VaultBit: Scam Warning, Reviews and Recovery Guide
Issued by: AMF Quebec / FCAA Saskatchewan / CSA · Date: 2026-07-31 · Region: Quebec and Saskatchewan
Reviewed by: Thomas Becker · Last updated: 2026-08-24
Also known as: VaultBit, vault-bit.com, Vault-Bit, Vault Bit
Overview: Is VaultBit Legit?
VaultBit, operating at vault-bit.com, was flagged by Quebec's Autorité des marchés financiers (AMF) on July 31, 2026. The AMF states plainly that VaultBit is not registered with it and is not authorized to solicit investors in Quebec.
The more revealing finding sits three days earlier and two provinces west. On July 28, 2026, Saskatchewan's Financial and Consumer Affairs Authority (FCAA) issued its own alert against a company called GoStoneMax and named its associated brands and domains. One of the domains listed in that Saskatchewan alert is vault-bit.com, the same address the AMF flagged as VaultBit. The FCAA alert also names a third brand, Sway Horizon AI, at swayhorizonai.com.
That overlap is the single most useful fact on this page. VaultBit, GoStoneMax and Sway Horizon AI are not three separate companies that happen to have been flagged in the same week. They are one operation running under at least three names, and two Canadian regulators reached it independently from two different provinces within four days of each other.
This matters practically for anyone who has money in any of the three. Searching the name you were given will show one alert. Searching the domain shows the network. An investor who checked "VaultBit" in early July would have found nothing, because the name was clean at that point while the same operators were already soliciting Saskatchewan residents under a different brand.
Multi-brand operation also tells you what to expect if VaultBit stops responding. Operations structured this way do not close, they rotate. The platform goes offline, deposits stop being answered, and the same infrastructure reappears under a fourth name with a new domain and a new set of positive reviews. Anyone still holding a VaultBit balance should assume the brand is disposable.
Neither regulator has authorized this operation to take money from Canadians under any of its names. Report to RecoverFunds.ca if you have deposited with VaultBit, GoStoneMax, or Sway Horizon AI.
If you are reading this because a VaultBit withdrawal is being delayed while a fee is demanded, treat that sequence as the beginning of a rotation rather than a processing problem. Record the brand name, the domain and every payment reference now, while the platform is still reachable, because those details are what connect your case to the Saskatchewan and Quebec files already open.
Searching the domain rather than the brand name is the habit that would have surfaced this operation before a deposit, and it is the one worth keeping for the next platform anyone offers you.
How VaultBit Operates
One operation, several storefronts: Running parallel brands on shared infrastructure is a deliberate structure rather than sloppiness. It spreads risk, because a warning against one name leaves the others trading. It defeats casual due diligence, since an investor who searches the brand they were given finds a clean record. And it allows the operators to target different audiences with different pitches at the same time. A name like Sway Horizon AI sells an artificial-intelligence trading story. A name like VaultBit sells crypto custody. The same people are behind both.
Two regulators, four days, independent findings: The FCAA in Saskatchewan acted on July 28 and the AMF in Quebec on July 31. Neither warning is a copy of the other and each names different brand assets. That independence is significant. It means the operation was actively soliciting residents of at least two provinces simultaneously and doing enough volume in both to draw separate regulatory attention within the same week.
The vocabulary of custody and safety: The VaultBit name is doing specific work. Vault language borrows from cold storage and institutional custody, the parts of the crypto industry associated with security rather than speculation. It is aimed at an investor who is nervous about crypto and wants the safe option. Nothing about being unregistered becomes safer because the brand invokes a vault. There is no custodian, no proof of reserves, and no regulator anywhere confirming a single coin is held.
The artificial-intelligence variant: The Sway Horizon AI branding within the same cluster follows the pattern regulators have flagged repeatedly through 2026. An algorithm is described as generating consistent returns, the strategy is never explained in checkable terms, and the technology framing is used to make steady profits sound like engineering rather than the impossibility it is. Consistent positive returns regardless of market direction is the oldest signature in investment fraud, and calling the mechanism AI does not change what is being claimed.
Deposit routes chosen for finality: Crypto-branded platforms almost always steer deposits into cryptocurrency, and that preference is about reversibility rather than convenience. A confirmed on-chain transfer cannot be recalled by any bank, regulator, or court order in any practical timeframe. Where card or wire payments are accepted at all, they are commonly processed through a company name unrelated to the brand, which both obscures the destination and complicates any later dispute.
