Home/ Incident database/wa-dfi-ai-trading-fraud-2026-04
Legal / liability Trading agent failure verified

Washington regulators allege a $10M 'AI trading' scheme drained investors via messaging-app clubs

Zenith Asset Tech Foundation, Cirkor Inc. et al. · Apr 22, 2026 · Trading agent

What happened

Washington State's securities regulator entered a Statement of Charges (S-24-3882-25-SC01) alleging that entities including Zenith Asset Tech Foundation and Cirkor Inc. lured investors through social-media ads into 'free' investment-training groups on messaging apps, where coaches hyped AI-generated trading signals and steered members onto branded trading sites. After small shown 'test trade' wins, operators allegedly blocked larger withdrawals or demanded undisclosed advance fees; regulators say roughly $10 million was drained, and the Seattle Times reports three Washington residents alone put in about $49,000.

$49K–$10M
Loss / impact
Apr 22
2026
Trading
Failure mode
Trading
Agent type

Causal vector

Fraud monetizing trust in autonomous 'AI trading'; no real agent ever executed the promised trades

Source

Reported by Hoodline (Washington State DFI Statement of Charges S-24-3882-25-SC01). Verified against the primary report.

Read the original report ↗

How a spend firewall would have helped

When 'the AI trades for you' is the sales pitch, the control is where the money goes: a merchant allowlist that refuses unvetted 'investment platforms', a per-transaction cap, and velocity limits on repeat transfers would have bounded each victim's exposure. Anything sold as an autonomous trader with no external spend controls should be treated as unverified by default.

The six rule types that contain this class of failure

Per-transaction cap

Any single spend above your ceiling is BLOCKED before it moves.

Daily total

Cumulative spend across all agent calls, bounded per day.

Velocity limit

Stops runaway retry loops — the #1 cause of overnight losses.

Merchant allowlist

Only approved destinations can ever receive funds.

Category rules

Flag high-risk classes (crypto, infra, refunds) for review.

Approval threshold

Above a value, the action waits for a human.

Related incidents

Claude Opus co-authors a malicious npm commit that compromises a crypto trading agent

crypto trading agent operator (npm dependency victim) · Apr 29, 2026

Lobstar Wilde agent sends $441K of tokens to a stranger after a crash wiped its wallet state

Lobstar Wilde (OpenAI employee Nik Pash's side project) · Feb 23, 2026

Don't be the next entry

Every incident in this database is the result of trusting a prompt, a provider cap, or a human review cycle. sipi.bot replaces all three with one deterministic call. 90 documented failures, one control.