Guide

Is that AI trading bot legit? How to check before you hand over money or API keys

Short answer: Treat it as a scam until it passes these checks. US regulators call guaranteed high returns with little risk a classic sign of fraud, and AI can’t predict the market. A real tool never needs your seed phrase or a key that can withdraw, and never charges a “tax” or fee before you can take your money out.

By Agent Lane Editorial · Page dated 31 October 2026

Can an AI trading bot guarantee returns?

No. The CFTC says AI technology can’t predict the future or sudden market changes, and warns about bots sold with claims of huge returns or 100% “win” rates. The FTC says only scammers guarantee profits or big returns. A joint alert from the SEC, NASAA and FINRA calls high guaranteed returns with little or no risk a classic warning sign of fraud.

One CFTC case shows how it goes: a bot program that guaranteed at least 10% a month took more than $1.7 billion in bitcoin from at least 23,000 people. Very little was actually traded; it was a Ponzi scheme.

What are the red flags of a fake AI trading bot?

  • Guaranteed, fixed or very high returns, or a “can’t lose” system (CFTC, SEC, FTC).
  • You found it through a stranger: a dating match, a “wrong number” text, a social media ad or a group chat led by a “guru” (FTC, FinCEN, California DFPI).
  • You must send your crypto to their platform instead of keeping it at an exchange you already use. DFPI calls these fraudulent trading platforms that can show fake price moves and fake gains.
  • Pushes you to bring in friends or family, sometimes for a referral bonus (CFTC, FinCEN).
  • Pressure and deadlines: invest by a set date or miss out (FinCEN).
  • Not registered with any regulator. The SEC, NASAA and FINRA say lack of registration is a prompt to dig further before investing.
  • Asks for your seed phrase, password or 2-step codes. No real tool needs them.
  • A “tax” or fee to withdraw. See the next question.

Does a successful test withdrawal prove a bot is real?

No. A small withdrawal that works is part of the script. FinCEN says pig-butchering scammers may let you withdraw a small amount to build your confidence before pushing you to invest more. One complaint in California’s DFPI scam tracker describes a promoter who showed a successful $200 withdrawal early on.

What matters is what happens when you try to take real money out. The FBI and FinCEN say victims who try to cash out are told to pay “taxes” or early withdrawal fees first, and the FTC says you may not be able to withdraw at all. If a platform asks you to pay to get your own money out, stop sending money and report it.

How do I check an AI trading bot before I pay?

  1. Look up the company and the people. Check registration and disciplinary history with the free search on Investor.gov or your state securities regulator. The CFTC suggests a reverse image search on the people behind it.
  2. Check how old the website is. The CFTC suggests looking up the domain’s registration date at lookup.icann.org. A brand-new site claiming years of results is a warning.
  3. Search the name with “scam,” “review” and “complaint” (FTC), and search a state list such as California’s Crypto Scam Tracker.
  4. Count the costs. The CFTC says to weigh fees, spreads and subscription costs against any returns.
  5. Get a second opinion from a financial professional or someone you trust, as the CFTC suggests.
  6. Start small and on your terms. Keep funds at an exchange you already use, connect with a limited key (below), and only put in what you can afford to lose. See paper before live.

What API key permissions should a trading bot get?

An API key is a password for software. Exchanges let you choose what each key can do. Kraken says to treat a key like your username and password.

  • Read-only (view or query). The bot can see balances and orders but can’t change anything. Start here.
  • Trade. The bot can place and cancel orders. Give this only if you want it to trade for you.
  • Withdraw or transfer. The bot can move money out of your account. Never give this to a trading bot. Kraken says a key given to a third party for trading “would almost certainly not require” Withdraw Funds, and Coinbase says its Transfer permission can make withdrawals and bypasses 2-step verification.

Also use the safety settings exchanges offer, such as Kraken’s IP address restriction and key expiration dates, use one key per bot, and delete the key when you stop using the bot. See read-only before trade access.

What should I never give an AI trading bot?

Your seed phrase or private key, your exchange password, your 2-step codes, or any key with withdraw or transfer permission. If a bot asks for any of these, walk away. See never paste API keys in chat.

Common questions

Are AI trading bots legit?

Some trading software is real, but no bot can guarantee profits. The CFTC says AI can’t predict the future or sudden market changes. Treat guaranteed returns as a scam and check the company before you pay.

Is it safe to give a trading bot my exchange API key?

Only a key without withdraw or transfer permission. Start read-only, add trade only if needed, and use IP restrictions and an expiry date where your exchange offers them.

The platform says I must pay a fee or tax to withdraw. What now?

Stop sending money. FinCEN and the FBI say demands for taxes or fees at withdrawal are how these scams take more. Report it at ic3.gov and ReportFraud.ftc.gov, and to the CFTC or SEC.

Sources

Checked 31 October 2026 on each organization’s own site.

Related guides

All guides