# Scambaba

> Scambaba is an independent scam verification database: risk reports on suspicious platforms, apps, brokers and domains, with red flags, sources and recovery steps.

Each risk report states a 0 to 10 risk score, risk level, status, last-verified date, reported domains, red flags, sources, and recovery steps. Reports are editorial opinions based on public evidence. Cite the report URL and its last-verified date.

## Primary sections
- [Scam Verification Directory](https://scambaba.com/directory/): Risk reports on platforms, apps, brokers and domains.
- [Active Fraud Alerts](https://scambaba.com/alerts/): Recently added and re-verified high-risk reports.
- [Consumer Safety Guides](https://scambaba.com/guides/): How to spot, report and recover from common scams.
- [Data Breach Tracker](https://scambaba.com/breaches/): Breaches, ransomware attacks and leaks, with confirmed vs claimed status, follow-up scams and what to do.
- [Full report text](https://scambaba.com/llms-full.txt): Every report's summary, red flags and FAQs in one plain-text file.

## Guides
- [How to Spot a Phishing Message](https://scambaba.com/guides/phishing-messages/): Unexpected text or email asking you to click, pay, sign in, or share a code? Use this checklist before you respond.
- [Unpaid Toll and Missed Delivery Text Scams](https://scambaba.com/guides/toll-and-delivery-text-scams/): A text says you owe a toll or a parcel is stuck. How to tell a fake from the real thing without tapping the link.
- [How to Spot a Crypto Investment Scam](https://scambaba.com/guides/investment-scams/): Investment fraud is the costliest scam type. Learn the signs of fake trading platforms and "pig butchering" before you deposit.
- [How to Spot a Romance Scam](https://scambaba.com/guides/romance-scams/): An online match who cannot meet, needs money, or wants to teach you to trade crypto. The warning signs, stage by stage.
- [Government Impersonation Scams](https://scambaba.com/guides/government-impersonation-scams/): Callers posing as tax, police, court or benefits officials. What real agencies will never ask you to do.
- [Tech Support Scams](https://scambaba.com/guides/tech-support-scams/): A pop-up says your computer is infected, or "support" calls you. How to close it safely and what to do if you let them in.
- [AI Voice Clone and Deepfake Scams](https://scambaba.com/guides/ai-voice-clone-scams/): A call in a loved one’s voice asks for money fast. How cloned voices work and how a family safe word stops them.
- [How to Spot a Fake Online Store](https://scambaba.com/guides/online-shopping-scams/): Deep discounts, social media ads and sellers who want odd payment methods. Check a shop before you pay.
- [How to Spot a Job Scam](https://scambaba.com/guides/job-scams/): A job offer can sound exciting and still deserve a careful check. Learn the warning signs before sharing documents or money.
- [How to Handle Urgent Payment Requests](https://scambaba.com/guides/urgent-payment/): A caller, message, or online contact says you must pay immediately. Slow the moment down and verify the request.
- [What to Do After a Data Breach](https://scambaba.com/guides/data-breach-what-to-do/): Your details were in a breach. The steps to take today, this week and over the next year, in order.
- [Fund Recovery Scams](https://scambaba.com/guides/recovery-scams/): Someone offers to get your lost money back for a fee. Why that is usually a second scam, and where real help comes from.

## Categories
- [Crypto / Forex Scam](https://scambaba.com/directory/category/crypto-forex-scam/)
- [Clone Firm](https://scambaba.com/directory/category/clone-firm/)
- [Investment Scam](https://scambaba.com/directory/category/investment-scam/)
- [Romance Scam](https://scambaba.com/directory/category/romance-scam/)

## Latest breaches
- [AU Small Finance Bank Data Breach Claim (October 2026): What Was Claimed and What to Do](https://scambaba.com/breaches/au-small-finance-bank-data-breach-2026/): Claimed by attackers, unconfirmed, disclosed 2026-10-30. AU Small Finance Bank said on 30 October 2026 that it is investigating a possible data leak from a Salesforce-hosted platform holding limited vehicle loan data. A group calling itself ScarlettGroup claims it has KYC, PAN and Aadhaar records. The bank says core banking systems are not affected, and the claims are unverified.
- [Binance Hack (October 2026): What Was Stolen and What Users Should Do](https://scambaba.com/breaches/binance-hack-2026/): Under investigation, disclosed 2026-10-29. Binance confirmed a security incident on 29 October 2026 and paused deposits and withdrawals. Binance put the theft at about $6.3 billion and said it would cover all losses. Blockchain analysts attribute the attack to North Korea, but Binance has not.
- [Indodax Cyberattack Attempts (October 2026): Withdrawals Paused, What We Know](https://scambaba.com/breaches/indodax-cyberattack-2026/): Under investigation, disclosed 2026-10-29. Indodax, Indonesia's largest crypto exchange, suspended rupiah and crypto deposits and withdrawals on 29 October 2026 after detecting a significant increase in cyberattack attempts. CEO William Sutanto said on 30 October that no funds or customer data were lost and extra security layers were added. No reopening date had been given.
