← NEYRO Token — Aurum Foundation Exit-Scam Rebrandreviewed 2026-09-09 · 32 claims checked
Fact-check findings
What an automated fact-checker found when it re-read NEYRO Token — Aurum Foundation Exit-Scam Rebrand against the sources the page cites. Only the most recent review is shown.
Read this first
These findings are produced by an automated reviewer, and its results vary between runs: the same page, checked three times on the same day, came back with 15%, 20% and 34% of its claims disputed, mostly because each run extracted a different number of claims. Treat what follows as leads, not rulings.
“Disputed” means the reviewer could not reconcile the claim with the evidence it cited. It does not mean the claim is false. “Unverifiable” means no reachable source settled it either way.
Nothing here changes the page on its own. A proposed correction is applied only after a human moderator approves it; until then the page reads as it did when reviewed.
disputed
2 claimsThe reviewer could not reconcile the claim with the evidence it cited. This is a lead, not a ruling that the claim is false.
- #9[disputed][awaiting moderator]in section: Exit-Scam Mechanics and Timeline
“A backup domain, neyrolabs.io, had been privately registered on July 16, 2026, nine days before the withdrawal freeze began, suggesting the collapse was premeditated.”
reviewerA backup domain, neyrolabs.io, was privately registered on July 16, 2026, nine days before the withdrawal freeze beganInternal date-math inconsistency: using the page's own July 26 withdrawal-delay date, the domain registration on July 16 precedes it by ten days, not nine.Proposed correction (not yet applied)A backup domain, neyrolabs.io, had been privately registered on July 16, 2026, ten days before the withdrawal freeze began, suggesting the collapse was premeditated. - #10[disputed][awaiting moderator]in the timeline
“nine days before withdrawals were frozen”
reviewerReplacement domain neyrolabs.io was privately registered nine days before withdrawals were frozen (timeline entry)Same underlying error as the Exit-Scam Mechanics section; grouped under the same defect_group.Proposed correction (not yet applied)ten days before withdrawals were frozen
unverifiable
1 claimNo source the reviewer could reach confirms or contradicts the claim.
- #32[unverifiable][awaiting moderator]in section: Community and Victim Reports
“Cryptocurrency invested is characterized by investigators as 'assumed stolen' given the simultaneous platform collapse and wallet drain.”
reviewerCryptocurrency invested is characterized by investigators as 'assumed stolen'Plausible framing given the rest of the record, but the specific quoted phrase 'assumed stolen' could not be independently located or verified against a live source.
partially supported
3 claimsThe cited evidence supports part of the claim but not all of it.
- #2[partially supported][awaiting moderator]in section: Overview
“The platform collected deposits via BNB Smart Chain smart contracts, and according to on-chain analysis approximately $83.5 million was deposited by roughly 9,900 participants, with approximately $77.2 million paid back out — a distribution pattern consistent with early-stage Ponzi mechanics where earlier depositors are paid from subsequent deposits.”
reviewerApproximately $83.5 million was deposited by roughly 9,900 participants, with approximately $77.2 million paid back out (cited to BehindMLM + dehek Substack in Overview; to dehek Substack + CryptoWatchdog in On-Chain Evidence)The figure itself checks out against independent sources, but it is not supported by dehek's Substack article, which is cited for it in both the Overview and On-Chain Evidence sections. The actual source for this statistic is CryptoWatchdog (cited only in On-Chain Evidence, not in Overview). - #3[partially supported][awaiting moderator]in section: On-Chain Evidence
“(4) Broader on-chain data indicates approximately $83.5 million was deposited by roughly 9,900 participants, with approximately $77.2 million paid back out.”
reviewerBroader on-chain data indicates approximately $83.5 million deposited / 9,900 participants / $77.2 million paid out (On-Chain Evidence section)Same underlying issue as the Overview occurrence: the figure is accurate but is presented as flowing from the CrYptO G on-chain investigation, when it actually originates with a different cited source (CryptoWatchdog). - #31[partially supported][awaiting moderator]in section: Community and Victim Reports
“The platform had approximately 758,000 monthly website visitors in June 2026, with primary markets in the United States (19%), Germany (16%), Switzerland (12%), Netherlands (12%), and Greece (8%), suggesting a broad international retail investor base was exposed to the scheme.”
reviewerThe platform had approximately 758,000 monthly website visitors in June 2026, with primary markets in the US (19%), Germany (16%), Switzerland (12%), Netherlands (12%), and Greece (8%)The figures themselves (758K visitors, June 2026, and the exact country percentages) were independently corroborated via search as SimilarWeb-sourced statistics, so they appear accurate, but neither of the two sources cited for this sentence (Trustpilot, OpenPR) actually contains this data — Trustpilot definitively does not, per direct fetch. The correct source is most likely the BehindMLM collapse article, which is cited elsewhere on the page but not here.
confirmed
26 claimsThe cited evidence supports the claim as written.
