Auxerion Capital, Alan Skye, Tiffany Robbinson & Aurexion Capital Investigation
Case Type: Cryptocurrency Scam / Romance Scam / Pig Butchering Scam / Cyber Investigation
Case ID: CASE-2026-004
Investigation Status: Open
Published: August 2026
Investigated By: Cyb3rsect
Executive Summary
Cyb3rsect has opened an investigation into Auxerion Capital, Alan Skye, Tiffany Robbinson and Aurexion Capital following an official consumer alert issued by the Washington State Department of Financial Institutions (DFI), Securities Division.
DFI published its alert on June 3, 2026, identifying the subjects as:
- Auxerion Capital
- Alan Skye
- Tiffany Robbinson
- Aurexion Capital
The agency categorized the matter as a Cryptocurrency Scam, Romance Scam and Pig Butchering Scam and listed approximately $300,000 in reported losses.
According to DFI, an investor reportedly learned about the investment opportunity through an online acquaintance named Bryci Andres, who introduced the investor to individuals associated with Auxerion identified as Tiffany Robbinson and Alan Skye.
DFI states that Skye allegedly presented himself as an advisor with Auxerion and used an email address associated with the domain aurexion-capital.com.
DFI further states that the investor’s computer was allegedly accessed remotely and that funds were transferred from the investor’s financial accounts to OKX, converted into cryptocurrency and subsequently withdrawn to various cryptocurrency wallet addresses.
The investor reportedly lost approximately $300,000.
DFI explicitly states that the factual details and reported losses have not been verified by the agency.
This distinction is maintained throughout this investigation.
Investigation Status: OPEN
1. Subjects Identified
The official DFI alert identifies:
Auxerion Capital
Alan Skye
Tiffany Robbinson
Aurexion Capital
DFI states that Auxerion claimed to be a private investment firm.
The agency also states that Auxerion may be associated with another entity called Aurexion Capital.
Because similar names do not automatically establish common ownership Cyb3rsect treats Auxerion Capital and Aurexion Capital as separate entities unless additional evidence establishes their relationship.
2. Official Regulatory Alert
The Washington State Department of Financial Institutions published its consumer alert on June 3, 2026.
DFI describes the matter as involving an alleged private investment firm and identifies the subjects listed above.
The agency’s scam classifications are:
Cryptocurrency Scams
Romance Scams
Pig Butchering Scams
Reported Loss: $300,000
DFI also provides an important disclaimer stating that the factual details and reported losses have not been verified.
3. Alleged Introduction Through an Online Relationship
According to the DFI alert, the investor reportedly learned about the investment opportunity through an online acquaintance identified as Bryci Andres.
Andres allegedly introduced the investor to individuals associated with Auxerion identified as:
Tiffany Robbinson
and
Alan Skye
DFI states that Skye presented himself as an advisor with Auxerion.
This reported introduction is significant because DFI classified the case partly as a Romance Scam and Pig Butchering Scam.
The fact that an investment opportunity was introduced through an online relationship should be considered a warning sign requiring additional verification.
4. Alleged Investment Advisor Identity
DFI states that Alan Skye allegedly presented himself as an advisor with Auxerion.
The agency reports that Skye used the email address:
DFI states that the domain aurexion-capital.com did not appear to be a registered domain at the time of its review, while the website aurexioncapital.com may have been involved and potentially fraudulent.
This distinction is important.
A domain containing a company’s name is not automatically proof that the company owns or operates it.
The relationship between these domains requires independent verification.
5. Aurexion Capital Website
During our research, Cyb3rsect located an active website at:
aurexioncapital.com
The website presents itself as a global trading and investment platform and claims to provide services involving forex, cryptocurrency, indices and commodities.
The website currently claims:
- More than 150,000 active traders and investors.
- More than $2.8 billion in assets under management.
- 24/7 trading and portfolio access.
- Segregated accounts.
- Insurance protection.
- Regulation across multiple jurisdictions.
The site’s “About Us” page makes substantially larger claims, stating that Aurexion Capital was founded in London in 2015, operates across more than 150 countries and has more than 3.5 million active traders and more than $500 billion in annual trading volume.
These figures are claims made by the website.
Cyb3rsect.com does not treat website statements as independent verification of assets under management, customer numbers, trading volume, regulatory authorization or insurance coverage.
6. Regulatory Claims Require Independent Verification
Aurexion Capital’s website claims regulatory or compliance relationships involving:
- UK FCA
- CySEC
- ASIC
- FSCA
- MAS
- MiFID II
The website’s terms page similarly displays references to FCA, CySEC, ASIC, MAS and FSCA regulatory frameworks.