- [Polymarket DebugBear Script Attack (October 2026): Losses and What to Do](https://scambaba.com/breaches/polymarket-debugbear-script-incident-2026/): Under investigation, disclosed 2026-10-29. On 29 October 2026, malicious code served through a DebugBear monitoring script on Polymarket sold or moved logged-in traders' positions to an attacker's wallet. Polymarket paused trading, said a third-party provider was compromised, and pledged to reimburse affected traders. Loss figures are analyst estimates, not an official total.
- [Synology NAS Ransomware Campaign (October 2026): What Owners Should Do](https://scambaba.com/breaches/synology-nas-ransomware-campaign-2026/): Confirmed by the organization, disclosed 2026-10-29. On October 29, 2026, Synology warned that ransomware is hitting NAS devices running outdated DSM software and urged owners to update. Security firm 360 links cases to C3RB3R, which adds a .L0CK3D extension to files, though sources disagree on the entry point.
- [DMW Migrant Worker Database Backups Suspected Theft (October 2026): What We Know](https://scambaba.com/breaches/dmw-migrant-worker-database-theft-2026/): Under investigation, disclosed 2026-10-28. Security firm Hunt.io reported on 28 October 2026 that logs on an exposed server show 27 database backups tied to Philippine overseas worker systems, 68.8 GiB in total, were copied on 6 September. The National Privacy Commission is investigating with the Department of Migrant Workers. The contents have not been examined or confirmed.
- [DHS Employee Records Leak by DDoSecrets (October 2026): What We Know](https://scambaba.com/breaches/dhs-employee-records-leak-ddosecrets-2026/): Claimed by attackers, unconfirmed, disclosed 2026-10-28. On October 28, 2026, Distributed Denial of Secrets published data on more than 41,000 DHS employees and contractors that a hacktivist group provided. DHS had not responded to press requests in the reports reviewed, and Reuters verified only part of the dataset.
- [Convertr Checkout Skimmer in Brazil (October 2026): What Was Exposed and What to Do](https://scambaba.com/breaches/convertr-checkout-skimmer-brazil-2026/): Under investigation, disclosed 2026-10-27. Security firm Sansec reported on 27 October 2026 that attackers altered an analytics script on Convertr's servers so it copied payment details typed at checkout. According to Sansec, Convertr removed the code and said it is notifying merchants and payment providers. No count of affected shoppers has been published, and BleepingComputer had no direct statement from Convertr.
- [Sony So-net Data Breach (October 2026): What Was Exposed and What to Do](https://scambaba.com/breaches/sony-so-net-data-breach-2026/): Confirmed by the organization, disclosed 2026-10-27. Sony Network Communications said an unauthorized third party accessed the So-net member database on 19 October 2026. About 2.58 million member records were exposed, and passwords for 54,401 email accounts were taken. The company has reset those passwords and reported the breach to Japan's privacy regulator.
- [GMO Internet Onamae Desktop Cloud Extortion (October 2026): Customer Guide](https://scambaba.com/breaches/gmo-internet-onamae-desktop-cloud-extortion-2026/): Confirmed by the organization, disclosed 2026-10-26. GMO Internet Group said attackers broke into its Onamae Desktop Cloud service in October 2026 and demanded about 8 billion yen (roughly $50 million). The company refused to pay. Attackers then published data that GMO says it is verifying.
- [Grupo Xcaret Data Breach (October 2026): Emails and Phones of 8,300 Customers](https://scambaba.com/breaches/grupo-xcaret-data-breach-2026/): Confirmed by the organization, disclosed 2026-10-24. Grupo Xcaret said records from 21 October 2026 in its park sales systems were accessed without authorization, exposing contact details of about 8,300 customers. The company says no bank or card data was taken and warns that fraudsters may send fake payment requests for reservations.
- [Amadeus Airline Booking Breach (October 2026): Korean Air, Asiana and JAL](https://scambaba.com/breaches/amadeus-korean-air-asiana-jal-data-breach-2026/): Confirmed by the organization, disclosed 2026-10-23. Korean Air and Asiana said on 23 October 2026 that customer reservation data leaked from Amadeus, the airline IT provider. On 28 October JAL and JTA said about 92,000 of their customers' bookings were also viewed. Payment card numbers and passwords were not exposed, the airlines say.
- [Navigate360 Crime Stoppers Tips Breach (October 2026): What Was Exposed and What to Do](https://scambaba.com/breaches/navigate360-crime-stoppers-tips-breach-2026/): Confirmed by the organization, disclosed 2026-10-23. Navigate360 acknowledged on October 23, 2026 that hackers broke into one of its systems and copied months of data, seven months after a hacktivist group claimed to have stolen millions of crime tips from its P3 Global Intel platform. The company says names, addresses, dates of birth and Social Security numbers may have been exposed.
- [Rand Mutual Assurance Breach Claim (October 2026): What We Know So Far](https://scambaba.com/breaches/rand-mutual-assurance-breach-claim-2026/): Claimed by attackers, unconfirmed, disclosed 2026-10-23. Rand Mutual Assurance said on 23 October 2026 it had received a cyber security alert that is under investigation. A threat actor claims to have stolen 366GB, including about 1.68 million claim records, and says it will release them after 5 November unless paid US$95,000. RMA has not confirmed any data was taken.
