10 New Stock & Crypto Scams Raising Red Flags Now

The past 24 hours have brought several fresh reports about alleged stock and crypto fraud across India, the United States and Europe. The cases differ in size and method, but many follow a similar pattern. A person is first shown a credible-looking investment opportunity. Trust then grows through WhatsApp, social media, fake trading apps, online groups or people who claim to have financial expertise. The victim is later asked to transfer more money, while the screen may show profits that cannot be withdrawn.

The cases below should be read as reported allegations, police findings or victim accounts. An arrest is not proof of guilt, and an allegation is not a final court finding. Some figures are also estimates from investigators or media reports rather than amounts confirmed by a court.

Case	Reported amount	Main method	Status reported
UP stock-training fraud	₹7.29 crore	Fake stock education and investment offers	Suspect arrested
Fake Claude trading bot	$517,000	Malicious smart contracts through YouTube tutorials	Blockchain investigation
Bengaluru investment fraud	₹93.58 lakh	WhatsApp group and mule bank accounts	Three arrests
Fake IPO scheme	₹1.3 crore	WhatsApp, fake wealth app and IPO claims	Police investigation
SD Pay case	More than ₹2,000 crore	Digital wallet and MLM-style scheme	Investigation
Fake EURC payments	Amount not stated	Counterfeit crypto used for Rolex purchases	Two suspects arrested
Fake crypto platform	$1.1 million	Foreign platform and claimed high returns	Victim report
Fetch.ai/NuNet/SingularityNET exploit	About $1.9 million realised	Bridge and token contract exploit	Investigation
EvilTokens	Loss figure not stated	AI-assisted phishing infrastructure	Microsoft disruption
Bengaluru mule-account network	₹93.58 lakh case value	507+ suspected mule accounts	Three arrests

1. ₹7.29 crore stock fraud case in Uttar Pradesh

The Uttar Pradesh Special Task Force has arrested a 37-year-old man, Vivek Kumar Singh, in a cyber fraud case that police place at ₹7.29 crore. According to the Times of India report, victims were allegedly attracted through false stock-market training offers. The case was registered at the Cyber Crime Police Station in Lucknow. Police describe Singh as a primary suspect in the alleged operation.

The important point here is the use of education as the first layer of trust. A person may be more willing to transfer money after a service presents itself as a stock-market training programme rather than a direct investment request. That does not by itself prove that every stock course or trading education service is fraudulent. The concern arises when education becomes a route to demands for money, access to accounts or deposits into unknown platforms.

The case also shows why investors should separate a genuine education service from a regulated investment service. A person who teaches market concepts does not automatically have authority to manage investments or accept trading funds.

2. Fake Claude trading bot allegedly takes $517,000

One of the more unusual crypto cases involves fake YouTube tutorials that claimed to show viewers how to build an automated trading bot with Anthropic’s Claude. TRM Labs identified nine similar videos. The campaign allegedly caused losses of about 274.6 ETH, valued at roughly $517,000 at the time of the transfers, across 224 victims. The median loss was about 1 ETH.

The key detail is that Claude itself was not involved. TRM Labs found no Claude functionality in the malicious contracts. The name was allegedly used as marketing bait. The videos reportedly used AI-generated presenters, cloned voices, similar scripts and fake testimonials. Together, the identified videos had more than 310,000 views.

The method was different from a normal phishing attack. Victims were allegedly persuaded to create and fund smart contracts themselves. Fake compiler sites that looked similar to Ethereum’s Remix tool formed part of the process. This made the transactions appear to be authorised by the users.

For investors, the lesson is simple: a video that looks technical is not proof that the code is safe. A popular AI brand is also not proof that a tool has any connection with that company.

3. Bengaluru case exposes 507 suspected mule accounts

Bengaluru police have arrested three men in an alleged online investment fraud case after a resident reported a loss of ₹93.58 lakh. The investigation reportedly uncovered more than 507 suspected mule bank accounts. Police said the accounts included personal, corporate and trust accounts.

According to police accounts reported by the media, the victim first entered a WhatsApp investment group. He was asked to open a demat account and initially put in ₹50,000. The total amount later reached ₹93.58 lakh, but the promised returns were not provided.

