SBDCCOIN and iwebcoin.com Investigation: Inside the WhatsApp Trading Group and the Fake Tax Payment Demand

Publication date: October 31, 2026

A cryptocurrency investment can appear increasingly convincing when an investor receives regular trading signals, sees an account balance rising, and communicates with people who present themselves as experienced market professionals. But when the platform controls the information displayed to the customer, apparent profits can create a dangerous illusion of financial success.

A complaint recorded by the California Department of Financial Protection and Innovation (DFPI) describes an alleged investment operation involving an application called SBDCCOIN and a second platform operating at iwebcoin.com.

The reported approach involved a WhatsApp invitation, an individual identified as Amy, and trading instructions attributed to someone called Professor Andy. The investor reportedly transferred cryptocurrency into the application and eventually believed the account had grown to more than $1 million.

When the investor attempted to withdraw, the platform allegedly demanded a 20% tax payment supposedly owed to the Internal Revenue Service (IRS). The investor paid the requested amount, but the platform then introduced another condition: opening an account on iwebcoin.com.

According to the DFPI tracker, the investor was unable to recover the funds and reported losing at least $180,000.

The case highlights a serious warning for cryptocurrency investors: a displayed balance is not proof of available funds, and a payment described as a tax does not become legitimate simply because an investment platform demands it.

How the SBDCCOIN investment approach reportedly worked

The DFPI complaint describes an approach that began through WhatsApp.

An individual identified as Amy invited the California resident to join a group chat where members could learn about cryptocurrency trading. The group presented itself as an educational environment, with trading signals and guidance from a person identified as Professor Andy.

The investor was instructed to download an application called SBDCCOIN and follow the group’s trading recommendations.

The reported sequence included several stages:

1. An invitation into a trading group

The investor was approached by Amy, who invited them to participate in a WhatsApp group focused on cryptocurrency trading.

2. A purported trading expert

A person identified as Professor Andy reportedly provided trading signals that group members were encouraged to follow.

3. Funding the investment application

The investor transferred cryptocurrency into the SBDCCOIN application under the group’s direction.

4. A rapidly growing account balance

The investor believed the account had grown to more than $1 million. However, a balance displayed by an application does not independently demonstrate that the corresponding money exists or can be withdrawn.

5. A demand for an alleged IRS tax

When the investor attempted to withdraw funds, the platform reportedly demanded a payment equal to 20% of the account value, claiming it was required for the IRS.

6. A second platform requirement

After the investor paid the requested amount, the platform allegedly said that the funds would only be released if the investor opened another account on iwebcoin.com.

The investor reported being unable to recover the funds. The DFPI also states that the application and associated websites were no longer operational.

These details are drawn from a consumer complaint summarized by the California regulator. The reported transactions and losses have not been independently verified by DFPI.

Why the WhatsApp trading-group structure deserves attention

WhatsApp trading groups can create an environment in which investment recommendations appear to come from a community rather than from a single person promoting an opportunity.

Several participants may share apparent trading results, congratulate one another, and encourage members to follow the same signals.

A person entering such a group may see:

• Frequent market commentary.
• Screenshots of apparent profits.
• Messages from people described as analysts or professors.
• Trading instructions presented as professional recommendations.
• Claims that members are earning money consistently.
• Encouragement to increase deposits after successful-looking trades.

These elements can create social pressure. When multiple people appear to support an investment, a new member may assume that the opportunity has already been tested by others.

However, group activity does not establish that the participants are independent investors or that the trading results are genuine.

An investigator should examine who controls the group, how members are recruited, whether the same individuals appear across other groups, and whether the platform’s claimed trading activity can be independently verified.

The SBDCCOIN complaint illustrates why the identities and roles of people providing trading instructions should be checked rather than accepted at face value.

The alleged 20% IRS tax: what investors should understand

The reported 20% payment demand is one of the most important details in this case.

