A relative is invited into a private investment group by someone the family already trusts. A deposit is placed on the relative’s behalf, and the only immediate obligation is to repay that helpful friend in cash.
The arrangement sounds generous. The website behind it tells a very different story.
Overview
A family referral led to Bonchat and an unknown exchange
A recent consumer report describes parents being invited to a Bonchat group called “KKR Investment Group” by a family friend. The friend reportedly funded an initial deposit on their behalf.
The parents were expected to repay the friend in cash. At the time of the report, they had not tested a withdrawal and did not know whether the balance shown on the website could be recovered.
That combination matters. A trusted referral can move money into a system before the new participant ever verifies the platform, the investment professional, or the withdrawal rules.
axa1565.com is a new site presenting itself as AXA Exchange
The linked site was live during our review. Its page title was “AXA Exchange,” and the mobile interface offered registration, login, fiat accounts, contract accounts, cryptocurrency prices, and trading controls.
Official Verisign RDAP records show that axa1565.com was registered on May 8, 2026 through Name.com. The registration is recent and the domain does not match the official websites of KKR or AXA.
A legitimate-looking interface is not evidence that deposits are held, trades occur, or withdrawals will be honored. A browser dashboard can display any balance its operator chooses.
The brands and regulatory image fail basic verification
KKR’s official fraud notice says it does not conduct business through chat platforms, does not send unsolicited investment messages, and warns about impostors creating websites and social accounts that promise unusual returns.
The axa1565.com home screen also displayed an image containing an SEC CIK, an Aurora, Colorado address, and official-looking registration language. The SEC’s own public data associates that CIK with “Unity Growth Series Fund LLC – Fund 033” at an address in Reston, Virginia, not with AXA Exchange, KKR, or the Aurora address shown.
The warning signs together include:
- An investment pitch moves through Bonchat rather than an official firm channel.
- The group borrows the KKR name.
- The website uses AXA branding on an unrelated domain.
- The domain was registered recently.
- A friend funds the first deposit and asks for cash repayment.
- No successful withdrawal has been independently verified.
- The dashboard can show balances without proving custody.
- The displayed CIK does not identify the platform shown.
What We Verified on axa1565.com
The domain responded with a live JavaScript application during our review. The login page used a bright green AXA-style logo and the awkward line “Welcome to AXA Exchange Exchange.”
After opening the public home view, the site displayed a zero balance, a “Fiat Account,” a “Second contract account,” and prices for BTC, ETH, XRP, LTC, BCH, SOL, and other assets.
The interface used the visual language of a mobile crypto exchange. That presentation is easy to confuse with evidence of a functioning trading venue, but the public screen did not prove who operates it or where customer assets go.
The home page included an image that appears designed to confer regulatory credibility. Its visible text included CIK 0002079971 and a business address at 5820 South Vaughn Way, Aurora, Colorado 80014.
The SEC submissions API identifies CIK 0002079971 as Unity Growth Series Fund LLC – Fund 033. The official record lists 12001 Sunrise Valley Drive, Reston, Virginia 20191. It does not identify “AXA Exchange.”
An SEC filing identifier is not a license that any website may reuse. Even when a CIK is genuine, it identifies a filer. It does not verify a chat group, guarantee an investment, approve a crypto exchange, or insure deposits.
The domain registration date is also relevant because the website presents itself with the confidence of an established financial platform. A site only months old cannot inherit the operating history of the large brands printed on its pages.
We found no basis to connect the Bonchat group or axa1565.com with KKR’s authorized operations. KKR’s own guidance directly conflicts with the route used here: the company says it does not conduct business over chat platforms.
AXA is also a real global financial and insurance brand. Its name and logo appearing on an unknown exchange domain should be treated as possible impersonation, not as proof of endorsement.
How the Bonchat KKR Investment Scam Works
Step 1: A trusted person delivers the invitation
The approach may come from a relative, friend, community member, or colleague who already appears to be participating. That person may be a victim rather than an accomplice.
Trust moves from the relationship to the group without the platform earning it.
Step 2: The group borrows an established investment name
A title such as “KKR Investment Group” makes the chat sound connected to a known financial firm. Profile images, analyst names, market commentary, and copied documents reinforce the impression.
The real company is not verified through the name chosen by a chat administrator.
Step 3: Members are directed to a private trading website
The operator supplies a registration link for an app or domain that is not the firm’s official website. The interface shows prices, charts, account types, and trading buttons.
The platform may be a simulation controlled entirely by the same people running the group.
Step 4: A starter deposit removes the first objection
A recruiter may lend or place funds on the new member’s behalf. This makes the platform appear generous and lets the dashboard show activity before the target has sent money online.
