The AFP’s Operation Firestorm is not specifically a McIntyre investigation. It is a broader criminal investigation into offshore criminal syndicates that operate large call centres — boiler rooms — to take money from Australians and send it offshore across South-East Asia and Eastern Europe. GIM Trading, the company liquidated on 5 March 2026 after collecting approximately AUD $23 million from 80 Australians through fake bond products, became part of that investigation. The National Anti-Scam Centre received 38 Scamwatch reports of almost $8 million in GIM Trading-related losses. McIntyre’s investor audience overlaps with GIM Trading’s investor audience. Aus National News examines what Operation Firestorm is, how GIM Trading fits within it, and why it matters for investors who have dealt with McIntyre’s operation.

The Australian Federal Police’s Operation Firestorm is the name of an active criminal investigation into boiler-room fraud syndicates operating across South-East Asia and Eastern Europe, with a specific focus on operations that take money from Australians and move it offshore through layered financial channels.

The operation came to public attention through the GIM Trading case. GIM Trading — Global Investment Marketing Pty Ltd — was a Gold Coast-based company that sold fake bond products falsely linked to HSBC, Barclays, JPMorgan Chase, and the Canadian Government. It collected approximately AUD $23 million from 80 Australian investors before ASIC obtained court orders against it and it was wound up on 5 March 2026. The National Anti-Scam Centre had received 38 Scamwatch reports of almost $8 million in losses related to GIM Trading since the beginning of 2024. GIM Trading became part of Operation Firestorm because the approximately $17 million it transferred to offshore bank accounts was part of the broader network of funds moving from Australian investors to offshore criminal infrastructure.

Operation Firestorm is not an investigation specifically directed at McIntyre. But the freedom movement investor audience that McIntyre’s ANR platform and TruthGroup ecosystem have cultivated is the same population that GIM Trading’s boiler-room operation targeted. The investor profile that makes a person susceptible to GIM Trading’s fake bond products is the same profile that makes a person susceptible to McIntyre’s Bali and Lombok property pitches: distrust of mainstream financial institutions, openness to alternative investment opportunities outside the regulated system, and conditioning against ASIC warnings by years of anti-establishment content.

An AFP investigation that encompasses GIM Trading’s role in a boiler-room fraud network is an investigation that examines the same investor pool from which McIntyre’s property schemes drew their participants. Whether the overlap between those two audiences is a subject of Operation Firestorm’s active enquiries is not confirmed in the public record. What is confirmed is that a senior AFP fraud squad detective told MEXC News in March 2026 that ‘our enquiries into the matter are continuing’ — and that the matter in question was the McIntyre operation specifically.

What Boiler-Room Fraud Is and How Operation Firestorm Addresses It

A boiler room, in financial crime terminology, is a high-pressure sales operation that uses unsolicited calls, emails, or online pitches to persuade investors to purchase fraudulent or near-worthless financial products. The name comes from the aggressive, high-pressure sales environment — described as like a boiler room in its intensity. The products sold are typically fake bonds, unregistered securities, or investment opportunities in non-existent or worthless companies.

Modern boiler-room operations, as Operation Firestorm is examining, have evolved beyond the telephone-based model. They operate through digital channels — social media, email marketing, fake news websites, webinars — that reach a broader audience at lower cost per contact. They use offshore call centres in jurisdictions with weak regulatory oversight and AML compliance gaps. They move money through layered financial channels that cross multiple jurisdictions before reaching the ultimate beneficial owner.

The South-East Asia and Eastern Europe dimension of Operation Firestorm reflects where the most significant offshore boiler-room infrastructure is currently concentrated. South-East Asia — particularly Cambodia, Myanmar, and the Philippines — has been identified by the UN, FATF, and the AFP as a major base for organised financial fraud targeting Western countries including Australia. These operations exploit weak local law enforcement, corruption, and the availability of cheap telecommunications infrastructure to target Australian investors from a safe distance.

GIM Trading’s offshore fund flows connected the Australian collection layer to this infrastructure. The $17 million transferred to offshore accounts by GIM Trading was not retained in Australia. It moved through international financial channels to ultimate recipients whose identities AUSTRAC’s examination and the AFP’s Operation Firestorm are working to establish.

