Urbixas.com Scam Investigation: Michael Schmidt, Mark Cooper, Kevin Marsh and $50,000 Recovery Fee Warning
Urbixas.com, a website that claimed to provide cryptocurrency recovery and blockchain consulting services, is the subject of an official warning from the Washington State Department of Financial Institutions (DFI).
The warning, published June 3, 2026, describes an investor who experienced two separate stages of suspected financial fraud.
The first involved an individual using the name Michael Schmidt, who reportedly introduced the investor to a cryptocurrency trading opportunity after meeting them on a dating website.
The investor allegedly transferred $43,500 to the investment operation. When they attempted to withdraw the money, the funds were frozen.
The second stage began when the investor searched online for help recovering the money and discovered Urbixas.com.
According to Washington DFI, individuals using the names Mark Cooper and Kevin Marsh claimed they could recover the investment but repeatedly demanded verification payments.
Those additional payments reportedly exceeded $50,000.
Despite paying the fees, the investor did not recover the original investment.
The regulator categorizes Urbixas under cryptocurrency scams and recovery scams and lists a reported loss of $50,000.
Washington DFI has not independently verified the allegations or reported losses.
This Cyb3rsect investigation examines the two stages of the complaint, the identities and websites named by the regulator, and the warning signs associated with cryptocurrency recovery fraud.
What Is Urbixas.com?
Urbixas.com presented itself as a blockchain consulting company offering services related to cryptocurrency wallets and digital asset recovery.
According to Washington DFI, its advertised services included wallet integration, verification, and recovery.
These terms can sound technical and reassuring to someone who has already lost cryptocurrency.
However, a company’s use of blockchain terminology does not establish that it possesses the ability to reverse transactions, recover stolen assets, or access funds held by unrelated wallets.
A genuine investigation should begin by examining transaction records and explaining what can and cannot be verified.
It should not depend on repeated payments for vaguely described verification procedures.
In the complaint reported by Washington DFI, Urbixas allegedly demanded more than $50,000 in verification fees without returning the investor’s original funds.
Washington DFI’s Official Urbixas Warning
On June 3, 2026, Washington DFI’s Securities Division published an alert titled Alleged cryptocurrency recovery service Urbixas.com may be fraudulent.
The alert identifies Urbixas.com and Michael Schmidt as subjects.
It also describes two individuals who reportedly represented the recovery operation:
- Mark Cooper
- Kevin Marsh
The regulator identifies the following contact details associated with Urbixas:
Telephone: (833) 664-8230
Email: support@onchain-support.info
These details are useful for identifying the particular operation described in the complaint.
However, a telephone number or email address does not independently establish the legal identity of the person using it.
DFI also identified two additional websites associated with its review of the contact information:
- theprimesetltd.com
- snapfindsco.com
The regulator described these websites as potentially fraudulent.
It did not conclusively establish that they were operated by the same individuals.
Stage One: The Michael Schmidt Cryptocurrency Investment
According to the regulator, the investor first encountered an individual using the name Michael Schmidt through a dating website.
Schmidt reportedly described himself as a broker living in Chicago.
The individual encouraged the investor to participate in short-term cryptocurrency trades.
The investor was also allegedly encouraged to withdraw funds from existing investment accounts and obtain loans to finance the opportunity.
This combination of personal trust, investment advice, and pressure to obtain additional money is concerning.
An individual who presents themselves as a financial professional should be independently verified through relevant licensing and registration records.
A claim to be a broker does not establish that the person is authorized to provide investment services.
The public DFI warning does not verify Schmidt’s identity, professional qualifications, or Chicago residence.
The name should therefore be treated as an identity used in the complaint, not as proof of responsibility by an unrelated person sharing that name.
Why the Dating Website Connection Matters
The initial contact reportedly occurred on a dating website.
That detail is relevant because online relationships can be used to build trust before an investment opportunity is introduced.
A person may present themselves as financially successful, knowledgeable about cryptocurrency, or willing to help someone achieve financial independence.
Over time, investment discussions may become part of the relationship.
The investor may then rely on the individual’s personal assurances rather than independently verifying the platform.
