The cartographer’s desk reviews dozens of intakes per week. Across that volume, five patterns recur with such regularity they have become a triage shorthand. None of them, alone, proves fraud. Together, they appear in roughly four out of five cases that turn out to be fraud.
1. Withdrawal friction asymmetry
Deposits clear instantly. Withdrawal requests trigger verification reviews, tax filings, “anti-money-laundering” deposits, account holds. The friction is engineered: every step is designed to extract one more deposit from a victim already convinced the platform is real. If your withdrawals require additional payments to complete, you are not interacting with a platform — you are interacting with the second phase of a fraud.
2. Domain-age vs marketing-age mismatch
The platform claims to be “an established firm with years of regulated operation.” The WHOIS record says the domain was registered eleven months ago. Both cannot be true. WHOIS records are public; the cartographer checks every intake. When the marketing claim and the registration date diverge by an order of magnitude, the platform is being misrepresented.
3. Regulator-claim mismatch
“Regulated by the FCA” / “Licensed by CySEC” / “Registered with ASIC” — every one of these claims is independently verifiable in the regulator’s public database. Five minutes of checking eliminates an entire category of cases. The platforms that fail this test are not ambiguously regulated; they are not regulated at all, and they are claiming otherwise.
4. Concentration of the off-ramp
This one is on-chain. Most legitimate platforms route customer withdrawals through diverse exchange relationships. Fraudulent platforms tend to consolidate withdrawals through two or three deposit identities at a small number of cooperative-jurisdiction exchanges. The cartographer sees this geometry repeatedly across cases that share no obvious connection on the surface.
5. Account-manager pressure dynamics
Real brokerages have customer-support staff. Fraudulent platforms have “account managers” — single point-of-contact individuals whose explicit job is to grow the customer’s deposit. The pattern: friendly, available, persistent escalation toward larger deposits and “VIP-tier” requirements. The same account-manager script appears across many cases that share no other connection.
None of these alone is a verdict. The aggregate is reliable triage. If your platform exhibits three of the five, the cartographer’s standing recommendation is: stop sending, preserve evidence, open a forensic review.