SEC and five US partners warn of investment scams that borrow a friend's or a regulator's trust

A fake website or app shows returns that never happened, to draw larger deposits ^[5]. Small withdrawals are allowed early to build confidence, and access to the money is blocked later ^[5]. The early withdrawal is money the fraudster spends to raise the size of the next deposit. Cryptoaiml, one of the operations charged on Sept. 29, allegedly showed fictitious profits and demanded withdrawal fees ^[8], so a victim's attempt to leave became one more payment in.

An April warning had already described scammers posing as SEC officials over social media and text messages, using official branding ^[9]. The new bulletin adds that AI makes such messages harder to tell from genuine ones, and it warns about falsified documents ^[10]. In the Sept. 29 case AI shows up in the product as well: TSAI allegedly marketed AI trading bots that did not exist ^[15].

Set the case sizes against the losses. News.bitcoin.com's summary of the warning says relationship investment scams cost investors billions of dollars a year ^[18]. If that means as little as $2 billion, the more than $15.3 million at issue in the Sept. 29 charges ^[6] is roughly 0.8% of one year's losses ^[19]. The SEC's first actions in this category, against the purported crypto platforms Nanobit and Coinw6, date from September 2024 ^[4]. In Nanobit, a court entered a default final judgment on June 16 against four entities and two individuals, after the defendants failed to respond ^[11]. The report does not say whether any money has come back to investors in these cases, or mention any new rule for brokers or advisers.

The regulators' answer this week is education. "This week, as always, I urge investors to take advantage of the resources on the SEC's Investor.gov website and to remain vigilant against potential scams," SEC Chairman Paul S. Atkins said ^[3]. John Moses, director of the SEC's Office of Investor Education and Assistance, tied fraud protection to weathering market volatility ^[16].

I'd expect the useful firm-side response to be narrow and cheap: a written note to clients listing what the firm will never ask for. The bulletin's list of what criminals want covers passwords, account details, wallet credentials, private keys and seed phrases ^[14]. The counter-case is that these schemes begin with unsolicited contact that grows into friendship or romance over weeks or months ^[5], and a firm's notice reaches only its own clients. If later SEC complaints show most victims were first approached by strangers online, the notice reaches few of them and the counter-case is right.