TR

NeoFX Scam Warning: Frozen Prices, No Licence, No Company Details

Savun Law & Consultancy · Updated 24 October 2026

NeoFX Scam Warning: Frozen Prices, No Licence, No Company Details

NeoFX (Neo FX / neofxmarkets.com) is a forex and CFD website with a Turkish-language interface that describes itself as a "secure and high-performance financial trading platform". The domain was registered on 18 June 2026, so the platform is only a few months old and its promotion has just begun. A technical review of the site's own pages shows quite clearly what lies behind the "live trading infrastructure" claim.

In short: NeoFX is not authorised in Türkiye by the Capital Markets Board (SPK), and there is no record of it being an SPK-authorised investment firm; no page of the site shows a licence, company name, address or registry details. The price ticker presented as "live" on the homepage displays frozen values from roughly two years ago. The registration form contains no identity verification, no framework agreement, no risk disclosure form and no personal data notice (KVKK). The payment brand named as the payment infrastructure is even newer than the site itself and cannot be reached.

🧊 The "Live Price" Claim: A Frozen Screen

At the very top of the NeoFX homepage, just under the words "neofxmarkets.com · Live trading infrastructure", a price ticker scrolls across the screen. The values in this ticker are fixed data embedded in the page source; the numbers do not change even when the page is reloaded many times.

To see how old the values are, it is enough to compare them with data valid on 2 October 2026:

Instrument Shown on the NeoFX homepage Current value (2 October 2026)
USD/TRY 32.41 49.03 (Central Bank of the Republic of Türkiye (TCMB) FX selling rate, 1 October 2026)
BTC/USDT 67,432.18 about USD 86,000
ETH/USDT 3,521.04 about USD 2,744

The dollar rate is one third below reality, Bitcoin is about 20% below and Ethereum is 28% above. These figures are not random: all three correspond to market levels of mid-2024. In other words, the platform's shop front has not been updated since the template was written.

Technical note: The site's server sends the homepage with the cache directive s-maxage=31536000. That value means one year. A page titled "Live trading infrastructure" being configured to be cached for a year is the technical counterpart of the fact that the data on screen is not live.

📉 Where Does the Price Feed Come From? The Answer to the Spread Question

At the bottom of the site's "Markets" page the price source is stated openly: the data is taken from CoinGecko and open exchange-rate services and updated every 20 seconds.

This sentence says almost everything about how the platform is built. CoinGecko is a public data service that anyone can use free of charge and that publishes crypto prices for information purposes. The prices of a licensed brokerage do not come from here; real brokerages receive an institutional price feed from liquidity providers and pass the client's order to those providers. A price pulled from a free information service means the following:

  • There is no real market connection behind the screen. Orders are not passed to any exchange or liquidity provider.
  • The "position" shown on the panel is only a record in the platform's own database.
  • The buy and sell prices, and therefore the spread, are set by the platform itself. Because the reference price comes from a free service, the margin added on top is entirely at the platform's discretion and can be widened at any moment.
  • A rise or fall in the balance is not a market result but a database operation. The "profit" on screen can be written, and deleted, in the same way.

A statement on the site's own "Security" page indirectly confirms this picture: it says that transactions are carried out with "locked (atomic) database operations" so that "balance inconsistencies are prevented". What is described here is not the reconciliation of an investment account with the market; it is the internal number integrity of a web application.

🏢 No Corporate Identity

The site's "About Us" page consists from start to finish of slogan-style text. None of the information that identifies a financial institution appears:

  • No company name — it is not stated who operates the platform or which legal entity it belongs to.
  • No address — there is no head office, branch or any other physical location.
  • No trade registry or tax number.
  • No licence information — neither the SPK nor any foreign authority is named. The words "SPK" and "licence" are not used anywhere on the site.
  • No management team — there is no information on who founded or runs the platform.

By contrast, the page is full of software development terms such as "end-to-end encryption", "token-based authentication" and "Docker-based microservice architecture". Such expressions do not appear in the presentation of a brokerage addressing investors; they belong to the technical language of a software project. This choice of language suggests that the site was produced with only the software side in mind, not the financial side.