Repaying the recruiter in cash still creates a real loss if the website balance is fictional.
Step 5: The dashboard manufactures progress
Trades may appear to win, bonuses may be credited, and group members may post screenshots of withdrawals. None of those displays independently proves that assets exist outside the site’s database.
The SEC warns that investment-group scams can show fake profits and then demand fees, taxes, or deposits when a member tries to withdraw.
Step 6: Successful small withdrawals build confidence
Some schemes allow an early withdrawal using money from later participants. A small payment can persuade the family to add much more and encourage friends to join.
One withdrawal proves only that one amount was paid at one moment. It does not validate the business or future access to the balance.
Step 7: The exit becomes another payment demand
When the target requests a large withdrawal, the platform may claim there is a tax, compliance deposit, insurance charge, credit score issue, frozen account, or liquidity requirement.
Paying the new charge does not release the balance. It extends the loss until the operator blocks contact or abandons the domain.
Why the Friend’s Deposit Is Not Free Money
The most disarming detail in this report is the claim that the parents did not initially send money to the website. A family friend supposedly covered the first deposit.
That does not remove financial exposure. If the parents hand cash to the friend, they have exchanged recoverable money for an unverified number on a website.
The arrangement may be a genuine loan between two victims. The friend may believe the platform is profitable because of a small withdrawal, group testimonials, or a balance that continues to rise.
It could also be a recruitment mechanism. Some fraudulent platforms credit internal accounts without receiving an equivalent deposit, then use personal repayment to move real money among participants.
A third possibility is account attribution. The website may later claim that a bonus, loan, or funded balance creates a debt that must be repaid before withdrawal.
No one should repay the friend in cash until both parties identify the original funding transaction, the account that received it, and the legal entity supposedly holding the investment.
Ask the friend to withdraw the original amount back to the same verified source. Do not accept a screenshot as proof. The funds must appear in a real bank or regulated brokerage account under the correct owner’s control.
Do not let family loyalty turn the verification request into an accusation. The friend may be trying to help and may also be at risk. Frame the pause as protection for everyone.
If the friend resists independent checks, demands cash urgently, or insists the group administrator must approve questions, stop the arrangement.
The Fake Profit and Withdrawal Trap
A platform operator does not need to conduct trades to show trading profits. The displayed value can be changed by software, an administrator, or a scripted bonus.
Real market prices on the dashboard do not validate the account balance. Public price feeds are easy to import, and familiar asset symbols help the rest of the interface feel legitimate.
The decisive test is not whether the chart moves. It is whether the operator is identifiable, registered for the activity claimed, holds customer assets through verifiable channels, and honors withdrawals without surprise payments.
Withdrawal fees are especially dangerous when they must be paid with new money. Legitimate service charges can normally be disclosed in advance and deducted from the available balance.
A demand to pay “tax” to a private platform should be verified with the relevant tax authority and a qualified professional. Criminals use tax language because it sounds mandatory and time-sensitive.
Do not borrow money to unlock a balance. Do not recruit others to meet a volume threshold. Do not send a second payment because the first fee was supposedly calculated incorrectly.
Group members who celebrate profits may be fake profiles, paid promoters, early participants, or victims reading the same dashboard. A crowded chat does not create independent evidence.
The SEC’s group-chat investor alert describes the same control problem: fake experts direct members to websites, display profits, and invent charges when withdrawal begins.
MalwareTips documented a closely related WhatsApp pattern in its Cathie Wood investment scam report: a famous financial name lends credibility to a private group while the operator controls the pitch and payment route.
Check the investment professional as well as the company name. Search Investor.gov and FINRA BrokerCheck, then use the phone number in the official record. A copied registration number can belong to a real person who has never heard of the group.
Ask who legally owns the account, which entity has custody, where client money is segregated, and which regulator handles complaints. Vague references to “international licensing” are not answers.
Inspect the deposit destination. A personal bank account, unrelated company, payment agent, crypto wallet, or cash handoff breaks the claimed relationship with a major investment firm.
Do not accept a video call with an “analyst” as licensing proof. The person on screen may be another participant, a hired presenter, or an impersonator reading a script.
Preserve the exact domain and app package. Fraud operators often replace one address with another after complaints appear, while keeping the same group names, dashboard code, and payment recipients.
A regulator search should be repeated for the exact legal entity, not merely the words KKR or AXA. Large brands can have many registered affiliates, none of which automatically authorizes a private chat administrator.