These claims should be independently verified against the relevant regulators.
A website displaying a regulator’s name or logo is not sufficient evidence of authorization.
Consumers should independently search the regulator’s official register and confirm that:
- The legal entity exists.
- The entity is authorized.
- The authorization covers the specific financial services being offered.
- The website and contact details match the authorized entity.
7. Alleged Remote Computer Access
One of the most significant elements of the DFI alert concerns the alleged compromise of the investor’s computer.
According to DFI, individuals claiming to work for Auxerion allegedly gained remote access to the investor’s computer.
The investor was reportedly instructed to download AnyDesk, a legitimate remote-access application.
DFI states that further review raised the possibility that the individuals may instead have been accessing the computer through a Remote Access Trojan (RAT).
DFI also reported that several settings on the computer had been disabled, including the ability to turn off the Wi-Fi connection.
According to the agency, maintaining network connectivity could allow unauthorized actors to retain access to the device without the owner’s knowledge.
These allegations make this case particularly relevant to digital forensics, not simply investment-fraud analysis.
8. Alleged Financial Account Access
According to the DFI alert, once remote access was obtained, the individuals allegedly began withdrawing funds from the investor’s financial accounts.
The reported sequence was:
Remote computer access
↓
Access to financial accounts
↓
Funds transferred to OKX
↓
Funds converted into cryptocurrency
↓
Cryptocurrency withdrawn from OKX
↓
Funds transferred to various wallet addresses
DFI states that these transactions were allegedly conducted remotely and, in certain instances, without the investor’s knowledge.
This portion of the case presents a potentially important intersection between:
Cyber Investigation + Digital Forensics + Financial Investigation + Blockchain Forensics
9. Cryptocurrency Component
According to DFI, funds were reportedly transferred to OKX, converted into cryptocurrency and then withdrawn to various cryptocurrency wallet addresses.
If transaction records, wallet addresses or transaction hashes can be obtained, blockchain investigators may potentially reconstruct portions of the transaction path.
Potential analysis could include:
- Transaction timestamps
- Wallet addresses
- Amounts transferred
- Sending addresses
- Receiving addresses
- Subsequent wallet movements
- Exchange deposits and withdrawals
- Related blockchain activity
Blockchain analysis does not automatically establish who controls a wallet.
Additional evidence is generally required to connect a blockchain address to a particular individual or organization.
10. Reported Loss
The Washington State DFI alert lists:
Reported Loss: $300,000
DFI states that the investor lost approximately $300,000 and has not been able to recover the funds.
However, DFI explicitly warns that the factual details and reported losses have not been verified.
Accordingly, this report describes the amount as a reported loss, not an independently verified financial loss.
11. Remote Access Trojan Warning
DFI provides educational information about Remote Access Trojans in connection with this alert.
A RAT is malware capable of providing unauthorized remote access to a computer.
Depending on its capabilities, malicious remote-access software can potentially allow an attacker to:
- Monitor activity.
- Capture keystrokes.
- Access files.
- Modify settings.
- Access financial information.
- Monitor communications.
- Maintain unauthorized access.
The DFI alert states that the circumstances reported by the investor raised the possibility that a RAT, rather than simply AnyDesk, may have been involved.
That possibility requires forensic examination of the affected device before it can be established.
12. Evidence Classification
For this investigation, Cyb3rsect classifies the available information as follows.
VERIFIED
- Washington State DFI published an official consumer alert on June 3, 2026.
- The alert identifies Auxerion Capital, Alan Skye, Tiffany Robbinson and Aurexion Capital.
- DFI classifies the matter as a cryptocurrency scam, romance scam and pig butchering scam.
- DFI lists approximately $300,000 in reported losses.
- DFI states that Auxerion claimed to be a private investment firm.
- DFI reports that the investor’s funds were allegedly transferred to OKX and subsequently into cryptocurrency wallets.
- DFI explicitly states that the factual allegations and reported losses have not been verified.
REPORTED / ALLEGED
- Bryci Andres allegedly introduced the investor to the investment opportunity.
- Tiffany Robbinson and Alan Skye allegedly became involved.
- Alan Skye allegedly represented himself as an Auxerion advisor.
- The investor was allegedly instructed to use remote-access software.
- Financial accounts were allegedly accessed remotely.
- Funds were allegedly converted into cryptocurrency and transferred to wallets.
- The investor allegedly lost approximately $300,000.
UNVERIFIED
- The true identities of all individuals involved.
