HyperVerse / HyperFund — Sam Lee / Ryan Xu fake-asset-manager Ponzi (HyperTech ecosystem) — global — 2020-06 to 2022-11 (operating) / DOJ + SEC charges 2024-01

Summary

HyperFund (later rebranded HyperVerse and HyperNation) was a fake-asset-manager / fake-custodian Ponzi scheme operated by Sam Lee (Xue Lee, Australian citizen, founder of Blockchain Global Limited / "BGL") and Ryan Xu (Zijing Xu, Chinese national, HyperTech co-founder) from approximately June 2020 through November 2022. The scheme operated under the umbrella of "HyperTech," a self-styled venture-capital / blockchain-incubator brand that Lee and Xu co-founded after the 2021 collapse of their prior Australian crypto venture Blockchain Global Limited.

The structural fraud was a classical MLM-Ponzi scheme dressed in a "decentralised crypto investment platform" narrative. Investors purchased "membership packages" priced from approximately $300 to $100,000 in BTC, ETH, or USDT and were promised daily-return rates of 0.5%-1% until their principal was doubled or tripled, sourced from a fictitious "large-scale crypto-mining" operation. The mining operation either did not exist or operated at a scale orders of magnitude smaller than the cumulative receivables; per the SEC and DOJ complaints, payouts to early entrants were funded entirely from later entrants' deposits.

The single most structurally significant feature of HyperVerse — and what distinguishes it as the canonical theatrical fake-asset-manager case in the T11.005.002 cohort — is that HyperFund hired an actor named Stephen Harrison to portray a fake CEO ("Steven Reece Lewis") at the December 2021 HyperVerse launch event. The fake-CEO theatrics included scripted bios (Lewis was claimed to be a former Goldman Sachs employee and a Wells Fargo IT executive — both of which were fabricated), a deepfake-style video introduction, and continuous use of the "Steven Reece Lewis" persona in HyperVerse marketing materials through 2022. Investigative journalism by The Guardian Australia (Sarah Martin) in January 2024 identified Stephen Harrison and the actor-CEO structure, which the SEC and DOJ subsequently incorporated into the federal-record allegations. The structural feature is that the T11.005.002 class includes operator-side identity-obfuscation theatrics at industrial scale when the operator network seeks to insulate the actual founder identities from the public-facing brand surface.

The recruitment surface was online: Zoom-based seminars, Telegram channels, YouTube promoter videos, and an MLM affiliate-commission structure that paid existing investors for recruiting new investors. Brenda Chunga ("Bitcoin Beautee") and Rodney Burton were the highest-tier U.S. promoters, both of whom were named in the federal complaints. The MLM structure produced viral expansion through 2020-2022, with the cohort growing to a cumulative ~$1.7B-$1.9B in receivables before the November 2022 collapse and the January 2024 DOJ + SEC actions.

For OAK's purposes, HyperVerse / HyperFund is a canonical international-scale worked example of the OAK-T11.005.002 fake-custodian / fake-asset-manager fraud sub-class with operator-side theatrical identity obfuscation. The case structurally extends the T11.005.002 family by demonstrating the actor-CEO / fabricated-corporate-identity dimension that contributors writing future T11.005.002 worked examples should preserve as a first-class observable.

Timeline (UTC unless noted)

When	Event	OAK ref
Pre-2020	Sam Lee and Ryan Xu co-found HyperTech / Blockchain Global Limited (BGL) in Australia	(operator-cluster precondition)
2020-06	HyperFund operations begin; MLM-Ponzi structure with "membership packages" and 0.5-1% daily-return claims	(T11.005.002 entry vector)
2020-2022	Cohort growth phase; cumulative receivables ~$1.7-1.9B across global investor network	(T11.005.002 fake-asset-manager Ponzi growth)
2021-10	Blockchain Global Limited (Lee/Xu's prior Australian crypto venture) enters liquidation owing ~AUD$58M to creditors	(operator-cluster prior-venture failure)
2021-12	HyperVerse launch event; HyperFund hires actor Stephen Harrison to portray fake CEO "Steven Reece Lewis"; fabricated Goldman Sachs / Wells Fargo bio	T11.005.002 — actor-CEO theatrical-identity-obfuscation event
2022-11	HyperFund / HyperVerse operational collapse; withdrawal restrictions tighten; receivables recognition phase begins	(collapse / extraction event)
2024-01-27	Rodney Burton arrested at Miami International Airport on federal warrant	(operator-cohort arrest)
2024-01-29	DOJ criminal complaint unsealed in District of Maryland charging Sam Lee, Brenda Chunga, Rodney Burton; SEC civil complaint filed same day; total alleged loss ~$1.9B	federal-record entry-point — DOJ + SEC
2024-Q1	Brenda Chunga pleads guilty	federal-record-criminal conviction
2024-01	The Guardian Australia (Sarah Martin) and Cointelegraph publish investigative reporting identifying Stephen Harrison as the actor portraying the fake CEO	(investigative-journalism attribution)
2024-onward	Sam Lee remains in Dubai UAE, named in federal complaint but not in U.S. custody	(operator-mobility / federal-record-pending phase)
Continuing	Federal-record-civil and -criminal cohort attribution open at v0.1 reporting horizon (May 2026); Sam Lee at large; Ryan Xu whereabouts unknown	(cohort recovery / attribution open)

