19 August 2026
From an Australian Payment Receipt to a Global Corporate Network
The First Lead
Our investigation began in May (2026) when an Australian investigative journalist contacted Qurium seeking assistance in tracing a fraudulent investment operation estimated to have defrauded Australian victims millions of dollars. The scammers promoted fake investment platforms through Facebook advertisements featuring AI-generated images impersonating well-known ABC journalists and Australian politicians.
The combination immediately looked familiar.
Since 2020, Qurium has investigated numerous disinformation campaigns and online fraud operations that relied on impersonated news organizations, fake endorsements, and aggressive social media advertising to lure victims. Drawing on experience gained during investigations such as Doppelganger and Scam Empire and several other large-scale financial fraud operations, we decided to trace the infrastructure behind this campaign and identify the individuals operating it. If we want answers, all we have to do is “follow the money.”
Our starting point was a payment receipt obtained from an Australian victim. The victim had responded to advertisements promoting Hexonix365, one of hundreds of interchangeable brands advertising automated trading platforms. The initial deposit had been processed by Trigo XO Pty Ltd, an Australian company.
At first glance, Trigo XO appeared to be an ordinary business selling educational courses, a common front repeatedly encountered in investment fraud investigations. Tracing the person who is behind the front business in scams is always a complex task as directors, companies and payment processors often run in different jurisdictions. However, this time the scammers had made an unusual operational mistake: instead of routing the victim’s first payment through offshore entities, they processed it through an Australian company. More importantly, the receipt had landed in the hands of a persistent investigative journalist. Bad luck.
“I’ve always liked the Australian accent,” we joked. “Let’s see where this leads.”
The Aussie Connection
We examined Australian corporate records and discovered that Trigo XO Pty Ltd listed Gary Hermon and Meni Menashe Moula as its directors. Gary Hermon was also a non-executive director of Argent BioPharma, formerly MGC Pharmaceuticals, from March 2025 until May 2026. Before Hermon joined its board, MGC Pharmaceuticals had faced regulatory enforcement in Australia.
Moula had previously operated a skincare franchise in a Perth shopping centre, publicly presenting himself as a “skin specialist”, before relocating to Israel.
As many other nominee directors, Gary Hermon which still lives in Australia wanted to stay away from future trouble.
“I just do this (being a nominee director) for a living” Gary replied when we asked him about his role in the payment processor company.
Following weeks of reporting, calls and repeated requests for comments, evidence obtained during the beginning of our investigation indicated that the Australian directors acted as nominee directors and that effective control of Trigo XO rested with Shefi Goldberg, based in Tel Aviv, Israel.
What had started as a single payment receipt was now pointing towards a much larger corporate structure.
Reconstructing the “Immi Network”
Over the following weeks we focused on reconstructing Goldberg’s corporate network. Criminals always make mistakes, specially when they are starting their “entrepreneurial” careers as scammers.
Public records showed that Goldberg had operated the company IEO IL since at least 2018. Historical recruitment advertisements published by the company sought multilingual call-centre agents selling both immigration services and financial products. Later, Goldberg established GO-BE together with his business partner Gal Behrend.
The screenshot below from the Internet Archive shows how the domain greencardwinners.com has been transferred from one company to another as they have been exposed as fraudulent. In April 2019 the domain was operated by IEO IL, Goldberg’s company.
- Dec 2015: USA Demo DV Lottery Services (US)
- May 2026: Green Card Winners
- Aug 2016: UP.Trade LTD (UK)
- Dec 2017: Max World Solutions LTD (UK)
- Apr 2019: I.E.O IL (Israel)
- Nov 2021: Amerigo Marketing LTD (Cyprus)
Competitors Fighting for the Victims’ Money
The earliest public records show that the individuals who would later operate competing immigration-service businesses initially worked together. GS AS International Marketing Ltd, incorporated in Israel on 4 August 2015, linked Shefi Goldberg, Amit Shulian, and Gal Behrend in a shared marketing venture focused on U.S. Green Card and immigration services.
Their collaboration became public through the Rockspace / USGC Organization litigation (Case No. 38552-11-15), in which Shefi Goldberg, Gal Behrend, Amit Shulian, and GS AS International Marketing Ltd were named as respondents. The plaintiffs alleged that the respondents had used intellectual property, customer databases, marketing methods, trade secrets, and other confidential business information to establish competing Green Card and immigration businesses.
