Washington regulators allege a $10M 'AI trading' scheme drained investors via messaging-app clubs
Zenith Asset Tech Foundation, Cirkor Inc. et al. · Apr 22, 2026 · Trading agent
What happened
Washington State's securities regulator entered a Statement of Charges (S-24-3882-25-SC01) alleging that entities including Zenith Asset Tech Foundation and Cirkor Inc. lured investors through social-media ads into 'free' investment-training groups on messaging apps, where coaches hyped AI-generated trading signals and steered members onto branded trading sites. After small shown 'test trade' wins, operators allegedly blocked larger withdrawals or demanded undisclosed advance fees; regulators say roughly $10 million was drained, and the Seattle Times reports three Washington residents alone put in about $49,000.
Causal vector
Fraud monetizing trust in autonomous 'AI trading'; no real agent ever executed the promised trades
Source
Reported by Hoodline (Washington State DFI Statement of Charges S-24-3882-25-SC01). Verified against the primary report.
When 'the AI trades for you' is the sales pitch, the control is where the money goes: a merchant allowlist that refuses unvetted 'investment platforms', a per-transaction cap, and velocity limits on repeat transfers would have bounded each victim's exposure. Anything sold as an autonomous trader with no external spend controls should be treated as unverified by default.
The six rule types that contain this class of failure
Per-transaction cap
Any single spend above your ceiling is BLOCKED before it moves.
Daily total
Cumulative spend across all agent calls, bounded per day.
Velocity limit
Stops runaway retry loops — the #1 cause of overnight losses.
Merchant allowlist
Only approved destinations can ever receive funds.
Category rules
Flag high-risk classes (crypto, infra, refunds) for review.
Approval threshold
Above a value, the action waits for a human.
Related incidents
SEC charges Texas man with $12.3M fraud over nonexistent 'AI trading bots'
Nathan Fuller (Cypress, Texas) · May 28, 2026
Claude Opus co-authors a malicious npm commit that compromises a crypto trading agent
crypto trading agent operator (npm dependency victim) · Apr 29, 2026
Lobstar Wilde agent sends $441K of tokens to a stranger after a crash wiped its wallet state
Lobstar Wilde (OpenAI employee Nik Pash's side project) · Feb 23, 2026
Don't be the next entry
Every incident in this database is the result of trusting a prompt, a provider cap, or a human review cycle. sipi.bot replaces all three with one deterministic call. 90 documented failures, one control.