What defenders observed

• The actor-CEO / fabricated-corporate-identity theatrical pattern is the structurally distinguishing feature of HyperVerse within the T11.005.002 cohort. HyperFund hired actor Stephen Harrison to portray a fake CEO ("Steven Reece Lewis") with fabricated Goldman Sachs / Wells Fargo bio details. The defender / framework lesson is that operator-side identity-obfuscation theatrics are a recurring T11.005.002 feature when the actual founder network seeks to insulate itself from the public-facing brand surface. Detection signals: investigative-journalism cross-reference of claimed operator bios against verifiable employment-history sources; OSINT verification of claimed corporate affiliations.
• Prior-venture-failure as an early-warning signal. Sam Lee's prior Australian crypto venture (Blockchain Global Limited / BGL) entered liquidation in October 2021 owing approximately AUD$58M to creditors — approximately one year before HyperFund's operational collapse and approximately two years before the DOJ + SEC actions. The defender / framework lesson is that prior-venture-failure history of named operators is a load-bearing T11.005.002 detection signal, and contributors writing future T11.005.002 worked examples should preserve operator-prior-venture-history as a first-class observable.
• The DOJ + SEC concurrent-action pattern (January 29, 2024) is a recurring T11.005.002 federal-record signature. SafeMoon (examples/2023-11-safemoon-charges.md) exhibited a similar concurrent DOJ + SEC action on November 1, 2023; HyperVerse / HyperFund replicated the pattern on January 29, 2024. The defender / framework lesson is that the T11.005.002 federal-record-attestation surface increasingly produces concurrent DOJ-criminal + SEC-civil actions, reflecting both regulator-coordination and the dual-criminal-and-securities-violation structural shape of these cases. Contributors writing future T11.005.002 worked examples should report the federal-record concurrent-action dimension explicitly.
• The operator-mobility-and-jurisdiction-footprint dimension structurally constrains custody outcomes. Sam Lee's Australian-citizenship / Dubai-UAE-residency footprint structurally constrains the U.S. custody outcome at v0.1 reporting horizon — the UAE has limited extradition cooperation with the U.S. for white-collar crimes, and Lee remains at large despite the DOJ federal complaint. Ryan Xu's Chinese-nationality / unknown-whereabouts footprint similarly constrains the federal-record-attestation completeness. Contributors writing future T11.005 worked examples should report operator-jurisdiction-footprint as a first-class observable that constrains the realised-custody dimension.
• The Ryan Xu non-naming-in-federal-complaint pattern is structurally informative. Investigative-journalism attribution (The Guardian Australia, Cointelegraph) named Ryan Xu (Zijing Xu) as the HyperTech co-founder alongside Sam Lee, but the SEC and DOJ complaints did not name Xu. The defender / framework lesson is that federal-record attribution may exclude operationally-significant operators for investigative or jurisdictional reasons; contributors writing future T11.005 worked examples should report federal-record-naming-versus-investigative-journalism-attribution-gap explicitly when present.

What this example tells contributors writing future Technique pages

• HyperVerse is the canonical theatrical-identity-obfuscation T11.005.002 worked example. Contributors writing future T11.005.002 worked examples should preserve (a) the actor-CEO / fabricated-corporate-identity dimension, (b) the operator-prior-venture-failure history, (c) the DOJ + SEC concurrent-action pattern, (d) the operator-jurisdiction-footprint constraint on custody outcomes, and (e) the federal-record-naming-vs-investigative-journalism-attribution gap dimension explicitly.
• The T11.005.002 family includes operator-side identity-obfuscation theatrics at industrial scale. The fake-CEO / actor-portrayal pattern that HyperVerse exhibits is structurally distinct from but related to the more widespread fake-corporate-affiliation patterns that recur across T11.005 cases (fake "venture-capital backing" claims; fake "regulatory licensing" claims). Contributors writing future T11.005 worked examples should report theatrical-identity-obfuscation dimensions explicitly when present.

