VZND.com & Jeremy Lefevbre Impersonation Investigation
Case Type: Cryptocurrency Scam / Impersonation Scam / Recovery Scam / Digital Investigation
Case ID: CASE-2026-010
Investigation Status: Open
Published: August 2026
Investigated By: [Your Firm Name]
Executive Summary
[Your Firm Name] has opened an investigation into VZND.com following regulatory warnings identifying the website in connection with an alleged impersonation of online influencer Jeremy Lefevbre.
The Washington State Department of Financial Institutions (DFI) lists:
VZND.com
and
Impersonation of online influencer Jeremy Lefevbre
in its statewide investment scam tracker.
DFI categorizes the case as:
- Cryptocurrency Scam
- Impersonation Scam
- Recovery Scam
The DFI scam tracker records the case with a date of June 23, 2026.
A separate warning from Spain’s Comisión Nacional del Mercado de Valores (CNMV) dated March 16, 2026, states that vznd.com is not authorised to provide regulated investment services or activities and is also not authorised for regulated crypto-asset services covered by the relevant European regulatory framework.
These regulatory findings make VZND a significant subject for further digital and financial investigation.
The central investigative issue is not whether Jeremy Lefevbre operated VZND.
Rather, it is:
Did individuals operating VZND.com impersonate or falsely associate themselves with Jeremy Lefevbre in order to induce victims to invest cryptocurrency?
That distinction is essential.
Investigation Status: OPEN
1. Subjects Identified
The Washington State DFI scam tracker identifies:
VZND.com
and:
Impersonation of online influencer Jeremy Lefevbre
The regulator classifies the case under:
Cryptocurrency Scams
Impersonation Scams
Recovery Scams
The listing is dated:
June 23, 2026
The listing itself does not establish that Jeremy Lefevbre was involved in operating the website.
Instead, the wording identifies an alleged impersonation.
2. Regulatory Warning From Spain
On March 16, 2026, Spain’s financial markets regulator, the CNMV, issued a public warning concerning:
The CNMV states that the website was not authorised to provide investment services or activities requiring authorisation under Spanish financial-market law.
The warning also states that the website was not authorised to provide activities reserved for crypto-asset service providers under the applicable European regulatory framework.
This is an important regulatory finding.
It means that prospective investors should not interpret the presence of a professional-looking website as evidence that the operation was authorised to provide regulated investment or crypto services in Spain.
3. The Jeremy Lefevbre Impersonation
The Washington State DFI identifies the case specifically as:
Impersonation of online influencer Jeremy Lefevbre
This creates a distinct investigative category.
An impersonation scheme may involve a fraudster presenting themselves as a known individual or falsely claiming that the individual endorses an investment.
Potential mechanisms include:
- Fake social-media profiles.
- Fake advertisements.
- AI-generated promotional material.
- Reproduced photographs.
- Fake interviews.
- Fake testimonials.
- Deepfake videos.
- Messaging applications.
- Fake investment websites.
- Cryptocurrency investment advertisements.
The existence of an impersonation allegation does not establish that Jeremy Lefevbre participated in the activity.
4. Why Influencer Impersonation Is Significant
Influencer impersonation can be particularly effective because victims may already recognize the person’s name, image or online reputation.
A scammer can attempt to convert that familiarity into perceived credibility.
The victim may believe:
“I know who this person is.”
The actual question should instead be:
“Did this person independently confirm that they operate or endorse this investment?”
Australian government guidance similarly warns that scammers can impersonate trusted people or organisations and use social media, messaging services and other channels to obtain money or personal information.
5. VZND.com
Third-party website analysis provides additional technical information concerning VZND.com.
ScamAdviser reports that the domain was registered in September 2007, meaning the domain itself is considerably older than many newly created scam domains.
However, ScamAdviser also reports that its analysis detected cryptocurrency-related services and that IPQS had flagged the site as suspicious and for phishing.
This distinction is important:
An old domain is not automatically a trustworthy domain.
Domains can change ownership, be repurposed, or be compromised.
The age of VZND.com therefore should not be treated as proof of legitimacy.
6. Conflicting Automated Reputation Results
Automated website-reputation services do not agree completely about VZND.com.
ScamAdviser currently gives the domain a very low trust assessment and reports cryptocurrency-related activity and phishing concerns.
Scam Detector, however, gives VZND.com a substantially more favourable automated score and notes that the domain has existed since 2007.
This is an important lesson for digital investigators:
Automated trust scores should never be treated as the final determination of whether a financial platform is legitimate.
Regulatory records, corporate records, domain history, transaction evidence and communications are much stronger evidence.
7. The Regulatory Status Question
The CNMV warning provides a clear investigative issue.
The regulator states that VZND.com was not authorised for the regulated investment activities identified in its warning.