Regulators frequently warn about this pattern, sometimes described as relationship-based investment fraud or pig-butchering.
However, the Urbixas alert does not describe the complete relationship or establish the identity of the person using the name Michael Schmidt.
The documented facts should not be expanded into an invented personal history.
The Reported $43,500 Investment
Washington DFI states that the investor transferred approximately $43,500 into the initial cryptocurrency investment opportunity.
The alert does not identify the name or website of that original trading platform.
It also does not provide the cryptocurrency wallet addresses, transaction hashes, or banking details associated with the payments.
Those records would be essential to an independent financial investigation.
The investor reportedly attempted to withdraw the money but was informed that the funds were frozen.
The public warning does not establish where the funds were ultimately held or whether they were transferred to another account.
A frozen account balance displayed on a suspicious website should not automatically be treated as proof that corresponding assets remain available.
Stage Two: Searching for Cryptocurrency Recovery Help
After realizing the original investment opportunity was likely fraudulent, the investor searched online for assistance.
According to Washington DFI, that search led to Urbixas.com.
This second stage is especially important.
People who have already lost money may be more willing to pay for services that promise to recover it.
They may possess transaction records and screenshots showing significant losses but lack the technical knowledge to determine whether the funds are traceable.
A recovery operation may exploit that uncertainty by claiming to have special blockchain tools, legal authority, or access to restricted wallets.
Such claims require independent verification.
The existence of a website advertising cryptocurrency recovery does not establish that the business has recovered funds for previous clients.
Who Are Mark Cooper and Kevin Marsh?
Washington DFI reports that the investor communicated with two individuals using the names Mark Cooper and Kevin Marsh.
These individuals allegedly claimed they could recover the investor’s original cryptocurrency investment.
The regulator does not independently verify their identities, employment histories, professional qualifications, or authority to act on behalf of any financial institution.
Their names should therefore be treated as identifiers used in the reported communications.
An investigation should preserve the actual email addresses, telephone numbers, messages, invoices, and payment instructions associated with these individuals.
An unrelated person who shares either name should not be assumed to have any connection to the complaint.
The Verification Fee Demands
According to Washington DFI, the individuals associated with Urbixas repeatedly requested verification fees.
The payments reportedly totaled more than $50,000.
The public alert does not specify the exact amount of each payment, the number of requests, or the method used to transfer the fees.
It also does not identify a specific cryptocurrency receiving address for those payments.
Therefore, a public article should not invent a fee schedule, wallet address, or payment timeline.
The established complaint is that the investor made repeated payments after being told they were necessary for recovery.
Despite those payments, the original investment was not returned.
Why Verification Fees Are a Warning Sign
Legitimate service providers may charge disclosed fees for professional work.
However, repeated demands for additional money as a condition of releasing supposedly recovered cryptocurrency are a serious warning sign.
A suspicious recovery service may describe the payment as a wallet verification fee, compliance charge, tax, activation fee, or blockchain processing cost.
These explanations can sound technical, especially to people unfamiliar with cryptocurrency infrastructure.
Yet a payment to a third party does not inherently reverse a blockchain transaction or grant control over another person’s wallet.
If a service claims that money has already been recovered, the claim should be supported by independently verifiable evidence.
A screenshot showing a supposed recovered balance is not sufficient.
In the Urbixas complaint, the investor reportedly paid more than $50,000 and still did not recover the original investment.
The Difference Between Blockchain Tracing and Cryptocurrency Recovery
Blockchain tracing and cryptocurrency recovery are not the same service.
Blockchain tracing involves examining transaction records to understand how digital assets moved.
On public blockchain networks, investigators may be able to document transfers between addresses and identify connections to certain services.
However, a wallet address does not automatically reveal the identity of its controller.
Recovery requires additional circumstances, such as assets remaining accessible through a cooperative custodian or a lawful process capable of securing them.
A blockchain investigation cannot guarantee that stolen funds will be returned.
No service should claim it can recover cryptocurrency simply by running a special software tool or collecting a verification fee.
