Investigation·

GoldBS Exchange Burns Through Domains to Hide a Gold Scam

GoldBS Exchange gold scam investigation by AlertoScan
Alertoscan Research Team

Alertoscan Research Team

Threat-intelligence analysts

GoldBS Exchange is not a real trading platform, it's an investment scam, and it is built to disappear. The operators run it across a rotating set of near-identical sites, including the most-searched goldbs26.com plus goldbs.com, goldbs36.com and more, abandoning each one as it collects antivirus detections or complaints and opening the next. We rate the live GoldBS domains 1 out of 100, dangerous, and Canada's British Columbia Securities Commission has cautioned the public against the company behind them, GoldBS Group Limited.

If you have money on a GoldBS site, this is what you are dealing with, and what to do about it.

Why GoldBS sites keep disappearing

Most scam reviews tell you a site is dangerous. The more useful thing to understand about GoldBS is that the site barely matters. The operation does not live at any single domain; it lives behind a template that gets bolted onto a fresh domain whenever the last one becomes inconvenient.

Our threat graph links seven GoldBS domains by an identical page template, the template_sig signature, which is the strongest "same operator" signal we track. Four are already dead and three are live. The numbers in the names are not versions of a product. They are sequential disposals:

Domain Status Our score Hosting
goldbs.comdown1/100AS13335 Cloudflare, Inc.
goldbs11.comactive18/100AS13335 Cloudflare, Inc.
goldbs12.comdown1/100AS36351 IBM Cloud
goldbs26.comdown1/100AS36351 IBM Cloud
goldbs36.comdown1/100AS13335 Cloudflare, Inc.
goldbs56.comactive18/100AS13335 Cloudflare, Inc.
htgoldbs.comdown1/100n/a

7 domains tracked in this network (2 active, 6 down), updated live as we find new ones. Full map on the network page.

This list is live: it updates automatically as we detect new GoldBS domains, and every entry links to our full analysis of that site. The pattern is mechanical. A domain launches, collects deposits, accumulates antivirus detections and complaints, and is abandoned. A new goldbs number opens with the same template, and the search traffic, the unpaid victims, and the regulators are left chasing a site that no longer answers. That is why the goldbs domains people search for are so often already dead, goldbs26.com among them.

Here is the live cluster in our threat graph. Each node is a GoldBS domain.

Live: the GoldBS Exchange cluster. Open the full map on our GoldBS Exchange network page.

One detail worth holding onto: across the GoldBS domains, the most heavily flagged is also the most-searched one, goldbs26.com, which our scanner sees marked malicious by 14 of 92 antivirus engines. It is dead and dangerous at the same time.

What GoldBS pretends to be

When the live sites are up, they look the part. We captured goldbs36.com mid-operation: a slick "exchange" streaming prices for gold, silver, platinum and palladium (XAUUSD, XAGUSD, XPTUSD, XPDUSD) next to crypto pairs, wrapped in market-news headlines and the GOLDBS GROUP LIMITED brand. The promise is simple and steady returns on precious metals, the safest-sounding asset there is.

A live GoldBS site (goldbs36.com) as our scanner sees it: a polished gold-and-crypto "exchange" front under the GOLDBS GROUP LIMITED brand.

None of it is a real exchange. We found no verifiable order matching, no audited reserves, and no proof that the gold and crypto prices on screen connect to any position you actually hold. The numbers are a display the operator fully controls. A genuine exchange earns fees on trades you own; GoldBS earns by collecting deposits and showing you a balance that only rises until the day it won't let you withdraw.

The British Columbia trick

GoldBS leans its entire credibility on one line, which we pulled straight from its own site: "GOLDBS GROUP LIMITED has been certified by the British Columbia Corporation Registration Bureau in Canada… registered in British Columbia, Canada with registration number BC1552618 and federal business license number 777497835BC0001."

It sounds official. It isn't what it implies. Registering a company in British Columbia is a routine administrative step that almost anyone can complete, and it says nothing about whether a firm is allowed to take investments. That permission comes from the securities regulator, a completely separate body.

So we checked the real British Columbia authority. The British Columbia Securities Commission (BCSC) never authorised GoldBS. It did the opposite: on 24 March 2026 it added GoldBS Group Limited to its Investment Caution List. You can read the entry on the regulator's own site, the BCSC caution for GoldBS Group Limited. The network also surfaces through New Zealand's FMA warnings and IOSCO's international investor-alert system. You can see how it sits among other flagged operations on our regulator-warnings hub.

So GoldBS quotes British Columbia to prove it is real, and British Columbia's securities regulator is precisely who told the public to stay away.

