Skip to content
Scammers.com
Investment fraudReviewed

Law firm document specialist Chetram 'Tony' Balli charged with insider trading in shares of five NYSE/NASDAQ companies

The U.S. Attorney's Office for the Eastern District of New York said on 12 November 2026 that a criminal complaint was unsealed in Brooklyn charging Chetram Balli, also known as 'Tony Balli', with insider trading in t…

First reported
Reports
1

Source: justice.gov · published

FBI New York news-release graphic dated November 12, 2026, announcing that an employee at a major international law firm was charged with insider trading.
Image: FBI New York

What happened

The U.S. Attorney's Office for the Eastern District of New York said on 12 November 2026 that a criminal complaint was unsealed in Brooklyn charging Chetram Balli, also known as 'Tony Balli', with insider trading in the shares of five companies listed on the NYSE and NASDAQ. He was arrested that morning in Queens. Prosecutors allege that Balli, a document processing specialist at a major New York-based international law firm since about 1989, used material non-public information about the firm's clients' upcoming mergers, acquisitions and partnerships to trade ahead of public announcements, making more than $70,000 in profit between April 2025 and October 2026. One example in the complaint: on 12 May 2025 he allegedly bought about 14,866 shares of E2open Parent Holdings (NYSE: ETWO) shortly before WiseTech Global announced an agreement to acquire it. The FBI New York Field Office investigated, with help from the SEC and FINRA. The charges are allegations and Balli is presumed innocent; no plea was reported.

How the scam works

Unlicensed investment and 'AI trading' sites usually start with a polished sign-up form, a promised high or guaranteed return, and pressure to deposit quickly, often after a call or a message on Telegram. Early small withdrawals may be paid so that you send more. Clone firms copy the name, and sometimes the address or phone number, of a real authorised business. Check the firm on your national regulator's register, and type the official website yourself rather than following a link. A regulator warning or a block order is not a finding that a particular customer lost money; it is a notice that the site is not authorised to offer those services.

Source

Source: https://x.com/NewYorkFBI/status/2120954999148630342 (@NewYorkFBI, Nov 12, 2026, 2:00 PM ET); https://www.justice.gov/usao-edny/pr/employee-major-international-law-firm-charged-insider-trading (USAO EDNY, 12 Nov 2026)

Red flags

  • A promised high, fixed or guaranteed return, or pressure to deposit quickly after a call or a chat message.
  • A firm or website that is not on your national regulator's register, or that copies the name of a firm that is.
  • A request to pay by crypto, a bank transfer or a payment method with weak buyer protection.
  • A new domain, a clone phone number, or withdrawal delays once you try to take money out.

If you were targeted

  1. 1Check the firm and the website on your national regulator's warning list and register before you send money.
  2. 2Type official websites yourself and ignore unexpected calls, ads or Telegram pitches.
  3. 3If you already paid, contact your bank or exchange promptly and keep records of the site, chats and transfers.
  4. 4Report the firm to the regulator in your country and, if you are in the UK, to the FCA.

Norwegian-language crypto trading sign-up sites yeldunravu-norway.com and yeldunravu.shop flagged

PhishDestroy posted on Mastodon on 12 November 2026 two related suspected scam domains, yeldunravu-norway[.]com (registered July 2026) and yeldunravu[.]shop (registered September 2026). Its records describe the first…

  • yeldunravu-norway.com
  • Also yeldunravu.shop; VirusTotal 16/92 and 14/92
  • Unauthorised / AI-trading investment sites flagged 12 Nov 2026
Reported Nov 12, 20261 report

Eight 'AI trading platform' sign-up sites on 185.62.57-58.x flagged, incl. zedarontrader-2ai.com

PhishDestroy posted on Mastodon on 12 November 2026 a series of suspected scam domains that, according to its domain records, all show "AI trading platform" pages with account-registration forms collecting names, emai…

  • zedarontrader-2ai.com
  • Also zeltixaipro.com yieldarioai.click xoven-aisoft.com zentrax-nova-tech.com zenitdexeris.online xixochain.pro
  • Unauthorised / AI-trading investment sites flagged 12 Nov 2026
Reported Nov 12, 20261 report

MalwareTips: mssstock.com's Million Securities claims SEC adviser licence; SEC lists it as exempt, not registered

MalwareTips published an investigation today into Million Securities, which presents mssstock.com as a stock trading platform with wealth management and investment banking services, and whose press releases (distribut…

  • mssstock.com
  • Earlier press-release domain coinln.com; SEC CRD 338838 (Exempt Reporting Adviser, not registered)
  • Unauthorised / AI-trading investment sites flagged 12 Nov 2026
Reported Nov 12, 20261 report

Wexford Advisory clone flagged again by Spain's CNMV on new domain; MalwareTips finds 14% 'fund release' fee notice

MalwareTips published an investigation today into the 'Wexford Advisory' crypto and stock trading site. It reports that Spain's securities regulator, the CNMV, lists the name twice as a clone: an October 19, 2026 entr…

  • market.wexford-advisory.limited
  • Earlier clone domain wexfordadvisory-ltd.com (CNMV Oct 19); back end pro-simp-pd.com per MalwareTips
  • Unauthorised / AI-trading investment sites flagged 12 Nov 2026
Reported Nov 12, 20261 report