An open library for the AI era

Fraud looks
convincing.
Look closer.

Familiar faces. Impressive companies. Official-looking badges. Explore real examples and learn what to check.

Open to everyone. Built from credited evidence.
Captured websitesFollow the evidence ↓
Archived capture of tesladealer.co.za, a website assessed as fraudulent.Explore this case
Fraudulent · 100/100 · desenmascara.me · AI-assisted analysis

Tesla. SpaceX. Elon Musk. Nothing shows they are behind it.

A crypto investment page borrows famous brands and a famous face. The source reports a domain registered one day earlier and assesses it as fraudulent.

Read the case

Archived captures. The claims shown belong to the captured websites.

Evidence in this collection comes from

desenmascara.meICANNVirusTotalIOSCOFCAFTFTCIl Sole 24 OreReutersTechCrunchThe BlockXatakaetbe
Cited sources. Not sponsors or endorsements.
The open collection

See the pattern.
Keep the lesson.

Explore actual website captures, documented incidents and clearly labeled reconstructions. Every case links back to its evidence.

71 cases in the collection66 real captures · 1 reconstruction · 3 incidents · 1 emerging threat
Incident · Banking / Executive impersonation with an AI-cloned voiceSA-038

The €95 million cloned-voice transfer

According to Reuters, fraudsters posing as Intesa Sanpaolo's chief executive on WhatsApp, then as a law-firm partner on a call with an AI-cloned voice, got the chairman of its private-banking arm Fideuram to order about €95 million in transfers abroad. About €36 million is still missing.

Audience: Executives, treasury and finance teams, and anyone who can authorise a payment on someone else's instruction

Source: Reuters + Il Sole 24 OreRead case
Emerging · Transport / Breach-fed personalisationSA-037

The phishing that knows your trip

A leak that links passengers to real journeys could let fraudsters write refund or booking messages that mention trips you actually made. No such attack has been reported yet.

Audience: Rail passengers in Spain, and anyone whose travel records have leaked

Source: XatakaRead case
Incident · Financial data / Government-request impersonationSA-007

The Revolut request impersonation

Revolut confirmed that sensitive customer data was disclosed after fraudulent information requests were sent from a legitimate government-agency email domain.

Audience: Banks, fintechs, legal and compliance teams; affected customers as data subjects

Source: TechCrunch + The Block + FTRead case
Crypto / Crypto wallet or exchange lureSA-010

The wallet lure

Desenmascara flagged nobletechglobalinvesting.com as fraudulent (100/100). The site presented itself as a crypto platform.

Audience: Crypto users and retail investors

Source: Desenmascara + ICANNRead case
Transport / Manufactured credibilitySA-011

The freight company

An archived look at global-freightltd.com, a logistics carrier assessed as fraudulent by Desenmascara (AI-assisted analysis, 99/100).

Audience: Customers, shippers and business counterparties

Source: Desenmascara + ICANNRead case
Banking / Financial-service facadeSA-012

The banking portal

cashclaimagilitybank.com presented itself as a bank or financial service. Desenmascara rated it fraudulent (94/100) after AI-assisted analysis.

Audience: Bank customers and payment users

Source: Desenmascara + ICANNRead case
Investment / High-return promiseSA-013

The returns promise

Captured on 2026-09-15: repsolinvestt.shop, an investment or trading platform that Desenmascara's AI-assisted analysis rated fraudulent at 93/100.

Audience: Retail investors

Source: Desenmascara + VirusTotalRead case
Investment / High-return promiseSA-014

The trading platform

Desenmascara flagged agosbitline.shop as fraudulent (93/100). The site presented itself as an investment or trading platform.

Audience: Retail investors

Source: Desenmascara + VirusTotalRead case
Investment / High-return promiseSA-015

The investment offer

An archived look at oldmutualaiinvest.shop, an investment or trading platform assessed as fraudulent by Desenmascara (AI-assisted analysis, 93/100).

Audience: Retail investors

Source: Desenmascara + VirusTotalRead case
Investment / High-return promiseSA-016

The returns promise

chrysarinsoft.shop presented itself as an investment or trading platform. Desenmascara rated it fraudulent (93/100) after AI-assisted analysis.

