Aurum Foundation Fraud: UK, ASIC, and 9 Regulators Have Warned Victims. What Happens Now (2026)

Aurum Foundation collapsed, then tried to sell your investor data to Tag Markets for $5 million. That deal has now fallen apart. Here is what victims need to know.

By DefendMe Editorial, Intelligence Team · 2026-09-01 · Hot News

How It Works

Aurum Foundation operated as a multi-level marketing crypto Ponzi. Participants were recruited to invest in what was presented as a crypto trading or yield-generating platform. Returns were not generated by genuine trading activity. Instead, money deposited by new recruits was used to pay returns to earlier participants, a structure consistent with a Ponzi scheme as identified in fraud warnings from regulators including the UK Financial Conduct Authority and the Australian Securities and Investments Commission.

The scheme used a layered promotional structure. Russian-language website source code identified in publicly available technical records indicates the platform was built and controlled by Russian-speaking operators. Those operators did not present themselves publicly. Instead, they placed a series of fronts in visible roles: Bryan Benson, identified as a Peruvian national, was appointed CEO and appeared on official webinars. Shane Morand, a Canadian national and former co-founder of Organo Gold, served as the primary English-language promoter. Andrew Isaacs, believed to be a South African national, held a co-founder role and has continued fronting the scheme under its Neyro relaunch. All three have reportedly ceased public appearances since early August 2026.

On the recruitment side, top earners within Aurum's MLM structure were reportedly generating approximately $710,000 per month at peak. That figure points to a pyramid recruitment engine generating very large sums, the bulk of which would have come directly from funds deposited by lower-level participants. When recruitment slowed and the Ponzi could no longer sustain payouts, the platform collapsed. Operators claimed the platform had been hacked, a claim DefendMe analysts note is a common exit-scam narrative used to avoid returning funds.

Following collapse, the operators attempted a partial reboot strategy. The platform relaunched under the Neyro brand. Separately, co-founder Andrew Isaacs publicly announced a so-called strategic partnership with Tag Markets, a Dubai-based operator with its own portfolio of schemes targeting victims of previously collapsed MLM platforms. The publicly disclosed terms of that arrangement involved Tag Markets paying five million US dollars for access to Aurum's investor database, framed to victims as a dedicated trading account recovery mechanism. Tag Markets publicly denied any such agreement had been finalized. Aurum subsequently announced it was placing the partnership on hold. The investor database was not transferred, and no recovery funds were distributed.

Red Flags. What Victims Reported

• Regulators in eleven jurisdictions including the UK, Australia, Belgium, Finland, Slovakia, Greece, Nigeria, New Zealand, Hong Kong, and Russia have each issued formal fraud warnings against Aurum Foundation
• The platform collapsed and operators claimed a hack, a narrative consistent with exit-scam behavior rather than a genuine security incident
• Russian-language source code was found embedded in the platform website, indicating control by operators who deliberately concealed their identity behind named figureheads
• The CEO and primary English-language promoter both disappeared from public webinars within days of each other in early August 2026
• A five-million-dollar partnership announced to victims as a recovery mechanism was publicly denied by the alleged partner within 24 hours
• The proposed database buyer, Tag Markets, has itself received fraud warnings from regulators in Russia, Austria, Slovenia, and Luxembourg
• Tag Markets has a documented history of absorbing victim databases from collapsed MLM schemes and relaunching them under new brand names
• The planned reboot brand for the database transfer, OrbitOne, was prepared but never launched, suggesting the deal collapsed mid-execution
• Top-level MLM recruiters were reportedly earning around $710,000 per month, indicating a massive pyramid structure funded by lower participants
• Operators are based in Dubai, a jurisdiction where meaningful regulatory enforcement against these schemes is rare

Investigation Findings

DefendMe analysts reviewed publicly available regulatory notices, company communications, and recorded webinar content related to Aurum Foundation and Tag Markets. The record of official action against Aurum Foundation is extensive. Formal fraud warnings have been issued by the UK Financial Conduct Authority, the Australian Securities and Investments Commission (on two separate occasions), the Belgian Financial Services and Markets Authority under MiCA provisions, the Finnish Financial Supervisory Authority, the National Bank of Slovakia, the Hellenic Capital Market Commission in Greece, the Nigerian Securities and Exchange Commission, the Financial Markets Authority of New Zealand, the Securities and Futures Commission of Hong Kong, and the Bank of Russia. Each of these actions constitutes an official regulatory determination that Aurum Foundation was soliciting investors without authorization or in a manner consistent with fraud.