- #1[confirmed][no action needed]in section: Overview
“Aurum Foundation launched from Dubai in mid-2024 as a multi-level marketing platform marketing an AI trading bot that allegedly generated approximately 30% monthly returns (~1,900% annually).”
reviewerAurum Foundation launched from Dubai in mid-2024 as an MLM crypto platform marketing an AI trading botLaunch timing, location, and headline return figures are corroborated by multiple independent write-ups of the scheme. - #4[confirmed][no action needed]in section: On-Chain Evidence
“(3) One primary wallet received approximately $31.7 million over 17 days through more than 120 transactions, with approximately $30.5 million subsequently redistributed across hundreds of wallet addresses — a pattern consistent with Ponzi-style recycling;”
reviewerOne primary wallet received approximately $31.7 million over 17 days through more than 120 transactions, with approximately $30.5 million subsequently redistributedPrecise match to the cited source's own figures. - #5[confirmed][no action needed]in section: On-Chain Evidence
“Blockchain forensic analysis conducted by investigator 'CrYptO G' of the Avenger Anti-Fraud Alliance, published via journalist Danny de Hek, examined smart contracts on BNB Smart Chain and TRON networks.”
reviewerCrYptO G of the Avenger Anti-Fraud Alliance conducted the blockchain forensic analysis, published via Danny de HekConfirmed. - #6[confirmed][no action needed]in section: Overview
“In late June 2026, under accelerating regulatory pressure, the operators announced a rebrand to 'Neyro' and introduced the NEYRO token, framed as a next-generation non-custodial AI trading agent platform.”
reviewerIn late June 2026 Aurum Foundation rebranded to 'Neyro' and introduced the NEYRO token as a next-generation non-custodial AI trading agent platformConfirmed via independent coverage. - #7[confirmed][no action needed]in section: Overview
“On July 30, 2026, the platform collapsed; operators drained remaining investor funds and released a fabricated 'security incident' announcement blaming unnamed hackers.”
reviewerOn July 30, 2026 the platform collapsed, operators drained funds, and released a fabricated security-incident announcementConfirmed. - #8[confirmed][no action needed]in section: Exit-Scam Mechanics and Timeline
“On July 30, 2026, Aurum Foundation released a statement claiming: 'The attackers gained unauthorized access to a number of internal company resources,' affecting 'internal company funds, user funds held by the company, the neyro.network domain, and portions of the platform's internal databases.'”
reviewerExact quote from the July 30, 2026 'hack' statement: 'The attackers gained unauthorized access to a number of internal company resources' affecting company funds, user funds, the domain, and internal databasesDirect WebFetch of BehindMLM returned HTTP 403 (site blocks automated fetchers); verified via independently indexed search content instead, which matches closely. - #11[confirmed][no action needed]in section: Exit-Scam Mechanics and Timeline
“On July 29, 2026, the neyro.network domain was seized by Ukrainian registrar QHost — an action that was incorporated into the subsequent fake-hack narrative.”
reviewerUkrainian registrar QHost seized the neyro.network domain on July 29, 2026Confirmed. - #12[confirmed][no action needed]in section: NEYRO Token and Rebrand
“The rebrand was fronted by COO Andrew Isaacs, who described Neyro as 'an AI trading agent that operates as an autonomous execution layer.'”
reviewerThe NEYRO rebrand was fronted by COO Andrew Isaacs, who described Neyro as 'an AI trading agent that operates as an autonomous execution layer'Confirmed via a source not even cited in this section (CoinCodex, which is in sources_used generally). - #13[confirmed][no action needed]in section: NEYRO Token and Rebrand
“The NEYRO smart contract was cited as having been reviewed by security firm Hacken, with no critical or high-severity vulnerabilities identified in the contract code itself.”