Investigators also allege that account holders were offered commissions for access to bank accounts, SIM cards and online banking credentials. Police said certain Android applications, including one called ZNPAY, and SMS-forwarding APK files were used to obtain banking messages and one-time passwords.

The investigation reportedly found links to more than 507 accounts and more than 51 APK files. Police also said some of the accounts had links to cybercrime cases in several Indian states. A crypto trail was also identified, with investigators tracing some funds toward a Binance wallet.

The case matters because it shows how an investment scam can depend on a larger financial network. The victim may see only one bank account or one app. Behind it, investigators may find many accounts, devices, SIM cards and crypto wallets.

4. ₹1.3 crore loss in an alleged fake IPO scheme

A 55-year-old Bengaluru private-sector employee reportedly lost almost ₹1.3 crore in a scheme that promised IPO access and returns of up to 980%. The reported fraud took place between July 7 and September 4, 2026.

According to the complaint described by the Times of India, people contacted the victim through WhatsApp. They allegedly claimed to represent financial professionals and created a WhatsApp group called “D036 Julius Baer Wealth.” The victim was then introduced to a supposed institutional investment programme and asked to use an application called “JB X One.”

The use of a recognised financial name is important, but it does not establish a real connection with that institution. Criminal groups can copy company names, logos, employee profiles and other public information.

The reported return claim of 980% is also a major warning sign. High returns are not automatically proof of fraud, but extraordinary promises deserve independent verification before any payment takes place.

5. SD Pay investigation rises above ₹2,000 crore

A report from Ahmedabad Mirror says the investigation into the alleged SD Pay scam has expanded sharply. Police initially estimated about 3.15 lakh victims and ₹635 crore in suspected fraud. After investigators accessed additional system data, the reported victim count rose to 15,00,770, while the possible amount involved rose to more than ₹2,000 crore.

The report says the scheme was presented as a digital-wallet service but, according to police, operated as a multilevel marketing structure. Users were allegedly attracted by a promise of 9% monthly cashback on wallet balances. The investigation has reportedly spread across six states, including Gujarat.

These figures remain part of an investigation. They should not be treated as final losses until authorities complete their work and the relevant legal process establishes the facts.

Still, the reported scale makes the case significant. A promise of fixed, very high monthly returns can create the appearance of a stable financial product even when the underlying business model may not support such payments.

6. Fake EURC allegedly used to obtain Rolex watches

Dutch police have arrested two men over an alleged crypto payment fraud involving Rolex watches. According to Dutch police, sellers on Marktplaats agreed to receive EURC, a legitimate cryptocurrency. The suspects allegedly used counterfeit tokens that appeared similar to real EURC.

One seller reportedly handed over a Rolex after seeing what appeared to be a crypto payment. When the seller later tried to convert the tokens into euros, they were found to have no value.

The case is different from a traditional investment scam because the target was the seller rather than an investor. Yet the basic weakness is similar: the victim trusted what appeared on a digital screen without independently confirming the actual value and authenticity of the asset.

Police said one suspect is 24 and the other is 45. One was ordered to remain in custody for 14 days, while the other was released but remained a suspect. The investigation continues.

7. Investor reports a possible $1.1 million crypto loss

A MarketWatch report describes the case of an investor who says he placed $1.1 million into a foreign crypto platform after a recommendation from someone who presented himself as an executive vice president at a major New York investment bank. The investor says the platform showed a balance that rose to about $2 million and was expected to reach $20 million.

The publication says the investor’s personal banker suspected that the people involved were scammers. MarketWatch also reported that online discussions about the platform alleged that displayed balances could be fictitious.

There is an important legal distinction here. The available report is based on an investor’s account and does not establish that the named or unnamed individuals committed fraud. The platform name and bank were withheld in the report. The reported facts therefore should be treated as an allegation and a warning case, not as a proven criminal finding.

The central risk is clear: a digital dashboard can show a large profit without proving that the money exists or that the investor can withdraw it.

8. About $1.9 million realised after a crypto bridge exploit

A separate crypto security case involves Fetch.ai, NuNet and SingularityNET. Altcoin Buzz reports that an attacker drained about 8.7 million FET from a Fetch.ai bridge and that roughly 2.3 billion tokens were minted across three related bridges. The report estimates about $1.9 million in realised proceeds, while about $16.77 million in tokens remained unsold at the cited point.

