Investigation by: P. Nair, Financial Crime Researcher · Published 2026-05-17 · Updated 2026-08-31 · 9-minute read · How we score scams

Home›Investigations›WhatsApp AI

WhatsApp AI

WATCHLIST

WhatsApp AI is on Crypto Killer's watchlist pending further investigation, scoring 28/100 on Crypto Killer's threat index. CryptoKiller detected 503 ad creatives impersonating 22 celebrities across 20 countries.

📅 Published: May 17, 2026⏱️ 2172 words · 9 min read👤 Crypto Killer Research Team🔍 CryptoKiller Ad Surveillance

📊

Ad Creatives

387

🌍

Countries Targeted

13

⏰

Days Active

242

⭐

Celebrities Abused

16

Victims report that initial deposits succeed through the platform, but withdrawal requests trigger account lockouts, fabricated compliance fees, and relentless contact demanding additional capital. CryptoKiller's analysis confirms WhatsApp AI exhibits every hallmark of a confidence scheme: celebrity fabrication, geographic dispersion, high-velocity ad deployment (18 new creatives per 7 days), and zero regulatory registration across FCA, SEC, ASIC, or CySEC databases.

⚠️ If you deposited money to WhatsApp AI and cannot withdraw it, you are not the victim of bad luck or market volatility — you have been targeted by an organized fraud operation.

🔬How This Scam Works

WhatsApp AI deploys a four-stage confidence scheme targeting retail investors searching for cryptocurrency trading automation. Each stage is designed to advance the victim deeper into the trap.

📢

Stage 1

Celebrity Impersonation & Geo-Targeted Advertising

• CryptoKiller captured creatives using Cyrillic-script renderings of Mark Zuckerberg's name (Марк Цукерберг, Марк Зукърбърг) alongside regional figures like Fred Mirty and Ион Стурза.

• These ads run across 20 countries, geo-targeted to Armenia, Bulgaria, Moldova, the Baltics, and others.

387 ads

impersonating 22 celebrities

🎯

Stage 2

The Funnel & Deposit Success

Facebook ad creative for WhatsApp AI showing impersonated celebrity endorsement in Cyrillic text

Instant

deposit confirmation

📈

Stage 3

Fake Profits & Psychological Manipulation

• These pages typically collect personal data through lead-generation forms disguised as registration for an AI-powered WhatsApp trading bot.

• Washington State DFI warned in 2025 about WhatsApp group scams using "AI" buzzwords to build trust before requesting deposits into unregulated platforms.

5–15%

fake daily returns displayed

🚨

Stage 4

The Withdrawal Trap & Fee Extraction

• ASIC's 2025 advisory specifically warned against "AI washing" scams making unachievable return claims.

• A retiree lost nearly $300,000 to WhatsApp-based AI crypto scammers who used similar dashboard manipulation tactics, according to reporting by MEXC News.

$500–$5k

unlock fees demanded

🚨

Stage 4

The Withdrawal Trap & Fee Extraction

• The SEC's prosecution of a $14 million WhatsApp crypto fraud ring revealed that operators used stalling tactics and additional fee demands to extract maximum deposits before disappearing with funds.

$500–$5k

unlock fees demanded

🚩Red Flags

🚩

Red Flag 1

Disposable domains with no corporate identity

WhatsApp AI ads funnel traffic to wagpt.site and botaiwa.site. Neither domain displays corporate registration, regulatory licensing, or physical address information. CryptoKiller tracked 503 creatives pointing to these ephemeral domains over 332 days. Disposable landing pages are a hallmark of lead-generation fraud operations that rotate infrastructure to evade takedowns.

🎭

Red Flag 2

Cyrillic celebrity impersonation at scale

22 public figures appear across the campaign. Mark Zuckerberg's name appears in at least 2 Cyrillic transliterations (Марк Цукерберг, Марк Зукърбърг) targeting Bulgarian and Russian-speaking audiences. Cristiano Ronaldo and Justin Welby also appear. None of these individuals have endorsed WhatsApp AI. This multi-language impersonation pattern suggests organized, geo-targeted deception.