Audience: Retail investors

Source: Desenmascara + VirusTotalRead case
Investment / High-return promiseSA-017

The trading platform

Captured on 2026-09-16: clairezontbankcards.sbs, an investment or trading platform that Desenmascara's AI-assisted analysis rated fraudulent at 91/100.

Audience: Retail investors

Source: Desenmascara + VirusTotal + ICANNRead case
Investment / High-return promiseSA-018

The investment offer

Desenmascara flagged prestigiomarketdex.shop as fraudulent (93/100). The site presented itself as an investment or trading platform.

Audience: Retail investors

Source: DesenmascaraRead case
Investment / High-return promiseSA-019

The returns promise

An archived look at paragonix-earn-tech.com, an investment or trading platform assessed as fraudulent by Desenmascara (AI-assisted analysis, 91/100).

Audience: Retail investors

Source: Desenmascara + ICANNRead case
Investment / High-return promiseSA-020

The trading platform

meghnamoorsoftware.com presented itself as an investment or trading platform. Desenmascara rated it fraudulent (93/100) after AI-assisted analysis.

Audience: Retail investors

Source: Desenmascara + ICANNRead case
Banking / Financial-service facadeSA-021

The banking portal

Captured on 2026-09-16: axel-fundriaplatform.com, a bank or financial service that Desenmascara's AI-assisted analysis rated fraudulent at 91/100.

Audience: Bank customers and payment users

Source: Desenmascara + VirusTotal + ICANNRead case
Investment / High-return promiseSA-022

The returns promise

Desenmascara flagged elitechain-finance.xyz as fraudulent (100/100). The site presented itself as an investment or trading platform.

Audience: Retail investors

Source: Desenmascara + ICANNRead case
Banking / Financial-service facadeSA-023

The bank that isn't

An archived look at instantrefundresolution.online, a bank or financial service assessed as fraudulent by Desenmascara (AI-assisted analysis, 100/100).

Audience: Bank customers and payment users

Source: Desenmascara + ICANNRead case
Banking / Financial-service facadeSA-024

The banking portal

expresscargo.xyz presented itself as a bank or financial service. Desenmascara rated it fraudulent (93/100) after AI-assisted analysis.

Audience: Bank customers and payment users

Source: Desenmascara + ICANNRead case
Investment / High-return promiseSA-025

The returns promise

Captured on 2026-09-16: aufstieg-gaintra-tech.com, an investment or trading platform that Desenmascara's AI-assisted analysis rated fraudulent at 91/100.

Audience: Retail investors

Source: Desenmascara + VirusTotal + ICANNRead case
Crypto / Crypto wallet or exchange lureSA-026

The crypto platform

Desenmascara flagged 259041-crypto.com as fraudulent (82/100). The site presented itself as a crypto platform.

Audience: Crypto users and retail investors

Source: Desenmascara + ICANNRead case
Shopping / Deceptive storefrontSA-027

The brand storefront

An archived look at remitmargin.com, an online shop assessed as fraudulent by Desenmascara (heuristic analysis, 100/100).

Audience: Online shoppers

Source: Desenmascara + ICANNRead case
Banking / Financial-service facadeSA-028

The card offer

mt-bank.us presented itself as a bank or financial service. Desenmascara rated it fraudulent (85/100) after AI-assisted analysis.

Audience: Bank customers and payment users

Source: Desenmascara + ICANNRead case
Banking / Financial-service facadeSA-029

The bank that isn't

Captured on 2026-09-22: fx-alphapgims.online, a bank or financial service that Desenmascara's AI-assisted analysis rated fraudulent at 100/100.

Audience: Bank customers and payment users

Source: Desenmascara + ICANNRead case
Shopping / Deceptive storefrontSA-031

The bargain store

An archived look at diamondevercrest.com, an online shop assessed as fraudulent by Desenmascara (AI-assisted analysis, 93/100).

Audience: Online shoppers

Source: Desenmascara + ICANNRead case
Banking / Financial-service facadeSA-032

The bank that isn't

elvarionbank.com presented itself as a bank or financial service. Desenmascara rated it fraudulent (82/100) after AI-assisted analysis.

