Full Report
A Texas firm recently charged with conspiring to distribute synthetic opioids in the United States is at the center of a vast network of companies in the U.S. and Pakistan whose employees are accused of using online ads to scam westerners seeking help with trademarks, book writing, mobile app development and logo designs, a new investigation reveals.
Analysis Summary
# Main Topic
A vast, interconnected network of US and Pakistan-based companies, centered around the Texas firm **eWorldTrade**, has been exposed for two primary illicit activities:
1. **Distribution of synthetic opioids:** The firm facilitated the sale of dangerous substances like isotonitazene and carfentanyl.
2. **Widespread Business Email Compromise (BEC) and Extortion Scams:** Related entities use online advertising to defraud Westerners seeking services like trademark registration, book writing, mobile app development, and logo design.
## Key Points
- The Dallas-based company, **eWorldTrade**, was charged by the U.S. Department of Justice (DOJ) for running an online B2B marketplace that enabled the distribution of lethal synthetic opioids.
- The network’s founders are linked to Pakistan-based IT provider **Abtach Ltd.** (and subsequent rebranding to **Intersys Limited**).
- The USPTO has previously accused Abtach of an "egregious scheme" involving trademark scamming, including improper alteration of official correspondence and overcharging fees.
- The current scam network appears to derive from personnel previously associated with the large-scale diploma mill operation **Axact**, which specialized in selling fake certifications and subsequent blackmail/extortion schemes.
- Advertisement platforms, notably Google Ads, have been utilized by these entities to push scam services, with investigations revealing hundreds of linked ad accounts before platform action was taken.
## Threat Actors
- **eWorldTrade LLC:** Texas-based firm charged with felony distribution of synthetic opioids.
- **Abtach Ltd. / Intersys Limited:** Pakistan-based IT entities connected to trademark and service scams, sharing physical office space with eWorldTrade elements.
- **Axact Associates:** Former employees of the defunct diploma mill company, suggesting longevity and deep experience in complex, multi-stage fraud operations.
- **Key Individual:** Mr. Bilwani (Director of Abtach Ltd.), whose name appears in trademark registration records for eWorldTrade.
## TTPs
- **Illegal Marketplace Operations:** Utilizing a seemingly legitimate B2B e-commerce platform (eWorldTrade) to mask the large-scale distribution of fentanyl analogues.
- **Trademark Extortion/Fraud:** Impersonating government agencies (USPTO), altering official correspondence, improperly filing applications, and charging excessive fees for expedited services that are not provided.
- **Online Advertising Manipulation:** Using online ads (blocked by Google policies against "Enabling Dishonest Behavior") across multiple verticals (trademarks, writing, app development) to attract victims.
- **Upselling/Blackmail (Legacy TTP):** Drawing heavily from the Axact model, where initial fraudulent service purchases are followed by extortion attempts (e.g., posing as government officials demanding payment for "unauthorized" documents).
## Affected Systems
- **Commercial E-commerce/B2B Marketplaces:** Used as fronts for illegal material distribution.
- **Trademark Registration Systems:** Victims seeking legitimate protection via the USPTO process, targeted through deceptive representations.
- **Digital Advertising Platforms (e.g., Google Ads):** Exploited to generate lead traffic for fraudulent service offerings.
- **Western Individuals/Businesses:** Victims seeking trademark, logo design, book writing, or mobile app development services.
## Mitigations
- **Increased Due Diligence on Low-Cost Service Providers:** Exercise extreme caution with providers offering trademark registration or development services at prices significantly below established market rates (e.g., claims of 24-hour trademark registration).
- **Verify Government Correspondence:** Cross-reference all official-looking documents, especially those from the USPTO, through official, independent verification channels rather than relying solely on provided digital links or attachments.
- **Monitor Advertising Footprints:** Leverage advertising transparency tools (like Google Ad Transparency) to track and report large networks of advertisers promoting suspicious business services.
- **Supply Chain Security Review:** Companies dealing with international vendors, especially those originating from known fraud hubs, should verify registration status and operational legitimacy independently of vendor self-reporting.
## Conclusion
This investigation reveals a sophisticated, transnational criminal enterprise leveraging established fraud tactics (rooted in the Axact playbook) under the guise of legitimate business entities in the US (eWorldTrade) and Pakistan (Abtach/Intersys). The dual nature of the operation—facilitating deadly opioid distribution alongside widespread digital service scams—represents a severe and complex threat demanding heightened scrutiny of international B2B platforms and online advertising networks used for professional service acquisition.