Short answer: In the trading bot scams regulators describe, the bot does not exist or does not trade: balances are invented, monthly returns are promised and withdrawals are frozen until a fee is paid. The CFTC's advisory of 25 January 2024 describes one case in which more than $1.7 billion in bitcoin was taken from at least 23,000 people using a bot claim and demo accounts. Before paying, check the seller with your regulator, never send trading funds to the seller and never grant withdrawal rights; this page reviews no product.
A real product and a scam can share the same sales page, so the word bot settles nothing. What separates them is where the money goes, who can move it and whether anything can be checked outside the seller's own screens.
Facts here come from official documents and one security firm's report, read on 5 November 2026, and nothing comes from forums or reviews. A company is accused only where a regulator accused it, and allegations are marked as allegations. This is general education, not legal or investment advice.
Are trading bots legit or a scam?
Software that places orders is real and can be lawful, while the scams are a way of taking deposits that uses the word bot as cover.
| Question | Software sold as software | The pattern in the cases below |
|---|---|---|
| Where do the funds sit? | In your own exchange or broker account | In the seller's wallet or platform |
| What is being sold? | A license, code or subscription with stated behavior | A return |
| What can you check? | The code, a test account, the exchange's own records | A dashboard the seller controls |
| Where does the seller's money come from? | Fees for the software | New deposits and recruiting |
| How do you leave? | Stop it and revoke the key | The account is frozen until you pay a fee |
Passing these checks only means an offer does not match this pattern. It does not mean the bot makes money, which is a separate question covered in do trading bots work, or that it is worth its price.
How trading bot scams work: cases regulators documented
In these cases the bot was a story told to collect deposits, and regulators say or allege that little or no real trading took place.
| Case | What was claimed | What the regulator says | Status |
|---|---|---|---|
| Mirror Trading International (CFTC, filed 30 June 2022; advisory, 25 January 2024) | A proprietary forex bot and at least 10% a month, said to be guaranteed, which the CFTC equates to over 200% a year | More than $1.7 billion in bitcoin from at least 23,000 people, fake balances built with MetaTrader demo accounts, little real trading and new money paying earlier investors | Default judgment against its CEO, entered 24 April 2023: $1,733,838,372 in restitution and a penalty of the same amount; the case against the company was still running then |
| BitConnect (SEC, 1 September 2021) | A proprietary volatility software trading bot producing very high returns | About $2 billion from retail investors, allegedly diverted to wallets the defendants controlled | Allegations in the complaint; the SEC notes a promoter's guilty plea in a parallel case |
| TSAI Pro and TSAI Capital Foundation (SEC, 29 September 2026) | Rental of AI-programmed trading bots with profits said to be guaranteed, plus earnings for recruiting others | More than $2.8 million misappropriated, no AI trading bots in existence and deposits never used to earn returns | Allegations; no court findings reported |
Worked check, not a result. A promise of 10% a month compounds to 1.1012 = 3.14 times in 12 months, about +214% a year, which matches the CFTC's over 200%, and to 1.1036 = 30.9 times in three years. Run this arithmetic on any monthly figure before taking it seriously.
Judgments do not always return money: the CFTC's release of 27 April 2023 cautions that orders to pay victims may not result in recovery. The AI angle has its own guide, do AI trading bots work.
The usual sequence, from first message to frozen withdrawal
Regulators describe a similar path: contact online, a small first deposit, fake gains, pressure to add more, then fees to withdraw.
- Contact. The FBI's report for 2025 describes texts, social media, ads and dating apps that move to a messaging platform, and the FCA describes social media ads using celebrity images (page updated 16 February 2026).
- A low entry. In the CFTC's case above, entry started at about $100 in bitcoin with no trading experience required (advisory, 25 January 2024).
- Proof that proves nothing. The FCA warns of professional-looking sites with software manipulated to fake prices and returns, and the FBI of fake profits shown in scam apps.
- More money. The CFTC's case used referral bonuses, and the FBI's report mentions loans offered to encourage larger investments.
- Frozen withdrawal. The SEC alleged on 29 September 2026 that investors in Cryptoaiml were told their accounts were frozen until they paid advance fees, and the FBI describes taxes and fees charged as a final attempt to extract money.
- The second scam. Someone then offers to recover the money for a fee, as covered in the last section.
No official count of bot scams was found. The FBI's report for 2025 puts reported crypto investment fraud losses at $7.2 billion and has no category for trading bots, so treat any bot-scam statistic with doubt.
