$19,000 Paid. Not One Document Was Real.
By the time our client contacted us, the money was gone. $2,200 for the initial processing fee. $5,800 to accelerate probate. $11,000 for a tax clearance certificate. He had been told the $2.3 million inheritance was three weeks away every time he paid. Our investigation confirmed what he had begun to fear: there was no inheritance, no will, and no Sofia.
The $19,000 our client had already paid was not recoverable. We know that, and so did he. He contacted us because he wanted certainty before deciding whether to continue — and because the next payment request, for $14,500, had arrived that morning. Our report gave him the certainty to stop.
A letter that knew things it shouldn't.
The client — a man in his sixties, living alone after a divorce, with some Ukrainian family heritage on his mother's side — received a handwritten letter. Not an email. A physical letter, with a Kharkiv postmark.
The woman who wrote it, calling herself Sofia, explained that she was trying to locate a distant American relative. Her grandfather, she wrote, had emigrated to the United States in the 1970s after a dispute with the Soviet authorities. He had recently died at 94, and his estate — accumulated through decades of property ownership in Kharkiv — amounted to $2.3 million. His last wish was that part of it reach the American branch of the family.
She knew the client's mother's maiden name. She knew the Ukrainian village his grandmother came from. She had a family photograph — faded, genuine-looking — showing people who bore a resemblance to old photos in his own family albums.
The letter came with three attachments: a copy of the will, notarised and stamped; a letter from a law firm in Kharkiv confirming they were handling the estate; and a breakdown of what the "legal release process" would cost.
He paid the first instalment believing it was a legal fee. He paid the second believing the delay was bureaucratic. By the third payment, he knew something was wrong — but had paid so much that stopping felt impossible.
No matching probate record in any Kharkiv district.
Ukrainian probate proceedings are registered with the regional notary chamber and, for estates above a certain value, with the Ministry of Justice. We searched the Kharkiv Regional Notary Chamber records for any estate filing matching the deceased's name and the claimed death date. No matching record existed — not in Kharkiv, not in adjacent regions.
The notary stamp on the will used a registration number that belonged to a real notary — but one based in Lviv, in western Ukraine, 1,200 km from Kharkiv. The stamp design itself did not match the format used by that notary's registered office.
Dissolved eight years ago. Still signing letters.
The law firm named in the correspondence had been a real entity — registered in Kharkiv in 2003, active until 2017, when it was dissolved following the departure of its founding partners. Its registration had lapsed and had not been renewed.
The letterhead used in Sofia's documents was a close copy of the firm's original design, with the same logo and address. But the firm had not existed as a legal entity for eight years. Any letter bearing its name and registration number after 2017 was a forgery by definition.
A prior civil complaint. An almost identical scheme.
A search of publicly accessible Ukrainian civil court records — Reyestr Sudovykh Rishen, the unified court decision register — returned a civil complaint filed in 2021 against a woman using the same first name and matching physical description, for a fraud involving a claimed Kharkiv inheritance and a series of processing fees. The earlier victim had paid $8,400 before stopping.
The methods were identical: handwritten first contact, family photo, notarised will, law firm letter, escalating fees with plausible bureaucratic justifications. The 2021 case had resulted in a default judgment in the plaintiff's favour but no confirmed criminal prosecution.
Where did she get the details?
This is the question that disturbed our client most. How did she know his mother's maiden name? How did she have a family photograph?
Genealogy databases — particularly those that received large uploads of Eastern European family records in the 2010s — are a known source of family data for inheritance fraudsters. Several paid genealogy platforms had data breaches between 2017 and 2022 that exposed family trees, including maiden names, villages of origin, and emigration histories.
The photograph is harder to explain with certainty, but old family portraits circulate in estate sales, online markets, and through diaspora communities in ways that are difficult to trace. The resemblance our client noticed may have been genuine coincidence — or deliberate selection from a large pool of period photographs of Ukrainian families.
It's not too late to stop.
The most damaging aspect of advance-fee fraud is the psychology of sunk cost: the more you've paid, the harder it feels to stop, because stopping means admitting the previous payments were a loss. The fraudsters know this and exploit it deliberately. Each new payment request is calibrated to feel like the final obstacle.
If you have already made payments and are uncertain whether to continue, contact us before you pay anything else. We can tell you within days whether the people and documents you've been given are real. If they are not, you will have the certainty to stop — and the documentation to report the fraud to law enforcement.
See more real investigations.
We regularly post anonymised case results and scam‑awareness tips on Instagram. Follow @allrussian.verify to stay informed.
Other fraud cases we've investigated
We check Ukrainian court records, notary registries, and law firm status.
If someone has sent you documents from Ukraine, Russia, or any CIS country and asked for money, send us the documents. We will check the institutions, the people, and the stamps against public registries. Four days. Written report in plain English.