Audience: Bank customers and payment users

Source: Desenmascara + ICANNRead case
Shopping / Deceptive storefrontSA-033

The brand storefront

Captured on 2026-09-25: skybitprofits.com, an online shop that Desenmascara's heuristic analysis rated fraudulent at 95/100.

Audience: Online shoppers

Source: Desenmascara + ICANNRead case
Crypto / Crypto wallet or exchange lureSA-034

The wallet lure

Desenmascara flagged yappeakcappaid.top as fraudulent (99/100). The site presented itself as a crypto platform.

Audience: Crypto users and retail investors

Source: Desenmascara + ICANNRead case
Crypto / Crypto wallet or exchange lureSA-035

The crypto platform

An archived look at tesladealer.co.za, a crypto platform assessed as fraudulent by Desenmascara (AI-assisted analysis, 100/100).

Audience: Crypto users and retail investors

Source: Desenmascara + ICANNRead case
Shopping / Deceptive storefrontSA-036

The brand storefront

primecrestoptions.com presented itself as an online shop. Desenmascara rated it fraudulent (91/100) after heuristic analysis.

Audience: Online shoppers

Source: Desenmascara + ICANNRead case
Shopping / Deceptive storefrontSA-039

The brand storefront

An archived look at psychedelicsx.com, an online shop assessed as fraudulent by Desenmascara (heuristic analysis, 99/100).

Audience: Online shoppers

Source: Desenmascara + ICANNRead case
Investment / High-return promiseSA-040

The returns promise

elonxinvest.com presented itself as an investment or trading platform. Desenmascara rated it fraudulent (93/100) after heuristic analysis.

Audience: Retail investors

Source: Desenmascara + ICANNRead case
Banking / Financial-service facadeSA-041

The bank that isn't

Captured on 2026-09-30: thelansbankse.com, a bank or financial service that Desenmascara's heuristic analysis rated fraudulent at 90/100.

Audience: Bank customers and payment users

Source: Desenmascara + ICANNRead case
Crypto / Crypto wallet or exchange lureSA-043

The wallet lure

An archived look at interactivepromarkets.top, a crypto platform assessed as fraudulent by Desenmascara (AI-assisted analysis, 100/100).

Audience: Crypto users and retail investors

Source: Desenmascara + ICANNRead case
Shopping / Deceptive storefrontSA-044

The discount shop

nhbnyc.com presented itself as an online shop. Desenmascara rated it fraudulent (85/100) after heuristic analysis.

Audience: Online shoppers

Source: Desenmascara + ICANNRead case
Shopping / Deceptive storefrontSA-045

The brand storefront

Captured on 2026-10-02: spacexaccess.co, an online shop that Desenmascara's heuristic analysis rated fraudulent at 87/100.

Audience: Online shoppers

Source: Desenmascara + ICANNRead case
Banking / Financial-service facadeSA-046

The card offer

Desenmascara flagged bonavisbank.com as fraudulent (82/100). The site presented itself as a bank or financial service.

Audience: Bank customers and payment users

Source: Desenmascara + ICANNRead case
Shopping / Deceptive storefrontSA-047

The discount shop

An archived look at copy.intere-wallet.org, an online shop assessed as fraudulent by Desenmascara (heuristic analysis, 92/100).

Audience: Online shoppers

Source: Desenmascara + ICANNRead case
Crypto / Crypto wallet or exchange lureSA-048

The crypto earnings site

merionpay.com.intere-wallet.org presented itself as a crypto platform. Desenmascara rated it fraudulent (88/100) after heuristic analysis.

Audience: Crypto users and retail investors

Source: Desenmascara + ICANNRead case
Banking / Financial-service facadeSA-049

The card offer

Captured on 2026-10-05: segurosoat-mundial.top, a bank or financial service that Desenmascara's AI-assisted analysis rated fraudulent at 98/100.

Audience: Bank customers and payment users

Source: Desenmascara + ICANNRead case
Shopping / Deceptive storefrontSA-050

The discount shop

Desenmascara flagged bancodealimentocol.top as fraudulent (97/100). The site presented itself as an online shop.