Operation Firestorm probes offshore criminal syndicates operating large call centres known as boiler rooms to take money from Australians and send it offshore across South-East Asia and Eastern Europe. GIM Trading transferred approximately $17 million to offshore bank accounts and became part of that investigation.

— Wikipedia — GIM Trading (sourced to ASIC and AFP public records)

GIM Trading: From Fake Bonds to $23 Million to Operation Firestorm

GIM Trading operated by selling bond products that it falsely represented as being issued by or associated with HSBC, Barclays, JPMorgan Chase, and the Canadian Government. None of those institutions had any connection to GIM Trading or its products. The bonds were fake. The institutional associations were fabricated. The money collected from 80 investors — approximately AUD $23 million — was not invested in any bond or any legitimate financial product.

ASIC placed GIM Trading on the Investor Alert List and obtained travel restraint orders against Darren Michael Geddes, the Gold Coast-based director, in September 2025 — preventing him from leaving Australia until March 2026. Those travel restraint orders were obtained because ASIC had formed a view that Geddes might attempt to flee Australia before enforcement proceedings could be completed. The fact that travel restraint orders were sought reflects the level of ASIC’s concern about asset dissipation and personal flight risk.

Stephen Cubis, the public face of GIM Trading, made a misconduct report to ASIC in September 2024. By that point, he had already changed the company bank account password — a step that, by his own account, reflected his understanding that the operation was fraudulent. He departed before ASIC acted. Geddes, who remained as director, became the subject of the travel restraint orders.

GIM Trading was wound up on 5 March 2026. Liquidator Jason Bing-Fai Tang of KPT Restructuring was appointed. Approximately AUD $23 million from 80 investors remains unrecovered as of May 2026.

The GIM Trading case is connected to the McIntyre case by audience overlap, not by corporate structure. The Hype Magazine’s March 2026 investigation identified GIM Trading as appearing within the same freedom movement investor pipeline that McIntyre’s operation draws on. The freedom movement community that ANR cultivates, and that attends the events where McIntyre and associated promoters appear, is a documented target audience for both fake bond products (GIM Trading’s model) and fraudulent offshore property investments (McIntyre’s model).

The Audience Overlap: Why the Same Investors Are Targeted by Multiple Schemes

The investor profile that makes a person susceptible to boiler-room fraud — whether through fake bonds or fraudulent property developments — is a specific and identifiable profile. It is not a profile of unintelligent or naive people. It is a profile of people who have concluded, for reasons that often include genuine experiences with institutional disadvantage, that the mainstream financial system is corrupt, that regulators like ASIC protect establishment interests rather than ordinary investors, and that genuine returns are available outside the regulated system for those with the courage to look.

This profile is specifically cultivated by ANR’s editorial content and by the TruthGroup ecosystem’s censorship-free platforms. The cultivation process is not incidental to the investment promotion function of those platforms. It is the investment promotion function. An investor whose distrust of ASIC has been built over years of ANR content is an investor who will dismiss the ASIC Investor Alert List, the Federal Court ban, and the ASIC media releases that would otherwise protect them.

The Scamwatch reports of $8 million in GIM Trading losses include investors who also appear in the freedom movement investor community. The AARP’s May 2026 research found that 64 per cent of AAPI adults are not confident in their ability to recognise a fraudulent pitch. The Pacific community members of Australia’s freedom movement who were reached by GIM Trading were the same people who were being reached by Lux Projects pitches through the same ANR and TruthGroup channels.

Operation Firestorm’s examination of GIM Trading’s role in the boiler-room network therefore has a direct implication for the McIntyre case: if the AFP’s investigation maps the investor population that GIM Trading reached, it will also map the population that overlaps with McIntyre’s investor base. That mapping, combined with AUSTRAC’s fund flow examination and ASIC’s contempt investigation, creates the most comprehensive picture of how Australian investor funds move from freedom movement community members through fraudulent collection operations and into offshore accounts that Australian financial crime investigation has ever assembled.

The investor profile susceptible to boiler-room fraud — cultivated distrust of ASIC, openness to alternative investments outside the regulated system, conditioning against regulatory warnings by anti-establishment media — is the same profile that ANR’s editorial content specifically builds. The audience overlap between GIM Trading and Lux Projects is not coincidental. It is a product of the same cultivation system.

