up to 100% annual yields — a return profile that is not credibly sustainable absent inflows from new investors.
Documented Examples
- Smart Tokens advertised 100% annual ROI
- NMBT promoted with 'Ponzi Points' rewards
- GNBU governance token paired with yield-staking promises
SEC (Investor Alert)
“Promises of high returns with little or no risk are classic warning signs of investment fraud.”
Reports of frozen accounts and inability to withdraw funds preceding each rebrand.
Multiple investor reports describe withdrawal lockups and conversion requirements forcing capital into new tokens — a hallmark Ponzi capital-trapping mechanism.
Documented Examples
- Smart Tokens withdrawals suspended pre-rebrand
- Forced conversion to NMBT tokens
- GNBU staking lockup periods
Three Nimbus iterations in ~4 years — each following investor distress.
Smart Tokens → NMBT → GNBU represents the operational signature of serial Ponzi recycling, with each rebrand introducing new tokens while maintaining the same team and infrastructure.
Documented Examples
- Smart Tokens (2019-2021)
- NMBT 'Ponzi Points' (2021-2022)
- GNBU dual-token DeFi (2022-2023)
Multi-jurisdictional structure spanning Estonia, UAE, BVI, and UK.
The Nimbus network reportedly leverages Estonia's now-tightened crypto regime, UAE free zone opacity, and BVI shell entities — a textbook arbitrage stack for beneficial-ownership concealment.
Documented Examples
- Nimbus Platform OÜ in Estonia
- Dubai operational base post-2021
- Alleged BVI token-issuance vehicles
Suing Binance after freeze rather than cooperating with investor recovery.
Following Binance's freeze of allegedly Ponzi-linked accounts, Nimbus reportedly pursued litigation against the exchange — a defensive narrative pivot framing the operator as victim rather than perpetrator.
Documented Examples
- Binance lawsuit over frozen accounts
- Public framing as 'wrongfully frozen' funds
- Use of litigation to deflect from underlying scheme analysis
Tiered referral commissions drove cross-border affiliate sales.
Nimbus's growth relied on MLM-style recruitment with tiered commissions, classic of Ponzi schemes that require continuous new-investor inflows to sustain prior payouts.
Documented Examples
- Tiered referral commissions
- Affiliate webinars across LatAm and Europe
- Recruitment-based ranking systems
Final Risk Assessment
Overall Classification
Risk Assessment Scorecard
Risk Vector Overview
Scores based on documented findings. Max = 100.
AML Risk
SEVEREBeneficial ownership concealment via Estonia/UAE/BVI layers, MLM channel use, and alleged Brazilian cattle-finance laundering nexus meet AML red flag thresholds.
Illicit flows estimated
€100M+
Offshore jurisdictions
5 (Estonia, UAE, BVI, UK, Brazil)
Exchange enforcement actions
Binance asset freeze
Nominee/MLM concealment
Yes — multi-layer
AML Risk Classification: SEVERE. Multi-layered Estonia/UAE/BVI structure combined with MLM recruitment channels and alleged Brazilian cattle-finance laundering nexus produces a severe AML profile across both digital-asset and real-economy vectors.
Aggregate Financial Harm: Estimated aggregate alleged losses exceed €100M across more than 10,000 investors spanning Spain, Portugal, Brazil, and other markets through three documented Nimbus iterations.
Regulatory Evasion Pattern: Sequential rebranding every 12–18 months coupled with offshore relocation from Estonia to UAE, combined with reversal litigation against compliance-active exchanges, represents a deliberate regulatory-evasion architecture.
Fernando Martinho's Nimbus Platform network presents a high-severity ongoing fraud risk profile characterized by serial rebranding, MLM-driven recruitment, multi-jurisdictional offshore concealment, and an alleged real-economy laundering nexus. Despite documented Binance enforcement and mainstream investigative coverage, operations have continued under successive rebrands, indicating a persistent threat to retail investors particularly in Spanish and Portuguese-speaking markets.
Get Involved
Sign in to comment, reply and react
We moderate comments to keep this a respectful and safe place. We have a zero-tolerance approach to user-to-user personal abuse. Please follow the house rules.
COMMENT
Participate in discussion, add context, and respond to this report.
TIPS AND EVIDENCE
Submit verified tips, supporting evidence, or additional intelligence.
CORRECTIONS
Request factual corrections or submit verifiable updates for this report.
* This discussion is moderated. Keep comments factual, relevant, and constructive. All submissions are reviewed before publication.
No comments yet. Be the first to comment!