The news
WhatsApp investment scams took at least $15 million from investors, the Securities and Exchange Commission alleged on September 29, 2026, charging four entities it says used group chats, fake AI trading tools and forged SEC paperwork to lure hundreds of retail investors.
The SEC filed two separate complaints in the U.S. District Court for the Southern District of New York. The first names Cryptoaiml Ltd. and Cryptoaiml Capital Foundation; the second names TSAI Pro Ltd. and TSAI Capital Foundation. Many victims were in the United States, according to the SEC, which said the schemes also used websites and Facebook. The agency said the entities are likely operated by individuals located overseas, and it did not name any individual defendants. The charges are allegations that have not been proven in court.
According to the SEC, the Cryptoaiml scheme ran from at least August 2024 through March 2025 and took more than $12.5 million. The agency alleges the operators set up WhatsApp groups where they posed as investment professionals, shared AI-generated trading "signals" and steered members to deposit crypto assets. When investors tried to withdraw, they were told their accounts were frozen until they paid advance fees, the SEC said.
The TSAI scheme ran from September 2024 to March 2025 and took $2.8 million, the SEC alleges. It promoted trading bots said to be programmed with artificial intelligence and promised guaranteed profits, while urging investors to recruit others. The SEC says there were no AI trading bots. In both cases, the agency alleges, the operators falsely claimed to be regulated by the SEC and showed forged certificates and Form D filings, a notice some private fundraisers file with the agency.
David Woodcock, the SEC's enforcement director, said the methods differed but the playbook was the same: promise outsized returns, claim SEC legitimacy, "and then steal their money." He urged the public to report such schemes through the SEC's online tip portal.
The numbers
- Total alleged losses across both schemes (SEC)
- at least $15 million
- Cryptoaiml scheme, alleged (SEC)
- more than $12.5 million
- TSAI scheme, alleged (SEC)
- $2.8 million
- Entities charged
- 4
- People reached by Meta's One Step Ahead campaign since May 2026 (Meta)
- 303+ million
Why CEOs should care
For CEOs and HR leaders, these scams can target your employees. Group-chat investment fraud goes after ordinary savers, and the tells the SEC describes are specific: a stranger-run chat group, trading signals credited to AI, a claim of SEC registration, and a demand for fees before a withdrawal. Put those four warning signs in staff security training alongside phishing. Meta's WhatsApp group settings let users control who can add them to groups, a simple step worth sharing.
For fintech, exchange and payment executives, the money in the Cryptoaiml case moved as crypto deposits, which means on-ramps and payment firms sit in the path of the funds. Ask your fraud team whether your monitoring flags customers sending repeated deposits to newly seen platforms, and whether support staff know to intervene when a customer says a platform wants a fee to release their money. The SEC points investors to its Investor.gov site to check such claims; a customer saying a platform is SEC certified is a prompt to look.
For boards and general counsel, forged regulator paperwork is now standard scam equipment. Check how quickly your company would spot and report a fake document or website that uses your brand, and who owns takedown requests with platforms such as Meta Platforms (META).
The bigger picture
Platforms and payment firms are stepping up defenses. On September 29, Meta said its One Step Ahead anti-scam education campaign, built with more than 25 government agencies, police and safety groups, had reached more than 303 million people across 18 Asia-Pacific countries since launching in May 2026. Meta highlighted WhatsApp tools including group controls and a warning when a new device is linked to an account.
In Thailand, remittance company DeeMoney, licensed by the Bank of Thailand, said at the end of September that it had picked fraud-prevention firm SEON for real-time fraud scoring, transaction monitoring and anti-money laundering screening. Real-time screening at the payment firm is where scam proceeds can still be stopped before they leave.
What’s next
Watch the two Southern District of New York cases for any named individuals, asset freezes or recoveries for investors, and whether the SEC issues fresh investor alerts on group-chat scams and fake SEC registration claims.
What “Fact-checked” means
Fact-checking means testing a story’s facts against the evidence before it is published. This story went through at least two separate checks before this version was published.
- What we checked
- Its names, figures, dates, job titles, quotes and who said what were checked against the story’s sources, including its main source where it could be opened. The headline was checked for accuracy and overstatement.
- How
- A first check reviewed the whole story. If it passed, a second, skeptical check went back to the sources to look for mistakes in the most important facts. If a check flagged the story, it was edited to fix the problems found, and a separate re-check then reviewed the whole story again.
- Who
- The checks are made by our newsroom, as steps kept separate from the writing, under rules set by our editor, Hussein Mukhtar. A story the checks still flag is held for the editor, who decides whether it is fixed, published or dropped.
- If something is wrong
- “Fact-checked” does not mean error-free. If a material error is found after publication, we correct the story and add a note saying what changed. Report an error
Companies in this story