⚖️

Red Flag 3

No regulatory registration in any jurisdiction

WhatsApp AI does not appear on the FCA's Financial Services Register, ASIC's register of licensed entities, or SEC EDGAR filings. The campaign targets 20 countries including EU member states (France, Finland, Luxembourg, Estonia, Lithuania, Latvia) where financial service providers require MiFID II authorization. Zero regulatory footprint across 20 jurisdictions is a significant warning signal.

📢

Red Flag 4

Surging ad velocity suggests active scaling

CryptoKiller recorded 0 new creatives in the most recent 7-day window, classified as surging. The campaign has been active since September 15, 2025, accumulating 503 total creatives. Accelerating ad spend typically precedes an exit phase in fraud operations, when operators maximize victim intake before shutting down infrastructure.

🚩

Red Flag 5

WhatsApp brand name exploited for trust

The campaign trades on Meta's WhatsApp brand recognition to imply legitimacy. Meta has no association with this product. ASIC warned in 2025 that scammers exploit messaging platforms like WhatsApp as distribution channels for investment fraud. Washington State DFI issued a separate alert about WhatsApp group crypto scams using AI terminology as a trust mechanism.

🌍

Red Flag 6

Geo-targeting matches known fraud corridors

The 13 targeted countries span Eastern Europe (Bulgaria, Moldova, Montenegro), the Baltics (Estonia, Latvia, Lithuania), the Caucasus (Armenia, Georgia), and Western Europe (France, Finland, Portugal, Luxembourg, Cyprus). This geographic mix matches patterns CryptoKiller has documented in over 500 campaigns where operators target jurisdictions with weaker cross-border enforcement coordination.

🔍Key Investigation Findings

1

CryptoKiller captured at least 2 distinct Cyrillic transliterations of Mark Zuckerberg's name (Марк Цукерберг for Russian-speaking markets, Марк Зукърбърг for Bulgarian audiences), indicating deliberate geo-linguistic targeting.

2

Landing page URLs contain Facebook pixel IDs (1463500268201775 and 1897349947475139) and UTM parameters revealing campaign structure with Russian-language ad set names translated as 'New ad group with Leads objective'.

3

The wagpt.site and botaiwa.site domains use different tracking pixels but identical UTM campaign naming conventions, suggesting a single operator managing multiple funnels.

4

Ad creatives targeting Georgia (GE) and Armenia (AM) carried no celebrity attribution, while Baltic and Moldovan creatives heavily featured Zuckerberg impersonation — a segmentation strategy matching prior Eastern European fraud campaigns in our database.

✅What To Do If You've Been Scammed

📋

Report to FBI IC3

ic3.gov

⚖️

File FTC Complaint

reportfraud.ftc.gov

🏦

Contact Your Bank

Request a chargeback

🔑

Change All Passwords

Secure your accounts

📸

Document Everything

Screenshots, emails, transactions

🚨

Report to Local Police

Needed for insurance claims

🔬Our Investigation Methodology

CryptoKiller automated ad-surveillance technology scanned Meta, Google, TikTok, and X ad libraries between September 15, 2025 and August 13, 2026, capturing 503 unique creatives associated with WhatsApp AI. Each creative was logged with geographic targeting data, celebrity impersonation flags, and landing page URLs. The investigation cross-referenced findings against regulatory databases including the FCA Financial Services Register, ASIC's licensed entity register, and SEC EDGAR. Pattern matching drew on Crypto Killer's library of over 500 documented fraud campaigns. Landing pages at wagpt.site and botaiwa.site were archived and analyzed for registration forms, corporate disclosures, and regulatory claims. Source materials include SEC enforcement actions, ASIC consumer warnings, and Washington State DFI alerts.