- [Capcom ID Data Breach (October 2026): 11.7 Million Accounts Affected](https://scambaba.com/breaches/capcom-id-data-breach-2026/): Confirmed by the organization, disclosed 2026-10-22. Capcom confirmed that a third party accessed 11,774,247 CAPCOM ID records after it detected suspicious activity on October 19, 2026. The records mostly hold email addresses and login metadata. Capcom says card data was not affected and found no evidence customer passwords were stolen.
- [Quest Diagnostics Data Breach (October 2026): What Was Exposed and What to Do](https://scambaba.com/breaches/quest-diagnostics-quanum-lsm-breach-2026/): Confirmed by the organization, disclosed 2026-10-22. Quest Diagnostics disclosed in an SEC filing on October 22, 2026 that an unauthorized party accessed its Quanum Lab Services Manager system, which clients use to order tests and look up results. The company says certain patient records were accessed, has not said how many people or what data, and says operations were not materially disrupted.
- [DNC Sağlık Hizmetleri Ransomware Attack (October 2026): What We Know](https://scambaba.com/breaches/dnc-saglik-ransomware-attack-2026/): Confirmed by authorities, disclosed 2026-10-21. Turkey's data protection authority (KVKK) published a notice on 21 October 2026 saying ransomware had encrypted the database of DNC Sağlık Hizmetleri, a private health provider in Çankaya, Ankara. Staff found a Turkish ransom note on a server screen. The number of people affected is not yet known.
- [Güllüoğlu Data Breach (October 2026): What Was Exposed and What to Do](https://scambaba.com/breaches/gulluoglu-data-breach-2026/): Confirmed by authorities, disclosed 2026-10-21. On 21 October 2026 Turkey's data protection authority (KVKK) published a notice saying an outside party reached a server run by a Güllüoğlu service provider. The data of 67,193 people was affected, including names, phone numbers, emails, addresses and stored passwords. The company learned of it on 8 October.
- [Kurukahveci Mehmet Efendi Data Breach (October 2026): What to Do](https://scambaba.com/breaches/mehmet-efendi-data-breach-2026/): Confirmed by authorities, disclosed 2026-10-21. Turkey's data protection authority (KVKK) published a notice on 21 October 2026 saying an attacker reached a server run by a processor for coffee brand Kurukahveci Mehmet Efendi. Up to 15,303 customers and 18 admin panel accounts were affected, and the breach was confirmed on 7 October after the processor notified the company.
- [Rajasthan Police Data Breach Claim (October 2026): What We Know](https://scambaba.com/breaches/rajasthan-police-data-breach-2026/): Under investigation, disclosed 2026-10-21. A group calling itself ScarlettGroup claimed on 21 October 2026 that it had breached Rajasthan Police and put the data up for sale. A senior cybercrime officer has said the state received information that the group obtained data from several government departments, and personnel were told to change email passwords. The size and authenticity of the data have not been confirmed.
- [Richmond Public Schools Ransomware Attack (October 2026): What We Know](https://scambaba.com/breaches/richmond-public-schools-ransomware-2026/): Under investigation, disclosed 2026-10-21. Richmond Public Schools in Virginia shut off internet access across its campuses on October 21, 2026 after ransom messages appeared on staff laptops. The district has not confirmed ransomware or data theft and says it is working with outside experts and law enforcement.
- [State Bank of India Dark Web Data Exposure (October 2026): What We Know](https://scambaba.com/breaches/state-bank-of-india-dark-web-data-exposure-2026/): Under investigation, disclosed 2026-10-21. On October 21, 2026, State Bank of India told stock exchanges it was alerted, including by CERT-In, to suspected customer data on the dark web. A preliminary review found 3,897 customer records. SBI says it has not yet verified the data's authenticity or source.
- [California Student Data Breach via ETS (October 2026): What Was Exposed and What to Do](https://scambaba.com/breaches/california-student-data-ets-breach-2026/): Confirmed by the organization, disclosed 2026-10-16. The California Department of Education said on October 16, 2026 that an unauthorized party copied student data from a file transfer site run by its testing contractor, Educational Testing Service (ETS), between May 22 and September 18. The state says Social Security numbers and financial information were not involved and that no evidence of public release has been found.
- [Poole Group Ransomware Attack (October 2026): What We Know](https://scambaba.com/breaches/poole-group-lockbit-ransomware-2026/): Under investigation, disclosed 2026-10-15. Poole Group, a Sunshine Coast accounting and advisory firm, said it is responding to a cyber incident after the LockBit ransomware gang listed it on its leak site with a countdown to 25 October 2026. The firm says it has contained the incident and told the OAIC, the ACSC and the ATO.
