A forensic audit of the fiat-to-crypto infrastructure utilized by the blacklisted crypto exchange MEXC has identified a highly sophisticated, multi-layered paymentA forensic audit of the fiat-to-crypto infrastructure utilized by the blacklisted crypto exchange MEXC has identified a highly sophisticated, multi-layered payment

COMPLIANCE ALERT: The MEXC “Euro-Asian” Shadow Rail with French Heuro & Romanian Finetix!

2026/02/15 22:13
7 min read

A forensic audit of the fiat-to-crypto infrastructure utilized by the blacklisted crypto exchange MEXC has identified a highly sophisticated, multi-layered payment rail. By nesting Finetix Limited S.R.L. (Romania) within the French electronic money infrastructure of HEURO SAS (formerly Harmoniie SAS), MEXC has successfully constructed a “Red Shield” network to mask high-risk crypto flows behind legitimate-looking SEPA and SEPA Instant transfers by utilizing deceptive branding and a cadre of executives with deep roots in Chinese fintech conglomerates.


The Dual-Rail Architecture

Our investigation confirms that Finetix Limited S.R.L. acts as the universal “Contractual Recipient” for all Euro deposits on the MEXC mirror platform (mexc.co).

Depending on the payment speed selected by the user, the flow is routed through two distinct financial arteries:

1. The SEPA Instant Rail (French Axis)

When users select “SEPA Instant,” the transaction is processed through HEURO SAS, doing business under the brand OuiTrust, and the Romanian Finetix Ltd S.R. L.

  • The Trap: Users must consent to the Terms of Service of both Finetix (as the commercial gateway) and HEURO SAS (as the EMI processor).
  • The Deception: By presenting the destination as “Heuro Bank” at a Paris address, the platform suggests institutional banking safety. In reality, it is a virtual account managed by an EMI whose primary purpose in this chain is the settlement of high-risk crypto liquidity. In the checkbox, the MEXC customer making the deposit must confirm that they agree to the MEXC Terms, whereby the link to the Terms actually leads to the Finetix Terms. The user is therefore not making a deposit to MEXS, but to Finetix (see screenshot above). We assume that Finetix is part of the MEXC scheme.

2. The Standard Bank Transfer Rail (Lithuanian Axis)

Standard SEPA transfers are routed via Paytend Europe UAB (Lithuania). As previously established, Finetix acts as the named payee here as well, ensuring that the “MEXC” brand remains invisible to the sending bank’s AML monitoring systems.

Read our report on the MEXC – Finetix – Paytend Europe Rail here.


The Corporate Dimension: Rebranding and Asian Influence

The HEURO Transformation

On December 16, 2025, the French institution Harmoniie SAS (formerly Easyeuro and Unirpay) officially rebranded as HEURO SAS. They are still doing business as OiuTrust. The name change has not yet been implemented on the OuiTrust website. Harmoniie SAS is still listed as the operator there. (This move appears to be a strategic pivot to adopt a more “bank-like” identity (“Heuro Bank”) to facilitate its expanding Banking-as-a-Service (BaaS) partnerships with offshore exchanges. Despite the branding, it remains an Electronic Money Institution (EMI) under ACPR supervision, currently operating at the limits of its regulatory mandate.

The Chinese-Asian Connection

Both the technology and the leadership of this rail originate from the mainland Chinese fintech sector.

  • HEURO SAS Leadership: Controlled by individuals such as Chuan Chen and Haixiang Li, whose professional pedigrees include senior roles at Ant Financial (Alibaba), Huawei, and HSBC China.
  • MEXC Ownership: Founded by Chinese blockchain veterans (e.g., Sheen Xin Hu) and currently managed by Singapore-based John Chen.
  • Strategic Sync: This shared background allows for a unified operational logic. The “Shadow Rail” is not merely a service but a synchronized export of Chinese fintech bypass technology into European regulated shells.

Summary Table: The French-Romanian SEPA Instant Rail

LayerEntity / BrandJurisdictionRole
PlatformMEXCOffshore (Seychelles)Mutated/Ghost Exchange
Contractual GatewayFinetix Limited S.R.L.
Finetix Ltd S.R.L.
RomaniaUniversal Recipient / Legal Shield
EMI ProcessorHEURO SAS (ex-Harmoniie)FranceSEPA Instant Rail Provider
Brand Identity“Heuro Bank” / OuiTrustFranceDeceptive Trade Branding
Collection IBANFR761747800 0010 0016 6962 3202FranceFrench-to-Offshore Settlement Account

Export to Sheets


The HEURO Evolution

We tracked the transformation of a single French corporate vehicle (SIREN 833 165 863) as it rebranded and repositioned itself within the European payment landscape, maintaining a consistent core of Chinese-origin leadership throughout its pivot toward high-risk crypto-shadow banking.