Line chart showing WhatsApp AI ad creative count increasing over 242 days with surging recent velocity

Reviewed by: Crypto Killer Research Team

Crypto Killer's threat analysis team has investigated over 16 celebrity-impersonation crypto campaigns since 2023. CryptoKiller's surveillance infrastructure monitors ad creatives across 4 major ad networks in real time, flagging unauthorized celebrity likeness usage and disposable domain patterns. The team maintains cross-referenced databases of regulatory warnings from 30+ financial authorities globally. This WhatsApp AI investigation applies the same forensic methodology used in prior exposures that were subsequently cited in regulatory enforcement actions.

Published: May 17, 2026 · 2172 words · 9 min read

📅

Campaign Timeline 242 days · Sep 2025 → May 2026

ACTIVE

🔍

First Detected Sep 15, 2025

First scam ad creative captured by CryptoKiller surveillance network

🌍

Campaign Expansion Oct 15, 2025

Operation scaled to 20 countries using 12 impersonated celebrities

📈

Peak Activity Jan 14, 2026

387 total ad creatives deployed across 20 countries

⚠️

Still Active May 15, 2026

18 new ad creatives detected in the last 7 days — campaign remains operational

🛡️

Investigation Published May 17, 2026

Crypto Killer published this threat assessment with a score of 28/100

Evidence: Fraudulent Ad Creatives by Country

The following screenshots were captured by CryptoKiller ad surveillance. Each image shows a real scam advertisement impersonating a public figure without their consent.

🇱🇻 Latvia — 70 ads detected

Марк Цукерберг

🇪🇪 Estonia — 45 ads detected

Марк Цукерберг

🇱🇹 Lithuania — 38 ads detected

Марк Цукерберг

⚠️ Threat Score

28/ 100

Watchlist

Threat Intelligence

Ad Creatives387

Countries13

Celebrities Abused16

7-Day Velocity18 new

Campaign Duration242 days

First DetectedSep 15, 2025

Last ActiveMay 15, 2026

StatusActive Scam

Geographic Targeting

OtherAM, CY, GE, LU, MD, ME

EuropeBG, EE, FI, FR, LT, LV, PT

Regulatory Status

✕FCA: None

✕SEC: None

✕ASIC: None

✕CySEC: None

⛔Final Verdict

WhatsApp AI is under active investigation. Verify before depositing.

Verify the platform’s regulatory status independently before depositing any money.

Based on analysis of 503 ad creatives across 20 countries.

Sources & References

🔗SEC Cracks Down on $14 Million Crypto Fraud Ring Using WhatsApp Groupsnews

🔗ASIC ramps-up action to protect consumers from AI-powered online investment scamsregulatory

🔗Washington State DFI - WhatsApp Cryptocurrency Scams Alertgovernment

🔗AI Crypto Scammers Drained a Retiree's $300K Savingsnews

🔗Internet Crime Complaint Center (IC3)government

🔗FTC ReportFraud.ftc.govgovernment

🔗Action Fraud UKgovernment

⚠️

Were You Targeted by WhatsApp AI?

Your report helps warn others and builds the evidence trail against this operation. If you've lost money, act quickly — chargebacks are time-sensitive.

⚠️ Beware of "recovery agents" who contact you promising to retrieve your money for an upfront fee. These are often secondary scams targeting victims of WhatsApp AI and similar frauds.

When this review may not apply: This review may not apply if you are researching Meta's actual AI features integrated into WhatsApp (such as Meta AI chat). WhatsApp AI as analyzed here refers specifically to the ad campaign operating through wagpt.site and botaiwa.site domains. If you arrived at this page looking for reviews of WhatsApp's official AI assistant, this investigation does not cover that product. Crypto Killer publishes negative findings that reduce our affiliate revenue potential — we earn nothing from this watchlist entry. CryptoKiller's surveillance dataset of 503 creatives is independently verifiable against Meta's Ad Library.

Important Disclaimer

This review reflects intelligence gathered between September 15, 2025 and August 13, 2026. WhatsApp AI scores 28/100 and is classified as watchlist — not a Watchlist designation. Findings are based on ad-surveillance data and public regulatory records. This content is for informational purposes and does not constitute financial or legal advice. Consult a licensed professional before making investment decisions. Data may not reflect changes after the last observed date.