Chukwuemeka Victor Amachukwu, 40, of Nigeria was sentenced to eight years in prison for schemes that hacked U.S. tax preparers via spearphishing and sold fake standby letter-of-credit investments, SDNY says.
Chukwuemeka Victor Amachukwu, a/k/a 'Chukwuemeka Victor Eletuo', a/k/a 'So Kwan Leung'
BaFin warned on 19 October 2026 that the 'Bafin Bundessonderfรถrderprogramm, Klasse 4a, SEPA-Mietzahlungsverkehr' housing subsidy is fake. Fraudsters use it to collect personal and bank details and sometimes advance payments.
BaFin warned on 19 October 2026 that primefincompany.com is suspected of offering financial, securities and crypto-asset services in Germany without authorisation, presumably misusing the identity of Harlow-based Prime Finance LTD.
primefincompany.com
Website suspected of misusing the identity of Prime Finance LTD (Harlow, England)
BaFin warned on 19 October 2026 that the unknown operators of graziamanagement.com are suspected of offering financial and securities services without authorisation and are misusing the identity of Stuttgart's Grazia Capital Management GmbH.
graziamanagement.com
Website claiming link to Grazia Capital Management GmbH (identity misused)
France's AMF added 26 web addresses (24 distinct sites) to its blacklist of sites offering crypto-assets or crypto services illegally in France, including aureoncorevix.net, essorinvexaro.fr and bitgrokapp.com.
Spain's CNMV warned on 19 October 2026 that Global Rift (globalrift-limited.com, globalrift-ltd.co) is not in its register and is not authorised to provide investment services, Europa Press reports.
Spain's CNMV warned on 19 October 2026 that Diamond Capital (diamondcapitalhf.com, diamondcapitalhfm.com) is not in its register and is not authorised to provide investment services, Europa Press reports.
Spain's CNMV warned on 19 October 2026 that xtbespana.com is not a domain of XTB, S.A., Sucursal en Espaรฑa, and is not authorised to provide investment services, Europa Press reports. The real XTB is not behind the site.
Spain's CNMV warned on 19 October 2026 that Wexford Advisory LTD (wexfordadvisory-ltd.com) isn't registered or authorised to provide investment services and isn't linked to the registered Advisory GPS European Equity, Europa Press reports.
Spain's CNMV warned on 19 October 2026 that websites on myinvestor-ltd.com, myinvestor-limited.com, myinvestor-ltd.co and tairales-ltd.org are unauthorised and unrelated to the registered MyInvestor Banco, S.A., Europa Press reports.
The UK FCA added Quantara Global Markets (quantaraglobalmarketsltd.com) to its Warning List on 19 October 2026, saying the firm is not authorised by it and may be targeting people in the UK. Customers would have no Financial Ombudsman or FSCS protection.
The UK FCA added Global Stock Trading (globalstock-trading.com) to its Warning List on 19 October 2026, saying the firm is not authorised by it and may be targeting people in the UK. Customers would have no Financial Ombudsman or FSCS protection.
The UK FCA added DEMINI TRADES (deminitradefx.com) to its Warning List on 19 October 2026, saying the firm is not authorised by it and may be targeting people in the UK. Customers would have no Financial Ombudsman or FSCS protection.
The UK FCA added Weinvesta (weinvesta.com) to its Warning List on 19 October 2026, saying the firm is not authorised by it and may be targeting people in the UK. Customers would have no Financial Ombudsman or FSCS protection.
The UK FCA added CFXTRADE (cfxtradepro.com) to its Warning List on 19 October 2026, saying the firm is not authorised by it and may be targeting people in the UK. Customers would have no Financial Ombudsman or FSCS protection.
MalwareTips says Mydealperks.com, a page titled 'Costco Gift Card Reward', is a gift-card scam: its claim button opens an affiliate tracking link on linkthem.net and the card never arrives. Costco isn't running it.
mydealperks.com
Claim button routes via linkthem.net affiliate network
MalwareTips says Rob9loc.blogspot.com is a free Robux scam that asks for a Roblox username, runs a fake generator and then traps players behind surveys and app installs. No Robux arrives and Roblox isn't involved.
MalwareTips says Compoiok.blogspot.com is a free Robux scam: it takes a Roblox username, plays a fake generator and then locks the 'reward' behind paid offers. No Robux is delivered and Roblox isn't involved.
MalwareTips rates Wellterrific.com Dangerous (15/100) as a dropshipping store in a scam network of near-identical shops, registered 29 January 2026. It says goods are low quality and returns aren't practical.
MalwareTips rates Thepacestep.com Dangerous (15/100) as a dropshipping store in a scam network of near-identical shops, registered 11 April 2025. It says goods are low quality and returns aren't practical.
MalwareTips rates Pop-grocey.com Dangerous (15/100) as a dropshipping store in a scam network of near-identical shops, registered 30 May 2025. It says goods are low quality and returns aren't practical.
MalwareTips rates Blueqshop.shop Dangerous (18/100) as a copycat store using Blue Q branding, registered 18 May 2026. The real Blue Q (blueq.com) isn't involved and doesn't run the site.
MalwareTips rates Enjoyfball.vip a high-risk dropshipping store (35/100) tied to a network of near-identical scam shops; 5 of 93 VirusTotal vendors flag the domain.
MalwareTips rates Loveamericanragcie.shop a high-risk store in a dropshipping scam network (32/100; 4 of 93 VirusTotal vendors flag it). It uses American Rag Cie's name, but the real brand (americanrag.com) isn't involved.
loveamericanragcie.shop
VirusTotal: 4 of 93 vendors flag the domain; name resembles American Rag Cie, which is not involved
MalwareTips rates Bloxshift.shop a high-risk copycat store (28/100; 7 of 93 VirusTotal vendors flag it). It uses BLOX Racing branding, but the real BLOX Racing (bloxracing.com) isn't involved.
MalwareTips rates Whittakermountaineeringpeak.shop a high-risk copycat store (Safety Score 28/100), registered 25 July 2026. It uses the Whittaker Mountaineering name, but the real Whittaker Mountaineering isn't involved.
whittakermountaineeringpeak.shop
Domain uses the Whittaker Mountaineering name; the real retailer is not involved
MalwareTips rates Colemantrail.com a high-risk copycat store (Safety Score 34/100), registered 11 November 2025. It uses the Coleman name, but the real Coleman isn't involved.
colemantrail.com
Domain uses the Coleman name; the real Coleman brand is not involved
MalwareTips rates Kitchenaidear.com a high-risk copycat store (Safety Score 28/100), registered 31 January 2026. It uses the KitchenAid name, but the real KitchenAid isn't involved.
kitchenaidear.com
Domain uses the KitchenAid name; the real KitchenAid is not involved
MalwareTips rates Wholefoodsmarketlife.com a high-risk copycat store (Safety Score 30/100), registered 10 November 2025. It uses the Whole Foods Market name, but the real Whole Foods Market isn't involved.
wholefoodsmarketlife.com
Domain uses the Whole Foods Market name; the real Whole Foods Market is not involved
MalwareTips describes a fake Zoho 'file shared with you' email for 'eTranzact Proposal.pdf' that leads to a password-stealing page on verify.zohoapps.ru. Zoho and eTranzact are impersonated, not the senders.
verify.zohoapps.ru
Lure document name: eTranzact Proposal.pdf (Zoho and eTranzact are impersonated, not the senders)