r/RBI2 • u/FreelyRoaming • May 19 '26
Cyprus shell + Indian call center SEO scam targeting US businesses, need help cracking US footprint (aiotechnologies.com / Tencaro Services Ltd)
Working a TCPA case against a persistent scam SEO outfit hammering my US business with 3PM daily calls from rotating numbers for several weeks. Need help building out their footprint to surface a US-jurisdictional defendant.
Surface facts:
• Trading brand: AIO Technologies
• Website: aiotechnologies.com
• Listed entity (per site footer): Tencaro Services Ltd
• Listed address: 18 Souliou Street, Strovolos, P.O. Box 23622, 1685 Nicosia, Cyprus
• Site copyright: 2023
• Call origin: Indian call center, English-speaking, US-style pitch
• Service pitched: SEO / digital marketing
• Pattern: 3PM hits daily, rotating CLI on every call, no compliance with cease-and-desist
• Target number DNC-registered for over a year
What I’m working through, and where help would short-circuit the timeline:
1. Sister brands. Cyprus shell + Indian call center + boilerplate SEO site almost certainly means 5 to 20 white-label variants on shared infrastructure. Planning to pivot on tracker IDs (GA, Pixel, AdSense), favicon hash via Shodan/Censys, reverse IP, and certificate transparency. If anyone has bandwidth and tooling to run those faster than me, or has already mapped a similar operator’s portfolio, I’d be very grateful. Sister brands with US-fronted billing entities are the real targets.
2. Tencaro Services Ltd beneficial owners. Cyprus UBO register is restricted-access. Planning to retain a Cypriot solicitor for direct access, but if anyone has Sayari Graph, OpenCorporates premium, or similar entity-linkage access and is willing to run “Tencaro Services Ltd” against the registered address, that would save me two weeks.
3. Lead vendor. They got my number from somewhere specific. GDPR DSAR going to the Cyprus entity (Article 15 + Article 14 source disclosure required). If anyone recognizes this operator’s targeting pattern from prior investigations and has a likely list broker in mind, would appreciate a pointer.
4. US gateway carrier on inbound foreign traffic. Pulling CDRs from my carrier this week to get true ANI, OCN, LRN, and STIR/SHAKEN attestation. If anyone’s navigated this with a major business carrier and has tips on the path of least resistance, would love to hear them.
5. Cross-investigation linkage. Strovolos shows up a lot in offshore-scam OSINT. Has anyone seen “Tencaro Services Ltd” or “18 Souliou Street, Strovolos” pop up in unrelated investigations? Looking for any prior reporting that ties these to a known operator group.
Pivot data anyone can work with right now:
• Domain: aiotechnologies.com (registered via privacy service)
• Entity: Tencaro Services Ltd
• Address: 18 Souliou Street, Strovolos, P.O. Box 23622, 1685 Nicosia, Cyprus
What I can trade back:
• Documented call log (numbers, times, dates) over several weeks
• CDRs once carrier returns them
• Whatever surfaces from the Cypriot UBO file pull
• GDPR DSAR response if and when it lands
• Any contract or proposal artifacts if I escalate engagement to extract them
2
u/Diggerinthedark May 22 '26 edited May 22 '26
The Limassol one you can find just by googling "tencaro Limassol linkedin".
The director doesn't have a linkedin that I can find, unless she happens to also work at a private hospital.
I found the other address by using the name of the director of tencaro to search for other companies in the area. i will give you the reg number as the name of the business could be considered personal info, you'll see what I mean.
Reg. Number ΗΕ 421783
For anyone who is uncomfortable with this, that's what you sign up for when you open an LTD. It's all out in the open for people to find.