Indigo Immigration Services Ltd. was incorporated on 10 May 2016 in Israel, after the GS AS/Rockspace dispute had already documented the close commercial relationship between these individuals. In the following years, the network evolved into parallel businesses. Gal Behrend later reappeared alongside Shefi Goldberg in the GO-BE immigration-services network, while Amit Shulian became associated with the Indigo ecosystem. One of Indigo’s principal brands, PROICC, was later identified by authorities as operating unlawfully. Canadian national broadcaster CBC wrote an extensive article about PROICC back in 2020.
GO-BE (Goldberg – Behrend) emerged as the central company within what we come to describe as the Immi Network, a collection of interconnected companies providing immigration consultancy services across multiple jurisdictions. Goldberg and his associates even jumped into the crypto currency wave, and tried to launch their own cryptocurrency project, ImmiCoin, back in 2018. The crypto coin was launched with the striking slogan “Immigrant coin is a coin created to support every hard working immigrant in the US with out strong community!”. The truth could not be further way.
The network operates numerous country-specific immigration portals under different brands including USA LWS, Express Canada and the Good Advice brand in South Africa. For a complete list of domains and companies, please see Appendix 1.
Public complaints spanning several years consistently alleged that these companies used deceptive sales tactics to persuade customers to pay thousands of dollars for immigration services that were either misrepresented or never fully delivered.
During our effort to understand how the “Immi Network” operates we gained access to Telegram and Facebook groups used by the organization, allowing us to observe how prospective customers were recruited, managed, and pressured by sales staff.
The Corporate Structure
By the end of May 2026 we had identified more than a dozen legal entities operating in Israel, Estonia, Cyprus, Spain, United Kingdom, South Africa, Australia, and the United States that appeared to be directly associated with GO-BE and the wider “Immi Network”.
The corporate structure extended well beyond Shefi Goldberg himself. Appendix 2 provides an overview of the main enablers of the Immi Network.
Israel
Company records show that Goldberg’s sister, Rivka (Rebecca) Goldberg, operated USC Market Place Ltd, together with the recruitment agency Finally ROI, which advertised multilingual sales positions consistent with call center recruitment for the wider network.
United States
In Florida, Goldberg and his business partner Gal Behrend established GO BE Holdings LLC, together with GO BE Properties LLC and Immigration Services Consultants LLC. Public corporate records show that Goldberg registered the companies with the help of his college Guy Goldrat that runs real state broker Go 2 Guy Realty in Pensacola.
South Africa
In South Africa we found that Goldberg’s long-time business associate Maor Yehudai operated Good Advice, another immigration consultancy displaying characteristics similar to other businesses within the network.
Spain
In Spain we found that Znavit Services runs Immigration Services Group and a branch of GO-BE. The Spanish setup is directly connected to Ori Behrend, brother of GO-BE founder Gal Behrend.
Ori Behrend later became associated with Urgell Premium 18 SL, the company operating Hostal Balkonis in Barcelona, further expanding the network’s business interests in Spain.
Beyond Immigration Services
At this stage an important question emerged. Was this investigation solely about abusive immigration consultancy services?
When Shefi Goldberg recently was interviewed by an Australian journalist, he categorically denied any involvement with cryptocurrency, Forex trading, or investment scams. He likewise denied operating any companies in Cyprus.
Those statements immediately raised further questions.
— Why would a company specializing in immigration services operate multiple online educational platforms? — Why had IEO IL recruited staff specifically for Contracts for Difference (CFD) sales positions years earlier?
By the time of the interview we had already recovered historical recruitment advertisements published by IEO IL between 2018 and 2019 seeking employees for call-centre positions explicitly involving CFD products. CFDs have repeatedly been exploited by organized fraud groups operating clone-broker schemes, fake trading platforms, and high-pressure investment scams.
We also found that in 2019 IEO IL advertised a call center manager position in Kiev, Ukraine.
Unknown to Goldberg during the interview with the Australian journalist, we had obtained corporate registration documents for Allegiant Holdings Ltd in Cyprus, a company linked to the payment ecosystem surrounding Trigo Pay and related entities, including Klestiy Ltd that operated payment infrastructure through Services Group Ltd.
Allegiant Holdings was key for us to understand the wider role of Goldberg in the “Scam Empire“.