- The ownership and control of Auxerion Capital.
- The relationship between Auxerion Capital and Aurexion Capital.
- The relationship between aurexion-capital.com and aurexioncapital.com.
- The identity of the individuals controlling the cryptocurrency wallets.
- Whether a Remote Access Trojan was actually installed.
- The ultimate destination of the reported cryptocurrency.
- Whether the regulatory claims displayed on Aurexion Capital’s website are valid for the entity operating the website.
13. What a Digital Forensic Investigation Could Examine
If the affected computer remains available, forensic investigators may examine:
- Installed software.
- Remote-access applications.
- Suspicious executables.
- Windows event logs.
- Browser history.
- Download history.
- Authentication records.
- Network connections.
- Persistence mechanisms.
- Registry changes.
- Malware indicators.
- Cryptocurrency-related activity.
- Email activity.
- Financial account access.
- Evidence of unauthorized remote sessions.
Investigators should preserve the original device and avoid unnecessary changes to the system where possible.
A forensic examination should be conducted using appropriate evidence-preservation procedures.
14. What a Blockchain Investigation Could Examine
If the investor has retained transaction records, investigators may examine:
- OKX transaction records.
- Deposit addresses.
- Withdrawal addresses.
- Transaction hashes.
- Blockchain networks involved.
- Wallet-to-wallet transfers.
- Subsequent transfers.
- Exchange interactions.
The purpose would be to reconstruct the movement of funds and identify potentially useful investigative leads.
Blockchain tracing does not guarantee recovery.
15. Warning Signs Identified
The allegations in this case contain several serious warning indicators:
- An investment opportunity introduced through an online relationship.
- Individuals presenting themselves as investment professionals.
- Requests to install remote-access software.
- Alleged remote access to financial accounts.
- Transfers into a cryptocurrency exchange.
- Cryptocurrency withdrawals to external wallets.
- A reported loss of approximately $300,000.
- An alleged inability to recover the funds.
Consumers should never give an unknown person remote access to a computer containing banking, investment or cryptocurrency information.
16. Investigator’s Assessment
This case warrants high-priority digital and financial investigation because the official DFI alert describes alleged conduct extending beyond a conventional investment solicitation.
The reported activity potentially involves:
Romance Scam
Investment Fraud
Remote Computer Access
Financial Account Compromise
Cryptocurrency Transfers
Blockchain Wallet Activity
The Washington State DFI warning is the principal source underlying the allegations in this report.
DFI explicitly states that the factual details and reported losses have not been verified.
Cyb3rsect therefore does not present the allegations as established criminal findings.
Our current classification is:
INVESTIGATION STATUS: OPEN
EVIDENCE STATUS: OFFICIAL REGULATORY ALERT / UNDERLYING ALLEGATIONS REQUIRE INDEPENDENT FORENSIC VERIFICATION
17. Have You Encountered Auxerion Capital or Aurexion Capital?
If you have interacted with Auxerion Capital, Aurexion Capital, Alan Skye, Tiffany Robbinson or another representative claiming to be associated with these entities, you may submit information to our investigation team.
Potentially useful evidence includes:
- Emails
- Screenshots
- Investment documents
- Website addresses
- Remote-access instructions
- AnyDesk session information
- Bank records
- OKX transaction records
- Cryptocurrency wallet addresses
- Transaction hashes
- WhatsApp communications
- Telegram communications
- Dating-site communications
- Phone numbers
- Names or aliases
- Dates and amounts involved
Do not send passwords, private keys, seed phrases, authentication codes or other account credentials.
Official Source
Washington State Department of Financial Institutions — Securities Division
Title: Alleged private investment firm Auxerion Capital may be fraudulent
Date: June 3, 2026
Subjects: Auxerion Capital; Alan Skye; Tiffany Robbinson; Aurexion Capital
Reported Loss: $300,000
Categories: Cryptocurrency Scams; Romance Scams; Pig Butchering Scams
Official alert:
https://dfi.wa.gov/alerts/alleged-private-investment-firm-auxerion-capital-may-be-fraudulent
Investigation Notice
This report is based on publicly available information and material reviewed by Cyb3rsect at the time of publication.
The principal allegations described in this case originate from an official consumer alert issued by the Washington State Department of Financial Institutions.
DFI states that the factual details and reported losses have not been verified.
The inclusion of a person, company, website or platform in this report does not by itself establish criminal conduct.
Where information could not be independently established, it has been identified as reported, alleged or unverified.
Investigation Status: OPEN
CASE ID: CASE-2026-004