On August 24, 2026, Andrew Isaacs appeared in a publicly recorded webinar and announced a strategic partnership with Tag Markets. The disclosed terms included a five-million-dollar payment by Tag Markets for access to Aurum's investor database, presented to victims as the foundation of a recovery trading account. Within approximately 24 hours, Tag Markets issued a formal public denial distributed through communication channels tied to its existing scheme network, including its Zeus Funding platform. That denial stated, in Tag Markets' own words, that no partnership, commercial agreement, or recovery arrangement exists with Aurum, that no funds had been allocated or committed, and that Aurum's public announcement was issued without Tag Markets' knowledge. Aurum subsequently issued its own statement placing the partnership on hold, citing disagreements over the transfer of its full partner structure and community concerns about Tag Markets' direct recruitment of Aurum members.

Open-source technical records indicate that Tag Markets operates its portfolio of schemes off subdomains of a shared domain, ibportal.io. Previous database acquisitions from collapsed platforms, specifically Crowd1 and Daisy Global, resulted in victim data being migrated to new Tag Markets-branded products. The planned OrbitOne brand appears to have been prepared for an equivalent migration. The fact that the transfer did not proceed leaves Aurum victims in a more exposed position, with no recovery mechanism in place and operators who have reduced or eliminated their public presence.

Criminal Context and Enforcement Landscape

Aurum Foundation has been formally identified as a fraudulent or unauthorized investment scheme by regulators in the United Kingdom, Australia, Belgium, Finland, Slovakia, Greece, Nigeria, New Zealand, Hong Kong, and Russia. These are not cautions or informal advisories. Each represents an official determination by a licensed financial authority that Aurum Foundation was operating unlawfully in that jurisdiction. That body of regulatory action means victims in those countries have a documented basis for filing criminal complaints and regulatory reports that will be taken seriously.

Tag Markets, the entity that briefly appeared to offer a path to partial recovery, carries its own regulatory history. Fraud warnings have been issued against Tag Markets by authorities in Russia, Austria, Slovenia, and Luxembourg. DefendMe analysts identified a documented operational pattern in which Tag Markets targets the victim communities of collapsed MLM schemes, acquires their investor databases, and migrates those users into new branded products under the Tag Markets infrastructure. Prior schemes processed through this model include platforms targeting former Crowd1 and Daisy Global victims. The proposed OrbitOne product appears to have been designed to perform the same function for Aurum victims. That deal collapsed, but the underlying risk of being recruited into a Tag Markets product remains active.

The individuals named as public faces of Aurum, Bryan Benson, Andrew Isaacs, and Shane Morand, are nationals of Peru, South Africa, and Canada respectively. Their connections to countries with functioning extradition frameworks means that if criminal investigations are opened by authorities in jurisdictions where victims are located, arrest and prosecution are realistic possibilities. Filing complaints now, with local police, national financial crime units, and the regulators that have already issued warnings, creates the formal record that investigators need to act.

What Victims Should Do Now

1. Stop depositing money into Aurum, Neyro, or any platform presented as a continuation or recovery vehicle for Aurum. Every new deposit is an additional unrecoverable loss.
2. Do not pay any fee to any person or service claiming they can recover your Aurum funds. Recovery fee fraud targeting Ponzi victims is extremely common and will compound your losses.
3. Do not contact Aurum operators, Tag Markets, or any representative asking them to return your money. All further communication should go through official channels or a qualified specialist.
4. Preserve all evidence immediately: screenshots of your account balance, deposit confirmations, wallet transaction IDs, webinar recordings, promotional messages, and any communications from Aurum or its promoters. Save copies in a location you control.
5. File a complaint with the financial regulator in your country. If you are in the UK, contact the FCA. If you are in Australia, contact ASIC. If you are in Belgium, contact the FSMA. Regulators in all eleven warning jurisdictions have existing files on Aurum and will receive your complaint in that context.
6. Submit a report to your national law enforcement financial crime unit, such as Action Fraud in the UK or the equivalent in your country. Reference the existing regulatory warnings by name to establish that this is a known fraud.
7. Contact DefendMe to have your crypto transactions traced. Blockchain records of your deposits can be preserved, analyzed, and submitted as evidence in regulatory complaints and civil proceedings.

Source: https://behindmlm.com/companies/aurum-investor-database-sale-to-tag-markets-abandoned/