Key Takeaways
- • CySEC issued a formal warning on September 4, 2026, identifying 10 unauthorised websites operating without proper regulatory authorisation for investment services or crypto-asset activities, including amazon-forex.com and novatradecore.com.
- • The blacklisted domains lack authorisation under Article 5 of Law 87(I)/2017 (investment services) and Article 59 of Regulation (EU) 2023/1114 (crypto-asset services), making them illegal operators in Cyprus's regulated financial ecosystem.
- • CySEC explicitly cautioned investors against relying on website branding or trading interfaces as proof of regulatory status, urging verification through the regulator's official database before transferring funds or sharing personal information.
- • The identified unauthorised platforms span forex trading, CFD services, and crypto-asset offerings, reflecting ongoing regulatory enforcement against the proliferation of unregistured digital asset and derivatives trading venues.
- • Investors are directed to verify the exact legal entity, regulatory status, and service authorisation scope before engaging with any investment or crypto platform, particularly given the difficulty distinguishing legitimate providers from unauthorised operators through online interfaces alone.
Summary
The Cyprus Securities and Exchange Commission (CySEC) has issued a regulatory warning targeting 10 unauthorised websites operating without proper licensing for investment or cryptocurrency services. The warning, dated September 4, 2026, represents a formal investor protection measure against the ongoing proliferation of unregistered trading and crypto platforms in the Mediterranean jurisdiction.
The blacklisted domains include amazon-forex.com, novatradecore.com, vall-fin.com, daoroyal.com, capitaldealhub.com/AI_app_es, digiteamagency.com/second-income/, seamanfx.com, newfuturevip.com, trademarketcup.com, and fxtrade.app. According to CySEC's enforcement notice, these entities operate without authorisation under Article 5 of Law 87(I)/2017, which governs investment services and activities in Cyprus, or Article 59 of Regulation (EU) 2023/1114, the EU's framework for crypto-asset service providers. CySEC's designation does not characterise the platforms as scams or quantify specific investor losses but focuses strictly on their regulatory non-compliance.
The regulatory body emphasised that investors cannot rely on website branding, domain names, or trading interfaces as evidence of authorisation. Instead, market participants should consult CySEC's official database to verify whether an entity holds valid authorisation before conducting business. This guidance is particularly critical for forex and CFD traders, where distinguishing between regulated investment service providers and unauthorised venues represents a material risk management function. The same verification protocol applies to crypto-asset service providers, where regulatory status directly impacts custody safeguards, operational compliance, and investor recourse mechanisms.
CySEC's warning underscores a broader enforcement pattern across European financial regulators targeting unauthorised digital asset and derivatives trading platforms. The regulator has urged investors to independently verify the exact legal entity, its regulatory status, and the specific services covered by any authorisation before transferring capital or disclosing personal information. For institutional investors and family offices evaluating third-party trading venue counterparties, this CySEC action reinforces the necessity of conducting independent regulatory due diligence beyond commercial representations.
The blacklisted domains include amazon-forex.com, novatradecore.com, vall-fin.com, daoroyal.com, capitaldealhub.com/AI_app_es, digiteamagency.com/second-income/, seamanfx.com, newfuturevip.com, trademarketcup.com, and fxtrade.app. According to CySEC's enforcement notice, these entities operate without authorisation under Article 5 of Law 87(I)/2017, which governs investment services and activities in Cyprus, or Article 59 of Regulation (EU) 2023/1114, the EU's framework for crypto-asset service providers. CySEC's designation does not characterise the platforms as scams or quantify specific investor losses but focuses strictly on their regulatory non-compliance.
The regulatory body emphasised that investors cannot rely on website branding, domain names, or trading interfaces as evidence of authorisation. Instead, market participants should consult CySEC's official database to verify whether an entity holds valid authorisation before conducting business. This guidance is particularly critical for forex and CFD traders, where distinguishing between regulated investment service providers and unauthorised venues represents a material risk management function. The same verification protocol applies to crypto-asset service providers, where regulatory status directly impacts custody safeguards, operational compliance, and investor recourse mechanisms.
CySEC's warning underscores a broader enforcement pattern across European financial regulators targeting unauthorised digital asset and derivatives trading platforms. The regulator has urged investors to independently verify the exact legal entity, its regulatory status, and the specific services covered by any authorisation before transferring capital or disclosing personal information. For institutional investors and family offices evaluating third-party trading venue counterparties, this CySEC action reinforces the necessity of conducting independent regulatory due diligence beyond commercial representations.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.