Where the money actually goes

Strip away the gold tickers and the company number, and GoldBS is an advance-fee Ponzi with two moving parts.

The first is the trust ramp. You deposit, your "gold" balance climbs with the advertised returns, and your first small withdrawal is paid out, so the thing feels real. Reassured, you put in more. When you try to take out a serious amount, the withdrawal stalls behind a new requirement: a "fee," a "tax," a "verification" payment to some third party. Those payments are the scam. The balance behind them never moves.

The second part is the arithmetic. Because nothing is genuinely traded, the only money the platform holds is what depositors hand over. Early cash-outs are paid from later deposits, the textbook Ponzi loop, and it survives only while new money keeps arriving. When deposits slow, withdrawals freeze for everyone at once, the domain goes quiet, and the next goldbs site opens for a fresh round. The rotation you saw at the top of this page is not a side effect of the scam. It is the scam's exit strategy.

The fingerprints don't point to Canada

For all the "British Columbia" branding, the infrastructure tells a different story. The GoldBS sites are built as Vue.js single-page apps, hosted on Cloudflare and IBM Cloud, registered through Gname.com and Name.com, and at least one of them loads its logo from an Alibaba Cloud storage bucket in South-East Asia (oss-ap-southeast-1). The domains are young, most registered in 2024 and 2025, not the long-running Canadian firm the branding suggests.

None of that pins down where the operators sit, and we will not invent a location. But a Canadian gold exchange does not usually keep its brand assets on an Asian cloud bucket, and a legitimate firm does not need a new domain every few weeks.

What victims report

Public complaints match the technical picture, and they cluster geographically. Users, notably in Pakistan, describe the same sequence: the platform works at first, small withdrawals clear, then larger ones freeze, support goes silent, and the site eventually vanishes only to resurface under a new goldbs number. These are third-party reports rather than our own telemetry, but they line up exactly with the advance-fee mechanics above, and they explain why "goldbs26.com review" and "goldbs.com scam" have become common searches.

Already deposited? Do this now

Speed matters, so work through this in order:

  1. Stop paying. Send nothing more for "fees," "taxes," "verification" or "upgrades." Each payment unlocks nothing; it only triggers the next demand.
  2. Save the evidence. Screenshot your balance, every deposit, wallet addresses, chat logs and any account or "manager" details before the site disappears.
  3. Report it. Tell the British Columbia Securities Commission (BCSC), your own national financial regulator, and your local police or cybercrime unit. If you paid by card or bank transfer, call your bank immediately.
  4. Keep the on-chain trail. Crypto deposits are recorded on public blockchains. Save every transaction hash; that is the trail investigators and your bank will need.

A practical note on the app: GoldBS is handed out as a side-loaded APK ("goldbs apk", "goldbs exchange download apk") rather than through Google Play or the App Store, so it never passes store review. Do not install it, and remove it if you already have.

Quick answers

Is GoldBS Exchange a scam?

Yes. We rate its live domains 1/100 ("dangerous"), 14 of 92 antivirus engines flag goldbs26.com, and Canada's BCSC cautioned the public against GoldBS Group Limited. It is a seven-domain scam network.

Why do GoldBS sites keep going offline?

By design. GoldBS rotates through disposable domains and abandons each one as it collects detections or complaints, then opens a new goldbs domain with the same template.

Is the GoldBS app (APK) safe to download?

We do not recommend it. The app ships as a side-loaded APK outside official stores, bypassing app-store review, which is a common pattern for fraudulent finance apps.

Can I withdraw my money from GoldBS?

Early small withdrawals are paid to build trust, then larger ones are blocked behind fees and conditions. Many users, notably in Pakistan, report being unable to cash out. If you are mid-withdrawal, stop paying and report it.

Are the different goldbs domains the same?

Yes. At least seven goldbs domains share one site template. As each gets flagged or goes offline, the operator launches a new one. See our goldbs36.com analysis.

Is GoldBS Group Limited a registered company?

It cites a British Columbia registration, but registering a company is not a licence to take investments. The BC securities regulator (BCSC), the authority that matters, cautioned the public against it.

How we know

Every figure above comes from running the GoldBS domains through our scanner: antivirus and threat-intelligence checks, SSL and WHOIS validation, a live capture of each page and its code fingerprints, regulator warning-list cross-referencing, and the scam-network graph that ties the cluster together. Regulator and VirusTotal findings are cited to their public sources, and victim reports are labelled as third-party. You can scan any site yourself with our free URL checker or read how our trust score works.

Last updated 6 June 2026. This is general information for consumer protection, not financial or legal advice.

Share this article: