You’re added to a group with a name that sounds like a stock market academy. There’s a ‘professor’ giving free lessons, an ‘assistant’ patiently answering questions, and dozens of members posting screenshots of their profits. Spain’s CNMV described this scheme in an alert dated April 11, 2025, and its recommendation is blunt: reject the offers and do not follow the steps they propose.
This guide is for anyone already inside one of these groups, or for anyone who wants to explain it to a relative before they join. Below you’ll see how the deception advances, which warning signs give it away, and how to check on the CNMV’s website whether the supposed analyst or platform is authorized to operate in Spain.
- Four-phase script: The scam follows a predictable sequence—free training as bait, early wins to build trust, a ‘star investment’ that demands maximum capital, and a collapse followed by expulsion and disappearance.
- Red flags: Promises of easy, fast profits, claims of market certainty, requests for personal data or upfront payments, and pressure to trade through a specific intermediary or unfamiliar platform.
- Verification: Two searches on the CNMV’s own website—the Official Registers and the Warning List—can reveal whether an entity is authorized, and cloned identities are flagged with the word ‘clone’.
How a fraudulent investment group operates, step by step
The script has four phases and almost never skips any. Only the product changes; the mechanics stay the same.
1. Training is the bait. According to the CNMV, scammers invite people to join with the promise of training and investment recommendations from supposed financial experts. To capture attention, they often impersonate recognized individuals or genuinely registered financial entities.
2. First you win. The regulator explains that the first investments turn out well. This is the most effective part of the deception: the victim gains confidence and, moreover, invites people from their own circle. Every new member who arrives through a friend’s recommendation is a member who doesn’t suspect a thing.
3. The ‘star investment’. Once trust is won, the special operation arrives—the one where you must put in as much money as possible to obtain exorbitant gains in a few days. The CNMV notes that they usually recommend shares from foreign markets, typically small-cap stocks, and that the purchase is made through intermediaries proposed by the group itself.
4. The crash and the disappearance. After the big purchase, the price plunges and loses almost all its value. Victims are advised to hold on or even buy more, and eventually they are expelled from the group and the organizers vanish.
There is a variant: instead of shares, the group provides links to fraudulent platforms for trading currencies (Forex), bonds, or ‘portfolios managed by artificial intelligence’, according to the same alert.
My reading of phase 3 is that the group doesn’t need to steal your password or hack anything: it’s enough for many people to buy the same small-cap stock at the same time. The seller at that moment isn’t you. And the ‘professor’ teaching you to read charts is, in reality, teaching you to trust him.
The official alert mentions only WhatsApp. My reading is that nothing in this mechanism depends on the application, and a Telegram channel or group would work exactly the same way.
The signs that give it away before you send a single euro
The CNMV’s list works as a quick test. If the group meets even one of these conditions, you already know plenty:
- It promises easy, fast profits. The regulator considers this a clear sign of financial fraud.
- Someone claims to know what the market will do or guarantees success. No one can predict market movements with accuracy.
- It asks for personal data, such as your phone number or email. The CNMV recommends not providing it.
- It requests upfront payments in the form of fees, commissions, or other charges to recover your money or collect profits.
- It tells you to invest with a specific intermediary or through a link to a platform you didn’t know.
The fourth point closes the circle. When a victim tries to withdraw their money and is asked for a prior payment, the fraud is no longer an investment scam—it’s a recovery scam.
Also beware of the ‘classes’. Back in June 2019, the CNMV warned about financed trading accounts tied to training courses, where users paid for courses sometimes costing several thousand euros with the promise of an account that never arrived. The regulator clarified at the time that the courses themselves fall outside its supervisory scope. Just because someone teaches stock market investing doesn’t mean anyone is watching them.
How do I check whether the analyst or platform is authorized?
With two searches on the CNMV’s website, always typing the address into your browser yourself. The agency insists that verification must be done from its own site and never through links received by email or from the website of the company offering you the investment.
- Official Registers queries. These list the registered entities that may provide investment services in Spain. If the intermediary recommended by the group doesn’t appear, you have no proof it can operate with you, and the CNMV advises contacting only registered entities.
- Warning List search. The search tool for warned entities lists the so-called financial ‘chiringuitos’—unauthorized firms—that the CNMV and other regulators have flagged.
There is a nuance worth knowing. Many scammers copy the identity of a legal entity. In a March 2023 alert, the CNMV explained that in such cases regulators add the word ‘clone’ to the name in the warning search tool. That’s why it isn’t enough for the name to exist: the web domain, postal address, registration number, and trade name must match those in the official register.
In addition, the CNMV points to IOSCO’s I-SCAN portal, which gathers alerts about unauthorized entities from more than 150 regulators worldwide. And if any doubt remains, the regulator handles investor inquiries on 900 535 015.
My view is that the useful question isn’t ‘does this professor know about the stock market?’ but ‘why would someone who knows so much spend their days giving free classes in a WhatsApp group?’ Authorized advisors charge fees, sign contracts, and appear in a public register. The one handing out free recommendations and pushing you toward their intermediary has to make money some other way—and that other way is your transfer.
If you have already invested, stop sending money even if they tell you it’s to unlock the previous amount, save screenshots of the entire group, and report it to the police. That isn’t dramatic advice: it’s what separates one loss from two.