Supported by
CySEC warns against 10 sites that lack investment and cryptocurrency licenses
The Cyprus Securities and Exchange Commission (CSE) is warning against 10 websites offering or promoting cryptocurrency investments, currency trading, and services. The domains listed do not belong to entities that hold the required licenses to provide investment or cryptocurrency services.
The list includes amazon-forex.com, novatradecore.com, vall-fin.com, and fxtrade.app. CySEC recommends that before transferring money, always verify not only the company's name but also its exact website address in the official registry. Merely citing Cyprus, European regulations, or a supposed license number does not confirm the legality of the business.
The rest of the article is below
Ten domains under warning
The CySEC warning covers the following addresses:
- amazon-forex.com
- novatradecore.com
- vall-fin.com
- daoroyal.com
- capitaldealhub.com/AI_app_es
- digiteamagency.com/second-income/
- seamanfx.com
- newfuturevip.com
- trademarketcup.com
- fxtrade.app
The communication means that the parties are not affiliated with entities holding the authorisation required under Article 5 of the Cyprus Investment Services and Activities Law N. 87(I)/2017.
They are also not authorized to provide crypto-asset services under the EU MiCA regulation.
CySEC did not disclose who actually manages the domains in question, how many clients may have used them, or whether the commission has received any complaints about the loss of money.
Not having a license is not the same as being a fraud
It is important to make a precise distinction in the regulator's announcement.
CySEC informs that the above mentioned websites they do not belong to authorized entitiesHowever, the Commission does not label all of these sites as fraudulent and does not provide findings regarding possible criminal activity.
The lack of a license, however, means that investors should not assume that the platform's operations are supervised by the Cypriot regulator or that they are entitled to the protections applicable to clients of legally operating investment firms.
Also, don't rely solely on the website name. amazon-forex.com does not automatically imply a connection with the well-known global brand Amazon. CySEC has not confirmed such a connection.
The exact website address is particularly important
A legitimate investment firm may have a name similar to that of an unlicensed entity. There are also cases where an unauthorized party uses the name, address, or license number of a legitimate company.
Therefore, finding a company with a similar name in the register does not complete the verification.
It's important to verify that the domain name used by the investor matches the address provided by the regulator. It's also important to compare the phone number, email address, and physical address of the registered office.
If the seller claims to represent a company licensed in Cyprus, it is best to check the details yourself on the website www.cysec.gov.cy. Do not use a link sent in a message, advertisement, or by someone soliciting investment.
Warnings also appeared in other countries.
Some of the domains indicated by CySEC had already been the subject of warnings issued by foreign regulators.
The British Financial Conduct Authority issued a warning in June 2025 against Vallay Finance, an entity using the website vall-fin.comThe FCA has advised that the company may be offering financial products or services without the required authorisation in the UK.
The German regulator BaFin also reported on the same domain.
In turn, the Italian supervisory authority Consob ordered the blocking of access to the website in November 2025. novatradecore.comThe domain was also blacklisted by the French regulator AMF.
This information reinforces the warning but does not mean that all domains listed by CySEC are related or controlled by the same persons.
The warning covers investments and cryptoassets
CySEC refers to two legal bases in its announcement.
The first concerns traditional investment services, such as brokering financial instruments, forex, and CFDs. Entities providing such services must hold appropriate authorization.
The second concerns services related to cryptoassets. Under the EU MiCA regulation, such activities also require authorization.
Not every website using the words "crypto," "forex," "AI," or "trading" actually provides the service it claims. In practice, an investor might encounter a site collecting contact information, an ad linking to another operator, or a system whose results don't reflect any actual transactions.
Advertising may promise a "second income" or AI trading
Two of the addresses covered by the warning contain terms referring to artificial intelligence and additional income:
- capitaldealhub.com/AI_app_es
- digiteamagency.com/second-income/
These types of slogans are often used in advertisements suggesting the possibility of automatic earning, obtaining a "second salary" or having transactions conducted by an algorithm.
However, the mere presence of AI technology in the product name does not confirm that the system actually uses artificial intelligence, contains a real investment platform or is subject to financial supervision.
Red flags should be raised especially when the ad promises quick or almost certain profits, the representative pressures you to make an immediate payment, or offers assistance in installing a program that allows remote access to your computer.
What to do before making your first deposit?
CySEC recommends checking the company before starting cooperation and transferring any money.
First, you need to determine the full legal name of the entity that will be maintaining the account or accepting funds. Then, you need to find this company in the official regulatory register and check the scope of the license granted.
Domain matching is also essential. The person contacting the customer may provide the real name and license number of an existing company, but direct the customer to a different website.
You should also not deposit additional money under the pretext of "tax", "unlocking fee", "wallet verification" or a condition for withdrawing previously earned profit.
If the money has already been paid
A person who has transferred funds to one of the above-mentioned platforms should keep all documentation: transfer confirmations, account details, messages, contracts, screenshots and phone numbers used by interlocutors.
You should contact your bank or card issuer and report any suspected unauthorized activity. If you installed a program that allowed remote access to your computer or shared your login details, you may also need to change your passwords and secure your accounts.
A CySEC warning alone doesn't guarantee that your money will be recovered. However, the sooner the bank and the relevant authorities receive the information, the greater the chance of stopping the transaction if the funds haven't been finally transferred.
The most important rule remains simple: We don't check the license on the website of the company asking us for money. We check it directly in the official regulator's register.
Sources: Cyprus Securities and Exchange Commission, Financial Conduct Authority, BaFin, Consob, Autorité des marchés financiers.
