Skip to main content
Sign in
Cavepay1 decision on this page

Audit log

Every state-changing event for Cavepay: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

  1. #1publishby system:backfill
    2026-07-22 02:11:34Z
    Score: ?? (no score change)
    anchorpending
    chain
    hash
    9yRFjyNTFHit…XPufXCKqsha256 → base58
    verifying row…
    canonical bytes (6665 B) ▸
    {"actor":"system:backfill","investigation_id":"f5b3bac1-fa7b-46cd-80ba-3a0cfeea63cb","kind":"publish","page_slug":"cavepay","published_at":"2026-07-22T02:11:34.679Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Cavepay","sections":[{"content":"Cavepay was advertised as a multi-cryptocurrency wallet application, hosted at the domain cavepay.app, with an associated Telegram channel titled \"CavePay | Your Crypto Wallet\" used to promote the service to a Web3/crypto audience. No official company registration, team identities, whitepaper, funding history, or app-store listing (Apple App Store or Google Play) could be located for this product, which is unusual for a wallet service seeking user trust and is itself a notable transparency gap. No press coverage from crypto or mainstream news outlets discussing Cavepay as a product or company was found.","heading":"What Cavepay Appears To Be","severity":"medium","sources":[{"credibility":3,"name":"Telegram Channel \"CavePay | Your Crypto Wallet\" listing","type":"social_media","url":"https://nicegram.app/hub/channel/cavepay"},{"credibility":3,"name":"cavepay.app Reviews | Scamadviser","type":"research","url":"https://www.scamadviser.com/check-website/cavepay.app"}]},{"content":"The domain cavepay.app was assessed by Scamadviser, an automated website-trust aggregator, which assigned it a trust score of 0 out of 100 and a \"Likely Unsafe\" rating. The underlying source cited for this rating is IPQualityScore (IPQS), a third-party fraud-detection vendor, which is reported to have flagged cavepay.app both for phishing and as a generally suspicious website. These are automated, algorithmic flags rather than findings from a human investigation, regulatory body, or law-enforcement action, so they should be read as an indicator of risk rather than proof of an established phishing scheme. No independent, named victim reports, law-enforcement complaints, or journalistic investigations corroborating a phishing scheme tied to Cavepay were found.","heading":"Phishing Flag and Automated Risk Rating","severity":"high","sources":[{"credibility":3,"name":"cavepay.app Reviews | Scamadviser (citing IPQS phishing flag)","type":"research","url":"https://www.scamadviser.com/check-website/cavepay.app"}]},{"content":"As of this investigation, the domain cavepay.app failed to resolve via DNS, consistent with Scamadviser's own observation that the site \"appears to no longer be online\" and had not been successfully scanned by its crawler in over 30 days prior to that report. WHOIS registration data for the domain is hidden/private, so no registrant, operating company, or jurisdiction could be identified. The combination of concealed ownership, apparent abandonment, and a prior phishing flag is consistent with patterns seen in short-lived or opportunistic crypto wallet projects, though no direct evidence (e.g., confirmed victim funds lost, on-chain trace of stolen assets, or a regulatory action) was found to establish that Cavepay operated as an active scam rather than simply a defunct or low-traffic product.","heading":"Domain Appears Offline and Ownership Is Concealed","severity":"medium","sources":[{"credibility":3,"name":"cavepay.app Reviews | Scamadviser","type":"research","url":"https://www.scamadviser.com/check-website/cavepay.app"}]},{"content":"Searches for \"Cavepay\" also surface entities that do not appear to be connected to the cavepay.app crypto wallet. A UK-registered company named \"CAVEPAY LIMITED\" (company number 09627017) exists on the UK Companies House register, but no evidence was found linking it to the crypto wallet service, and its business activity, status, and any connection to cryptocurrency could not be confirmed from available public data. Separately, \"Caveo Pay\" (caveopay.com) is an unrelated conventional payment-processing company (point-of-sale, e-commerce, and mobile payments) with no apparent tie to cryptocurrency or to the cavepay.app wallet. These are noted here only to avoid conflating unrelated organizations under a similar name; neither is the subject of the risk findings above.","heading":"Disambiguation: Unrelated Entities With Similar Names","severity":"low","sources":[{"credibility":1,"name":"CAVEPAY LIMITED — UK Companies House filing","type":"official","url":"https://find-and-update.company-information.service.gov.uk/company/09627017/more"},{"credibility":2,"name":"Caveo Pay — Accept Payments","type":"official","url":"https://caveopay.com/accept-payments/"}]},{"content":"No SEC, CFTC, FinCEN, or other regulatory actions were found against any entity named Cavepay. No court filings, lawsuits, or law-enforcement actions were identified. No coverage in Tier 1 outlets (Reuters, Bloomberg, WSJ, NYT) or Tier 2 crypto-focused outlets (CoinDesk, The Block, Decrypt) was found. This absence of coverage is itself notable given the entity's apparent phishing flag and offline status, but it should be read as an information gap rather than exoneration — small-scale or short-lived crypto wallet apps frequently escape mainstream reporting regardless of legitimacy or lack thereof.","heading":"Absence of Regulatory, Legal, or Major News Findings","severity":"medium","sources":[]}],"sources_used":[{"credibility":3,"name":"cavepay.app Reviews | check if site is scam or legit | Scamadviser","type":"research","url":"https://www.scamadviser.com/check-website/cavepay.app"},{"credibility":3,"name":"Telegram Channel \"CavePay | Your Crypto Wallet\" - Nicegram Hub","type":"social_media","url":"https://nicegram.app/hub/channel/cavepay"},{"credibility":1,"name":"CAVEPAY LIMITED — UK Companies House filing","type":"official","url":"https://find-and-update.company-information.service.gov.uk/company/09627017/more"},{"credibility":2,"name":"Caveo Pay — Accept Payments","type":"official","url":"https://caveopay.com/accept-payments/"}],"summary":"Cavepay (marketed at the domain cavepay.app and via a Telegram channel) presented itself as a multi-cryptocurrency wallet service. Independent, credible reporting on the project is essentially nonexistent: no Tier 1 or Tier 2 news coverage, regulatory action, or court records were found. The only substantive third-party assessment located is an automated scam-detection aggregator that flags the site for phishing and gives it the lowest possible trust rating, and the domain no longer resolves. Given the near-total absence of verifiable information, this page should be treated as low confidence — it documents red flags and an information vacuum rather than a confirmed fraud finding or a confirmed clean bill of health.","timeline":[]},"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision 8117ce89-7748-4251-9428-48ab730f190e
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine — python -m src.verify_decision <event_id>.