It also states that the website was not authorised for the specified crypto-asset services requiring authorisation under the applicable European framework.
Investigators should therefore establish:
- Which legal entity operated VZND.com.
- Where that entity was incorporated.
- Whether it held any financial licence.
- Whether the licence applied to cryptocurrency services.
- Whether the licence applied to the investor’s jurisdiction.
- Whether any regulatory number displayed on the website was genuine.
- Whether any claimed corporate affiliation can be independently verified.
8. The Impersonation Investigation
The first investigative objective should be determining exactly how Jeremy Lefevbre’s identity was allegedly used.
Evidence may include:
- Advertisements.
- Social-media posts.
- Videos.
- Screenshots.
- Website pages.
- Fake testimonials.
- Emails.
- WhatsApp messages.
- Telegram messages.
- Cryptocurrency advertisements.
- Promotional landing pages.
Investigators should preserve the original content wherever possible.
A screenshot can demonstrate what a victim saw, but the original URL, publication date and technical metadata can provide substantially stronger evidence.
9. Website Reconstruction
If VZND.com changes its content or becomes inaccessible, historical evidence becomes especially important.
Investigators should preserve:
- Website pages.
- HTML.
- JavaScript.
- Images.
- Videos.
- Advertisements.
- Investment claims.
- Contact details.
- Terms and conditions.
- Privacy policies.
- Cryptocurrency deposit instructions.
Technical records may also reveal:
- Hosting infrastructure.
- DNS history.
- SSL certificates.
- Historical IP addresses.
- Nameservers.
- Email infrastructure.
- Associated domains.
10. Identity Verification
The alleged use of Jeremy Lefevbre’s identity requires careful verification.
Investigators should establish:
Was the real Jeremy Lefevbre involved?
or:
Was somebody falsely presenting themselves as him?
Evidence that could help answer this includes:
- Official social-media accounts.
- Verified public statements.
- Interviews.
- Archived profiles.
- Domain ownership.
- Corporate records.
- Email addresses.
- Digital signatures.
- Video metadata.
- Advertising accounts.
The absence of an endorsement from an individual’s verified channels would be highly relevant when evaluating an alleged impersonation.
11. Cryptocurrency Investigation
Because DFI categorizes the matter as a cryptocurrency scam, blockchain evidence should form part of the investigation.
Investigators should obtain:
- Wallet addresses.
- Transaction hashes.
- Blockchain networks.
- Deposit instructions.
- Exchange records.
- Payment dates.
- Cryptocurrency amounts.
Once wallet addresses are identified, investigators can reconstruct:
Victim wallet
↓
Receiving wallet
↓
Intermediate wallets
↓
Exchange or service
This can help establish where cryptocurrency moved after a victim transferred it.
Blockchain analysis does not automatically reveal the identity of the person controlling an address.
Additional evidence may be necessary for attribution.
12. Recovery Scam Risk
The Washington State DFI categorizes the VZND case partly as a:
Recovery Scam
This is particularly important.
After an investor loses cryptocurrency, they may be contacted by another person claiming to be able to recover the money.
The second individual may claim to be:
- A blockchain investigator.
- A lawyer.
- A government investigator.
- A recovery specialist.
- A cryptocurrency tracing company.
- A law-enforcement officer.
They may then request an upfront payment.
Victims should be extremely cautious.
The existence of blockchain tracing does not mean that a private individual can simply “unlock” or “recover” cryptocurrency by paying a fee.
13. What a Legitimate Investigation Should Do
A legitimate digital investigation should focus on evidence rather than promises.
A professional investigation may involve:
- Preserving communications.
- Identifying wallet addresses.
- Tracing blockchain transactions.
- Establishing domain ownership.
- Reconstructing website infrastructure.
- Verifying identities.
- Reviewing financial records.
- Documenting the chronology.
- Preparing evidence for appropriate authorities.
It should not promise guaranteed recovery of lost cryptocurrency.
14. Evidence Classification
VERIFIED
- Washington State DFI lists VZND.com in its investment scam tracker.
- DFI identifies the matter as an impersonation of online influencer Jeremy Lefevbre.
- DFI categorizes the case as cryptocurrency, impersonation and recovery scams.
- The DFI listing is dated June 23, 2026.
- Spain’s CNMV issued a public warning concerning vznd.com on March 16, 2026.
- CNMV states that VZND.com was not authorised to provide the regulated investment services identified in its warning.
- CNMV also states that the website was not authorised for specified regulated crypto-asset services.
- Third-party domain analysis reports that VZND.com was registered in 2007.
REPORTED / ALLEGED
- VZND.com was used in connection with an impersonation of Jeremy Lefevbre.
- Victims may have been exposed to cryptocurrency investment solicitations.
