We are advertisers. We agreed to a two-month campaign, paid our advance, and then the operator "Ahmed Rizk" demanded extra payment after extra payment — $1,150, then $750, then $580, then $170 — each one "the last one, I promise." Our ads were taken down anyway, no refund was ever sent, and our messages are now ignored. Below we publish the complete unedited Telegram and WhatsApp conversation, the invoices, their own admin panel screenshots, and the operator's phone number so no other advertiser or uploader gets caught.
We contracted file-upload.org for a two-month advertising campaign ($1,500 advance, $3,000 total) and paid $1,450. Within weeks our traffic and conversions dropped. Then, days before a hosting bill of their old hosting provider came due, the operator started demanding extra "emergency" payments in crypto to "save the website," promising our campaign would run until October 29 and that each payment was "the last one." We paid $580 and then $170 more. The demands never stopped, the ads were removed anyway, the promised refund never came, and after September 2 the operator stopped answering. Their own admin panel shows 692,867 registered users but only 26 premium users, and their own billing page shows they don't even pay their uploaders. Read the full story below, message by message.
| Date | What they said | Amount | Method |
|---|---|---|---|
| Early Aug 2026 | Agreed advance for 2-month campaign ($1,500) | $1,450 paid | Invoice WE4245218 |
| Aug 29 | "Urgent" hosting emergency — demanded $1,150 more | — | demanded, refused |
| Aug 30 | Reduced to $750, then "I borrowed $400, send the rest" | — | BEP20 / TRC20 addresses sent |
| Aug 31 | "Today I must accept another company's payment" — reduced to $580 | $580 paid | USDT TRC20 |
| Sep 1 | "Thank you, but I still need $170 more today" | $170 paid | USDT BEP20 |
| Sep 2–3 | Ads still down, "today will add new code" — never added, then silence | $2,200 total | $0 refunded |
The person behind file-upload.org, as presented to us in Telegram and WhatsApp Business. The WhatsApp account is registered as a business in Dubai and was created in January 2026. The profile picture is a photo of an ADIB (Abu Dhabi Islamic Bank) branch — not his own photo.
Complete chronology with the original screenshots. Click any screenshot to enlarge. Nothing is cropped out of context — full-size originals are also in the gallery at the bottom.
The operator sold us the campaign on the size of his traffic and claimed "we normally generate around $1,000 per month from premium memberships."
His own stats page for Aug 1–10 tells the real story: 692,867 total users and 26 premium users, with a few hundred uploads per day. The "premium revenue" that was supposed to keep the site alive does not exist.

We told him straight: "You said same things earlier as well but somehow your traffic is not the same. It decreased a lot and conversions too."
His answer: "when I start making payments to members, you will see a noticeable increase in the number of visits"
— meaning the site only works when advertisers subsidize it. His own panel also shows a queue of pending profit payments to uploaders — the site doesn't pay its own users either.


Two days before his "urgent situation" message, their hosting provider HostPro had already sent a second invoice overdue notice (invoice 1989909, €1,543.00, due 31/08/2026). The crisis he later used to pressure us was not sudden — it was pre-existing, and we were the planned exit.

"Hi bro, I need your help with an urgent situation… You already paid $1,450 from the agreed $1,500 advance… I need an additional $1,150 to solve this… In return, I will extend your campaign for one full extra month until October 29."
When we pushed back, the promises started: "we normally generate around $1,000 per month from premium memberships"
(false, see above), "this will genuinely be the last time we ask you for anything"
, and even "I'm a Muslim, and I take honesty and trust very seriously."
He also offered a personal refund "within the next 2–3 months" if we refused — a refund that was never sent.


"I can personally borrow around $400… I'm only asking you for the remaining $750… You won't see a message from me until October 29th."
Then the crypto wallets came out: a BEP20 USDT address and a TRC20 USDT address. No invoice, no company, no traceable payment rail — crypto only.


To pressure us, he forwarded a chat in which he supposedly refused another advertiser's $1,200 offer "to honor our deal" — notice that he was openly shopping the same ad placements to multiple advertisers at the same time. He then sent his WhatsApp number, +971559496442, and asked for our ad button code so he could "place it."

"Let me know brother because today I need accept any payment from other company to save website today… all we need now 580$ to fix all problem and paying hosting today… and back work with you for ever."
The amount shrank from $1,150 to $750 to $580 in 48 hours — a classic pressure funnel. We sent 580 USDT (TRC20).

"Bro, thank you again for the $580. I managed to get the other $170, but I still need $170 more today to complete the hosting payment… Also, please send me your advertising code again so I can put your ads back."
Our ads were already down — that was the leverage. We called it out: "This loop will never end. You better proceed for refund."
He replied "I told you 750 and try to getting from other one… Brother you will get 2 month."
We sent the 170 (BEP20) as the absolute last payment.

Sep 2: "Yes today will add new code"
— never added. Our request to "change pop ads also back to ours"
— ignored. Sep 3: "Writing long messages when in need, and now?"
— left on read. The long emotional messages, the promises, the "bro" and the hearts: all of it stops the moment the crypto is in his wallet.

The original invoice issued for our campaign advance, and the second invoice from their records. Crypto transfer amounts and dates match the chat timestamps above ($580 TRC20 on Aug 31, $170 BEP20 on Sep 1).





Original PDF files for download and verification: Invoice_WE4245218.pdf · Invoice_WE4421717.pdf
If any advertiser or uploader of file-upload.org sees these patterns, stop sending money.
Every screenshot we hold, unedited. Click to enlarge.

