According to the complaint, the platform claimed that the investor had to pay a tax to the IRS before receiving the funds.

Investors should understand that a tax obligation is determined by applicable tax law and individual circumstances. An unknown trading platform cannot establish a person’s tax liability merely by displaying a percentage or issuing a payment instruction.

A demand for cryptocurrency to an address supplied by an alleged investment adviser should not be treated as an official IRS payment instruction.

Before paying a claimed tax connected to an investment withdrawal, investors should:

• Request a written explanation of the alleged liability.
• Identify the legal entity making the demand.
• Ask for the precise legal basis and relevant tax documentation.
• Verify the claim independently with the IRS or a qualified tax professional.
• Avoid using payment addresses or contact details supplied exclusively by the platform.

A particularly serious warning sign occurs when a platform demands an additional payment after an investor has already paid a supposed tax or withdrawal fee.

In the SBDCCOIN complaint, the reported sequence continued even after the investor paid the requested amount. The platform allegedly introduced another requirement involving iwebcoin.com.

This is why investors should avoid treating a payment described as the final requirement as a guarantee that funds will be released.

Why the move from SBDCCOIN to iwebcoin.com matters

The complaint identifies two separate platform names: SBDCCOIN and iwebcoin.com.

The reported investor was initially instructed to use the SBDCCOIN application. After paying the alleged tax demand, the investor was told to open another account on iwebcoin.com before the funds could be released.

That transition raises important investigative questions.

Was the second platform controlled by the same people? Was it being used to collect additional information or payments? Did the two services share infrastructure, wallet addresses, contact details, or other technical identifiers?

Those questions cannot be answered simply by comparing the names of the applications.

A proper investigation would examine the available evidence, including:

• The exact website addresses and application details.
• Registration and historical domain information.
• Hosting and technical infrastructure.
• Contact details and communication accounts.
• Payment instructions and cryptocurrency wallet addresses.
• Any documents claiming a relationship between the two platforms.
• Whether the investor was asked to transfer additional funds.

A technical connection between two websites may provide an investigative lead, but it does not automatically establish common ownership or identify the people responsible.

For Cyb3rsect, this is an important distinction: the objective is to establish what the evidence supports, not to make assumptions based on similar names or appearances.

How to investigate cryptocurrency transfers connected to SBDCCOIN

When cryptocurrency is transferred to a suspicious investment application, transaction records can help reconstruct the movement of funds.

The first step is to obtain the original transaction information from the wallet or exchange used to send the cryptocurrency.

Relevant records include:

• The cryptocurrency asset and blockchain network.
• The sending wallet address.
• The receiving wallet address.
• The transaction hash.
• The amount transferred.
• The date and time of each transaction.
• Any exchange account or payment service used.
• The messages that instructed the investor to make each transfer.

A blockchain transaction hash can be used to locate a transfer on the relevant network and examine subsequent movements.

Depending on the blockchain and available information, investigators may be able to identify wallet activity, transaction patterns, consolidation addresses, and interactions with identifiable cryptocurrency services.

However, blockchain tracing has limitations. A wallet address does not automatically reveal the identity of the person controlling it, and tracing funds does not guarantee that they can be frozen or recovered.

It is also important to distinguish between actual transfers and balances displayed inside an application. A platform may show a large account value without there being corresponding funds available on a blockchain or in a verified financial account.

For readers who want to understand the technical side, Cyb3rsect’s How to Trace a Cryptocurrency Wallet guide explains how transaction records can be used to follow cryptocurrency movements.

What investors should do if they used SBDCCOIN or iwebcoin.com

Anyone who believes they have transferred funds to either platform should avoid making additional payments while preserving the available evidence.

1. Stop following further payment instructions

Do not pay another tax, verification fee, account-opening charge, or withdrawal deposit simply because someone claims it will release the existing balance.

Be especially cautious if the platform introduces a new requirement after an earlier payment has already been made.