1. Timeline of Corporate Metamorphosis

EraEntity NamePrimary BrandCore Strategic Focus
2017 – 2018Unirpay SASUnirpayInitial entry into French fintech; cross-border payments.
2018 – 2020Easyeuro SASEasyEuroRebranding to target “Easy” Euro-Chinese business settlements.
2020 – 2025Harmoniie SASOuiTrustExpansion into EMI services and VASP-adjacent processing.
Dec 2025 – PresentHEURO SAS
Company data
Heuro Bank
OuiTrust
Full pivot to high-speed crypto-rails for offshore exchanges (MEXC, Tap)

Export to Sheets


2. The Shared Executive “DNA”

The following individuals have served as the “Red Thread” connecting these entities, ensuring operational continuity despite the frequent name changes.

  • Chuan CHEN (The Architect)
    • Role: Founder and President He stepped down from the board in 2019 during the Easyeuro transition.
    • Significance: Former senior executive at Ant Financial (Alibaba). He is the primary link between Chinese digital payment logic and the French regulatory environment.
  • Haixiang LI (The Infrastructure Lead)
    • Role: Director General (DG) of HEURO SAS; previously key leadership in Harmoniie.
    • Significance: Background in Huawei and HSBC China. He manages the technical “pipes” that allow the SEPA Instant system to interface with the Finetix/MEXC infrastructure.
  • Xue DINGSHENG & Xue LU (The Founding Board)
    • Role: Original board members of Unirpay SAS.
    • Significance: Instrumental in the initial licensing phase with the French ACPR. Their involvement established the original “corridor” between Paris and the Chinese tech sector.

3. The “Chinese Fintech Pedigree” Diagram

The corporate structure of HEURO is not typical for a French EMI. It is built as a “Gateway for Export”—specifically designed to allow offshore entities (like MEXC) to tap into the European Banking Union.

4. Compliance Risk: The Persistence of Control

The fact that the same individuals have remained in control through four different rebrandings is a major compliance signal. In AML/KYC terminology, this is known as “Permanent Entity Control” used to mask a shifting business model.

  • Risk Pattern: While the name on the license changes to avoid historical scrutiny, the beneficial ownership and executive intent remain static.
  • The Finetix Tie-In: By the time the company became HEURO, it had fully integrated with

Compliance Verdict: High-Velocity Risk

Status: CRITICAL VIOLATION (RED SIGNAL)

The payment architecture orchestrated by MEXC, Finetix Limited S.R.L., and HEURO SAS (dba Heuro Bank / OuiTrust) represents a deliberate attempt to circumvent the Markets in Crypto-Assets (MiCA) framework and Anti-Money Laundering (AML) directives. This infrastructure is not merely high-risk; it is a textbook case of Transaction Laundering and Regulatory Arbitrage.

Key Compliance Violations:

  • Unlicensed Crypto Service Provision (MiCA Violation): MEXC operates within the EU without the mandatory MiCA authorization. Simultaneously, Finetix Limited S.R.L. (Romania) markets itself at www.finetix.net as a crypto service provider despite being unregistered as a VASP in Romania. The fact that the Finetix website is currently non-functional (“ghosting”) further indicates a lack of operational substance (Shell Company risk).
  • Facilitation of Unlicensed Entities (HEURO SAS): As a French-regulated EMI, HEURO SAS is legally obligated under 5AMLD/6AMLD to perform rigorous Know Your Business (KYB). Processing SEPA Instant transfers for an unlicensed, offshore exchange (MEXC) via an unregistered Romanian shell (Finetix) constitutes a massive failure in institutional oversight and potential complicity in unlicensed financial intermediation.
  • Deceptive Payment Labeling & “Shadow Banking”: The use of the “Heuro Bank” trade name by an EMI to process funds for a blacklisted entity is a deceptive practice designed to bypass the automated AML filters of the users’ sending banks. This obscures the high-risk nature of the destination (Crypto) behind an institutional “Banking” facade.
  • Jurisdictional Layering: By inserting a Romanian “Terms Holder” between a French processor and a Seychelles exchange, the participants have created a fragmented legal trail. This prevents a single national regulator from having a clear view of the end-to-end transaction, a common tactic in laundering criminal proceeds or bypassing sanctions.