For comparison: The website of a brokerage holding an SPK authorisation certificate must show its company name, head office address, trade registry number, authorisation details and a statement on the Investor Compensation Centre. The quickest way to assess a platform is to look for this information. We explained the method step by step in our article on SPK licence checks and institution verificationTR.

📝 Registration Form: No Identity Verification, No Agreement

Looking at the account opening page, the form consists of only four fields: full name, e-mail, password and password confirmation. Nothing else is requested and no text is presented for acceptance.

None of the following documents can be found in the page source:

  • No identity verification (KYC). No identity document, Turkish ID number or address confirmation is requested. For institutions carrying out financial transactions, identity verification is an obligation under Law No. 5549 on the Prevention of Laundering Proceeds of Crime.
  • No framework agreement. Signing a written framework agreement with the client before providing an investment service is one of the basic requirements of capital markets legislation.
  • No risk disclosure form. Informing the client about the risks of leveraged transactions, and the client declaring that they have read this, is mandatory.
  • No suitability / appropriateness test. The step for measuring the client's knowledge and experience is missing altogether.
  • No KVKK privacy notice and explicit consent. Personal data is collected, but the disclosure obligation required by Law No. 6698 (Personal Data Protection Law, KVKK) is not fulfilled.
  • No user agreement, privacy policy or cookie notice.

These gaps should not be read as a technical oversight. Not verifying identity means the platform does not want to record who pays money in. The absence of a framework agreement and risk disclosure shows that a written and auditable relationship between the parties is not wanted.

💸 The "Kralpay Infrastructure" and Where the Money Goes

On the payment side, NeoFX uses the phrase "instant deposits by crypto, bank transfer and card with the Kralpay infrastructure" and presents it as a sign of trust. However, the picture for this brand is weaker than that of the platform itself:

  • The relevant domain was registered on 29 July 2026, about six weeks after NeoFX's domain.
  • Its website cannot be reached; no connection can be made.
  • Offering payment services in Türkiye requires an operating permit from the TCMB under Law No. 6493. There is no record that this brand is an authorised payment institution.

For this reason which account, and which name, the money goes to is critical. On unauthorised platforms the payment is usually directed to an individual's account unrelated to the platform's name, a company operating in a different sector, or a crypto wallet.

One check that matters: The name of the recipient. If the brand a person has been dealing with differs from the legal entity receiving the money, that alone is a sufficient reason to regard the transaction as suspect. After a payment, the receipt and the account statements are the only basis on which the money can later be traced.

🛡️ What the "Security" Page Does Not Say

The platform has a separate "Security" page that looks convincing at first glance: SSL/TLS encryption, password storage with bcrypt, HMAC-SHA256 signature verification, brute-force protection, session management.

However, all of these headings concern the security of your account — not the security of your money. None of the following is mentioned on the page:

  • Segregation of client assets: There is not a word on whether client money is held in accounts separate from the institution's own assets.
  • Custodian: It is not stated with which custodian the assets are held.
  • Investor Compensation Centre: The protection mechanism that would apply if the institution failed to meet its obligations is not mentioned.
  • Independent audit: There is no information that the accounts are audited.

In short, "your password is safe" and "your money is safe" are two entirely different claims. NeoFX's security page describes only the first; it does not touch on the second, which is what really matters to an investor.

📞 Contact Channels and the Numbers Identified

Only two channels appear on the site's contact page:

  • WhatsApp support line: 0539 136 38 56
  • Switchboard: 0216 922 16 76

The notable point is that this page also has no physical address. Moreover, although the page's own meta description says "you can reach us by e-mail", no e-mail address appears on the page. This inconsistency suggests that the content was prepared in a hurry from a template.

An investment platform whose primary contact channel is WhatsApp is a sign that deserves to be assessed on its own. No corporate record is kept of conversations on this channel, the identity of the other party is unclear, and the line can be shut down at any moment. A switchboard number with an area code likewise does not show that a physical office exists; such number blocks can be allocated through virtual switchboard services without any link to an address.