This is better described as a protocol exploit than an ordinary investor scam. That distinction matters. There is no evidence in the cited material that ordinary investors were directly deceived by a fake investment promise.

GoPlus Security attributed the incident to a compromised private key and weaknesses in token conversion controls. Fetch.ai also confirmed that it was aware of an exploit report and said its team was investigating.

For crypto holders, the event shows a different kind of risk. Even when a token is genuine and a project is real, weaknesses in bridges, administrator keys or smart contracts can create large losses.

9. Microsoft disrupts EvilTokens cybercrime service

Microsoft has also reported the disruption of EvilTokens, an AI-assisted cybercrime platform. Axios reports that Microsoft obtained court authority in the United States to disrupt infrastructure linked to the service. Microsoft estimated that the operation had compromised more than 12,000 email inboxes across 10,000 organisations.

EvilTokens reportedly used a subscription model, with a $1,500 start fee and a $500 monthly payment. The service allegedly used device-code phishing methods to gain access to Microsoft accounts.

This case is not itself a stock or crypto investment scam. It is relevant because stolen email accounts can become a route to financial fraud. Once criminals control an email account, they may impersonate employees, financial advisers or clients and attempt to redirect payments.

The case also shows that AI does not need to create a new type of fraud to increase risk. It can make existing fraud methods cheaper, faster or easier to scale.

10. What these cases show about the current scam model

Across the cases, the strongest common factor is not a particular cryptocurrency or stock. It is trust.

The alleged criminals often create trust before they ask for a large transfer. A WhatsApp group can create a sense of community. A fake financial adviser can create authority. A trading app can create the appearance of professional infrastructure. A familiar AI brand can make a technical tutorial appear credible. A fake account balance can make a victim believe that a previous deposit has already produced a large profit.

The numbers show the range of possible losses. One reported case involves ₹1.3 crore from a single victim. Another involves ₹93.58 lakh. The SD Pay investigation has a reported figure above ₹2,000 crore, although that figure remains under investigation. The fake Claude campaign reportedly affected 224 crypto wallets and caused about $517,000 in losses.

Warning sign	What it may mean
Very high or fixed returns	The offer may not match normal market risk
Pressure to act quickly	The person may want to prevent independent checks
WhatsApp-only investment contact	Identity and authorisation may be difficult to verify
Unknown trading application	The software may not be a genuine broker or exchange
Profits that cannot be withdrawn	The displayed balance may not represent real funds
Request for OTP or banking access	The account itself may be at risk
Crypto payment with no independent confirmation	The token or transaction may not be genuine
AI or celebrity branding	The brand name does not prove that the service is genuine
Requests to send money to many unrelated accounts	The structure may indicate a larger fraud network

What investors should take from the reports

The most useful lesson from these cases is that investors should verify the person, platform and payment route separately. A professional-looking app does not prove that the company behind it is legitimate. A person who claims to work for a bank should be checked through the bank’s official channels rather than through a phone number or profile supplied by that person.

The same rule applies to crypto. A wallet address, token name or transaction screen is not enough to establish that an asset has genuine value. The Dutch EURC case shows why a seller should verify the actual token and transaction rather than rely only on what appears on a phone screen.

The Bengaluru case adds another warning. Investors should never provide OTPs, banking credentials, SIM access or remote access to another person merely because that person promises investment profits. Police allege that such access played a role in the movement of money through hundreds of accounts.

Final assessment

The recent reports point to a fraud environment where technology is only one part of the problem. The deeper tactic is the creation of false confidence. Fraudsters may use investment education, IPO access, financial advisers, AI brands, crypto wallets, trading dashboards or digital payment systems to make the offer appear real.

At the same time, the cases should not be treated as proof that every online trading service, crypto platform, IPO offer or AI-based tool is fraudulent. Each case has its own facts, and several remain under police or technical investigation.

For investors, the safest approach is simple: verify before payment, treat extraordinary return promises with caution, confirm the identity of anyone who gives financial advice, use independently verified platforms, and never assume that a profit shown on an app is real until the money can actually be withdrawn.

The speed of digital finance can help legitimate investors, but it can also help alleged fraud networks move money across banks, wallets and borders very quickly. The cases reported during this period show why basic verification remains important even when an opportunity looks sophisticated.

ALSO READ: 7 Stocks That Stood Out: What This Report Reveals!