Crypto bot scam red flags, and who says so
One flag is reason to stop and check, because each of these appears in a regulator's description of fraud or follows from how order software works.
| Red flag | Why it matters | Source |
|---|---|---|
| A promised, guaranteed or very high return | No seller can know a future result | CFTC, 25 January 2024; SEC, NASAA and FINRA alert, same day |
| Gains of tens of thousands of percent or 100% win rates | Listed among the claims scammers make | CFTC, 25 January 2024 |
| Send crypto to the seller's wallet or platform | Software on your own account does not need your funds | FBI report for 2025 |
| A key with withdrawal rights, your login or a two-factor code | Placing orders through an exchange API needs none of them; see API key security | Exchange API documentation, summarized in that guide |
| Screenshots or a dashboard as proof | Balances can be invented, as with the demo accounts above | CFTC, 25 January 2024 |
| A fee before you can withdraw | An advance-fee pattern | SEC, 29 September 2026; FBI report for 2025 |
| Pay for recruiting others | New deposits fund the earlier ones | CFTC, 25 January 2024; SEC, 29 September 2026 |
| Pressure to act quickly, or a contact out of the blue | Both appear in the FCA's warning signs | FCA, page updated 16 February 2026 |
Warning signs specific to arbitrage software are in crypto arbitrage bots.
How to check a seller before paying, by country
Start with the regulator's own register, reached by typing its address, because the FCA's Protect yourself from scams page (updated 19 January 2026) says never to click on links in emails or on company websites.
| Where | Tool | What it shows | Limit |
|---|---|---|---|
| US derivatives and forex | NFA BASIC; CFTC RED List | Registration and discipline; foreign entities that appear to need CFTC registration but lack it | The CFTC says to check registration even if a firm is not on the list |
| US securities | FINRA BrokerCheck; SEC PAUSE list | Broker background; unregistered soliciting entities and impersonators | The SEC says the lists are not complete |
| UK | FCA Firm Checker; FCA Warning List | Authorization and permissions; warnings on firms and individuals | The FCA says authorization lowers risk without removing it |
| EU | ESMA interim MiCA register (last update shown 5 November 2026) | Crypto-asset service providers and non-compliant entities | Published weekly, so a national register can be more current |
| India | SEBI's list of registered intermediaries | Registration status | SEBI says no exchange or SEBI recourse covers disputes with unregistered platforms (11 April 2025) |
| Turkey | Capital Markets Board (SPK, also CMB) list of crypto providers | Crypto firms that declared activity under the law's transitional provision | SPK says being listed does not mean authorization |
A clean result has limits. The CFTC says registration and a clean record will not protect you from fraud, though most scams involve unregistered entities. A pure software seller may appear on no register, so a missing entry is not proof of fraud by itself, but it matters once a seller holds your money or trades for you; that is a reading, not a rule, and are trading bots legal covers the rules by country. The CFTC also suggests a reverse image search on named people, checking the domain's age through ICANN's lookup tool and getting a second opinion. For readers in Turkey: Article 99/A of Capital Markets Law No. 6362 treats activity by foreign crypto-asset platforms directed at Turkish residents as unauthorized.
Crypto bot reviews and trading bot reviews: how to read them
Treat a review page as advertising until you know who owns it, who is paid and what was tested; this page rates no bot.
- Who owns it? The FTC's rule announced on 14 August 2024 prohibits fake reviews, including AI-generated ones, undisclosed insider reviews and presenting a company-controlled site as independent (16 CFR 465.2, 465.5, 465.6). It is US law, so check local rules elsewhere.
- Who is paid? The FTC's endorsement guides (16 CFR 255.5, read 5 November 2026) require clear disclosure of a material connection, and one example covers a reviewer earning through affiliate links. A review with a sign-up link may earn from your sign-up.
- What was tested? A reported result should say live or simulated, the dates, the size and the costs. Without those there is nothing to weigh.
- Ratings and league tables. SEBI's circular of 2 September 2022 says ratings assigned to strategies could lure investors and may amount to mis-selling, and an adjudication order of 25 March 2026 describes strategies offered at a discount, or free, to users who opened a broker account through a referral link.
Fake trading bot code on GitHub
Free code can be the trap too: Kaspersky reported on 24 February 2025 that hundreds of fake GitHub projects spread malware that steals credentials and crypto wallet data.
