The SEC charged Cryptoaiml Ltd., Cryptoaiml Capital Foundation, TSAI Pro Ltd., and TSAI Capital Foundation in the Southern District of New York over two alleged online investment-confidence scams that collectively misappropriated at least $15 million. The defendants allegedly used WhatsApp groups, Facebook, websites, impersonated investment professionals, and false claims of SEC oversight to market purported AI-powered cryptocurrency trading. Cryptoaiml allegedly took more than $12.5 million from over 300 investors using a fake trading platform, fictitious AI signals and fabricated account gains; TSAI allegedly collected more than $2.8 million from about 1,715 investors through nonexistent AI bots and a recruitment-commission program. In both schemes, investors attempting to withdraw funds were allegedly told to pay fraudulent fees, taxes, or verification charges.
The SEC says no genuine AI trading, bots, or represented investment activity existed, and that the groups used falsified regulatory-related materials, including Form D-related claims, to manufacture legitimacy. It seeks injunctions, disgorgement with interest, civil penalties, and activity bars. The actions follow an August SEC case against 38 entities accused of filing false exempt reporting adviser Forms ADV—including fake Colorado addresses, recycled financial and ownership information, and unverifiable audit firms—to appear regulated and lure retail investors; the agency removed those filings and said the FBI assisted through Operation Level Up.

See the reporting duties and controls this puts on the clock.
5 events from the most recent confirmed update back to the earliest known activity.
The SEC filed two civil complaints in the Southern District of New York against Cryptoaiml Ltd., Cryptoaiml Capital Foundation, TSAI Pro Ltd., and TSAI Capital Foundation, alleging the schemes collectively took at least $15 million. The agency removed the entities' Forms D filings and sought injunctions, disgorgement, civil penalties, and relevant activity bars.
TSAI Pro Ltd. and TSAI Capital Foundation allegedly began promoting nonexistent AI trading-bot rentals through its website, WhatsApp chats, and Facebook, offering guaranteed returns and recruitment compensation. The scheme allegedly took more than $2.8 million from investors and imposed purported tax or verification payments on attempted withdrawals.
Cryptoaiml Ltd. and Cryptoaiml Capital Foundation allegedly began an online investment-confidence scheme that used WhatsApp groups, impersonated investment professionals, fictitious AI trading signals, and a fake crypto-trading platform. The scheme allegedly misappropriated more than $12.5 million while displaying fictitious profits and demanding advance fees for withdrawals.
The SEC filed complaints in the District of Colorado against 38 entities for alleged false exempt reporting adviser filings, removed their ERA filings from its website, and sought injunctions, filing prohibitions, and civil penalties. The FBI assisted the SEC through Operation Level Up.
Thirty-eight entities allegedly made materially false Forms ADV filings to appear to be legitimate U.S. investment advisers, using false Colorado addresses, invalid phone numbers, recycled data, and unverifiable audit firms. The filings were allegedly used to lend credibility to investment scams targeting retail investors.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
3 references tracked. Mallory keeps watching after this page renders.
thedefiant.io
Open sourcesec.gov
Open sourcesec.gov
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.