⚖️ Legal Assessment

The picture set out above is assessed under several headings in Turkish law:

  • Unauthorised capital markets activity (Article 109 of Capital Markets Law No. 6362): providing investment services without SPK permission. Article 110 of the Law separately regulates the case of misappropriating money collected within this activity.
  • Qualified fraud (Articles 157-158 of the Turkish Penal Code): persuading a person to pay through a price and balance display that does not match reality. Committing the act through information systems and using banks and credit institutions as a tool are among the aggravated forms that increase the penalty.
  • Laundering of proceeds of crime (Article 282 of the Turkish Penal Code, Law No. 5549): collecting money without identity verification and moving the collected money between accounts or converting it into crypto assets.
  • Unlawful processing of personal data (Law No. 6698, KVKK, Articles 135-136 of the Turkish Penal Code): collecting personal data without fulfilling the disclosure obligation.
  • Unauthorised payment services (Law No. 6493): providing payment services without TCMB permission or collecting money through an infrastructure of this kind.

One point should be underlined: a price disconnected from the real market is not an ordinary deficiency in legal terms. Where the price and balance shown to the client do not reflect reality, the cause of the loss is not market risk but the misleading presentation itself. This distinction is decisive in assessing each case.

🔗 Other Platforms Showing the Same Scheme

A new domain, a shop-front site with no corporate information, a frozen or self-set price screen and obstacles that appear at the withdrawal stage — we have covered platforms showing this pattern separately before:

What these platforms have in common is that they produce the appearance of brokerage instead of real brokerage activity. The panel, the chart and the balance screen are the tools of this appearance.

🧭 Legal Process for Victims

The basic steps of the process, and the articles that explain each step in detail:



Timing is decisive. Because the distribution of collected money between accounts is usually completed within days, the possibility of recovery is highest at the first stage; as time passes, tracing the money becomes technically harder. This matters especially for newly set-up platforms: such operations often close before the one-year domain term expires, and once the site goes offline the records on the panel can no longer be accessed.

❓ Frequently Asked Questions

Does NeoFX hold an SPK licence?

There is no record that the platform is an investment firm authorised by the SPK. No page of the site even claims a licence; the words "SPK" and "licence" are not used anywhere on it. To offer leveraged trading to persons resident in Türkiye, an authorisation certificate from the SPK is mandatory.

Why are the prices I see on the site different from the real market?

The ticker on the homepage consists of fixed data embedded in the page and shows levels from about two years ago. The data on the "Markets" page is, by the platform's own statement, taken from a free public information service. In both cases the price on screen is not the trading price a brokerage receives from a liquidity provider.

How can spreads be widened arbitrarily?

When no binding external source sets the price, the platform itself defines the difference between buy and sell. Because orders are not passed to a real market, there is no technical or institutional limit that would prevent the spread from being widened. The loss therefore arises not from market movement but from the conditions set by the platform.

My identity was not requested when I opened the account. Is that normal?

No. For institutions carrying out financial transactions, identity verification is an obligation under Law No. 5549. An account that can be opened with a name and an e-mail address shows that no identity verification process is run. Likewise, the absence of a framework agreement, a risk disclosure form and a KVKK privacy notice points to an account opening process that does not comply with the legislation.

My panel shows a profit. Can I withdraw it?

The balance on the panel is a record in the platform's own database and may not represent a real asset. Making a withdrawal request conditional on a "commission", "tax", "account verification fee" or "additional deposit" is a known stage on unauthorised platforms. When such a demand arrives, no legitimate process requires a new payment; stopping further payments and retaining all records is the approach generally described at this point.

Why does it matter that the platform is newly set up?

A domain registered a few months ago and only for one year indicates that the operation was built without any lasting corporate investment. Platforms of this kind usually close after a short period of activity and reopen under a new name. Because the panel records cannot be accessed once the site goes offline, the screenshots and correspondence in a person's hands become important.

Which records matter?

Payment receipts and account statements, all correspondence with the platform (including WhatsApp), images of the panel and trading screens, the domain names and phone numbers used and, where available, the e-mail records of the account opening. The completeness of these records is directly decisive both for claiming the payment back and for the judicial process.

For detailed information and legal support, you can contact Savun Law & Consultancy.

3 attorneys registered with the Istanbul Bar Association · verifyGoogle 4.8 ★ · 123+ reviews · seeOffice in Istanbul · English-speaking team · about us

This page is an English adaptation of our Turkish article NeoFX Forex Dolandırıcılığı.

More from Forex & CFD Broker Scams

All articles in this section →

WhatsApp