- [SourceNext Data Breach (October 2026): 22.5 Million Records, Passwords Included](https://scambaba.com/breaches/sourcenext-data-breach-2026/): Confirmed by the organization, disclosed 2026-10-15. SourceNext, the Japanese software seller, said on 15 October 2026 that a third party misused its member information API and may have taken 22,519,960 records. The company says credit card data was not stored in the affected system.
- [Colmobil Cyberattack (October 2026): Reported Ransomware, What We Know](https://scambaba.com/breaches/colmobil-ransomware-attack-2026/): Confirmed by the organization, disclosed 2026-10-14. Colmobil, which imports Mercedes-Benz, Hyundai, Mitsubishi, ORA and Jaecoo cars in Israel, said on 14 October 2026 that it had detected a security incident. Calcalist later reported, citing unnamed sources, that the ransomware group SETTRA was behind it and had threatened to publish customers' personal details. Colmobil has not confirmed that. It says it has returned to full operation and that no information has been exposed publicly.
- [Notebooksbilliger.de Data Breach (October 2026): What Was Exposed and What to Do](https://scambaba.com/breaches/notebooksbilliger-data-breach-2026/): Confirmed by the organization, disclosed 2026-10-14. Notebooksbilliger.de emailed customers on 14 October 2026 to say criminals had attacked its IT systems and that customer data was affected. It has not confirmed that data actually left its systems. The company later put the number of affected customers at a mid five-digit figure and says passwords are not affected.
- [Offerz Data Breach (October 2026): What Was Exposed and What to Do](https://scambaba.com/breaches/offerz-data-breach-2026/): Confirmed by the organization, disclosed 2026-10-14. Offerz, a Swiss online shop for gift cards and vouchers, said attackers got into a test environment on the night of 7 October 2026 that held a file of January 2026 order data for about 115,000 customers. The company cannot confirm the data was copied but assumes it was, and says passwords and card data were not in the file.
- [Ticketmaster Brasil Data Incident (October 2026): What Was Exposed and What to Do](https://scambaba.com/breaches/ticketmaster-brasil-data-incident-2026/): Confirmed by the organization, disclosed 2026-10-14. Ticketmaster Brasil began emailing customers on 14 October 2026 about a security incident involving a third-party data analysis tool. It says passwords and full card numbers were not involved, and that it has reported the case to the ANPD.
- [Ampath Laboratories Data Breach (October 2026): What We Know About the 80 Million Claim](https://scambaba.com/breaches/ampath-laboratories-cyberattack-2026/): Confirmed by the organization, disclosed 2026-10-13. Ampath said it was hit by a cyberattack on 2 October 2026 and that a web server was accessed. A group called ByteToBreach claims it copied 80 million patient records, but Ampath says that figure counts database entries and that it has no evidence that test results or diagnoses were taken.
- [French Supermarkets Refrigeration Cyberattack (October 2026): What We Know](https://scambaba.com/breaches/french-supermarkets-refrigeration-cyberattack-2026/): Confirmed by authorities, disclosed 2026-10-13. On the night of October 11 to 12, 2026, attackers altered refrigeration controls at hundreds of French supermarkets, including Intermarché, Carrefour and E.Leclerc stores. French authorities say the attacker is unknown, and no customer data has been reported exposed.
- [Ginno Sara Ransomware Attack (October 2026): Up to 6.5 Million Customers](https://scambaba.com/breaches/ginno-sara-ride-on-express-ransomware-2026/): Confirmed by the organization, disclosed 2026-10-13. Ride On Express Holdings said on 13 October 2026 that the server company hosting registration data for Ginno Sara, Kamatora and Sushi Jotatsu was hit by ransomware. Up to about 6.5 million records may have leaked, and online ordering is still suspended.
- [Icon Cancer Centre Data Breach (October 2026): What Patients Should Know](https://scambaba.com/breaches/icon-cancer-centre-data-breach-2026/): Confirmed by the organization, disclosed 2026-10-12. Icon Oncology Group, which runs the Icon Cancer Centre network, said on 12 October 2026 that someone accessed patient information held on a supplier's system. A hacker using the name '2019' says they hold more than 31,000 documents and is selling them, a claim Icon has not confirmed.
- [Ricardo Data Breach (October 2026): What Was Exposed and What to Do](https://scambaba.com/breaches/ricardo-data-breach-2026/): Confirmed by the organization, disclosed 2026-10-09. Ricardo, the Swiss online marketplace owned by SMG Swiss Marketplace Group, said it noticed suspicious activity on 7 October 2026 and that personal data from about 890,000 accounts was accessed. The company says email addresses and passwords were not affected and that no ransom demand has been made.
- [Daiichikosho Data Breach (October 2026): Big Echo and DK Dining Customers](https://scambaba.com/breaches/big-echo-daiichikosho-data-breach-2026/): Under investigation, disclosed 2026-10-08. Daiichikosho, operator of Big Echo karaoke and DK Dining, said on 8 October 2026 that malware on one PC at its contractor Nippon Columbia Group may have exposed about 8.72 million records. The company has not confirmed that data actually left the PC.