The Payment Infrastructure
In an early interview to ABC, Goldberg denied three times to have any involvement with Forex, to have any company in Cyprus and to be involved in any fraudulent call centers.
“I tell you the truth, Peter—this very night, before the rooster crows, you will deny three times that you even know me” (Matthew 26:34).
But Allegiant Holdings Ltd told us another story.
Documents previously obtained by Swedish Public service SVT during the Scam Empire investigation linked Allegiant Holdings Ltd to the payment processor SmartPay. In the leak we found that SmartPay had processed payments for fraudulent investment platforms including Ambit Capital, Finterex Capital, and The FBTC.
We subsequently analyzed both the SmartPay and Trigo Pay infrastructures. Although they appeared to serve different business sectors (education vs fraudulent investments) both payment systems relied on the same white-label platform developed by the Israeli financial technology company Coriunder, operated by Eliad Saporta.
This extra overlap was particularly significant because Coriunder’s platform had already appeared during our Scam Empire investigation, where it powered payment processing for Scholar Closet Academy (Data Factory Solutions), another entity established to collect payments from victims of investment frauds. The Scam Empire leak contained invoices, contracts and technical integration communications between Coriunder and the payment processor coordinator of the Scam Empire, Yevhenii Larin.
The evidence strongly suggest that SmartPay and Scholar Closet Academy operated a payment processing platform based on Coriunder’s Banking as a Service (BaaS).
Telecommunications Infrastructure
Coriunder was not the only infrastructure provider identified during the investigation present in Scam Empire dataset.
Social media profiles of Yaad Mor, an early business associate of Goldberg, operated Golden VoIP, a white-label voice platform used by the network.
Golden VoIP relies on services provided by Omega Telecom (D.S.T.U. Telecom Limited), whose directors include Efraim Sporn and Andreas Vasiliou (VP Operations). The very same telecommunications infrastructure also appeared integrated in the source code of one Cooltecho CRM, the CRM developed by Mark Kreimerman for the Scam Empire.
In e-mail exchange with Golden-VoIP support, we got confirmation that Yaad Mor was working as customer service for the company.
When Omega Telecom was informed that Golden VoIP was being used in connection with infrastructure identified during this investigation, Andreas Vasiliou (VP Operations) acknowledged that Golden VoIP was its customer but maintained that the reseller and not the upstream provider was responsible for handling the matter.
Golden VoIP runs a fictitious website including “stock photo owners” Tom White, John Simense and Celine Williams. Soon after we informed Omega Telecom the website was put offline.
To further investigate the activities of the network in South Africa and Spain, we reached out to amaBhungane Centre for Investigative Journalism in South Africa and the Spanish investigative outlet La Marea.
South Africa: The Gloffix Connection
In the beginning of June 2026 it had become increasingly clear that the “Immi Network” was not simply providing abusive immigration consultancy services. All the evidence strongly suggested that corporate entities within the network were also being used to process payments connected to investment scams.
A break-trough took place when AmaBhungane obtained the complete court record for a dispute between “Good Advice” and The First Rand Bank. The case MSG Marketing (Pty) Ltd and Another v FirstRand Bank Ltd (2022/1321) before the Gauteng High Court in Johannesburg.
The case arose after Maor Yehudai (business partner of Goldberg in South Africa) challenged FirstRand Bank’s decision to freeze the bank accounts used by his “Good Advice”, following numerous customer complaints and charge-backs.
More than 3,000 pages of court documents revealed that “Good Advice” had processed payments connected to the cryptocurrency investment scheme Gloffix, providing one of the clearest documented links between the immigration businesses and financial investment fraud uncovered during our investigation.
Spain: From Immigration Services to Hospitality
Investigative media La Marea confirmed on the ground that Ori Behrend registered a GO-BE branch at his residence in Mas Mestre (Olivella), an urbanization approx. 50km south of Barcelona.
Ori Behrend
Since relocating to Spain, Ori Behrend (flipico) has also become closely associated with a network of hospitality companies. He currently operates Urgell Premium 18 SL, the company behind Hostal Balkonis in Barcelona.
This diversification into hospitality mirrors the broader pattern observed throughout the investigation: a corporate ecosystem spanning multiple industries, jurisdictions, and legal entities, all connected through overlapping ownership, management, infrastructure, and payment systems.