- The identity of Jeremy Lefevbre may have been used to create credibility for an investment opportunity.
UNVERIFIED
- The identities of the individuals operating VZND.com.
- Whether Jeremy Lefevbre’s image, voice or likeness was used in specific advertisements.
- The exact amount of cryptocurrency allegedly lost by victims.
- The destination of investor funds.
- The identity of cryptocurrency wallet controllers.
- Whether artificial intelligence or deepfake technology was used.
- Whether additional domains were controlled by the same operators.
- Whether any individual associated with VZND.com can be legally connected to the alleged impersonation.
15. Key Warning Signs
The case presents several significant warning indicators:
- A regulator identifying the website in an impersonation case.
- Cryptocurrency investment activity.
- A regulator stating that the website lacked the relevant authorisation.
- Use of a public influencer’s identity.
- Potential social-media advertising.
- Potential recovery-scam activity following an alleged investment loss.
The combination warrants substantial caution.
16. What Investors Should Preserve
Anyone who believes they encountered the VZND/Jeremy Lefevbre scheme should preserve:
- Website URLs.
- Screenshots.
- Advertisements.
- Social-media posts.
- Videos.
- WhatsApp conversations.
- Telegram conversations.
- Emails.
- Cryptocurrency wallet addresses.
- Transaction hashes.
- Exchange records.
- Bank records.
- Payment instructions.
- Withdrawal requests.
- Recovery-service communications.
- Names and phone numbers.
- Usernames and social-media profiles.
Preserve original files wherever possible.
Never provide passwords, seed phrases, private keys or authentication codes.
17. Investigation Priorities
Priority 1 — Preserve the Impersonation Evidence
Capture the advertisements, profiles, videos and websites that allegedly used Jeremy Lefevbre’s identity.
Priority 2 — Identify the Operators
Establish who controlled the relevant websites, social-media accounts and communication channels.
Priority 3 — Trace Cryptocurrency
Identify receiving wallets and reconstruct the movement of funds.
Priority 4 — Reconstruct VZND.com
Examine historical domain, DNS, hosting and website records.
Priority 5 — Verify Regulatory Claims
Determine exactly what financial services were offered and whether any entity was authorised.
Priority 6 — Investigate Recovery Contacts
Identify anyone who subsequently approached victims promising to recover lost funds.
18. Investigator’s Assessment
VZND.com warrants further investigation based on two significant regulatory findings.
First, the Washington State DFI identifies VZND.com in a case involving the impersonation of online influencer Jeremy Lefevbre, categorizing the matter as a cryptocurrency, impersonation and recovery scam.
Second, Spain’s CNMV issued a formal warning stating that VZND.com was not authorised to provide the regulated investment and crypto-asset services identified in its warning.
The investigation should therefore focus on the alleged impersonation mechanism, the individuals operating the relevant infrastructure, and the movement of any cryptocurrency sent by victims.
Importantly, the evidence presently available does not establish that Jeremy Lefevbre himself operated or endorsed VZND.com.
The appropriate investigative classification is:
POTENTIAL IMPERSONATION OF A PUBLIC ONLINE FIGURE
rather than an allegation against the person being impersonated.
Investigation Status: OPEN
19. Have You Encountered VZND.com?
If you were contacted by someone claiming to be Jeremy Lefevbre or claiming to represent him in connection with VZND.com, you may submit information to our investigation team.
Useful evidence includes:
- Advertisements.
- Screenshots.
- Social-media accounts.
- Website addresses.
- WhatsApp messages.
- Telegram messages.
- Emails.
- Cryptocurrency wallet addresses.
- Transaction hashes.
- Exchange records.
- Payment instructions.
- Withdrawal requests.
- Recovery-scam communications.
- Names and aliases.
- Phone numbers.
Do not send passwords, private keys, seed phrases or authentication codes.
Official Sources
Washington State Department of Financial Institutions — Investment Scam Tracker
The DFI scam tracker identifies VZND.com and the impersonation of online influencer Jeremy Lefevbre and categorizes the matter under cryptocurrency, impersonation and recovery scams.
Spain’s CNMV — Public Warning
The CNMV issued a warning on March 16, 2026 stating that VZND.com was not authorised to provide the regulated investment and crypto-asset services described in the warning.
Investigation Notice
This report is based on publicly available information and regulatory material reviewed by [Your Firm Name] at the time of publication.
The Washington State DFI identifies the matter as an alleged impersonation of online influencer Jeremy Lefevbre.
The inclusion of VZND.com in a regulatory warning does not establish that every allegation associated with the website has been independently proven.
Most importantly, this report does not allege that Jeremy Lefevbre participated in or endorsed the activity.
Where information could not be independently established, it has been identified as reported, alleged or unverified.
Investigation Status: OPEN
CASE ID: CASE-2026-010