- [Lawson ID Data Breach (October 2026): 2.15 Million Accounts Exposed](https://scambaba.com/breaches/lawson-id-data-breach-2026/): Confirmed by the organization, disclosed 2026-10-08. Lawson announced on 8 October 2026 that unauthorized access to Lawson ID and the Lawson app reservation service exposed 2,155,345 ID records. A further 26 reservation records included names, phone numbers and partial card numbers.
- [Tabung Haji Cyberattack (October 2026): What We Know and What Depositors Should Do](https://scambaba.com/breaches/tabung-haji-cyberattack-2026/): Confirmed by the organization, disclosed 2026-10-08. Lembaga Tabung Haji (TH) halted its systems and services across all channels on 8 October 2026 after a cyberattack. TH says depositors' savings are safe, has lodged a police report and notified NACSA and the Personal Data Protection Department. Most services were back by 12 October, and TH has not said whether personal data was taken.
- [Publica Pension Fund Supplier Cyberattack (October 2026): What We Know](https://scambaba.com/breaches/publica-pk-softech-cyberattack-2026/): Confirmed by authorities, disclosed 2026-10-08. The Swiss federal government confirmed on 8 October 2026 that data left the systems of an external software supplier to the federal pension fund Publica after a cyberattack in late September. Netzwoche reports the ransomware group Akira is behind it and that more than 100,000 current and former federal staff may be affected.
- [Pathao Data Breach (October 2026): What Was Exposed and What to Do](https://scambaba.com/breaches/pathao-data-breach-2026/): Confirmed by the organization, disclosed 2026-10-07. Pathao detected a cyberattack on 4 October 2026 and on 7 October confirmed that attackers obtained names, email addresses and phone numbers. It affected operations in Bangladesh and Nepal. Attackers claim 133 GB and 19 million users and demand USD 400,000, which Pathao says it has not verified.
- [Yıldız Technical University Ransomware Attack (October 2026): What We Know](https://scambaba.com/breaches/yildiz-technical-university-ransomware-2026/): Confirmed by authorities, disclosed 2026-10-07. Turkey's Personal Data Protection Authority (KVKK) announced on 7 October 2026 that ransomware had hit the virtualization infrastructure of Yıldız Technical University in Istanbul. About 140,000 students and 4,500 staff may be affected. The university says its logs show no data left its network, but the data categories at risk have not been published.
- [ASOS Customer Data Breach (October 2026): What Was Exposed and What to Do](https://scambaba.com/breaches/asos-customer-data-breach-2026/): Confirmed by the organization, disclosed 2026-10-06. ASOS confirmed on 8 October 2026 that an unauthorized party impersonated a trusted contact to get an employee's login, then used it to reach customer data on third-party platforms. ASOS says payment card details and account passwords were not accessed. It has not said how many customers are affected.
- [OFX Cyber Incident (October 2026): What Was Accessed and What to Do](https://scambaba.com/breaches/ofx-cyber-incident-2026/): Confirmed by the organization, disclosed 2026-10-04. OFX Group, the Sydney-listed money transfer company, said in October 2026 that someone gained unauthorised access to data, including some client data and information about job applicants. OFX says its client platform databases were not accessed and it has found no unauthorised access to client accounts or funds.
- [Frontline Education Data Breach (October 2026): What Was Exposed and What to Do](https://scambaba.com/breaches/frontline-education-employee-data-breach-2026/): Confirmed by the organization, disclosed 2026-10-02. Frontline Education, which supplies administration software to U.S. school districts, says a vulnerability in a third-party application let attackers reach employee data including Social Security numbers, email addresses and home addresses. The company found the flaw on August 14, 2026 and notices reached districts in early October.
- [LDLC Data Breach (October 2026): What Was Exposed and What to Do](https://scambaba.com/breaches/ldlc-data-breach-2026/): Confirmed by the organization, disclosed 2026-10-02. LDLC emailed customers from 2 October 2026 to say a malicious actor gained access to one of its information systems and that some personal data could have been viewed. The retailer says passwords, bank details and card numbers were not affected, and it has told the CNIL.
- [Korean Bank and Financial Firm Hacks (October 2026): Shinhan, KB and 16 Others](https://scambaba.com/breaches/korea-financial-sector-hacks-shinhan-kb-2026/): Under investigation, disclosed 2026-10-01. Starting 1 October 2026, Shinhan, KB Kookmin, Hana, BNK Busan and several smaller Korean financial firms reported intrusions. Yonhap reports that 16 firms leaked about 100,000 records, and police have opened a preliminary investigation.
- [ZenTech Ransomware Attack (October 2026): Coroners Court Data Caught Up](https://scambaba.com/breaches/zentech-coroners-court-data-breach-2026/): Confirmed by the organization, disclosed 2026-09-10. On 27 October 2026 New Zealand's Ministry of Justice said some Coroners Court information was caught up in a cyber incident at Dunedin company Zenith Technology (ZenTech). The attack was claimed by a ransomware group, a High Court injunction bars anyone from using or publishing the data, and a small number of coronial cases have been delayed.