What a rotation looks like from the inside: When a branded shell is retired, the sequence is recognisable. Withdrawals begin taking longer and are answered with fee requests. Support becomes slower and then unreachable. The website stays up for a period while no longer processing anything, then goes offline. Anyone who paid a release fee during that window paid it into a brand that had already been abandoned. If VaultBit is currently delaying your withdrawal while asking for a payment, the rotation has probably already begun.
Why two regulators matter more than one: A single provincial alert can be read, wrongly, as a local issue. Two independent findings from provinces that do not share an investigation, arrived at within four days, indicate an operation running at national scale with enough Canadian volume to surface separately in two jurisdictions. Investors in provinces that have not yet published anything should not read that silence as safety. It more likely reflects reporting lag than absence of solicitation.
Red Flags in VaultBit Reviews
- AMF Quebec alert issued July 31, 2026, not registered and not authorized to solicit investors in Quebec
- FCAA Saskatchewan alert issued July 28, 2026 naming vault-bit.com among GoStoneMax's domains
- Two provincial regulators reached the same operation independently within four days
- Operates under at least three brand names, VaultBit, GoStoneMax and Sway Horizon AI, on shared infrastructure
- Vault and custody branding used to imply security that no regulator or custodian actually provides
- Sway Horizon AI variant sells an artificial-intelligence returns story with no checkable strategy
- No proof of reserves, no named custodian, and no verification that any cryptocurrency is actually held
- Deposits steered toward cryptocurrency, which is final on confirmation and cannot be recalled
- Multi-brand structure means the platform is designed to be abandoned and relaunched under a new name
- Neither regulator lists any registration for the operation under any of its names
What the Regulator Said
VaultBit is not registered with the Autorité des marchés financiers (AMF) and is not authorized to solicit investors in Québec.
What to Do if You Were Targeted by VaultBit
- Report your case to RecoverFunds.ca at recoverfunds.ca/report-crypto-fraud-canada. State which brand name you dealt with, VaultBit, GoStoneMax or Sway Horizon AI, since linking the names across victims is what establishes the scale of the operation.
- Contact the AMF Quebec at 1-877-525-0337 if you are in Quebec, or the FCAA Saskatchewan Securities Division at 306-787-5645 if you are in Saskatchewan. Both regulators have open files on this operation and each holds a different piece of it.
- Report to the Canadian Anti-Fraud Centre and to the securities regulator for your province, the full process, with contact details for every province, is here
- Notify the exchange you sent cryptocurrency from and supply the destination wallet address. Major exchanges maintain shared blacklists, and a flagged address can restrict where the funds can later be cashed out even when the transfer itself is irreversible.
- Contact your bank immediately if any payment went by card or wire. Card chargebacks have a limited window that starts at the transaction date, so this is time-critical. Ask for the fraud department directly.
- Do not pay any withdrawal fee, release charge, or prepaid tax. With a multi-brand operation these demands frequently arrive while the brand is already being wound down, meaning the payment goes into a shell that has stopped operating entirely.
- Preserve your evidence now. Screenshot the platform including balances and withdrawal attempts, save every transaction hash, and export all messages. Record which brand name and which domain you were dealing with, because that detail is what connects your case to the others.
- Do not pay anyone who offers to recover your money for an upfront fee — that is a second scam, and it deliberately targets people who have already lost money once
VaultBit: Frequently Asked Questions
Is VaultBit a scam?
Quebec's AMF issued an investor alert on July 31, 2026 confirming VaultBit is not registered and is not authorized to solicit investors in Quebec. Three days earlier Saskatchewan's FCAA flagged the same domain, vault-bit.com, as part of the GoStoneMax operation. Two provincial regulators identified it independently within one week.
Can RecoverFunds.ca help me recover money from VaultBit?
We will review your case free of charge and give you a straight answer. Be aware that crypto transfers are final once confirmed, so where deposits went on-chain the realistic work is flagging the destination wallet, filing quickly with both the FCAA and the AMF, and documenting the link between the VaultBit, GoStoneMax and Vault-Bit names. We charge no upfront fee and we will not tell you funds are recoverable when they are not.
Are VaultBit and GoStoneMax the same company?
The Saskatchewan FCAA alert against GoStoneMax explicitly lists vault-bit.com among its websites, alongside gostonemax.com and swayhorizonai.com. That is a regulator connecting the domains, not an inference. The three brands run on shared infrastructure as a single operation using several storefronts.