A big family thing
The GO-BE network is not limited to Shefi Goldberg and his sister Revka (Rebecca) Goldberg, nor was it the activity of a single family. Rather, several GO-BE members appear alongside their relatives and long-standing business partners in companies operating in or adjacent to the immigration-services sector across multiple jurisdictions.
Gal Behrend and his brother, Ori Behrend, also operate businesses in the immigration industry. Ori Behrend’s partner, Neta Behrend, is the founder of Kudu Magnets in Spain, a business that designs and sells custom magnetic covers for refrigerators and other household appliances. Kudu Magnets operates under the same legal business associated to the Immigration consultancy. in Spain, Znavit Services S.L.
Shefi Goldberg’s and Gal Behrend’s family partners, Adva Goldberg and Yulia Vudin Behrend, appear in Florida corporate records through Advas Visa Advisers LLC, an immigration consultancy company. These overlapping family and business relationships indicate that the GO-BE network extended beyond its founders, involving spouses, partners, siblings, and close associates across Israel, Spain, and the United States.
Conclusion
This investigation began with a single payment receipt. In less than two months, following corporate records, payment infrastructure, technical services and public records across multiple jurisdictions led us from one victim’s transaction to an international network of companies whose activities extended far beyond immigration services.
The evidence examined in this report indicates that companies publicly offering immigration and relocation services also form part of a broader commercial ecosystem supporting fraudulent investment operations. Social media platforms, banks and payment processors and telephony service providers supply essential services that enable online investment scams to operate across borders.
Many of the companies, infrastructure providers and individuals identified in this investigation overlap with those documented in Qurium’s previous Scam Empire investigation. Despite repeated investigative reporting and law-enforcement’s symbolic actions, much of this enabling infrastructure remains available.
Victims continue to be recruited through advertisements on major social media platforms, generating huge advertising revenue for Meta. Affiliate marketing networks continue to earn commissions by delivering victims to criminals. Payment processors continue to process deposits, while telecommunications and technical service providers continue to supply the infrastructure required to operate these schemes.
Perhaps most importantly, this investigation demonstrates that tracing these networks is not just possible, it can be accomplished almost entirely through publicly available information. Corporate registries, court records, archived websites, technical infrastructure, advertising archives and other open sources provide sufficient evidence to reconstruct complex international business networks.
The greatest obstacle to dismantling international fraud is often not the lack of evidence, but the assumption that the real actors cannot be found. This investigation shows the opposite. The real question is no longer whether these networks can be traced, but why, despite years of public evidence, so little has been done by law enforcement to stop them.
Appendix 1
Domains associated with Immi Net
amayabeautyshop[.]net amayacare[.]com amerigo[.]services apostile[.]shop asimonisrael[.]com b12center[.]com b12center[.]info b12center[.]net b12visacenter[.]com bit-caps[.]com borderly[.]co bvisacenter[.]com career-4you[.]com cherrycrypto[.]org chinagoodsagent[.]com clickpayment[.]io crossits[.]com dv-program[.]online e2visa-israel[.]com express-canada[.]co.za express-immigration[.]com expressusa[.]org finally-con.com finally-con[.]com finally-roi.com financeai360[.]com foriners[.]com freeukr[.]org gloffix[.]com gobe-mark[.]com gobemark[.]info golden-voip[.]com go-marketing.co[.]il gondolaborder[.]com goodadvise[.]co.za greencardwinners[.]biz greencardwinners[.]org hive-pt-academy[.]net hive-pt[.]com ieoil[.]com immi-coin[.]com immidirect[.]network immigrationpro[.]info immigrationservicesgroup[.]org imminetacademy[.]com