unmasked.info / Fraud & Scam Intelligence / Active investor protection

When trust puts money at risk, we ask for evidence.

Too many losses begin with claims no one examines in time: a supposed licence, a convincing website, a promise to recover lost funds. We turn those claims into questions that can be checked, before investors decide and when a loss needs to be investigated.

01 /Provider Due DiligenceWho is behind an offer?
02 /Business Conduct ReviewHow does a regulated firm act?
03 /Cyber & Digital ForensicsWhat can digital evidence establish?
04 /Individual Case ReviewWhat calls for a defined engagement?
What we stand for ↓Explore the Toolkit →Get oriented. Then investigate with purpose.
Fraud & Scam Intelligence / Visual Insights

See patterns. Follow the evidence.

Explore methods, dated warnings and shared mechanisms. Each view leads into the relevant information or tool.

The pattern universe

Fraud- & Scam Forensics · 44 PatternsFraud- & ScamForensicsFake trading platformFake trading platformClone of an authorised firmClone of an authorised firmFake fixed-term depositFake fixed-term depositBoiler room / cold callingBoiler room / cold callingRelationship-led crypto investment scamRelationship-led crypto investment scamFinfluencer promotion and affiliate conflictFinfluencer promotion and affiliate conflictCritical search query used as an affiliate funnelCritical search query used as an affiliate funnelExpert Advisor licence with an unproven track recordExpert Advisor licence with an unproven track recordTrading coaching promoted through paid media authorityTrading coaching promoted through paid media authorityFabricated token or crypto opportunityFabricated token or crypto opportunityPump and dumpPump and dumpPonzi schemePonzi schemePyramid or recruitment schemePyramid or recruitment schemeAffinity fraudAffinity fraudManipulative trading or signal groupManipulative trading or signal groupWithdrawal fee or tax pretextWithdrawal fee or tax pretextRecovery scamRecovery scamFake regulator, police or law firmFake regulator, police or law firmCelebrity or deepfake investment advertCelebrity or deepfake investment advertAdvance fee for investment proceedsAdvance fee for investment proceedsBanking and account phishingBanking and account phishingSmishing / text-message phishingSmishing / text-message phishingVishing / impersonation callVishing / impersonation callQuishing / malicious QR codeQuishing / malicious QR codeAccount takeoverAccount takeoverSIM swap / number takeoverSIM swap / number takeoverFake support and remote accessFake support and remote access“Safe account” transfer“Safe account” transferCEO fraud / business email compromiseCEO fraud / business email compromiseInvoice or bank-detail redirectionInvoice or bank-detail redirectionImitated executive voice or videoImitated executive voice or videoRomance scamRomance scamFake job offerFake job offerTask scamTask scamMoney mule recruitmentMoney mule recruitmentFake online storeFake online storeMarketplace payment trickMarketplace payment trickFake rental listingFake rental listingFake charity appealFake charity appealPrize or inheritance advance feePrize or inheritance advance feeIdentity-document harvestingIdentity-document harvestingFake reviews and trust marksFake reviews and trust marksReshipping job scamReshipping job scamCrypto ATM payment demandCrypto ATM payment demand
All 44 existing library patterns. Lines connect labels to the central topic; they do not establish links between perpetrators or incidents. On small screens, use the linked list.

Financial Fraud · dated I-SCAN warnings by calendar year

Source: IOSCO International Securities & Commodities Alerts Network (I-SCAN). Analysis as at 30 September 2026: 19,341 dated records out of 47,159; 27,815 without dates and 3 future dates excluded. Based on supplied NCA registration dates, not necessarily first publication dates. *2026 is partial. Changes may reflect data coverage and reporting activity, not actual fraud incidence.
Show data table
YearDated entries
20052
20060
20070
20080
20091
20104
201119
201230
201343
2014124
2015230
2016151
2017190
2018234
20191368
2020431
2021732
2022540
2023578
2024602
20257860
2026*6202

Explore I-SCAN analysis →

Shared mechanisms · coverage of our library

Editorial mechanism tags across 44 patterns. Patterns can have several tags; counts must not be added. This is not a ranking of incident frequency or risk.
01 / Fraud & Scam Intelligence

Know what to check. Find the right tool.

We examine the claims behind investment offers, websites and purported recovery services. The public toolkit helps you verify a provider, recognise a method, preserve evidence and choose a sensible next step.

Enter the Anti-Fraud & Scam Toolkit
01 / What we stand for

Trust needs a basis you can verify.

A polished website, a familiar name or a claimed register entry can create a sense of safety. The useful question is whether the legal entity, authorisation, domain, contact route and payment destination actually fit together.

We help investors examine those connections early. When a loss has already occurred, a careful reconstruction matters more than a quick promise. This is especially true of services claiming they can recover lost funds.

01 / Prevention

Check before committing

Compare claims with original sources and recognise warning signs before making a payment.

02 / Context

Connect the evidence

Who offered what, through which website, under which name, and using which payment route?

03 / Representation

Take losses seriously

Preserve records, limit further harm and sharpen the questions for a qualified review.

02 / Method

From a signal to a question worth investigating.

An official warning matters. The absence of a search result is not reassurance. We keep each statement tied to its source and put the pieces into a traceable account.

01 / Identify

Who are we checking?

A brand, legal entity, domain and person making contact may all be different. Start by establishing their relationship.

02 / Verify

What can be established?

Registers and official notices sit alongside agreements, messages and technical clues. Each source supports a different kind of conclusion.

03 / Act

What follows?

The useful next step changes before payment, after suspicious contact and after a loss.

03 / Two areas of expertise

Regulatory questions often leave a digital trail.

A case may involve both the firm's permissions and conduct, and the technical origins of a website, message or account access.

Regulatory & business conduct

Authorisation, process and responsibility

We examine the firm's identity, the service offered and its documented conduct. For regulated firms, onboarding, contractual terms and the practical implementation of requirements may also warrant review. Qualified legal specialists handle individual legal questions.

Cybersecurity & digital forensics

Domains, access and evidence

Digital traces can reveal connections that a name search misses. Specialist expertise supports technical investigations and cybersecurity work.

Explore Proteo Defence ↗
04 / Fraud & Scam Intelligence

From a signal to a question that can be checked.

Public tools provide orientation, not a verdict on a company or an individual case. For financial providers, begin with I‑SCAN and check the original register or notice. For deeper research, follow the relevant route through the toolkit.

Browse all toolkit modules →
A sensible first route

Provider → source → conduct

Identify the contracting entity, compare its authorisation with the activity being offered, inspect the domain and payment instructions, then document what remains unresolved.

Open I‑SCAN overview →
05 / When a case needs more

Information becomes an investigation.

For substantial losses or complex business conduct, an individual review may make sense. Its scope, sources and questions are agreed separately. Legal assessments and specialist IT or cyber forensic work involve appropriately qualified experts.

Explore professional services and methods →

A confidential whistleblower channel is planned. Until its safeguards are in place, this website does not accept sensitive reports. For matters within German financial supervision, the BaFin whistleblower office ↗ offers an official route.

Beware of recovery scams.

Independently verify anyone who approaches you after a loss promising recovery and asking for fees, credentials or remote access. Examine a recovery claim in the pre-check →

Community Intelligence

A scam pattern missing from our library?

If none of the behaviours described in the Fraud & Scam Pattern Library matches what you observed, use our form to suggest the pattern for editorial review and possible inclusion in the database.

Suggest a new pattern →