Why does VaultBit use more than one name?
Running parallel brands spreads risk and defeats basic due diligence. A warning against one name leaves the others trading, and an investor who searches only the brand they were given often finds a clean record. It also lets the operators run different pitches at once, crypto custody under one name and AI trading under another, to reach different audiences.
Can I get my cryptocurrency back from VaultBit?
Cryptocurrency transfers are final once confirmed on the blockchain and cannot be reversed by a bank or a regulator. What is still worth doing is reporting the destination wallet address to the exchange you sent from and to the Canadian Anti-Fraud Centre, because flagged addresses can be restricted at the point where funds are converted back to cash.
VaultBit says I need to pay a fee to unlock my withdrawal. Is that legitimate?
No. No legitimate platform requires a payment to release money it already holds for you. With an operation that rotates brands, these demands often arrive during the wind-down of a name, so the fee goes into a shell that has already stopped processing anything. Paying identifies you as a target for further demands.
The platform still shows my balance. Doesn't that mean my money is there?
No. On an unregistered platform the balance is a number the operator controls and can display at any value. There is no custodian, no auditor and no regulator verifying that any asset backs it. A balance that keeps rising while withdrawals keep failing is the clearest indication that the figure and the funds are unrelated.
How do I check if a crypto platform is registered in Canada?
Search the national CSA database at aretheyregistered.ca, which covers all provinces, and check your own regulator's register directly. Also search the CSA investor alerts list at securities-administrators.ca/investor-alerts. Search the domain name as well as the brand name, since the same operation frequently trades under several brands on one website.
Why is my VaultBit login not working?
Losing access to a VaultBit account usually means one of two things. The account has been locked from the operator's side, which commonly happens shortly after a withdrawal request or an awkward question. Or the site itself has gone dark, which is what happens when an operation rebrands to a new domain after a warning is published. Neither is resolved by the account manager, and if you are asked to pay anything to restore access, that is the same pattern continuing.
Are VaultBit reviews real?
Read reviews of VaultBit carefully, and note where they sit. Operations like this seed favourable reviews on rating sites, YouTube and social media, and those tend to be the first results a search returns. The review that carries weight is the regulatory record: AMF Quebec published an investor warning on July 31, 2026. Positive reviews written before a warning, or by accounts with no other history, tell you very little.
Can I get my money back from VaultBit?
That depends far more on how you paid than on who you contact, and we will not pretend otherwise. Card payments can sometimes be charged back. Wires can occasionally be recalled if you reach your bank's fraud team quickly. Crypto sent to an address a receiving exchange can freeze is sometimes reachable. Funds already moved through offshore accounts usually are not. Nobody can reverse a blockchain transaction, and anyone offering to recover your money for an upfront fee is running a second scam. The realistic routes are set out here.
Is vault-bit.com a safe website?
vault-bit.com is the domain associated with VaultBit in the AMF Quebec investor warning on July 31, 2026. Treat it as unsafe to deposit with. Also be aware that operations under warning frequently reappear on a near-identical domain — a different extension, an added or dropped word — so a site that looks like the one you used may be the same operation rather than a legitimate alternative.
How do I report VaultBit in Canada?
Three places, and they do different things: the Canadian Anti-Fraud Centre at 1-888-495-8501, the securities regulator for the province you live in, and your local police for a file number. Contact your bank, card issuer or crypto exchange first though, because that is the only step where hours genuinely matter. The full process, with the contact details for every province, is here — or report your case to us and we will tell you which regulator has jurisdiction and what they will need.
Related Fraud Alerts
- GoStoneMax, flagged by Financial and Consumer Affairs Authority of Saskatchewan (FCAA) / CSA
- Grandridge Lorvix, flagged by Financial and Consumer Affairs Authority of Saskatchewan (FCAA)
- Aquila Markets, flagged by Financial and Consumer Affairs Authority of Saskatchewan (FCAA) / CSA
- Renovae, flagged by Autorité des marchés financiers (AMF) Quebec / CSA
- Goldmann Co Limited, flagged by Autorité des marchés financiers (AMF) Quebec / Alberta Securities Commission (ASC) / CSA
- Risance, flagged by Autorité des marchés financiers (AMF) Quebec / CSA
How to report investment fraud in Canada, the full process · How we verify these warnings