immi-net[.]com immi-net[.]com. immi-net[.]online immispiration[.]com landing[.]hive-pt.com linguastep[.]online lp-goodadvise[.]com matchingcareer[.]com msg-mark[.]com mundounicodubai[.]com newsofimmigration[.]com newterras[.]com pagoniasolutions[.]com pokerinpro[.]com proficientpath[.]com renad-makshivim-metaplim[.]com reterras[.]com rinad-makshivim-metaplim[.]com servicegroups[.]online servicesgroup[.]ltd skillvibe[.]net smart-pay[.]biz smart-pay[.]net thedsgsolution[.]com thegreatamericandreams[.]com theimmi[.]com theimmigrationenterprise[.]com theimmigrationenterprise[.]co.za theimmigrationservices[.]org theimmi[.]info theimmi[.]net theimminet[.]com theimminet[.]info therealmarketing[.]co.za thesecretalert[.]com theservicegroups[.]com traffic-leads[.]net trigo-pay[.]com trigopayments[.]com usa-fast-lane[.]online usalws[.]org usaonlineshop[.]online usavsg[.]net visabilly[.]com vizards[.]net
Companies and Entities associated with the “Immi Net”
| Company | Country | Registration_ID | Type | Role_in_Network | Key_People | Website |
|---|---|---|---|---|---|---|
| AMAYA Beauty Shop Ltd | IL | 515950434 | Operating company | Officer-linked company associated with Shefi Goldberg | Shefi Goldberg | — |
| Gal Birand Holdings Ltd | IL | 515550382 | Holding | Holding company linked to GO-BE shareholder | Gal Behrend (Gal Birand) | — |
| GO-BE Marketing Ltd | IL | 515550366 | Operating company | Core immigration sales, customer acquisition and call-centre operator | Shefi Goldberg; Gal Birand; Amir Soraya | gobe-mark[.]com; gobemark[.]info |
| GS AS International Marketing Ltd | IL | 515296028 | Operating company | Marketing / shared operating company; litigation-linked | Shefi Goldberg; Amit Shulian | — |
| IEO IL | IL | Outsourcing company | GO-BE outsourcing / recruitment / employer | Rivka Goldberg; Maor Yehudai | ieo-il[.]co[.]il ieoil[.]com |
|
| Shefi Goldberg Holdings Ltd | IL | 515550374 | Holding | Core holding company in the Israeli cluster | Shefi Goldberg | — |
| USC Market Place Ltd | IL | 516438421 | Operating company | immi-net operator / immigration services | Rivka Goldberg | immi-net[.]com |
| USGC Organization Ltd | IL | Operating company | Green Card / immigration services litigation entity | — | — | |
| GO-BE Marketing Ltd (Spanish Branch) | ES | W6241293G | Foreign branch | Spanish call-centre and collections branch | Shefi Goldberg; Gal Behrend | gobe-mark[.]com |
| IMMI Coin Technologies S.L. | ES | B13892716 | Operating company | Immigration / relocation technology platform | Gal Behrend; Ori Behrend | immi-net[.]com |
| ZNAVIT Services S.L. | ES | B66550096 | Operating company | Sales, payments, collections and marketing operator | Ori Behrend; Neta Natasha Kunin | — |
| MSG Marketing (PTY) LTD | ZA | K2017654772 | Operating company | Immigration call-centre / Good Advice operator | Maor Yehudai | msg-mark[.]com |
| Professional Worldwide Services (PTY) LTD | ZA | K-xxx | Operating company | Associated South African operating company | Maor Yehudai | — |
| International Global Solutions (PTY) LTD | ZA | Shefi Goldberg | — | |||
| TRIGO XO PTY LTD | AU | ACN 692 522 071 / ABN 58 692 522 071 | Operating company | Australian payment operator / merchant of record | Gary Hermon; Meni Menashe Moula | trigo-pay[.]com |
| Allegiant Holdings LTD | CY | HE 438677 | Holding | Payment brand / corporate payment infrastructure | Giorgos Marios Damianou; Christodoulos Christodoulou | — |
| Amerigo Marketing LTD | CY | HE 376593 | Operating company | USALWS billing and immigration-brand operator | GO-BE-linked | usalws[.]org |
| Coriunder Limited | CY | HE 353958 | Payment gateway | Backend-as-a-Service (BaaS) payment platform | Eliad Saporta | coriunder[.]com |
| D.S.T. Omega Telecom | CY | EE 27720 | Business name | Telecom / VoIP trading name | D.S.T.U. Telecom Ltd | omega-telecom[.]com |
| SAI Media Ltd | CY | ΗΕ 484798 | Operating company | Immigration Services | Amit Shulian | usgcadvisors[.]com |
| Indigo Immigration Services | IL | ΗΕ 515453108 | Operating company | PROICC Cluster of sites | Amit Shulian, Idan Shulian | indigoil[.]com |
| D.S.T.U. Telecom Limited | CY | HE 163558 | Telecom operator | VoIP and telecom infrastructure provider | Efraim Sporn; K&P Managerial Ltd; Moshe Maeir | omega-telecom[.]com |