Public references

• [doj2024hyperfundindictment] — DOJ Office of Public Affairs press release, January 29, 2024; primary federal-record-criminal entry-point source.
• [sec2024hyperfund] — SEC press release 2024-11, January 29, 2024; primary federal-record-civil entry-point source.
• [justice2024hyperfundcase] — DOJ Criminal Division case page for HyperFund and Associated Cases.
• [guardian2024hyperverseactor] — The Guardian Australia (Sarah Martin), January 2024 investigative reporting identifying Stephen Harrison as the actor portraying the fake CEO.
• [coindesk2024hyperverse] — CoinDesk coverage of the actor-CEO / Goldman Sachs / Wells Fargo fabricated-bio reveal.
• [cnbc2024hyperfund] — CNBC coverage of the DOJ + SEC concurrent action and $1.9B figure.
• [cointelegraph2024hyperverse] — Cointelegraph coverage including Ryan Xu attribution gap.
• [asicblockchainglobal] — ASIC / Australian liquidation record for Blockchain Global Limited (BGL); primary source for Sam Lee / Ryan Xu prior-venture-failure history.

Citations

Existing citation keys reused: none directly — this is the first OAK example anchoring the actor-CEO / fabricated-corporate-identity theatrical-obfuscation variant of the T11.005.002 class.

Proposed new BibTeX entries (added to citations.bib as part of this batch):

• [doj2024hyperfundindictment] — DOJ January 2024 criminal-complaint announcement.
• [sec2024hyperfund] — SEC press release 2024-11 (January 2024 civil complaint).
• [justice2024hyperfundcase] — DOJ Criminal Division HyperFund case page.
• [guardian2024hyperverseactor] — The Guardian Australia investigative reporting (actor-CEO identification).
• [coindesk2024hyperverse] — CoinDesk coverage.
• [cnbc2024hyperfund] — CNBC concurrent-action coverage.
• [cointelegraph2024hyperverse] — Cointelegraph (Ryan Xu attribution gap).
• [asicblockchainglobal] — ASIC / Australian liquidation record for Blockchain Global Limited.

Discussion

HyperVerse / HyperFund is the canonical theatrical-identity-obfuscation worked example for the OAK-T11.005.002 fake-custodian / fake-asset-manager fraud sub-class. The structural feature that distinguishes HyperVerse from the broader cohort (OneCoin, PlusToken, CryptoFX, CoinDeal-Chandran, Forsage) is the operator-side hiring of an actor (Stephen Harrison) to portray a fabricated CEO ("Steven Reece Lewis") with fabricated Goldman Sachs / Wells Fargo employment-history claims at the December 2021 HyperVerse launch event. The actor-CEO theatrics demonstrate that the T11.005.002 family includes operator-side identity-obfuscation at industrial scale — a structurally significant dimension that contributors writing future T11.005.002 worked examples should preserve as a first-class observable.

The case also anchors several recurring T11.005.002 features. The prior-venture-failure pattern (Sam Lee's Blockchain Global Limited entered liquidation October 2021 owing ~AUD$58M, approximately one year before the HyperVerse operational collapse) is a load-bearing detection signal that contributors should preserve as a first-class observable — operator-prior-venture-history is a structurally cleaner detection signal than on-chain forensics for this class. The DOJ + SEC concurrent-action pattern (January 29, 2024) is a recurring federal-record signature that complements the SafeMoon (November 1, 2023) and other concurrent-action cases in the broader T11.005 cohort. The operator-jurisdiction-footprint constraint on custody outcomes (Sam Lee Dubai-UAE; Ryan Xu unknown-whereabouts) structurally constrains the realised-custody dimension at v0.1 reporting horizon and should be reported explicitly.

The Ryan Xu non-naming-in-federal-complaint pattern is structurally informative for the federal-record-attestation completeness analysis. Investigative-journalism attribution (The Guardian Australia, Cointelegraph) identified Xu as the HyperTech co-founder alongside Sam Lee, but the SEC and DOJ complaints did not name Xu — for investigative or jurisdictional reasons that the federal record does not publicly disclose. The defender / framework lesson is that federal-record attribution may exclude operationally-significant operators, and the realised-attribution-completeness dimension should be reported as the gap between (a) federal-record-named operators, (b) investigative-journalism-attributed operators, and (c) cohort-of-operationally-significant participants per public-record reconstruction. Contributors writing future T11.005 worked examples should preserve this dimension explicitly when the federal-record-versus-investigative-journalism gap is present.