Audience: Online shoppers

Source: Desenmascara + ICANNRead case
Shopping / Deceptive storefrontSA-051

The brand storefront

An archived look at metachore.net, an online shop assessed as fraudulent by Desenmascara (heuristic analysis, 100/100).

Audience: Online shoppers

Source: Desenmascara + ICANNRead case
Shopping / Deceptive storefrontSA-052

The bargain store

creatorscashpage.online presented itself as an online shop. Desenmascara rated it fraudulent (95/100) after AI-assisted analysis.

Audience: Online shoppers

Source: Desenmascara + ICANNRead case
Phishing / Credential phishingSA-053

The phishing page

Captured on 2026-10-05: pagodetarjetastuya.top, a familiar online service that Desenmascara's AI-assisted analysis rated fraudulent at 97/100.

Audience: Anyone asked to sign in or confirm details

Source: Desenmascara + ICANNRead case
Investment / High-return promiseSA-054

The investment offer

Desenmascara flagged wealthpasselltd.cc as fraudulent (95/100). The site presented itself as an investment or trading platform.

Audience: Retail investors

Source: Desenmascara + ICANNRead case
Crypto / Crypto wallet or exchange lureSA-055

The wallet lure

An archived look at globalfirstclasstraders.live, a crypto platform assessed as fraudulent by Desenmascara (AI-assisted analysis, 88/100).

Audience: Crypto users and retail investors

Source: DesenmascaraRead case
Investment / High-return promiseSA-056

The trading platform

plataformadeinvestimentos.net presented itself as an investment or trading platform. Desenmascara rated it fraudulent (83/100) after AI-assisted analysis.

Audience: Retail investors

Source: DesenmascaraRead case
Banking / Financial-service facadeSA-057

The banking portal

Captured on 2026-10-09: assetscommercebank.com, a bank or financial service that Desenmascara's AI-assisted analysis rated fraudulent at 95/100.

Audience: Bank customers and payment users

Source: DesenmascaraRead case
Investment / High-return promiseSA-058

The returns promise

Desenmascara flagged investment24profit.top as fraudulent (92/100). The site presented itself as an investment or trading platform.

Audience: Retail investors

Source: DesenmascaraRead case
Investment / High-return promiseSA-059

The trading platform

An archived look at luminexcapitalstrade.com, an investment or trading platform assessed as fraudulent by Desenmascara (AI-assisted analysis, 93/100).

Audience: Retail investors

Source: DesenmascaraRead case
Crypto / Crypto wallet or exchange lureSA-060

The crypto earnings site

diamondwealths.com presented itself as a crypto platform. Desenmascara rated it fraudulent (91/100) after AI-assisted analysis.

Audience: Crypto users and retail investors

Source: DesenmascaraRead case
Investment / High-return promiseSA-061

The returns promise

tradeplus24.live is flagged by a financial regulator. Desenmascara publishes it as fraudulent (100/100) on that attribution, not as its own finding (captured on 2026-10-11).

Audience: Retail investors

Source: DesenmascaraRead case
Crypto / Crypto wallet or exchange lureSA-062

The crypto platform

btcknotusv154.live is flagged by a financial regulator. Desenmascara publishes it as fraudulent (100/100) on that attribution, not as its own finding (captured on 2026-10-11).

Audience: Crypto users and retail investors

Source: DesenmascaraRead case
Investment / Investment platform built on an AI website builderSA-063

The investment site the builder removed

renovae.app presented an investment service under the name Renovae. Quebec's financial regulator, the Autorité des marchés financiers, warned on 24 August 2026 that Renovae is not authorised. When desenmascara.me analysed the domain on 11 October 2026, the site was gone: it served a takedown notice from Lovable's Trust & Safety team, the AI website builder it was built on.