| AIS GLOBAL IMMIGRATION SOLUTIONS S.L. | ES | B67544684 | Operating company | Immigration Services (Canada and USA Hub) | Amit Shulian; Idan Shulian; Papanchiev Georgi Petrov . | proicc[.]com myusgc[.]com |
| ASG Global Ltd | UK | 9789174 | Holding | Officer/director linkage within network | Amit Shulian; Gal Behrend; Shefi Goldberg | — |
| FIMEDIA LTD | UK | 15609881 | Holding | PSC-linked UK holding | Shefi Goldberg; Giorgos Marios Damianou; Dimitriadis | — |
| FINANCE AI 360 LIMITED | UK | 16800700 | Operating company | FinanceAI360 training / marketing | Shefi Goldberg | financeai360[.]com |
| KLESTIY LTD | UK | 15610276 | Infrastructure company | Payment / domain infrastructure | Giorgos Marios Damianou | — |
| LUSMEDIA LTD | UK | 15610268 | Holding | PSC-linked UK company | Shefi Goldberg; Giorgos Marios Damianou | — |
| MIR Group Ltd | UK | 9889710 | Holding | Corporate PSC link | Amit Shulian; Shefi Goldberg | — |
| IMMINETWORK OÜ | EE | 14558800 | Operating company | Estonian representation of immi-net | Shefi Goldberg; Gal Behrend; Marit Saul | immi-net[.]com |
| SINCRONIELEVADA – Unipessoal Lda | PT | NIF 518153983 | Operating company | Hive Trade / Portugal operating company | Lucky Bahagia; Ohad Yehudai | — |
| GO BE Holdings LLC | US-FL | L18000248207 | Holding | Florida holding company | Gal Behrend; Guy Goldrat; Shefi Goldberg | — |
| GO BE Properties LLC | US-FL | L20000218176 | Property company | Florida property holding | Gal Behrend; Guy Goldrat; Shefi Goldberg | — |
| Immigration Services Consultants LLC | US-FL | L20000114068 | Operating company | Immigration services company | Gal Behrend; Guy Goldrat; Shefi Goldberg | — |
| U.S. Law Service (USALWS) | US/IL/CY | Brand | Brand | Immigration assistance brand | GO-BE / Amerigo Marketing | usalws[.]org |
| ADVAS VISA ADVISERS LLC | US-FL | L21000045557 | Florida | Ofer Yaniv, Yulia Vudin Behrend, Adva Goldberg |
Appendix 2: The Immi Entrepreneurs
Appendix 3: Right-to-reply responses
Before publication, we contacted individuals and companies whose roles or business relationships appear in our investigation and gave them an opportunity to respond. Depending on the recipient, our questions concerned their involvement in companies linked to immigration and relocation services, payment processing, telecommunications and call-centre infrastructure; their relationships with entities such as Trigo XO, GO-BE, Golden VoIP and Omega Telecom; and whether they had knowledge of fraudulent investment operations using that infrastructure. We also invited recipients to identify factual errors, provide context and submit supporting documentation.
From 1 July – 6 July 2026 we received 16 responses from seven responding parties. The respondents were Gal Behrend, Guy Goldrat, Shefi Goldberg, Yaad Mor, Gary Hermon, Andreas Vasiliou, Efraim Sporn and an unidentified representative from Golden VoIP.
Gal Behrend — 6 July 2026
Gal Behrend rejected the allegations and said all of his business activities had been conducted lawfully. He described the findings presented to him as a collection of unrelated and, in several cases, inaccurate assertions. He said he had never participated directly or indirectly in fraudulent activity and warned that he would pursue legal remedies if false, unsupported or defamatory statements about him were published.
Behrend specifically said he was unaware of any venture called the “Immi Network”, denied establishing or participating in a business by that name, and denied any corporate affiliation between businesses in which he has an interest and Trigo XO Pty Ltd. He also denied involvement with SmartPay or Trigo Pay and said he had never heard of the “Scam Empire” network.
Guy Goldrat — 4–5 July 2026
Guy Goldrat, a real-estate broker in Pensacola, Florida, denied any knowledge of or participation in fraud. At the same time, he confirmed that he had provided services to Shefi Goldberg and Gal Behrend and that his name appears on corporate filings for entities they established in Florida. He also confirmed appearing as a “manager” on company records, but said the role was limited and did not imply involvement in the companies’ day-to-day operations.