The Urbixas complaint illustrates why consumers should ask for a clear explanation of the investigative process and its limitations.
The Contact Information Associated With Urbixas
Washington DFI identifies a telephone number and email address associated with Urbixas.
The phone number is (833) 664-8230.
The email address is support@onchain-support.info.
The email domain differs from Urbixas.com.
That difference does not automatically establish wrongdoing, because legitimate businesses sometimes use separate support domains.
However, it is a relevant detail for investigating how a website, email system, and related online services may be connected.
An evidence-based review may examine email headers, historical domain records, website content, and correspondence.
The public warning does not identify the actual person controlling the email account.
Theprimesetltd.com and Snapfindsco.com
Washington DFI reports that its review of the contact information associated with Urbixas revealed two additional websites:
theprimesetltd.com
snapfindsco.com
The regulator described these sites as potentially fraudulent.
Their inclusion is important because similar contact details across multiple websites may indicate an operational connection worth investigating.
However, the DFI warning does not establish a complete ownership or technical relationship between the websites.
It also does not provide evidence that the investor transferred money to either additional domain.
They should therefore be described as websites identified during the regulator’s review, not as independently proven participants in the reported loss.
Why Recovery Scams Often Follow Investment Scams
Cryptocurrency recovery scams frequently target people who have already suffered financial losses.
A person who has lost money may search for recovery assistance, post about the incident online, or respond to advertisements offering help.
This creates opportunities for a second suspected fraud.
The recovery operation may claim to have located the missing assets or obtained authorization to release them.
It may then demand additional money before providing any actual recovery.
In the Urbixas complaint, the second stage reportedly caused additional payments exceeding the amount listed as the initial $43,500 investment.
The case therefore illustrates how financial harm can continue after the original investment incident.
How Much Money Was Reportedly Lost?
The DFI warning contains two important amounts.
The investor reportedly transferred $43,500 into the original cryptocurrency investment opportunity.
The investor then reportedly paid more than $50,000 in verification fees to the Urbixas recovery operation.
Washington DFI’s scam tracker lists $50,000 as the reported loss for the Urbixas entry.
These figures should not be confused.
The initial investment and later recovery fees represent separate reported stages of the complaint.
Because the regulator has not independently verified the amounts, it would be inappropriate to present a precisely calculated total loss as an established financial finding.
The case-specific financial impact should be determined from the investor’s original transaction records.
Is Urbixas.com Legitimate or a Scam?
The available public evidence raises serious concerns.
Washington DFI has issued an official warning identifying Urbixas.com.
The complaint describes individuals claiming they could recover a previous cryptocurrency investment but repeatedly demanding verification fees.
The investor reportedly paid more than $50,000 without recovering the original money.
The regulator also identified additional potentially fraudulent websites associated with its review of the contact information.
However, DFI has not independently verified the complaint allegations or reported losses.
The evidence-based conclusion is that Urbixas.com is the subject of a documented regulatory warning involving suspected cryptocurrency recovery fraud.
The warning is not a final criminal judgment against the individuals named in the complaint.
What Evidence Should Urbixas Investors Preserve?
Anyone who interacted with Urbixas.com should preserve the available evidence from both the original investment and the attempted recovery.
Important records include:
- Conversations with the individual using the name Michael Schmidt
- Dating website messages and profile information
- Records of the original $43,500 investment
- Cryptocurrency transaction hashes and receiving addresses
- Bank transfer confirmations and exchange withdrawal records
- Screenshots showing the original investment account was frozen
- Emails and messages from Mark Cooper and Kevin Marsh
- Communications from support@onchain-support.info
- Records of calls involving (833) 664-8230
- Verification fee invoices and payment instructions
- Receipts for recovery-related payments
- Screenshots or saved copies of Urbixas.com
- Any links to theprimesetltd.com or snapfindsco.com
Where possible, preserve complete communications and original files rather than relying only on selected screenshots.
Never share private keys, wallet recovery phrases, passwords, or authentication codes with anyone claiming they can recover cryptocurrency.
What to Do If You Paid Urbixas Recovery Fees
If you paid fees to Urbixas and did not recover your funds, preserve the payment records and stop making additional transfers based solely on promises that another fee will unlock the money.