Summary of Institutional Risk

EntityPrimary ViolationRegulatory Exposure
MEXC GlobalUnlicensed operation in EUMiCA Enforcement / Asset Freezing
Finetix LtdUnregistered VASP activitiesRomanian Police / AML Investigation
HEURO SASKYB Failure / Processing for Unlicensed EntitiesACPR License Revocation / Fines

Export to Sheets


Call to Whistleblowers

Are you an employee of HEURO SAS in Paris or Finetix in Bucharest? Do you have internal documentation regarding the profit-sharing agreements between these entities and MEXC?

We are specifically seeking:

  1. KYB files submitted by Finetix to HEURO SAS.
  2. Transaction logs showing the daily settlement volumes from the French FR76 IBAN to MEXC-controlled wallets.
  3. Communication between HEURO executives and MEXC’s John Chen.

Share your information securely and anonymously via our platform.

Share Information via Whistle42
Market Opportunity
Railgun Logo
Railgun Price(RAIL)
$1.327
$1.327$1.327
-1.63%
USD
Railgun (RAIL) Live Price Chart
Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact service@support.mexc.com for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.

You May Also Like

The Role of Blockchain in Building Safer Web3 Gaming Ecosystems

The Role of Blockchain in Building Safer Web3 Gaming Ecosystems

The gaming industry is in the midst of a historic shift, driven by the rise of Web3. Unlike traditional games, where developers and publishers control assets and dictate in-game economies, Web3 gaming empowers players with ownership and influence. Built on blockchain technology, these ecosystems are decentralized by design, enabling true digital asset ownership, transparent economies, and a future where players help shape the games they play. However, as Web3 gaming grows, security becomes a focal point. The range of security concerns, from hacking to asset theft to vulnerabilities in smart contracts, is a significant issue that will undermine or erode trust in this ecosystem, limiting or stopping adoption. Blockchain technology could be used to create security processes around secure, transparent, and fair Web3 gaming ecosystems. We will explore how security is increasing within gaming ecosystems, which challenges are being overcome, and what the future of security looks like. Why is Security Important in Web3 Gaming? Web3 gaming differs from traditional gaming in that players engage with both the game and assets with real value attached. Players own in-game assets that exist as tokens or NFTs (Non-Fungible Tokens), and can trade and sell them. These game assets usually represent significant financial value, meaning security failure could represent real monetary loss. In essence, without security, the promises of owning “something” in Web3, decentralized economies within games, and all that comes with the term “fair” gameplay can easily be eroded by fraud, hacking, and exploitation. This is precisely why the uniqueness of blockchain should be emphasized in securing Web3 gaming. How Blockchain Ensures Security in Web3 Gaming?
  1. Immutable Ownership of Assets Blockchain records can be manipulated by anyone. If a player owns a sword, skin, or plot of land as an NFT, it is verifiably in their ownership, and it cannot be altered or deleted by the developer or even hacked. This has created a proven track record of ownership, providing control back to the players, unlike any centralised gaming platform where assets can be revoked.
  2. Decentralized Infrastructure Blockchain networks also have a distributed architecture where game data is stored in a worldwide network of nodes, making them much less susceptible to centralised points of failure and attacks. This decentralised approach makes it exponentially more difficult to hijack systems or even shut off the game’s economy.
  3. Secure Transactions with Cryptography Whether a player buys an NFT or trades their in-game tokens for other items or tokens, the transactions are enforced by cryptographic algorithms, ensuring secure, verifiable, and irreversible transactions and eliminating the risks of double-spending or fraudulent trades.
  4. Smart Contract Automation Smart contracts automate the enforcement of game rules and players’ economic exchanges for the developer, eliminating the need for intermediaries or middlemen, and trust for the developer. For example, if a player completes a quest that promises a reward, the smart contract will execute and distribute what was promised.
  5. Anti-Cheating and Fair Gameplay The naturally transparent nature of blockchain makes it extremely simple for anyone to examine a specific instance of gameplay and verify the economic outcomes from that play. Furthermore, multi-player games that enforce smart contracts on things like loot sharing or win sharing can automate and measure trustlessness and avoid cheating, manipulations, and fraud by developers.
  6. Cross-Platform Security Many Web3 games feature asset interoperability across platforms. This interoperability is made viable by blockchain, which guarantees ownership is maintained whenever assets transition from one game or marketplace to another, thereby offering protection to players who rely on transfers for security against fraud. Key Security Dangers in Web3 Gaming Although blockchain provides sound first principles of security, the Web3 gaming ecosystem is susceptible to threats. Some of the most serious threats include:
