JPMorgan CEEMEA Scam: Messenger Ad to WhatsApp Share Fraud

A team operating as JPMorgan CEEMEA reaches Turkish investors through social media messaging apps and runs a fraud under the label of share investment. The operation presents itself as the "JPMorgan CEEMEA Financial Research Team", and it has no connection with the international institution whose name it uses.

🚨 How Do They Present Themselves?

The team uses the name of a unit that really exists inside an international investment bank. The abbreviation "CEEMEA" is a common term in the financial world for the region of Central and Eastern Europe, the Middle East and Africa; the research departments of large institutions use this label.

The choice is not accidental. When the name of a unit that really exists is used instead of an invented brand, a doubtful person who searches finds the institution's genuine pages, and the name appears to be verified. Yet what is verified is only that the unit exists, not that the other side has any relationship with it.

The research units of real institutions do not approach individual investors through messaging apps, do not give share recommendations and do not have customer accounts opened. These units produce reports for institutional clients.

📲 From Messenger to WhatsApp: The Screening Funnel

What sets this operation apart from similar ones is the way contact is made. The process begins not by being added to a Telegram group, but with an advertisement shown on Messenger.

This two-stage structure has two functions. The first is filtering: people with a profile able to pay are separated out. The second is breaking the record trail; when the advertisement is removed and the Messenger account is closed, the trace of the first contact largely disappears and only the WhatsApp conversation remains.

🎭 The So-Called Professor and the So-Called Assistant

Once the WhatsApp stage is reached, the familiar two-role split comes into play:

It is unclear whether these names correspond to real identities. The same scheme appears under different names for different brands; the roles are fixed, the names change.

🖥️ Front Site and App

After the redirection, the person has an account opened on a website and mobile app controlled by the operation itself. From this point the way it works is identical to the clone-site and fake brokerage schemes we have examined before:

📇 Identified Details

The country code of the number is noteworthy. Use of a United States number points not to a corporate connection but to a virtual line that can be obtained over the internet. Because such lines can be obtained without regard to national borders, they say nothing about the caller's physical location and are preferred to create an impression of brand credibility.

⚠️ Warning Signs

📉 SPK and Authorisation Status

This operation acting under the JPMorgan CEEMEA name is not authorised by SPK and has no legal entity established in Türkiye. In Türkiye, intermediation in share transactions, portfolio management and investment advice can be carried out only by institutions that hold an authorisation from SPK; an unauthorised operation managing positions on behalf of an investor is unauthorised capital markets activity. Before investing, check whether a platform is authorised by the regulator in your own country (for example the FCA, ASIC or SEC).

When an operation using the name of a well-known institution is encountered, the only verification available is to obtain confirmation through the official channels of the named institution and to check the authorisation record in the list of SPK brokerage firms. We explained in detail how this check is carried out in our content on SPK licence lookup and institution verificationTR.

An earlier case in which the same brand's name was used with a different scheme, the clone firm method, was covered in our review of JPMorgan Asset ManagementTR.

🔗 Other Platforms Using the Same Method

The use of a well-known institution's name, the "professor–assistant" duo and the transfer to the operation's own dashboard: together these three make a scheme that keeps repeating. We have previously covered the same scheme in these operations:

In these operations the brand name is not an identity but a disposable shell. When a name has left enough negative traces it is dropped; the team, the infrastructure and the payment channels continue to work under a new name.

🧭 The Legal Process After a Loss

In cases of this kind, what is decisive is not the size of the institution whose name was used but which account the money went to. If the payment was made to an account in Türkiye, a concrete counterparty arises who can be pursued.

Obtaining a benefit by using information systems and banking tools while hiding behind the identity of a well-known institution may be treated as qualified fraud under the Turkish Penal Code and as unauthorised activity under capital markets legislation.

🤝 Savun Law & Consultancy

Savun Law & Consultancy serves with a team that works on forex, crypto and investment fraud cases. We have previously covered many platforms showing the same scheme; work is carried out to identify the accounts that payments reached and, for transfers made in crypto assets, to trace them on the blockchain.

For detailed information and legal support, you can contact Savun Law & Consultancy.

❓ Frequently Asked Questions