Audience: Retail investors and anyone offered an online investment account

Source: Desenmascara + IOSCORead case
Investment / Investment platform built on an AI website builderSA-064

The firm that moved domains

stanlakegroup.co.uk presented an investment firm called Stanlake Group. The UK Financial Conduct Authority warned on 6 August 2026 that Stanlake Group is not authorised. On 11 October 2026 the domain redirected to a second domain, stanlakeltd.com, and both ended at a takedown notice from Lovable's Trust & Safety team.

Audience: Retail investors and anyone offered an online investment account

Source: Desenmascara + IOSCORead case
Jobs / Advance-fee requestSA-066

The online job

fpiugov.org is flagged by a financial regulator. Desenmascara publishes it as fraudulent (100/100) on that attribution, not as its own finding (captured on 2026-10-12).

Audience: Job seekers and online task workers

Source: Desenmascara + ICANNRead case
Jobs / Recruitment fee scamSA-067

The flattering headhunter

circleglobalrecruitment.com presents an international recruitment agency. Its contact comes as an unsolicited email from a Gmail address in the company's name, praising the recipient's career in detail and offering an unnamed senior role. The site's real destination is a payment page where the candidate types in an amount set by their "representative" for CV writing priced from $300 to $995.

Audience: Job seekers and professionals contacted by recruiters

Source: Desenmascara + ICANNRead case
Jobs / Advance-fee requestSA-068

The earnings dashboard

dipb-gov.org is flagged by a financial regulator. Desenmascara publishes it as fraudulent (100/100) on that attribution, not as its own finding (captured on 2026-10-12).

Audience: Job seekers and online task workers

Source: Desenmascara + ICANNRead case
Investment / High-return promiseSA-069

The investment offer

bgwealthsharing.com is flagged by a financial regulator. Desenmascara publishes it as fraudulent (100/100) on that attribution, not as its own finding (captured on 2026-10-12).

Audience: Retail investors

Source: Desenmascara + ICANNRead case
Jobs / Advance-fee requestSA-070

The task platform

maygroupsolution.com is flagged by a financial regulator. Desenmascara publishes it as fraudulent (100/100) on that attribution, not as its own finding (captured on 2026-10-13).

Audience: Job seekers and online task workers

Source: Desenmascara + ICANNRead case
Investment / High-return promiseSA-071

The trading platform

firagov.org is flagged by a financial regulator. Desenmascara publishes it as fraudulent (100/100) on that attribution, not as its own finding (captured on 2026-10-13).

Audience: Retail investors

Source: Desenmascara + ICANNRead case
Investment / High-return promiseSA-072

The investment offer

teslaspacefinanceex.com presented itself as an investment or trading platform. Desenmascara rated it fraudulent (100/100) after AI-assisted analysis.

Audience: Retail investors

Source: DesenmascaraRead case
Jobs / Advance-fee requestSA-073

The task platform

advancedstocksonline.com is flagged by a financial regulator. Desenmascara publishes it as fraudulent (100/100) on that attribution, not as its own finding (captured on 2026-10-14).

Audience: Job seekers and online task workers

Source: Desenmascara + ICANNRead case
Incident · Impersonation / Dead-domain owner impersonationSA-074

The dead-domain link harvest

Emails written as if from the owners of defunct websites ask site administrators to swap old links for "mirror" copies on en-html.org. The copies are named after closed charities, archives and local history projects, and now redirect to commercial hotel sites.

Audience: Bloggers, librarians, Wikipedia editors and anyone who maintains old web pages with links

Source: etbe + ICANNRead case
Built on evidence, open to correction

Useful because
you can check it.

AI can change the voice, the face and the message. The need for evidence stays the same.

Show the source.

Follow the original report. See what was captured, what a source concluded and what remains uncertain.

Make room for everyone.

Researchers, security vendors, educators and everyday people can contribute. Credit stays with the source.

Keep learning.

Improve an explanation, add evidence or challenge a claim. AI involvement is stated only when the evidence supports it.

What changes in the AI era

A small contribution. A shared defense.

You found a pattern.
Help someone else see it.

A public report and a few words are enough to start. No code, technical format or screenshot required.

01
Link to a public report.Any credible source. Any vendor.
02
Explain the lesson.What should someone notice or verify?
03
Send it for review.We check the evidence before adding a case.
Contribute an example