Smart Contract Vulnerabilities: Smart contracts that are poorly written or lack auditing will leave openings for exploitation and thereby result in asset loss. Phishing Attacks: Unintentionally exposing or revealing private keys or signing transactions that are not possible to reverse, under the assumption they were genuine transaction requests. Bridge Hacks: Cross-chain bridges, which allow players to move their assets between their respective blockchains, continually face hacks, requiring vigilance from players and developers. Scams and Rug Pulls: Rug pulls occur when a game project raises money and leaves, leaving player assets worthless. Regulatory Ambiguity: Global regulations remain unclear; risks exist for players and developers alike. While blockchain alone won’t resolve every issue, it remediates the responsibility of the first principles, more so when joined by processes such as auditing, education, and the right governance, which can improve their contribution to the security landscapes in game ecosystems. Real Life Examples of Blockchain Security in Web3 Gaming Axie Infinity (Ronin Hack): The Axie Infinity game and several projects suffered one of the biggest hacks thus far on its Ronin bridge; however, it demonstrated the effectiveness of multi-sig security and the effective utilization of decentralization. The industry benefited through learning and reflection, thus, as projects have implemented changes to reduce the risks of future hacks or misappropriation. Immutable X: This Ethereum scaling solution aims to ensure secure NFT transactions for gaming, allowing players to trade an asset without the burden of exorbitant fees and fears of being a victim of fraud. Enjin: Enjin is providing a trusted infrastructure for Web3 games, offering secure NFT creation and transfer while reiterating that ownership and an asset securely belong to the player. These examples indubitably illustrate that despite challenges to overcome, blockchain remains the foundational layer on which to build more secure Web3 gaming environments. Benefits of Blockchain Security for Players and Developers For Players: Confidence in true ownership of assets Transparency in in-game economies Protection against nefarious trades/scams For Developers: More trust between players and the platform Less reliance on centralized infrastructure Ability to attract wealth and players based on provable fairness By incorporating blockchain security within the mechanics of game design, developers can create and enforce resilient ecosystems where players feel reassured in investing time, money, and ownership within virtual worlds. The Future of Secure Web3 Gaming Ecosystems As the wisdom of blockchain technology and industry knowledge improves, the future for secure Web3 gaming looks bright. New growing trends include: Zero-Knowledge Proofs (ZKPs): A new wave of protocols that enable private transactions and secure smart contracts while managing user privacy with an element of transparency. Decentralized Identity Solutions (DID): Helping players control their identities and decrease account theft risks. AI-Enhanced Security: Identifying irregularities in user interactions by sampling pattern anomalies to avert hacks and fraud by time-stamping critical events. Interoperable Security Standards: Allowing secured and seamless asset transfers across blockchains and games. With these innovations, blockchain will not only secure gaming assets but also enhance the overall trust and longevity of Web3 gaming ecosystems. Conclusion Blockchain is more than a buzzword in Web3; it is the only way to host security, fairness, and transparency. With blockchain, players confirm immutable ownership of digital assets, there is a decentralized infrastructure, and finally, it supports smart contracts to automate code that protects players and developers from the challenges of digital economies. The threats, vulnerabilities, and scams that come from smart contracts still persist, but the industry is maturing with better security practices, cross-chain solutions, and increased formal cryptographic tools. In the coming years, blockchain will remain the base to digital economies and drive Web3 gaming environments that allow players to safely own, trade, and enjoy their digital experiences free from fraud and exploitation. While blockchain and gaming alone entertain, we will usher in an era of secure digital worlds where trust complements innovation. The Role of Blockchain in Building Safer Web3 Gaming Ecosystems was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story
Share
Medium2025/09/18 14:40
Knocking Bitcoin's lack of yield shows your ‘Western financial privilege’

Knocking Bitcoin's lack of yield shows your ‘Western financial privilege’

                                                                               Macro analyst Luke Gromen’s comments come amid an ongoing debate over whether Bitcoin or Ether is the more attractive long-term option for traditional investors.                     Macro analyst Luke Gromen says the fact that Bitcoin doesn’t natively earn yield isn’t a weakness; it’s what makes it a safer store of value.“If you’re earning a yield, you are taking a risk,” Gromen told Natalie Brunell on the Coin Stories podcast on Wednesday, responding to a question about critics who dismiss Bitcoin (BTC) because they prefer yield-earning assets.“Anyone who says that is showing their Western financial privilege,” he added.Read more
Share
Coinstats2025/09/18 14:22
Vitalik Buterin wants to build ‘the next generation of finance’ – Here’s how

Vitalik Buterin wants to build ‘the next generation of finance’ – Here’s how

The post Vitalik Buterin wants to build ‘the next generation of finance’ – Here’s how appeared on BitcoinEthereumNews.com. Journalist Posted: February 16, 2026
Share
BitcoinEthereumNews2026/02/16 11:01