Halviro Qespuno (t5c.net) Scam Warning: ASIC Investor Alert

An old domain can create an impression of credibility that a newly registered investment website cannot. That makes the regulatory warning involving Halviro Qespuno and t5c.net particularly interesting: the domain dates back more than 16 years, yet it has now been identified in an Australian investor alert.

On September 15, 2026, Australia’s MoneySmart Investor Alert List, maintained by the Australian Securities and Investments Commission (ASIC), reported Halviro Qespuno and the exact domain t5c.net. The warning has also been reported through IOSCO’s International Securities & Commodities Alerts Network (I-SCAN).

AssetVault Recovery considers the Halviro Qespuno operation identified at t5c.net a scam investment operation based on the exact-domain regulatory warning. Investors should not send money or cryptocurrency to contacts associated with the warned website.

There is also a separate website using the Halviro Qespuno name at halviroqespuno.com. AssetVault found no evidence sufficient to establish that this separate domain is operated by the same people behind t5c.net. It is therefore not included in our scam conclusion merely because the two use the same name.

Already paid/invested with t5c.net? Preserve the payment trail and submit your transaction information for review, and recovery options.

No upfront recovery fees. Fees are payable only after a successful recovery.

ASIC Identifies Halviro Qespuno and t5c.net

The central evidence is the Australian regulatory record.

The official MoneySmart Investor Alert List identifies the name Halviro Qespuno together with t5c.net. The warning was published on September 15, 2026.

MoneySmart’s investor alert system is maintained by ASIC and is designed to help consumers identify investment opportunities and entities that may be fraudulent, scams or operating without the required Australian authorisation.

This exact-domain identification matters. AssetVault is not connecting an alert concerning an unrelated Halviro Qespuno business to t5c.net through inference. The domain itself appears in the regulatory record.

The warning has also been circulated through IOSCO I-SCAN. I-SCAN provides international visibility to warnings originating from national securities regulators. Its publication of the Halviro Qespuno alert should not be described as a separate IOSCO enforcement action; the underlying warning originates in Australia.

t5c.net Is Unusually Old for a Regulator-Warned Domain

One detail immediately distinguishes this case from many recently exposed online investment operations.

Public WHOIS-derived information records January 23, 2010 as the registration date for t5c.net. That gives the domain a history extending back more than 16 years.

This is important because domain age is sometimes used by investors as a shortcut for assessing credibility. A person checking t5c.net through an automated reputation service could see an old registration date and assume that the investment operation itself has existed since 2010.

That conclusion would not be justified.

A domain registration date establishes when a domain was originally registered. It does not prove that the current website, operator, business model or ownership has existed for the same period. Old domains can expire, be transferred, sold or repurposed.

In this case, WHOIS-derived information also records an update on August 3, 2026, approximately six weeks before the Australian warning.

AssetVault cannot establish from that update alone that ownership changed in August. WHOIS updates can occur for numerous administrative or technical reasons. We therefore do not present the August date as proof of a transfer.

What can be established is that the age of t5c.net should not be used to override the much more relevant fact that the exact domain has now been identified in an official investor alert.

This illustrates the opposite side of the domain-history problem encountered in our Vaulterro investigation, where the warned domain was dramatically newer than dates appearing in its legal material.

An Automated “Safe Website” Score Does Not Override ASIC

The age of t5c.net creates another potential source of confusion.

Automated website-checking services may give an old domain a relatively reassuring assessment because of factors such as domain age, a valid SSL certificate or the absence of certain technical threats.

Those checks answer a different question from a financial regulator.

A valid SSL certificate means communication with a website can be encrypted. It does not establish that an investment offer is authorised or that the people receiving money are legitimate. Likewise, a domain existing for 16 years does not establish that its current operator has been providing legitimate financial services for 16 years.

ASIC itself warns consumers that professional-looking websites can be fraudulent and specifically recommends checking investment websites against regulatory records rather than relying on presentation alone.

The same distinction was important in AssetVault’s First Group Holding investigation, where genuine-looking corporate information could not be treated as proof that the warned investment website was operated by the legitimate companies whose identifiers appeared there.

What About halviroqespuno.com?

AssetVault also found a separate website operating at halviroqespuno.com.

The website uses the Halviro Qespuno name but presents itself primarily as an Australian financial-literacy resource. It says it offers free educational material covering budgeting, markets, savings, credit and financial planning.

It expressly states that its material is general educational information rather than personalised financial-product advice. The site displays an address at Level 8, 45 Clarence Street, Sydney NSW 2000, Australia.

However, the domain named in the September 15 Australian alert is t5c.net.

AssetVault has not found sufficient evidence establishing that halviroqespuno.com and t5c.net share an operator, corporate entity or payment infrastructure. A shared brand name is not enough to make that connection.

We therefore distinguish the two websites throughout this investigation. Our conclusion concerns the Halviro Qespuno operation identified by the regulator at t5c.net.

This distinction is important in scam investigations because names can be copied, legitimate entities can be impersonated and unrelated websites can use similar branding. AssetVault took the same evidence-based approach in our Krug Ulagrina investigation, where a regulator-reported domain had to be distinguished from another domain using the same name.