2. Preserve WhatsApp conversations

Save the original conversations with Amy, Professor Andy, and other group participants.

Keep telephone numbers, profile information, voice notes, photographs, documents, group names, and payment instructions.

Record the dates when the investor was introduced to the platform, instructed to deposit funds, shown apparent profits, and asked to pay the alleged tax.

3. Preserve application and website evidence

Record the exact application name and website addresses.

Save screenshots of account balances, trade histories, withdrawal requests, tax demands, and messages relating to the transition to iwebcoin.com.

If the website becomes inaccessible, previously saved screenshots and browser records may become particularly important.

4. Contact cryptocurrency exchanges and payment providers

If cryptocurrency was purchased through an exchange, notify its fraud or security department and provide the transaction hashes and receiving addresses.

Ask whether the activity can be reviewed or whether the receiving address is associated with any known suspicious activity.

A completed blockchain transfer is generally not reversible through the blockchain itself, but prompt reporting may provide useful investigative information.

5. Report the incident

California residents can submit complaints to the California DFPI.

People in the United States can also report suspected online financial crime to the FBI’s Internet Crime Complaint Center and consider contacting local law enforcement.

Keep copies of all reports and supporting documentation.

6. Watch for recovery-related approaches

After an investment loss, victims may be approached by people claiming to be investigators, recovery specialists, hackers, lawyers, or government representatives.

Some may claim they have already located the funds and only require an upfront payment to retrieve them.

Be cautious of guaranteed recovery promises and requests for additional cryptocurrency. A transaction trace alone does not establish that funds can be returned.

Cyb3rsect’s Crypto Recovery Scam Investigation guide explains warning signs associated with fraudulent recovery offers.

How Cyb3rsect approaches suspicious trading-platform investigations

The SBDCCOIN complaint demonstrates why a thorough investigation should examine more than an application’s displayed balance.

The important questions include how the investor was recruited, who provided the trading instructions, where the cryptocurrency was sent, what happened when withdrawal was requested, and why a second platform was introduced after the alleged tax payment.

Depending on the evidence available, Cyb3rsect can assist with:

• Reviewing suspicious investment applications and websites.
• Examining digital communications and payment instructions.
• Organizing transaction records into a chronological evidence timeline.
• Reviewing cryptocurrency transfers and associated wallet activity.
• Identifying inconsistencies between platform claims and independently verifiable information.
• Preparing structured documentation for appropriate reporting channels.

The purpose is to help people understand what the evidence shows and identify practical investigative steps.

No investigation can guarantee that funds will be recovered or that the individuals responsible will be identified. Outcomes depend on the evidence, transaction history, and the ability of relevant service providers and authorities to take action.

Final thoughts: a large trading balance does not mean the money is real

The SBDCCOIN and iwebcoin.com complaint highlights several warning signs that cryptocurrency investors should recognize: unsolicited trading-group invitations, people presenting themselves as investment experts, account balances that cannot be independently verified, and payment demands supposedly required before withdrawal.

The reported investor paid an alleged 20% tax demand but was subsequently told to open another account on a different platform. That sequence illustrates why investors should independently verify every withdrawal requirement rather than assuming that one additional payment will resolve the problem.

The California DFPI tracker records the complaint and the reported loss, but it does not independently verify the transactions or establish the identity of the platform operators.

The wider lesson is clear: verify the people providing investment advice, independently check the platform, preserve original transaction records, and never rely on an application’s displayed balance as proof that funds are available.

For anyone who has encountered a similar situation, Cyb3rsect provides digital evidence review and cryptocurrency-related investigative support to help clarify the available evidence and possible next steps.

Contact Cyb3rsect

If you have encountered a suspicious cryptocurrency application, a WhatsApp investment group, unexplained tax demands, or a platform that refuses withdrawals, preserving the available evidence is an important first step.

Visit Cyb3rsect.com to learn more about digital investigations and cryptocurrency-related investigative support.