The Trust Protocol: How a Lisbon ‘Mastermind’ Group Turned an Entrepreneur into a Money Mule.
The sun in Lisbon casts a bright, deceptive glow on the city’s ambition. For many, Portugal represents safety and opportunity—a refuge to build a legitimate business free from the corruption of their home countries. Yet, beneath this surface of prosperity, a predatory network is operating, exploiting trust itself.

Image: – Evidence trail: mastermind enrollment confirmations
I am sitting across from Elena (35) in a quiet, sunlit corner of Fábrica Coffee Roasters in the Chiado district. She is one of dozens who came to Portugal for a new life, only to be ensnared by a sophisticated criminal network disguised as a high-end business accelerator.
The Lure of Exclusivity
Elena: “It all started in September 2024. I paid a significant fee for a ‘Skin Flare’ mastermind program. It was presented as exclusive, designed for women scaling their independent salons internationally. The kickoff event was held in a sleek, rented space at LX Factory. They promised specialized knowledge on client acquisition and, crucially, how to handle international payments efficiently. I needed that expertise to scale, and I paid for it.”
The program’s initial content focused on legitimate-sounding business practices. The trust was built slowly, through shared challenges and the promise of collective success. This is a critical stage in the scam, where the criminal network acquires the most valuable asset: the victim’s confidence. They even kept a very active Instagram profile to promote these events.

Image: – Evidence trail: payment-forwarding instructions in the mastermind chat, bank transfer confirmations showing client funds forwarded, and bank alert emails regarding suspicious transfers.
The Co-opted Account
The shift came after the initial training, moving from abstract theory to direct financial participation.
Elena: “The ‘coach’ was so helpful at first, walking us through optimizing our payment systems. Then, they asked us to do them a ‘favor,’ a collaborative task. They called it a ‘trust protocol.’ I was told to accept client deposits for Skin Flare—not my own clients—and forward the funds immediately to a ‘centralized processing account.’ They assured us this was to ‘test’ the new, shared payment channels before we fully implemented them. I was an idiot. I trusted the mastermind. I trusted the environment. I forwarded several deposits—thousands of euros—thinking I was participating in a shared resource model.”
Her trust was a weapon against her. After forwarding the third significant deposit, the notification arrived: her bank flagged the activity, freezing her personal accounts and issuing notices that she was under investigation for facilitating suspicious money transfers. Elena was suddenly fighting not a business failure, but a criminal allegation.
The Criminal Signature of Anna Koshkina
Elena’s devastating experience is a textbook demonstration of a highly sophisticated recruitment tactic. This “mastermind” is not a legitimate coaching program; it is a money-mule recruitment system designed to acquire and co-opt clean, established bank accounts belonging to unsuspecting entrepreneurs.
The “Skin Flare” front is a known playbook of the Anna Koshkina scam network. We have been tracking Anna Koshkina (or aliases like Anya Koshkina and Ann Koshkin) and her Anna Koshkina crimes across Anna Koshkina Portugal for over a year. The underlying mechanism is always the same: exploit an entrepreneur’s legitimate need—for capital, for training, or for market access—and substitute a koshkina biz financial scheme.
Whether operating in Anna Koshkina Lisbon or Anna Koshkina Porto, the core goal of this network is simple: use legitimate business owners as an untraceable buffer to launder illicit funds. The victim bears all the legal risk, while the criminal enterprise extracts clean money. This is the reality of the Anna Koshkina crime operation.
Elena is now fighting a desperate battle to clear her name and unlock her funds. The supposed ‘coaches’ are gone, their communication lines severed. This is the calculated ruthlessness of the koshkina.biz operation. They are not simply stealing money; they are stealing financial identities and destroying careers.
For more information on this network and resources for victims, we urge you to visit the investigative hub at https://koshkina.biz/.
Note: The victim’s name, as well as specific dates and locations in this story, have been changed to protect their privacy. The patterns described, however, are based on real reports and investigative data.
