On December 2, 2025, the CVM's Superintendence of Market and Intermediary Relations issued Declaratory Act No. 24,481 concerning Oneal Group Ltd, which operates under the Finoto brand and the website finoto.com.
The act declares to the market and the public that the company is not authorized by this regulator to solicit clients residing in Brazil, as it is not part of the distribution system set out in art. 15 of Law No. 6,385 of 1976. The CVM ordered the immediate suspension of any public offering, direct or indirect, to investors residing in Brazil, under a daily fine of BRL 1,000.00, without prejudice to liability for prior violations. The CVM notice of December 5, 2025 restates the order.
What the act does and does not establish
The act establishes that the CVM found evidence of the conduct described and that the company lacks the authorization required for it. The act does not state that fraud occurred, nor that anyone lost money. This page records the regulator's alert and will record vetted reports as they come in.
If you invested or were approached
The CVM asks that you get in touch through its Citizen Service Desk (Serviço de Atendimento ao Cidadão), providing details of the offer and identifying the people involved. If you sent money, keep your receipts and file a police report. If you paid in crypto, CyberX's wallet lookup is free.
Websites, profiles and accounts linked to the scam
With the period in which they appeared in reports. Copy and compare with what you received.
Public acts about this scam
No reports about Finoto yet
This page came from an authority alert or from CyberX's investigation. If you fell for it, or know someone who did, your report can be the first and changes what the page is able to show.
Sources
- Ato Declaratório CVM nº 24.481, de 2 de dezembro de 2025, Diário Oficial da União.
- CVM alerta para atuação irregular de Oneal Group LTD, CVM, December 5, 2025.
This is a registry of reports vetted by CyberX; it is not a ruling nor proof. Identifiers are shown with the period in which they were reported. Authority alerts link the public act. CyberX works in digital intelligence applied to investigation — OSINT, on-chain tracing, and fraud prevention. This content is informational and does not constitute legal advice.
how we write →