Its GitVenom report lists a Telegram bot for managing Bitcoin wallets among the disguises, though it does not name trading bots. The projects had polished README files, possibly AI-generated, and inflated commit counts, while the code did not do what was described. Payloads included a stealer, backdoors and a clipboard hijacker that swaps wallet addresses. So read what a repository runs at install and build time, and first run it on a machine that holds no keys. Repository checks are in open source crypto trading bot, and if you hold source code and want a second reader, trading bot code review is a service Fincode sells.
What to do if you were scammed by a trading bot
Stop paying, cut off access, keep records and report it, and do not pay anyone who offers to recover the money for a fee.
- Stop sending money, including any tax, release fee or top-up the seller says is needed.
- Cut off access. Revoke API keys, change passwords and two-factor settings, and check for withdrawal addresses you did not add.
- Keep records: messages, site addresses, wallet addresses, transaction IDs and payment receipts.
- Report it. In the US the CFTC takes complaints at cftc.gov/complaint and the FBI at ic3.gov. In the UK the FCA says to report to it and to Report Fraud. Elsewhere, use your national regulator and police.
- Expect a second approach. The FCA's page on recovery room scams, updated 19 January 2026, says these firms demand fees upfront, can pose as regulators and can lead to losses greater than the initial one. The CFTC's advisory of 30 July 2024 (Release 8936-24) says recovering money lost to fraud is rare, and harder once it has been converted to crypto.
Frequently asked questions
Are trading bots legit?
Software that places orders under your rules is real and can be lawful, depending on your country and platform. An offer that takes your funds or promises a return fits the pattern regulators describe as fraud, whatever it is called.
Is an auto bot trading system a scam?
The name proves nothing either way. Check who holds the money, whether a return is promised, and whether you can verify anything outside the seller's own dashboard.
How can I tell if a bot's results are fake?
Often you cannot from screenshots or dashboards. The CFTC said on 25 January 2024 that demo accounts were used to build fake balances in one case, so ask for a record you can verify at the exchange, net of costs.
Can I get my money back from a bot scam?
Often not. The CFTC said on 30 July 2024 that recovery is rare, and harder once funds are converted to crypto. Report it anyway, and do not pay anyone who asks for a fee to recover it.
Are trading bot reviews reliable?
Treat them as advertising until you know who owns the page and who is paid. In the US, the FTC's rule announced on 14 August 2024 bars fake reviews and presenting a company-controlled site as independent.
Sources
- CFTC Release 8854-24 (25 January 2024): CFTC Customer Advisory Cautions the Public to Beware of Artificial Intelligence Scams (opens in a new tab)
- CFTC Release 8696-23 (27 April 2023): Federal Court Orders South African CEO to Pay Over $3.4 Billion for Forex Fraud (opens in a new tab)
- SEC press release 2021-172 (1 September 2021): SEC Charges Global Crypto Lending Platform and Top Executives in $2 Billion Fraud (opens in a new tab)
- SEC press release 2026-95 (29 September 2026): charges over fraud schemes using WhatsApp and other platforms (opens in a new tab)
- FBI Internet Crime Complaint Center: 2025 IC3 Annual Report (opens in a new tab)
- FCA: Crypto investment scams (updated 16 February 2026) (opens in a new tab)
- CFTC: Be Smart: Check Registration and Backgrounds Before You Trade (links to NFA BASIC, the RED List, BrokerCheck and SEC lists) (opens in a new tab)
- FCA: Protect yourself from scams (updated 19 January 2026), with the Firm Checker address (opens in a new tab)
- FCA: Recovery room scams (updated 19 January 2026) (opens in a new tab)
- ESMA: Markets in Crypto-Assets Regulation page, with the interim MiCA register (opens in a new tab)
- SEBI PR No. 22/2025 (11 April 2025): caution on frauds on social media, with links to registered intermediaries (opens in a new tab)
- SPK (Capital Markets Board): Operating list of crypto asset service providers (Turkish) (opens in a new tab)
- CFTC Release 8936-24 (30 July 2024): CFTC Warns Customers to Watch for Follow-on Frauds (opens in a new tab)
- FTC (14 August 2024): Final Rule Banning Fake Reviews and Testimonials (opens in a new tab)
- Kaspersky Securelist (24 February 2025): The GitVenom campaign (opens in a new tab)
This guide is general information about software and markets, not investment, legal or tax advice. Automated trading can lose money, past or backtested performance does not guarantee future results, and the rules that apply depend on your jurisdiction and your exchange's terms. Sources, checks and corrections: see the editorial policy.