- [iRhythm Data Breach (October 2026): What Was Exposed and What to Do](https://scambaba.com/breaches/irhythm-patient-data-breach-2026/): Confirmed by the organization, disclosed 2026-06-15. iRhythm, the maker of the Zio cardiac monitor, says attackers used social engineering to reach third-party-hosted business applications between June 3 and June 8, 2026 and demanded payment not to publish the data. Patient notification letters began on October 2, and the company says payment card and financial account details were not involved.

## Latest risk reports
- [Alis Capital Inc.](https://scambaba.com/directory/alis-capital-inc/): Critical Risk (8.5/10), verified 2026-10-24. The CFTC added Alis Capital Inc. to its RED List in July 2022 as an entity that is not registered with the Commission but appears to be acting in a capacity that requires registration. Treat it as unregistered and high risk.
- [Alliance Limited](https://scambaba.com/directory/alliance-limited-alliancelimited-org/): Critical Risk (9.5/10), verified 2026-10-24. ASIC's January 2021 crypto scam alert says Alliance Limited's website misleads crypto investors, shows ASIC's logo, and that consumers could not get their money back after investing.
- [appasiccoin.org](https://scambaba.com/directory/appasiccoin-org/): Critical Risk (9/10), verified 2026-10-24. ASIC warned in October 2022 that appasiccoin.org uses crypto to scam Australians and falsely claims ASIC endorsement. ASIC's advice is not to invest in the product.
- [Astro CryptoFX Trade (www.astrocrypttrade.online)](https://scambaba.com/directory/astro-cryptofx-trade/): High Risk (7/10), verified 2026-10-24. The FCA has warned that Astro CryptoFX Trade (www.astrocrypttrade.online) is not authorised and may be offering financial services in the UK without permission. Avoid dealing with it and check any firm on the FCA Register first.
- [Beurax Corporation Pty Ltd (beurax.com)](https://scambaba.com/directory/beurax-corporation/): Critical Risk (9.5/10), verified 2026-10-24. ASIC alerted investors in March 2021 to Beurax Corporation Pty Ltd and beurax.com, saying investors cannot withdraw and the firm stopped communicating, and advising not to send further funds.
- [Bit-Finance](https://scambaba.com/directory/bit-finance/): Critical Risk (8.5/10), verified 2026-10-24. BCSC warned on 2021-07-09 that Bit-Finance (bit-finance.io), which says it is UK-based and offers forex, commodity, stock index and crypto trading accounts, is not registered to trade or advise in BC.
- [Bitwaxtrade](https://scambaba.com/directory/bitwaxtrade/): Critical Risk (8.5/10), verified 2026-10-24. BCSC warned on 2021-10-13 that Bitwaxtrade (bitwaxtrade.net), claiming a New Zealand base and a Liverpool, UK office, offers crypto and forex accounts and is not registered to trade or advise in BC.
- [Blockaid-rec / REC Solution (clone firm)](https://scambaba.com/directory/blockaid-rec-rec-solution/): Critical Risk (9/10), verified 2026-10-24. The FCA has warned that Blockaid-rec / REC Solution is not authorised and is a clone of an authorised firm, Exodus Financial Services Limited. Do not deal with it; verify firms via the FCA Firm Checker.
- [BVX](https://scambaba.com/directory/bvx/): High Risk (7/10), verified 2026-10-24. BCSC lists BVX (bvxtrade.com) on its Investment Caution List, entry dated 2025-07-21, saying the company is not registered with the BCSC and urging extreme caution before sending any money.
- [www.cambridgeassetmanagement.com](https://scambaba.com/directory/cambridge-asset-management-website/): Critical Risk (9.5/10), verified 2026-10-24. ASIC's alert tells consumers not to deal with www.cambridgeassetmanagement.com, allegedly run by a Hong Kong entity, and says Australians have reported being unable to withdraw invested money.
- [certifiedcryptoexpert.net / lawfinancialservices.com / adviceoffice.net / currencycertified.com (clone firm)](https://scambaba.com/directory/certifiedcryptoexpert-lawfinancialservices-adviceoffice-currencycertified/): Critical Risk (9/10), verified 2026-10-24. The FCA has warned that certifiedcryptoexpert.net / lawfinancialservices.com / adviceoffice.net / currencycertified.com is not authorised and is a clone of an authorised firm, Law Financial Services Ltd, an authorised firm. Do not deal with it; verify firms via the FCA Firm Checker.
- [CoinW6](https://scambaba.com/directory/coinw6/): Critical Risk (9.5/10), verified 2026-10-24. The SEC charged CoinW6 in September 2024, alleging a fake crypto platform promoted through relationship-building contacts, with fictitious balances and demands for extra payments when investors tried to withdraw.
- [cp-group.cc (clone firm)](https://scambaba.com/directory/cp-group-cc/): Critical Risk (9/10), verified 2026-10-24. The FCA has warned that cp-group.cc is not authorised and is a clone of an authorised firm, Clearpath Financial Ltd. Do not deal with it; verify firms via the FCA Firm Checker.