Goldrat also said he knew that Immi-net was a company associated with Goldberg and Behrend, although he said he had no information about its operations and was not affiliated with it. He said any use by Immi-net of his Pensacola address occurred without his knowledge or consent. Goldrat said he would take legal action if the report connected him personally to criminal conduct without evidence.
Shefi Goldberg — 5 July 2026
Shefi Goldberg acknowledged that he owns and manages several businesses, but said all of them operate lawfully and denied involvement by himself or his companies in fraudulent or illegal activity. He specifically denied having any ownership, control or other corporate involvement in Trigo XO Pty Ltd.
Goldberg acknowledged that some of his businesses use telecommunications providers, while arguing that an ordinary customer-provider relationship does not imply wrongdoing. He said he had never heard of an “Immi Network” and did not know what the “Scam Empire” referred to. He did not provide specific answers concerning several other entities raised in the right to reply, including Golden VoIP and all payment providers, and warned that he would pursue legal action over false or misleading reporting.
Yaad Mor — 5 July 2026
Yaad Mor described himself as an IT professional and said that the technical work he had performed throughout his career consisted of setting up systems, maintaining infrastructure and keeping systems operational. He categorically denied involvement in fraud, payment schemes, binary options or any fraudulent operation and argued that technical work should not be characterized as participation in wrongdoing.
After his response, Qurium asked Mor directly to confirm whether he had worked with IEO IL, GO-BE Marketing, Golden VoIP and SmartPay. We did not receive any follow up to our questions. Yaad Mor also warned that he would pursue legal remedies if false or misleading statements about him were published.
Gary Hermon — 4–5 July 2026
Gary Hermon confirmed that he served as a nominated Australian resident director of Trigo XO Pty Ltd from December 2025 until his resignation in May 2026. He said he was not a shareholder and held no ownership interest. According to Hermon, he had been told that Trigo XO’s business involved online educational courses and associated marketing services. He said he was not involved in merchant onboarding, payment processing, financial operations, customer relationships or operational decision-making.
Hermon said he resigned after becoming concerned that he lacked sufficient visibility into the company’s operations. He denied knowledge of fraud and said that, if unlawful activity had been taking place, he may himself have been misled about the true nature of the business. In a follow-up, Hermon said a friend in Israel introduced him to the resident-director opportunity and that Shefi Goldberg subsequently contacted him directly about the position; he said he had spoken with Goldberg but never met him in person.
Golden VoIP — unidentified representative — 1 July 2026
An unidentified person responding from support@golden-voip.com responding as a salaried employee told Qurium that questions concerning ownership should be directed to the owners. The sender’s identity is not established in the preserved correspondence.
The representative also specifically addressed Yaad Mor’s role, stating that Mor worked at Golden VoIP as a salaried employee, was not an owner and was not involved in PSP/payment-processing activities. The representative characterized Mor’s role as customer service for the VoIP company and again directed questions about the company to its owners.
Andreas Vasiliou / Omega Telecom — 1–2 July 2026
Our right-to-reply to Efraim Sporn / Omega Telecom asked about Omega’s relationship with Golden VoIP, whether Omega knew Golden VoIP marketed services to Forex, CFD and online-investment call centres, what KYC and compliance checks were performed, and whether Omega had received complaints or law-enforcement requests concerning Golden VoIP customers. When Omega said it did not know which entities we meant, we supplied additional names, companies and technical identifiers linking Golden VoIP, GO-BE and Omega’s SIP infrastructure.
After several exchanges with Omega, through VP of Operations Andreas Vasiliou, the company confirmed that Golden VoIP was an independent reseller, while saying Golden VoIP was responsible for onboarding, KYC and monitoring of its own downstream customers. Omega also acknowledged that there had previously been a small number of cases in which concerns or allegations of potential fraud were raised regarding Golden VoIP customers or traffic, and said it had cooperated with authorities in those cases. After Qurium raised concerns about Golden VoIP’s website, Omega said it had not authorized Golden VoIP to copy its material and asked Golden VoIP to take the site down.
In a further question to Omega, we asked directly whether it was providing, or had previously provided, telephony services to brands flagged as fraudulent, including Tredomatix, Finbok, VPTrade and FinxoCapital. Omega did not provide an answer to that specific question.