What happened
MalwareTips published an investigation today into the 'Wexford Advisory' crypto and stock trading site. It reports that Spain's securities regulator, the CNMV, lists the name twice as a clone: an October 19, 2026 entry for wexfordadvisory-ltd.com (with no relation to the Spanish fund Advisory GPS European Equity, FI) and a second entry dated November 10, 2026 for a different address, market.wexford-advisory.limited, whose comment names a branch of the broker XTB as the real firm. On wexfordadvisory-ltd.com MalwareTips found Silver/Gold/Platinum accounts from $200, $1,500 and $5,000 and a home-page notice titled 'Payment Conditions and Fund Regularization' demanding a 14% payment, split into three commissions and referencing CMC Markets, before funds are released. It found no licence, address, company number, phone or email; the domain was registered September 10, 2026, and its sign-up form and login portal talk to a server on pro-simp-pd.com, registered 95 minutes earlier, which MalwareTips says also serves other trading brands. The genuine fund, XTB and CMC Markets are names used by the site, not its operators. MalwareTips' advice: do not deposit and never pay a fee to release funds.
How the scam works
Unlicensed investment and 'AI trading' sites usually start with a polished sign-up form, a promised high or guaranteed return, and pressure to deposit quickly, often after a call or a message on Telegram. Early small withdrawals may be paid so that you send more. Clone firms copy the name, and sometimes the address or phone number, of a real authorised business. Check the firm on your national regulator's register, and type the official website yourself rather than following a link. A regulator warning or a block order is not a finding that a particular customer lost money; it is a notice that the site is not authorised to offer those services.
Source
Source: https://malwaretips.com/blogs/wexford-advisory-scam-or-legit/