- [CreditEUBank](https://scambaba.com/directory/crediteubank/): Critical Risk (8.5/10), verified 2026-10-24. BCSC warned on 2021-07-06 that CreditEUBank (crediteubank.com) claims to offer investment plans for trading cryptocurrencies, accepts BC clients and is not registered to trade or advise in BC.
- [Cryptobase](https://scambaba.com/directory/cryptobase/): Critical Risk (8.5/10), verified 2026-10-24. BCSC warned on 2021-07-27 about Cryptobase (cryptobase.team), which claims to be based in the UK and US and to offer crypto mining and trading investment plans, and is not registered to trade or advise in BC.
- [Cryptospair](https://scambaba.com/directory/cryptospair/): Critical Risk (8.5/10), verified 2026-10-24. BCSC warned on 2023-03-23 that Cryptospair, at Cryptospair.com, presents itself as an online crypto trading platform, accepts BC residents and is not registered in BC to trade in or advise on securities or derivatives.
- [CSE](https://scambaba.com/directory/cse-cseso-com/): Critical Risk (8.5/10), verified 2026-10-24. BCSC warned on 2023-11-22 that cseso.com, trading as CSE, runs a crypto trading platform for BC residents without exchange recognition or dealer registration. It says CSE has no relation to the Canadian Securities Exchange.
- [Digital FX Market](https://scambaba.com/directory/digital-fx-market/): Critical Risk (8.5/10), verified 2026-10-24. BCSC warned on 2021-10-13 that Digital FX Market (digitalfxmarket.com), claiming to be based in Toronto, Ontario and to offer crypto and forex accounts, is not registered to trade or advise in BC.
- [EQXE](https://scambaba.com/directory/eqxe/): High Risk (7/10), verified 2026-10-24. BCSC lists EQXE (eq-xe.io) on its Investment Caution List, entry dated 2025-07-28, stating the company is not registered with the BC Securities Commission and advising extreme caution before sending money.
- [FairPCP (clone firm)](https://scambaba.com/directory/fairpcp/): Critical Risk (9/10), verified 2026-10-24. The FCA has warned that FairPCP is not authorised and is a clone of an authorised firm, Bamboo Marketing NW Limited. Do not deal with it; verify firms via the FCA Firm Checker.
- [FOREX COIN INVESTMENT](https://scambaba.com/directory/forex-coin-investment/): High Risk (7/10), verified 2026-10-24. The FCA has warned that FOREX COIN INVESTMENT is not authorised and may be offering financial services in the UK without permission. Avoid dealing with it and check any firm on the FCA Register first.
- [Forex-gpt.com](https://scambaba.com/directory/forex-gpt-com/): High Risk (7/10), verified 2026-10-24. The FCA has warned that Forex-gpt.com is not authorised and may be offering financial services in the UK without permission. Avoid dealing with it and check any firm on the FCA Register first.
- [fortradelimited.com (clone firm)](https://scambaba.com/directory/fortradelimited-com/): Critical Risk (9/10), verified 2026-10-24. The FCA has warned that fortradelimited.com is not authorised and is a clone of an authorised firm, Fortrade Limited. Do not deal with it; verify firms via the FCA Firm Checker.
- [FXBrew](https://scambaba.com/directory/fxbrew/): Critical Risk (8.5/10), verified 2026-10-24. The CFTC added FXBrew to its RED List in July 2022 as an entity that is not registered with the Commission but appears to be acting in a capacity that requires registration. Treat it as unregistered and high risk.
- [GA Investors](https://scambaba.com/directory/ga-investors/): Critical Risk (9.5/10), verified 2026-10-24. The SEC filed a fraud complaint in May 2023 against GA Investors and unnamed operators over dozens of websites allegedly promoting bogus crypto asset investments with guaranteed returns.
- [gsbcapital.pro (clone firm)](https://scambaba.com/directory/gsbcapital-pro/): Critical Risk (9/10), verified 2026-10-24. The FCA has warned that gsbcapital.pro is not authorised and is a clone of an authorised firm, GSB Capital Ltd. Do not deal with it; verify firms via the FCA Firm Checker.
- [Invictait.vip (clone firm)](https://scambaba.com/directory/invictait-vip/): Critical Risk (9/10), verified 2026-10-24. The FCA has warned that Invictait.vip is not authorised and is a clone of an authorised firm, Invicta Securities Limited. Do not deal with it; verify firms via the FCA Firm Checker.
- [limestonefx.com](https://scambaba.com/directory/limestonefx-com/): Critical Risk (9.5/10), verified 2026-10-24. ASIC issued a suspicious website alert for limestonefx.com in May 2021, saying it falsely claims association with Limestone FX Pty Ltd and that investors report being unable to withdraw.
- [m.bit-support-gemini.com](https://scambaba.com/directory/m-bit-support-gemini-com/): Critical Risk (8.5/10), verified 2026-10-24. BCSC warned on 2024-08-23 about m.bit-support-gemini.com, a site claiming to run a crypto trading platform for BC residents without recognition or registration. The notice says it has no relation to Gemini Trust Company, LLC.