reviewerThe NEYRO smart contract was reviewed by Hacken with no critical or high-severity vulnerabilities identifiedConfirmed directly against the auditor's own published results, though the audit's existence does not speak to whether the platform as a whole was legitimate — the page correctly frames this as limited to the contract code. - #14[confirmed][no action needed]in section: NEYRO Token and Rebrand
“Investigators and regulators characterized the Neyro rebrand as 'more of the same Aurum Foundation fraud but with an AI marketing ruse,' designed to extend the scheme's lifespan under regulatory scrutiny.”
reviewerInvestigators and regulators characterized Neyro as 'more of the same Aurum Foundation fraud but with an AI marketing ruse'Quote verified verbatim via indexed search content (direct fetch blocked by 403). - #15[confirmed][no action needed]in section: NEYRO Token and Rebrand
“Michael van de Poppe, a prominent crypto analyst, was named as a Neyro Ambassador.”
reviewerMichael van de Poppe was named as a Neyro AmbassadorConfirmed. - #16[confirmed][no action needed]in section: MLM Business Model and Recruiting Practices
“Disruption Banking journalists attended an Aurum Foundation recruiting call and documented that Chief Network Development Officer Shane Morand described the business model as 'referral marketing, direct sales' while explicitly avoiding the word 'investment.' Morand advised recruiters: 'There's no need to get into all the different algorithms...it's going to overwhelm them,' indicating a deliberate strategy to obscure the technical basis for the claimed returns.”
reviewerShane Morand described the business model as 'referral marketing, direct sales' while avoiding the word 'investment,' and said 'There's no need to get into all the different algorithms...it's going to overwhelm them'Confirmed; ellipsis use is a fair, non-distorting shortening of the original quote. - #17[confirmed][no action needed]in section: MLM Business Model and Recruiting Practices
“By comparison, industry benchmarks for legitimate AI trading operations are 5-25% annually.”
reviewerIndustry benchmarks for legitimate AI trading operations are 5-25% annually, versus Aurum's ~30% monthly claimConfirmed. - #18[confirmed][no action needed]in section: MLM Business Model and Recruiting Practices
“Technical code within the platform was found to be written in Cyrillic despite English-language branding, consistent with reports of Russian-speaking operators running the scheme.”
reviewerTechnical code within the platform was written in Cyrillic despite English-language brandingConfirmed. - #19[confirmed][no action needed]in section: Key Figures
“Bryan Benson served as CEO from February 2025. A Peruvian national based in Dubai and Colombia, Benson is alleged by BehindMLM to have functioned as a paid frontman for unnamed Russian operators running the scheme behind the scenes.”
reviewerBryan Benson served as CEO from February 2025, a Peruvian national based in Dubai and Colombia, alleged by BehindMLM to be a paid frontman for Russian operatorsConfirmed. - #20[confirmed][no action needed]in section: Key Figures
“Isaacs had previously held positions at Morgan Stanley and Galaxy Digital, lending perceived institutional credibility.”
reviewerAndrew Isaacs previously held positions at Morgan Stanley and Galaxy DigitalConfirmed, and slightly incomplete rather than wrong (Evercore also on his resume per independent sources, but omission is not an error). - #21[confirmed][no action needed]in section: Key Figures
“He removed his LinkedIn credentials as AURUM COO and NEYRO Co-Founder following the July 2026 collapse.”
reviewerAndrew Isaacs removed his LinkedIn credentials as AURUM COO and NEYRO Co-Founder following the collapseConfirmed. - #22[confirmed][no action needed]in section: Key Figures
“Morand is the co-founder of Organo Gold, a multi-level marketing company connected to a $13.7 million Vietnamese Ponzi scheme. He left Organo Gold after an attempt to pitch crypto investments to distributors in 2018. He subsequently promoted Trujivan (a Tycoon69 Ponzi trojan horse) in 2021 and the Decentra MLM crypto Ponzi in 2022 before joining Aurum Foundation.”
reviewerShane Morand is co-founder of Organo Gold, connected to a $13.7 million Vietnamese Ponzi scheme; left in 2018 after pitching crypto to distributors; later promoted Trujivan (2021) and Decentra (2022)All sub-claims confirmed. - #23[confirmed][no action needed]in section: Regulatory Actions
“Aurum Foundation received formal fraud warnings or regulatory actions from at least ten jurisdictions before its collapse.”
