Nils Tharandt Ortiz, the CEO of Paypolitan Inc., allegedly contracted a hitman for $100,000 to murder a former business associate in Mexico and seize their cryptocurrency holdings. The plot, which unfolded in October 2024, failed when a security team apprehended the assailant at the victim's villa.
On October 7, 2024, Samuel Osuna Paredes entered the target's private villa in Mexico. He gained access by bribing a security guard. Paredes carried a Ledger hardware wallet, intending to use the victim's Face ID to drain digital assets after the planned killing. The victim's personal security detail intercepted Paredes within 30 seconds, neutralizing the threat before any further action could occur.
Mexican authorities interrogated Paredes on camera. He initially claimed allegiance to the 'Cartel Caborca.' Investigators found different information on his mobile phone. Communications on the device pointed to an individual using the alias 'Roberto Italia,' later identified as Nils Tharandt Ortiz, the Paypolitan CEO. The FBI received notification of the incident that same evening. The U.S. Drug Enforcement Administration (DEA) subsequently joined the investigation, prompted by Paredes' initial claims of cartel involvement. The cross-border nature of digital asset crimes, particularly those escalating to physical threats, presents complex challenges for international law enforcement.
The threats did not cease with Paredes' apprehension. On October 14, a handwritten message appeared at the victim's residence. It translated roughly to: "You'll pay for what happened at the prosecutor's office." Paredes re-established contact from a new WhatsApp number, +52 987 234 9962. He sent photographs taken outside the victim's home at night, confirming his knowledge of the address and his continued activity.
In a significant turn, Paredes also transmitted a photograph of Ortiz's own residence in Paris, captured at dawn. This suggested Ortiz had not fully paid the agreed sum to the alleged hitman. The implication was clear: the cartel, or Paredes acting independently, now sought Ortiz himself.
Another note arrived on October 18, this one signed "4LT," a known reference to the Cartel de Jalisco Nueva Generación (CJNG). Whether Paredes genuinely held affiliation with this group or used the name for increased intimidation remains unclear. By January 2025, new threatening messages came from yet another distinct number. These referenced a "Mr Africa" and events from December 14, along with details of flights from Belize, indicating ongoing surveillance of the victim.
The U.S. Consulate in Mérida provided Samuel Osuna Paredes' official Mexican government ID, known as a CURP. The document bears the identification number OUPS910308HCMSRM03. This confirmed his identity for the investigation. The case was formally submitted through the FBI Electronic Tip Form, establishing a federal record of the alleged crime.
Ortiz leads Paypolitan, a company that describes itself as a blockchain-based payment solution. He is also connected to the collapse of the EPAN token, where investors reported significant losses. Investigations into EPAN alleged that Ortiz drained investor funds from its liquidity pool. The allegations against Ortiz mark a significant escalation, transitioning from claims of financial fraud related to the EPAN token to alleged attempts at physical violence.
The Federal Bureau of Investigation continues its inquiry into these events. Nils Tharandt Ortiz remains at large, facing potential charges related to conspiracy to commit murder, attempted murder, and financial fraud across international jurisdictions. The victim continues to operate under heightened security protocols.