- [m2recoveries.com / m2recovered.com / cryptoassetrecover.org / Reverse Funds (clone firm)](https://scambaba.com/directory/m2recoveries-m2recovered-cryptoassetrecover-reverse-funds/): Critical Risk (9/10), verified 2026-10-24. The FCA has warned that m2recoveries.com / m2recovered.com / cryptoassetrecover.org / Reverse Funds is not authorised and is a clone of an authorised firm, M2 Recovery Ltd. Do not deal with it; verify firms via the FCA Firm Checker.
- [NanoBit](https://scambaba.com/directory/nanobit/): Critical Risk (9.5/10), verified 2026-10-24. In September 2024 the SEC charged NanoBit Limited and others over an alleged fake crypto trading platform promoted in WhatsApp groups, alleging investors lost funds sent to overseas accounts.
- [Platinumx Trade](https://scambaba.com/directory/platinumx-trade/): Critical Risk (8.5/10), verified 2026-10-24. BCSC warned on 2021-08-16 that Platinumx Trade (platinumxtrade.com), which says it is US-based and offers crypto trading investment plans, accepts BC clients and is not registered to trade or advise in BC.
- [Prime Crypto FX](https://scambaba.com/directory/prime-crypto-fx/): Critical Risk (8.5/10), verified 2026-10-24. The CFTC added Prime Crypto FX to its RED List in July 2022 as an entity that is not registered with the Commission but appears to be acting in a capacity that requires registration. Treat it as unregistered and high risk.
- [ProfitsTrade Ltd.](https://scambaba.com/directory/profitstrade-ltd/): Critical Risk (8.5/10), verified 2026-10-24. BCSC warned on 2021-07-27 that ProfitsTrade Ltd. (profitstrade.com), claiming to be in Dominica and to offer forex, index, crypto and commodity accounts, is not registered to trade or advise in BC.
- [Quanta North/quantanorth.com (clone firm)](https://scambaba.com/directory/quanta-north-quantanorth-com/): Critical Risk (9/10), verified 2026-10-24. The FCA has warned that Quanta North/quantanorth.com is not authorised and is a clone of an authorised firm, North Asset Management LLP. Do not deal with it; verify firms via the FCA Firm Checker.
- [SageFX](https://scambaba.com/directory/sagefx/): Critical Risk (8.5/10), verified 2026-10-24. The CFTC added SageFX to its RED List in July 2022 as an entity that is not registered with the Commission but appears to be acting in a capacity that requires registration. Treat it as unregistered and high risk.
- [SPX Markets](https://scambaba.com/directory/spx-markets/): Critical Risk (8.5/10), verified 2026-10-24. BCSC warned on 2021-07-28 that SPX Markets (spxmarkets.com), claiming to be UK-based with crypto, stock, commodity and forex trading accounts, is not registered to trade or advise in BC.
- [The Crypto Invest](https://scambaba.com/directory/the-crypto-invest/): High Risk (7/10), verified 2026-10-24. The FCA has warned that The Crypto Invest is not authorised and may be offering financial services in the UK without permission. Avoid dealing with it and check any firm on the FCA Register first.
- [themoneycompass.net (clone firm)](https://scambaba.com/directory/themoneycompass-net/): Critical Risk (9/10), verified 2026-10-24. The FCA has warned that themoneycompass.net is not authorised and is a clone of an authorised firm, Money Compass Limited. Do not deal with it; verify firms via the FCA Firm Checker.
- [Trade the Bit](https://scambaba.com/directory/trade-the-bit/): Critical Risk (8.5/10), verified 2026-10-24. BCSC warned on 2021-09-14 that Trade the Bit (tradethebit.com), offering accounts for stocks, crypto, forex, indices and commodities, accepts BC clients and is not registered to trade or advise in BC.
- [United Solar Investment](https://scambaba.com/directory/united-solar-investment/): Critical Risk (9/10), verified 2026-10-24. ASIC's March 2023 scam alert says not to deal with or transfer money to United Solar Investment, citing unrealistic returns, no AFS licence and classic pyramid scheme signs.
- [VXBANC](https://scambaba.com/directory/vxbanc/): High Risk (7/10), verified 2026-10-24. BCSC lists VXBANC (vxbanc.com) on its Investment Caution List, entry dated 2025-08-13, stating the company is not registered with the BC Securities Commission and advising extreme caution before paying anything.
- [Wolves Trade FX](https://scambaba.com/directory/wolves-trade-fx/): Critical Risk (8.5/10), verified 2026-10-24. The CFTC added Wolves Trade FX to its RED List in July 2022 as an entity that is not registered with the Commission but appears to be acting in a capacity that requires registration. Treat it as unregistered and high risk.
- [Yepbit and Yepbit Exchange](https://scambaba.com/directory/yepbit/): Critical Risk (9.5/10), verified 2026-10-24. ASIC warns against dealing with Yepbit and Yepbit Exchange after reports that investors cannot withdraw funds, and says the firm's claim that ASIC froze funds is false.

## Optional
- [About](https://scambaba.com/about/)
- [Editorial policy](https://scambaba.com/editorial-policy/)