Write down every explanation before challenging it. Fraud groups frequently revise the claimed company, licence, address, or withdrawal rule after a member identifies a mismatch. The earlier screenshots help regulators and relatives see that the new explanation was not part of the original offer.
Company, Address, and Fulfillment Checks
KKR says it does not conduct business over chat platforms
KKR’s official fraud-awareness page says communications come from official kkr.com addresses and that the company does not conduct business through chat platforms.
A Bonchat group using the KKR name therefore needs to be treated as impersonation unless KKR verifies it through independently obtained contact details.
The AXA name does not match the domain
The site calls itself AXA Exchange, but the domain is axa1565.com rather than an official AXA property. A familiar logo is a graphic, not a corporate relationship.
Contact AXA through its official website if the brand is being used, and do not use contact details supplied by the platform.
The displayed CIK points to a different filer
The CIK visible on the home page belongs in SEC records to Unity Growth Series Fund LLC – Fund 033. The address in the official submission data is in Reston, Virginia.
That mismatch means the image cannot be treated as proof that AXA Exchange or the Bonchat group is registered.
Fulfillment requires withdrawal to a real account
A website balance, trade receipt, chat testimonial, or pending withdrawal is not fulfillment. Funds must reach a verified bank or regulated brokerage account without a new advance payment.
Even a small withdrawal should not replace company, licensing, custody, and domain checks.
What to Do if You Have Fallen Victim to This Scam
- Stop all new payments. Do not repay a friend in cash, add investment funds, pay withdrawal taxes, or send a compliance deposit while the platform remains unverified.
- Attempt a withdrawal without paying more. Request the original principal back to the verified funding source. Save every response, but do not treat a pending status as success.
- Document the full path. Capture the Bonchat group name, administrator profiles, invitation, axa1565.com pages, wallet addresses, bank recipients, transaction IDs, and promises made.
- Contact the bank or payment provider. Explain that transfers may have gone to an impersonation investment scheme and ask about recall, fraud review, and recipient-account preservation.
- Secure exposed accounts. Change reused passwords, revoke sessions, enable strong multi-factor authentication, and review email rules if credentials were entered on axa1565.com.
- Talk to the referring friend carefully. Share the KKR notice, domain date, and CIK mismatch. The friend may be a victim and should also stop deposits and recruitment.
- Report the brand impersonation. Send the domain and screenshots to KKR and AXA through their official channels. Also report the domain to its registrar and hosting provider.
- Run a Malwarebytes scan. Scan devices that installed an app, browser extension, remote-access program, or unknown file connected to the group. A normal website visit alone does not prove malware.
- Use AdGuard as preventive support. It can block many known phishing and malicious advertising domains, but it cannot verify a private investment group or recover a transfer.
- Report financial fraud. Submit evidence to ReportFraud.ftc.gov, IC3.gov, the SEC complaint center, and the financial regulator in your country.
- Do not pay a recovery agent. Anyone claiming they can unlock the dashboard, trace crypto, or retrieve funds for an upfront charge may be targeting victims again.
- Warn other group members without sending threats. Provide verifiable facts and official links. Preserve the group before leaving, because administrators may delete messages.
Frequently Asked Questions
Is KKR connected to the Bonchat investment group?
We found no evidence of a connection. KKR says it does not conduct business over chat platforms and warns that criminals create fake websites and accounts using its name.
Is axa1565.com an official AXA website?
The site uses AXA branding, but the domain does not match AXA’s official corporate domains. Treat it as unverified and possible impersonation unless AXA confirms it through an independent channel.
Does the SEC CIK prove the exchange is registered?
No. The CIK displayed on the site identifies a different filer in SEC records. A genuine identifier copied into an image does not register or approve the website using it.
What if the friend already withdrew money?
A small withdrawal can be used to build confidence. It does not prove that larger balances are real or that later withdrawals will be honored without new fees.
Should the parents repay the friend in cash?
Not while the deposit, platform, and withdrawal remain unverified. First trace the original funding and require the money to return to a real account without another payment.
Can a balance on the site be used to pay a withdrawal fee?
If the operator insists on fresh money instead of deducting a disclosed charge from the balance, that is a major scam warning. Do not send more to release funds already shown.
The Bottom Line
The Bonchat KKR Investment Scam combines borrowed trust from a family friend, borrowed prestige from KKR, borrowed branding from AXA, and a borrowed SEC identifier. None of those pieces verifies axa1565.com.
Pause the cash repayment, preserve the group, and test withdrawal without sending anything else. KKR’s own warning, the young domain, and the CIK mismatch all point away from a legitimate investment channel. A balance on a screen is not money until it reaches an account you control.
