The U.S. Securities and Exchange Commission (SEC) has filed charges against a network of cryptocurrency companies alleged to have orchestrated a sophisticated $14 million fraud. On Monday, the U.S. District Court for the State of Colorado received a lawsuit where regulators explained how a business used current techniques and technologies. These methods, such as artificial intelligence, deepfake technology, and encrypted messaging systems, allowed the perpetrator to take advantage of retail investors by using very specific information to exploit their vulnerabilities.
The SEC charged three purported trading platforms—Morocoin Tech, Berge Blockchain Technology, and Cirkor—alongside four so-called “investment clubs” including AI Wealth and Lane Wealth. The agency alleges these entities worked in concert to lure victims into a digital trap that ended with their life savings vanishing into overseas bank accounts.
The ‘Professor’ Was a Bot
According to the 29-page complaint, the scam began not with a cold call, but with social media advertisements inviting users to join exclusive “investment clubs” on WhatsApp. One an individual began to associate with these communities, it was clear that these people felt like they belonged to a larger community of similar investing interests led by knowledgeable investors. Additionally, in these communities were “professors” and “assistants” that provided ongoing daily updates about what was taking place in the economy and stock market. Additionally, those that run these groups allegedly created fake (deepfake) videos of well-known financial professionals to provide credibility so that victims felt that well-known trusted market voices endorsed their products. The professors provided investment recommendations based on advanced artificial intelligence technology that created an atmosphere of sophistication, which appealed to the victims searching for an advantage in the cryptocurrency marketplace.
The Illusion of Legitimacy
After trust was developed in the WhatsApp groups, the “professors” would ultimately direct members to shift their money into particular cryptocurrency exchange sites such as Morocoin, Berge and Cirkor – all of which were created to appear identical to real exchanges. They displayed real-time price feeds for various assets and showed users rapid, profitable trades. The operators even offered “Security Token Offerings” (STOs), claiming they were akin to initial public offerings for high-tech companies.
However, the SEC alleges it was all smoke and mirrors. The trading platforms were fake, the “government licenses” displayed on their websites were forged, and the STOs did not exist. The profits users saw on their screens were nothing more than digital fiction designed to encourage larger deposits.
The Freeze Out
The scheme followed the classic playbook of what law enforcement calls “pig butchering” scams—fattening the victim’s account with fake gains before going in for the kill.
Once funds had been deposited into the platforms by investors and they began to withdraw their profits, operators changed their tactics and began telling investors that in order to access the funds, they had to pay large amounts of taxes or fees for verification. Many victims, feeling lost and hoping to retrieve their money, paid these fees, only to be ghosted by the platform administrators.
The extent of the theft is described in the complaint with a powerful example of one investor who used the platform. The investor sent seven separate wire transfers to the platforms of over $1 million total to multiple accounts in China and Hong Kong from the Morocoin platform. Another victim wired over $1.4 million to a bank in Indonesia, believing he was providing funds for a rapidly-expanding crypto portfolio.
Following the Money Trail
The theft of $14 million was tracked by investigators through complex crypto wallets located overseas, primarily in Southeast Asia, along with numerous bank accounts which are similarly dispersed around the world. The SEC reported that the services for these fraudulent asset-recovery websites came from China and Malaysia, making recovery of the funds even more challenging.
“This matter highlights an all-too-common form of investment scam that is being used to target U.S. retail investors with devastating consequences,” said Laura D’Allaird, chief of the Cyber and Emerging Technologies Unit at the SEC.
A Wider War on Digital Fraud
The charges against Morocoin and its affiliates are part of a broader federal crackdown on Southeast Asia-based scam compounds. These industrial-scale fraud operations have stolen billions from Americans in recent years, often using forced labor to man the keyboards in countries like Myanmar, Cambodia, and Laos.
Just last month, the U.S. government announced the creation of a multi-department strike force dedicated to targeting these cyber scam centers. While the SEC’s civil charges seek penalties and disgorgement from the corporate entities, the action serves as a stark warning: in the era of AI and deepfakes, seeing should no longer be believing.