If You Were Directed From Another Website to t5c.net

Victims should preserve the complete route that led them to the warned domain.

Investment scams increasingly involve more than one website. A person may initially encounter an advertisement, educational page, news-style article or lead-generation form before being redirected to a different platform where registration, deposits or trading supposedly occur.

If this happened to you, save both domains.

Do not assume that the website where you first entered your name is necessarily the same entity that eventually received your money.

Preserve screenshots showing redirects, emails received after registration, account-manager names, telephone numbers and the exact URL of any trading dashboard.

This is especially important if the payment instructions identify yet another company, cryptocurrency wallet or bank beneficiary.

A Dashboard Balance Is Not the Starting Point for Recovery

If your Halviro Qespuno account or a related trading interface displays profits, the number on the screen should not be treated as independent evidence that equivalent assets exist.

The investigation should start with money that actually left your possession.

For cryptocurrency, preserve the transaction hash or TXID, receiving wallet address, blockchain network, sending wallet or exchange, date and exact amount.

For bank transfers, preserve the beneficiary name, account number or IBAN, bank name, SWIFT/BIC information, payment reference, amount and date.

That evidence exists independently of the trading website.

A platform can change what appears on its own dashboard. It cannot rewrite a confirmed public blockchain transaction or erase the banking record showing where a transfer was sent.

This transaction-first principle is also central to AssetVault’s AW Limited investigation, where we explained why a displayed investment balance and the investor’s real financial obligations must be treated separately.

Do Not Send More Money to Unlock a Withdrawal

If someone associated with t5c.net tells you that additional money must be paid before your investment can be released, stop before making another transfer.

Victims of investment fraud can be presented with demands described as tax, commission, insurance, AML verification, liquidity fees, blockchain charges, wallet activation or withdrawal clearance.

The terminology can change while the objective remains the same: obtaining another real payment from someone trying to recover money they believe is already theirs.

Do not delete such requests. Preserve them as evidence.

If cryptocurrency is requested, save the receiving wallet address even if you do not pay it. If a bank transfer is requested, save the complete beneficiary information. If a supposed regulator, lawyer or tax authority sends a document, preserve the original file and email rather than relying only on a screenshot.

Our Veld Luxaris investigation similarly explains why investors should prioritize independently verifiable transactions over balances and representations controlled by a warned platform.

Evidence Halviro Qespuno Victims Should Preserve

• Every bank transfer confirmation and beneficiary record
• Cryptocurrency TXIDs and receiving wallet addresses
• The blockchain network and cryptocurrency used
• Exchange deposit and withdrawal records
• Screenshots of t5c.net and any connected trading dashboard
• Emails, WhatsApp, Telegram and SMS conversations
• Names and telephone numbers used by account managers
• Withdrawal requests and responses
• Invoices, contracts and purported tax or regulatory documents
• Requests for additional payments
• Any website or advertisement that originally directed you to the operation

Preserving this information quickly matters because websites, accounts and communication channels can disappear or change after a regulatory warning.

AssetVault’s Assessment of Halviro Qespuno

The strongest evidence in this case does not come from an automated reputation score, a customer review or speculation about the age of the domain.

It comes from the regulatory record.

Australia’s MoneySmart Investor Alert List, maintained by ASIC, identifies Halviro Qespuno and the exact domain t5c.net. The warning was published on September 15, 2026 and has also been reported internationally through IOSCO I-SCAN.

The age of t5c.net does not neutralize that warning. Nor does AssetVault assume that the separate halviroqespuno.com website belongs to the same operator without evidence establishing that connection.

Based on the exact-domain regulatory warning, AssetVault Recovery considers Halviro Qespuno at t5c.net a scam investment operation. Investors should avoid sending additional money to the warned operation and should preserve any existing payment trail.

Need Assistance?

If you already transferred money or cryptocurrency after dealing with Halviro Qespuno or t5c.net, the next step is to reconstruct what actually happened to those funds.

👉 Request a confidential case assessment

👉 Submit your t5c.net transaction information for review

AssetVault Recovery treats submitted case information confidentially. Blockchain tracing and transaction analysis may help identify how funds moved and whether identifiable services appear in the payment chain, but investigation does not guarantee recovery.

No upfront recovery fees. Fees are payable only after a successful recovery.

Disclaimer

This investigation is provided for scam-awareness, investor-education and informational purposes. Australia’s MoneySmart Investor Alert List, maintained by the Australian Securities and Investments Commission (ASIC), identifies Halviro Qespuno and t5c.net. The warning has also been reported through IOSCO I-SCAN; this represents international circulation of regulatory warning information rather than a separate IOSCO enforcement action. AssetVault has not established that the separate halviroqespuno.com website is operated by the same people behind t5c.net and does not include that separate domain in its scam conclusion without supporting evidence. Domain-history observations and AssetVault Recovery’s conclusion that the regulator-reported t5c.net operation is a scam investment operation are independent investigative assessments and are distinguished from the regulator’s findings. AssetVault Recovery is not a financial regulator, law-enforcement authority or court. Case assessment and blockchain tracing do not guarantee recovery of lost funds.