How Automated Trading Platforms Work

This page explains how products marketed as automated crypto trading platforms are built and operated. Everything below is sourced from regulator publications, court records and published investigations. Where something is not documented, this page says so instead of filling the gap.

Last reviewed: 7 September 2026.

What the product usually is

A platform of this class is normally presented as software that trades cryptocurrency automatically on the user's behalf. The public material is a brand name, a landing page and a sign-up form. In documented cases, investigators were unable to find a company behind the branding at all. Reporting by OCCRP on one such brand notes that it "had a logo, a website, and a motto", but that reporters could not identify an actual company behind it.

Two things follow from that, and both are checkable by anyone:

• The brand name is not the operator. The entity that receives a deposit is a separate company, usually named only after sign-up, often registered outside the user's country.
• A brand name is not a licence. Financial regulators license companies, not product names.

The funnel, step by step

The sequence below is documented consistently across investigations by OCCRP, Qurium, Eurojust and the US Department of Justice.

1. Advertising. Traffic is bought on major ad platforms. A share of it leads to articles that imitate real news outlets, including cloned copies of established publications, with invented quotes attributed to public figures.
2. The landing page. Its purpose is not to sell software. It is to capture a name, a phone number and an email address.
3. The lead is sold. Marketing firms pass those contact details on to call centres. This is a paid, organised market, not an incidental leak.
4. The call. An agent calls and asks for a first deposit, typically a few hundred dollars. Agents have been documented working under false names and claiming to be based in financial centres they were not in.
5. Retention. A second team takes over with the specific job of increasing the amount deposited. The account interface shows rising profits.
6. Withdrawal. When the user asks to take money out, reasons are produced for why the transfer cannot be made.

On the last step, the US indictment in United States v. Lee Elbaz describes "misrepresenting whether and how investors could withdraw funds" as part of the charged conduct. Elbaz, the chief executive of the company operating the platforms in that case, was sentenced to 22 years and ordered to pay 28 million dollars in restitution.

Who pays for the traffic

Lead generation is the economic engine, and its prices are documented.

• In enforcement actions brought by the SEC and CFTC in 2018, affiliate commissions of 350 to 450 dollars per depositing victim were described.
• OCCRP's 2025 investigation, based on 1.9 terabytes of leaked internal data from two call centre networks, put the going rate for a Swedish lead at around 1,350 dollars.
• The same investigation traced at least 275 million dollars taken from roughly 32,000 people across the two networks it examined.

In November 2025, coordinated action in Belgium, Bulgaria, Germany and Israel targeted the marketing firms themselves, which investigators described as a central part of the ecosystem rather than a peripheral one.

Why the names change constantly

This is the part most directly relevant to anyone searching for a specific product name.

Brand names in this sector are generated in batches and rotated. Security vendor ESET, describing one campaign, refers to "frequently changing names" of exactly this pattern and reports blocking more than 8,500 related domains in a single half-year period.

The scale of the naming itself is documented from the other end too. German prosecutors examining one piece of trading-simulation software found it had been used by 397 different platform brands. OCCRP identified 79 platforms in use by one network and 7 in another.

The practical consequence: the absence of information about a specific name means very little on its own. A name may be three weeks old, may be one of dozens sharing a single back office, and may be retired before the search results about it are updated.

The software behind the brand

Platforms of this class are rarely built by the people selling them. The model is white label: one supplier builds the trading interface and licenses it to many operators.

The SEC's 2021 case against the developer of the SpotOption platform describes a supplier that "developed nearly all of the products and services necessary to offer and sell binary options through the internet" and licensed them to what it called white label partners. The same filing states that investors were not told those partners were the counterparty to every trade, and therefore profited when investors lost.

More recently, German prosecutors charged suppliers of what was described as a fake brokerage all-in-one solution, and of software for simulating trading activity, in a case involving victim losses above 94 million euros.

Documented outcomes

These are court and regulator outcomes, not estimates:

• United States v. Lee Elbaz: 22 years imprisonment, 28 million dollars restitution (US Department of Justice, 2019 and 2020).
• A US federal court ordered defendants in the related civil case to pay over 451 million dollars, comprising 112.9 million in restitution and 338.7 million in penalties (CFTC, January 2025).
• A German court sentenced a central figure in an Albania-based call centre operation, which at its peak employed up to 600 people, to 7 years and 6 months (February 2026).
• The FBI's 2024 Internet Crime Report records 47,919 investment fraud complaints in the United States with reported losses of 6.57 billion dollars, the largest single loss category that year.

How to check any platform yourself

This takes about ten minutes and does not require trusting any review site, including this one.

1. Find the operating company, not the brand. Look for a company name, a company number and a registered address in the footer, the terms of service or the risk disclosure. If a platform will not name the legal entity that holds your money before you deposit, that is the answer to the question.

2. Search the register of your own regulator. Search by the company name, not the brand name. Every authority below publishes a free, searchable register:

• United Kingdom: the FCA Financial Services Register, plus its Warning List of firms operating without authorisation.
• Cyprus: the CySEC register and its published warnings, relevant because a large share of retail trading entities are registered there.
• Germany: the BaFin company database and its warning notices.
• European Union: the ESMA registers, which aggregate national authorisations.
• United States: SEC EDGAR and the CFTC, plus FINRA BrokerCheck for individuals.
• Australia: the ASIC Connect professional registers and its Investor Alert List.

3. Read the entry, not just the presence of one. A firm may appear on a register for a permission unrelated to what it is selling you. Check that the permission covers the service being offered and that the entity name matches exactly. Cloned entries, where a fraudulent operation copies the details of a genuinely licensed firm, are common enough that most regulators maintain a specific warning category for them.

4. Check the domain age. A public WHOIS or RDAP lookup will show the registration date of any domain. A platform describing years of trading history on a domain registered months ago has answered the question for you.

5. Treat any promised return as the strongest signal available. No automated system produces a guaranteed or fixed return from cryptocurrency trading. A specific percentage promised in advance is not an optimistic estimate, it is a claim no legitimate operator is permitted to make.

6. If you have already deposited. Contact your bank or card issuer immediately and ask about a chargeback, then report to your national regulator and to your national cybercrime reporting body. Do not respond to anyone offering to recover the funds for an advance fee. Recovery fraud aimed at people who have already lost money is documented by multiple regulators as a distinct second wave.

What this page does not claim

This page describes a documented industry pattern. It does not assert that any particular product named elsewhere on this site belongs to it. Where a specific platform is discussed, what is known and what is not known is stated on that platform's own page, along with the date it was checked.