Fake investment ads on Telegram channels funneled EU victims to a lookalike exchange that emptied their wallets.