Contact the bank, card provider, or cryptocurrency exchange used to make the payments.
Explain that the transfers may be connected to a suspected recovery scam and ask what reporting or protective procedures are available.
If you provided sensitive account information, secure the affected accounts and review authentication settings.
Report the incident to the appropriate financial regulator or law-enforcement agency.
U.S. residents may report internet-enabled fraud to the FBI’s Internet Crime Complaint Center.
Washington residents may also submit complaints to Washington DFI.
Be cautious of anyone who contacts you afterward claiming that a government agency, investigator, or blockchain company has recovered your funds and needs another payment to release them.
Can the Original Cryptocurrency Be Traced?
If the investor transferred cryptocurrency over a public blockchain network, the original transactions may be available for examination.
A case-specific investigation would begin with the transaction hashes, receiving addresses, asset names, and blockchain networks.
Subsequent transfers may provide additional investigative leads.
However, the Washington DFI warning does not publish wallet addresses or transaction hashes associated with the original investment or the Urbixas recovery payments.
It would therefore be misleading to claim that the reported funds have already been traced to a specific wallet, exchange, or individual.
Tracing cryptocurrency does not guarantee recovery.
The results depend on the available evidence and the actual movement of funds.
How Cyb3rsect Can Assist With an Urbixas Investigation
Cyb3rsect provides digital-investigation and blockchain-forensics services relevant to suspected cryptocurrency investment and recovery fraud.
For an Urbixas-related case, an evidence review may begin by separating the original investment from the later recovery payments.
The first objective is to reconstruct the financial timeline and identify what can be independently verified.
Communications with Michael Schmidt, Mark Cooper, and Kevin Marsh may help establish the representations made during each stage.
Where cryptocurrency transaction details are available, relevant blockchain activity may be examined for additional investigative leads.
The analysis should distinguish actual payments from unsupported claims that assets have been located or recovered.
Any conclusions should explain the limits of the available evidence.
A forensic investigation may assist with documentation and reporting, but it cannot guarantee financial recovery.
Contact Cyb3rsect About Urbixas.com
If you encountered Urbixas.com, an individual using the name Michael Schmidt, or people claiming to provide cryptocurrency recovery through Mark Cooper or Kevin Marsh, preserve your original records.
Cyb3rsect can assess the available digital evidence and determine whether further examination may be appropriate.
Useful starting information includes payment confirmations, cryptocurrency transaction hashes, original investment communications, recovery fee invoices, and emails associated with the service.
Never provide private keys, wallet recovery phrases, or account passwords.
Contact Cyb3rsect to discuss an evidence-based review of a suspected cryptocurrency investment or recovery scam.
Final Assessment
The June 3, 2026 Washington DFI warning describes two stages of suspected financial fraud.
The first involved an investor who reportedly met an individual using the name Michael Schmidt on a dating website and transferred approximately $43,500 to a cryptocurrency investment opportunity.
The investor could not withdraw the funds.
The second involved Urbixas.com, where individuals using the names Mark Cooper and Kevin Marsh allegedly promised to recover the investment.
The investor reportedly paid more than $50,000 in verification fees without receiving the promised recovery.
Washington DFI also identified additional potentially fraudulent websites during its review of Urbixas-related contact information.
The regulator has not independently verified the complaint allegations or reported losses.
Nevertheless, the case illustrates why cryptocurrency recovery claims should be independently assessed and why repeated verification fees are a serious warning sign.
For affected investors, preserving evidence from both the original investment and the subsequent recovery attempt is essential.
Official Source
Washington State Department of Financial Institutions — Alleged cryptocurrency recovery service Urbixas.com may be fraudulent, June 3, 2026.
https://dfi.wa.gov/alerts/alleged-cryptocurrency-recovery-service-urbixascom-may-be-fraudulent
Editorial notice: This article summarizes public regulatory information. It does not claim that Cyb3rsect independently verified the reported losses, established the identities of the named individuals, identified the operators of the related websites, or traced the funds described in the complaint.