reviewerAurum Foundation received formal fraud warnings or regulatory actions from at least ten jurisdictions, with specific dated actions from Russia (Jul 2025), Nigeria (Jan 2026), New Zealand (May 2026), France (Jun 12, 2026), Poland (Jun 11, 2026), Hong Kong (Jun 23, 2026), Belgium (Jul 6, 2026), and Australia (Jul 14, 2026)Each individual jurisdiction/date pair checked independently below in coverage; the aggregate 'at least ten' claim is actually an understatement — independent coverage also lists the UK, Slovakia, Greece, and Finland as having issued warnings.citedbehindmlm.com/companies/france-blacklist…ation-for-fraud/crypto.news/hong-kong-sfc-flags-aurum-fo…-asset-platform/behindmlm.com/companies/aurum-foundation…-from-hong-kong/behindmlm.com/companies/aurum-foundation…ng-from-belgium/behindmlm.com/companies/second-aurum-fou…-from-australia/behindmlm.com/companies/aurum-foundation…ng-from-nigeria/www.bitget.com/news/detail/12560605473996 - #24[confirmed][no action needed]in section: Regulatory Actions
“France's Autorite des Marches Financiers (AMF) placed aurum.foundation on its crypto-assets national blacklist on June 12, 2026, stating the operator was not authorized to offer financial services in France.”
reviewerFrance's AMF placed aurum.foundation on its national blacklist on June 12, 2026Confirmed against the primary regulator source. - #25[confirmed][no action needed]in section: Regulatory Actions
“Poland's Financial Supervision Authority (KNF) filed a criminal referral to the Warsaw Prosecutor on June 11, 2026, forwarding suspected banking fraud connected to the company's Neobank branding.”
reviewerPoland's KNF filed a criminal referral to the Warsaw Prosecutor on June 11, 2026 over suspected banking fraud tied to Neobank brandingConfirmed, though note the page cites the Belgium article rather than BehindMLM's dedicated Poland/Neobank article for this fact — a minor citation-placement issue, not a factual error. - #26[confirmed][no action needed]in section: Regulatory Actions
“Hong Kong's Securities and Futures Commission (SFC) added Aurum Foundation to its Alert List of suspicious virtual asset trading platforms on June 23, 2026, noting the entity falsely claimed registration in Hong Kong and conducted unlicensed activities in futures contracts and derivatives.”
reviewerHong Kong SFC added Aurum Foundation to its Alert List on June 23, 2026, citing false HK registration claims and unlicensed futures/derivatives activityConfirmed; note the June 23 date is the date these outlets reported/published the SFC action rather than a confirmed SFC internal decision date, a minor precision caveat. - #27[confirmed][no action needed]in section: Regulatory Actions
“Belgium's Financial Services and Markets Authority (FSMA) issued a MiCA fraud warning on July 6, 2026, classifying Aurum Foundation as an unauthorized crypto-asset service provider under EU-wide MiCA rules.”
reviewerBelgium's FSMA issued a MiCA fraud warning on July 6, 2026 classifying Aurum Foundation as an unauthorized CASPConfirmed. - #28[confirmed][no action needed]in section: Regulatory Actions
“Australia's ASIC issued a second fraud warning on July 14, 2026, stating Aurum Foundation 'may be offering or advertising financial services' without an Australian financial services licence.”
reviewerAustralia's ASIC issued a second fraud warning on July 14, 2026Confirmed. - #29[confirmed][no action needed]in section: Regulatory Actions
“Additional warnings were issued by Russia, Nigeria, New Zealand, Greece, and Finland, among others.”
reviewerAdditional warnings were issued by Russia, Nigeria, New Zealand, Greece, and Finland, among othersThe underlying facts check out (Greece and Finland warnings both exist per independent search), but this section provides no source URL for the Greece and Finland warnings specifically, and the sentence redundantly restates Russia/Nigeria/New Zealand, which were already given specific dated citations earlier in the same section. This is a sourcing-completeness issue rather than a factual error; see coverage_gaps. - #30[confirmed][no action needed]in section: Community and Victim Reports
“Trustpilot reviews for aurum-foundation.com contain numerous user reports describing frozen withdrawals, loss of deposited funds, and non-responsive customer support following the July 2026 collapse.”
reviewerTrustpilot reviews document frozen withdrawals, loss of funds, non-responsive support following the July 2026 collapseConfirmed directly against the cited source.
How this fits together. The reviewer reads the published page and its cited sources and records one finding per claim. A human moderator decides whether each proposed correction is applied; those decisions, and the score changes they cause, appear in the audit log. Earlier review runs are not shown here; only the latest reflects the page as it stands.