Home/ Incident database/sec-cryptoaiml-fake-ai-platform-2026-09
Legal / liability Trading agent failure verified

SEC charges fake 'AI trading signals' platform with taking $12.5M from 300+ investors

Cryptoaiml Ltd. and Cryptoaiml Capital Foundation (S.D.N.Y., No. 1:26-cv-08508) · Sep 29, 2026 · Trading agent

What happened

The SEC filed a fraud complaint in the Southern District of New York alleging Cryptoaiml Ltd. and Cryptoaiml Capital Foundation ran WhatsApp investment clubs impersonating real professionals at firms including Citadel Securities and Raymond James, promoted 'AI-generated trading signals' with a claimed 98% accuracy rate, and misappropriated approximately $12,512,032 from more than 300 retail investors. Per the complaint, no trading ever took place: displayed profits were fictitious, the site displayed a Form D and FinCEN MSB registration to fake legitimacy, and withdrawal attempts met 'locked account' demands for advance fees. A related complaint against TSAI entities alleges a further $2.8 million from roughly 1,715 investors renting 'AI trading bots' that did not exist.

$13M
Loss / impact
Sep 29
2026
Trading
Failure mode
Trading
Agent type

Causal vector

Fabricated AI trading technology used as the fraud vehicle: unverifiable agent claims plus fake regulatory filings concealed that no agent ever traded

Source

Reported by SEC complaint (via InvestmentNews). Verified against the primary report.

Read the original report ↗

How a spend firewall would have helped

The inverse proof of the audit trail: victims had no way to verify any agent ever placed a trade. Verifiable execution logs and policy-gated, inspectable money movement are the same controls that make an agent's operator accountable instead of merely credible.

The six rule types that contain this class of failure

Per-transaction cap

Any single spend above your ceiling is BLOCKED before it moves.

Daily total

Cumulative spend across all agent calls, bounded per day.

Velocity limit

Stops runaway retry loops — the #1 cause of overnight losses.

Merchant allowlist

Only approved destinations can ever receive funds.

Category rules

Flag high-risk classes (crypto, infra, refunds) for review.

Approval threshold

Above a value, the action waits for a human.

Related incidents

Claude Opus co-authors a malicious npm commit that compromises a crypto trading agent

crypto trading agent operator (npm dependency victim) · Apr 29, 2026

Don't be the next entry

Every incident in this database is the result of trusting a prompt, a provider cap, or a human review cycle. sipi.bot replaces all three with one deterministic call. 115 documented failures, one control.