• The SEC filed two separate civil complaints in a New York federal court on 29 September, one naming Cryptoaiml Ltd. and Cryptoaiml Capital Foundation, the other naming TSAI Pro Ltd. and TSAI Capital Foundation.
  • It alleges the Cryptoaiml entities took more than $12.5m and the TSAI entities more than $2.8m, combined in the announcement into a single “at least $15 million” figure.
  • These are allegations. No court has found anyone liable, and the SEC’s release does not say any money has been frozen, recovered or returned.

An unsolicited WhatsApp group. A dashboard showing profits that were never there. A screenshot of a filing, offered as proof the whole thing was regulated. That pattern sits at the centre of two fraud complaints the US Securities and Exchange Commission filed in New York this week.

The wrapper on this type of fraud changes every couple of years. It was foreign exchange, then binary options, then contracts, and right now it is AI trading bots. The approach underneath has not changed at all: contact through a group chat, small withdrawals that work, then a larger one that suddenly requires a fee.

The other thing worth knowing is what the announcement does not contain. Charges are the beginning of a case rather than the end of one, and nowhere in the SEC’s release is there a line about assets being frozen or investors getting money back.

What the SEC alleges

Top view of smartphone displaying WhatsApp logo on a wooden background, representing technology and communication.
A smartphone showing the WhatsApp logo: messaging apps are where the SEC says investors were first approached and kept updated on returns that regulators allege never existed. Photo by BM Amaro on Pexels.

According to the complaint against the Cryptoaiml entities, the scheme ran from at least August 2024 to March 2025. People were brought into WhatsApp group chats where individuals posed as investment professionals, given purported AI-generated trading “signals”, and directed to a trading platform the SEC says was fake. Some investors signed what they believed were investment-adviser agreements and transferred crypto assets.

The TSAI complaint covers September 2024 to March 2025 and describes a website, WhatsApp chats and a public Facebook page offering guaranteed profits from renting AI-programmed trading bots, with extra earnings for recruiting other people. The release refers to investors depositing funds rather than specifically crypto, which is worth noting given some coverage has filed both matters under the same crypto label.

Both sets of entities are accused of posting falsified paperwork to claim official backing: a doctored screenshot of a Form D in the Cryptoaiml case, and in the TSAI case a phony SEC certificate referencing a falsified Form D. The Forms D that the two companies did file have since been removed from the SEC’s website.

David Woodcock, who runs the SEC’s Division of Enforcement, said in the press release: “Although the methods used to bilk innocent investors in these fraudulent investment scams varied, the goal was the same – promise potential investors outsized returns, claim that they were legitimate entities regulated by the SEC, and then steal their money”. That is the regulator’s framing of its own case rather than a finding of fact, and the defendants have not responded publicly.

Two cases, one number

The $15m in the headline is an aggregate of two unrelated matters against two unrelated sets of entities, filed as two separate complaints. Presented together it reads as one large case. Broken apart it is a $12.5m matter and a $2.8m one, and they will be litigated separately.

The identities behind the entities are also less settled than the announcement’s tone suggests. The SEC describes them as “likely operated by individuals located overseas”, which is an assessment rather than a confirmed location, and the release names no individuals.

One detail deserves unpicking, because it is the hook both schemes allegedly used. A Form D is a short notice a company files when it sells securities without registering them. Nobody at the SEC reviews it, approves it or checks whether the business exists. It appears on a public database, which is exactly what makes a screenshot of one look like a seal of approval to someone who has never had reason to look at one before. The agency does not certify, endorse or licence investment products, and any document claiming otherwise is fabricated by definition.

What you can check from the UK

British readers get approached by the same operations, usually through Facebook, Instagram or a WhatsApp group someone else added them to. Two free checks cover most of it. The Financial Conduct Authority’s Financial Services Register shows whether a firm is authorised here, and its warning list names firms it has already flagged. Type the name in manually rather than following a link the firm sends you, because cloned firms are common.

The point at which most of these schemes reveal themselves is the withdrawal: the balance on screen goes up, the first small payout arrives, and then a larger request triggers a tax, a fee or a verification payment. Any platform that asks for more money before releasing yours is not a platform with a cashflow problem. We have written separately about how legitimate withdrawals actually work.

Anyone in England, Wales or Northern Ireland who has lost money this way can report it to Action Fraud, and in Scotland to Police Scotland on 101. Woodcock added in the same release: “We encourage the public to report these types of schemes as they occur using our online tip portal”.

What to watch

Whether either complaint produces named individual defendants, and whether the SEC seeks asset freezes. Without those, a judgment against offshore entities is a piece of paper.

For a sense of the timescale involved, look at the FCA’s confiscation hearing at Southwark Crown Court on 28 September, where Raymondip Bedi was ordered to pay £603,404.28 and Patrick Mavanga £247,997.99 over a £1.5m crypto fraud. Those orders came years after the offending. Recovery, where it happens at all, is slow, and it tends to return a fraction.