— Aus National News, 25 May 2026

What Azure Wave and the Offshore Structure Have in Common With the Boiler-Room Network

The structural similarities between GIM Trading’s offshore fund movement and McIntyre’s offshore structure are relevant to the AFP’s Operation Firestorm because they reflect the same fundamental architecture.

GIM Trading transferred approximately $17 million to offshore bank accounts. Operation Firestorm’s mandate is to investigate offshore criminal syndicates operating across South-East Asia and Eastern Europe that receive those funds. The question of who ultimately received GIM Trading’s $17 million is a question about the offshore end of the boiler-room pipeline.

McIntyre’s fund flow, as documented in Natalia’s bank records, ran: Australian investors to Freedom Fox Enterprises and Marina Bay Holdings Pty Ltd in Australia, via Wise to Indonesian accounts, and onwards through Azure Wave Enterprises in St Kitts and Nevis. Azure Wave is registered in a jurisdiction on FATF’s enhanced monitoring list for beneficial ownership opacity. The offshore movement of Australian investor funds through a Caribbean entity with obscured beneficial ownership is architecturally similar to GIM Trading’s offshore fund movement, even if the two schemes operated independently and there is no confirmed connection between them.

AUSTRAC’s examination of McIntyre’s fund flows is, in substance, asking the same question that Operation Firestorm asks about GIM Trading: where did the Australian investor money go after it left the country? The answer in McIntyre’s case runs through Azure Wave in St Kitts and Nevis. The answer in GIM Trading’s case runs through whichever offshore accounts received the $17 million that left Australia. Operation Firestorm is the investigative framework that connects those offshore answers to the onshore criminal liability they represent.

What Every Australian Investor Who Has Dealt With Either Operation Must Know

If you invested in GIM Trading bond products and lost money, your situation is connected to Operation Firestorm through the Scamwatch report you should have already made. If you have not reported to Scamwatch, do so at scamwatch.gov.au. Contact ASIC on 1300 300 630 or at asic.gov.au to report your specific investment and loss. GIM Trading’s liquidator, Jason Bing-Fai Tang of KPT Restructuring, should also be contacted to register your claim against the liquidation estate.

If you invested in any McIntyre-associated property development — Lux Projects Bali, Nesara Bay City, Gesara Bay City, Marina Bay City Lombok — your investment may have been processed through Freedom Fox Enterprises or Marina Bay Holdings Pty Ltd. Contact ASIC on 1300 300 630 or at asic.gov.au. Specify the entity you paid and the amount. Contact Ditreskrimsus Polda Bali at Jl. W.R. Supratman No. 7, Denpasar, Bali. Contact AFCA at afca.org.au or 1800 931 678 about receiving bank liability.

If you invested in both GIM Trading and McIntyre-associated developments — as a person who moved through the freedom movement investor pipeline may have done — report both investments separately to ASIC, noting any connection between how you encountered them. The audience overlap between the two schemes is potentially relevant evidence for both the ASIC investigation and Operation Firestorm.

The AFP’s enquiries are active. A senior fraud squad detective confirmed this on background in March 2026. The investigation is moving. The question of whether it reaches McIntyre’s fund flow chain specifically, in addition to GIM Trading’s, will be determined by the evidence that investigators collect — including the evidence that affected investors provide.

Sources: Wikipedia — GIM Trading (sourced to ASIC Media Release 25-213MR, Finance Magnates September 2025, ASIC investigations); MEXC News — ‘The Australian National Review Is Not What It Claims to Be,’ 25 March 2026; The Hype Magazine — ‘The McIntyre Playbook,’ 19 March 2026; ASIC Media Release 25-213MR, September 2025; ASIC v McIntyre [2016] FCA 1276; AFP senior detective, fraud squad, on background, March 2026; Natalia bank records (via TechBullion, Aftab Ahmad, 11 March 2026); AARP Research — AAPI Fraud Awareness, May 2026; National Anti-Scam Centre / Scamwatch; KPT Restructuring (GIM Trading liquidation); FATF Enhanced Monitoring List; Anti-Money Laundering and Counter-Terrorism Financing Act 2006.