Risk scorecard
Each area is scored 0 (clean) to 10 (worst). Higher means more risk.
Regulation
9/10 · CriticalOnly ever held a Comoros registrar permission whose term ended 15 August 2025, and a national regulator has listed the domain for signs of illegal financial activity.
Identity & transparency
9/10 · CriticalNo legal entity named anywhere on the site, a Limassol head office with no matching Cyprus company, and a Comoros footer address that contradicts the European presentation.
Withdrawals & conduct
4/10 · ModerateNo fund integrity complaints located on any platform, but equally no verified payout reports, so fund access is untested rather than demonstrated.
Reputation
7/10 · HighA Bank of Russia listing against the exact domain, and no organic review footprint anywhere despite the site advertising more than 1,000 members.
Website claims
8/10 · CriticalClaims strict regulatory control under a licence that expired over a year ago, and advertises a 4.8 out of 5 rating that no review platform supports.
Operational history
4/10 · ModerateDomain and licence both date from mid 2023, giving a little over three years with no inflated age claim, though the operating company could not be dated.
Who they are
A quick desk file on the company behind the brand.
The desk file on this operation:
- Brand: DAOTI, trading as daoti.io
- Legal entity: Daoti.io LTD, company number HY00723021. This name appears only on the Comoros register, never on the broker's own website.
- Registered: Bonovo Road, Fomboni, Island of Moheli, Comoros Union
- Advertised head office: Foti Kolakidi 16, 1st Floor, Agia Zoni, 3031 Limassol, Cyprus, with a Cyprus phone number. The Cyprus Registrar of Companies holds no company matching this name.
- Website: daoti.io for marketing, my.daoti.io for the client portal and deposits
- Only licence: Mwali International Services Authority (Comoros) registration T2023343, term 15 August 2023 to 15 August 2025
- Offers: Forex, crypto, metals, indices and energies as CFDs, with MetaTrader 5, copy trading and an in-house tool branded AlphaTrader AI. Account tiers run from 20 dollars to 150,000 dollars. Cryptocurrency deposits are promoted.
- Not accepted: North Korea, Iran, Bulgaria, United States, China, Canada, Turkey
- Age claim: none published. The domain was registered on 18 July 2023, which is consistent with the licence issue date, so no inflated history is being advertised.
Regulation
Who really oversees this broker, and what each licence is worth to you.
Proof of regulation on an official register: No
We could not confirm this broker on any genuine regulator’s register.
Licences the broker publishes
Mwali International Services Authority (MISA), Comoros
Why we reached this verdict
How the evidence adds up.
Four findings carry this verdict, and the first one is the heaviest.
- A national regulator has named the exact domain. The Bank of Russia maintains a public list of companies with detected signs of illegal activity in the financial market. DAOTI.IO was added on 11 November 2025, with the website recorded as daoti.io and the finding stated as signs of an illegal professional participant in the securities market. That is a regulator's own conclusion about this operation, not an opinion about a similarly named firm.
- The licence has run out. The Mwali International Services Authority verification record for T2023343 names Daoti.io LTD, company number HY00723021, and gives the website as daoti.io. It also gives a licence end date of 15 August 2025. That date passed more than a year ago and the register shows no renewal. The summary list still carries an Active badge, but it sits on a record whose own term has expired.
- The marketing does not match the paperwork. The homepage states that the company is under the strict control of regulators with licence T2023343, and the FAQ repeats that it operates as a licensed broker for regulatory trust. Even when it was current, that registration came from a company registrar on the autonomous island of Mwali, not from a financial supervisor. There is no conduct supervision behind it, no client money segregation rule, and no compensation scheme. The site also advertises a 4.8 out of 5 rating and more than 1,000 members, while no review platform carries a single review of this broker.
- Nobody is named as the counterparty. A client can read the About page, the Contacts page and the footer without learning which company would hold their money. The site presents a Limassol head office and says the move was made to be closer to its European users, yet the Cyprus Registrar of Companies returns no company matching Daoti on either a starts-with or a contains search, and no European authorisation exists. An offshore registration, now lapsed, does not permit soliciting clients in the European Union.
Two further points a reader should weigh. The entry level account takes deposits from 20 dollars against nothing more than an email address and a questionnaire, which is not how a firm that expects regulatory scrutiny handles onboarding. And the marketing site has served no valid certificate since 13 September 2026, so visitors to daoti.io now meet a security warning instead of a website, while the portal that accepts deposits at my.daoti.io stays open for business.
On age, we are giving an upper bound rather than a figure. The domain dates from 18 July 2023, which is a little over three years. The Comoros registrar publishes no dated company record, so Daoti.io LTD itself could not be dated, and the track record therefore rests on the domain alone. The true operating age cannot be higher than that, and may be lower.
What we did not find matters too. There are no reports of clients being refused their money, no advance fee demands, and no enforcement action or court record naming this entity. That is why this is a likely scam rather than a confirmed one. We assess the risk of fraud as high on the strength of the regulator listing and the lapsed permission, but we are not asserting that any specific client has been defrauded.
Evidence ledger
Every finding, with its source and how strongly it points.
E1The Bank of Russia lists DAOTI.IO on its register of companies with detected signs of illegal activity in the financial market, added 11 November 2025. The record names the website daoti.io and states the finding as signs of an illegal professional participant in the securities market.
E2The issuer's licence verification record for T2023343 names Daoti.io LTD, company number HY00723021, website daoti.io, issued 15 August 2023 with a licence end date of 15 August 2025. That term has passed and no renewal is recorded.
E3The broker's homepage continues to state that the company is under the strict control of regulators with licence T2023343, on a page captured in June 2026, roughly ten months after the licence term ended.
E4The Cyprus Registrar of Companies returns no company matching Daoti on a contains search, while the broker publishes a Limassol head office, a Cyprus phone number and a statement that it moved to be closer to its European users. There is no European entity or authorisation behind that presentation.
E5The About Us page names no legal entity. It gives only a country and street address in the Comoros, with no company name, registration number or officers, on a site that solicits deposits of up to 150,000 dollars.
E6The entry level Start account takes deposits from 20 dollars with identity verification described as only email and questionnaire, meaning funds are accepted without any identity document.
E7The contacts page gives a Limassol address and a Cyprus telephone number as the company's point of contact, again without naming any company.
E8Certificate transparency records show the last certificate issued for daoti.io ran to 13 September 2026 and was not replaced, so the marketing site now presents a security warning to visitors. The client portal at my.daoti.io remains available and still accepts new registrations.
E9The authority named on the licence is a registrar of companies on the autonomous island of Mwali that maintains lists of registered brokerage, banking, gambling and crypto entities. It is a registration body rather than a financial supervisor, and provides no client money protection.
E10The register entry records the licensed entity as Daoti.io LTD with the licensed website given as daoti.io, matching the operation under review. The broker is registered under its own identity and is not using another company's licence, name or address.
E11Domain records show daoti.io was registered on 18 July 2023 through PDR Ltd, which is consistent with the licence issue date of 15 August 2023. The broker advertises no founding year, so no age misrepresentation arises.
E12The client portal at my.daoti.io is live, invites account creation and presents deposit and wallet management functions, confirming this is a deposit taking operation rather than a dormant brand or an information service.
ModerateDAOTI client portal
The other side
The strongest case in this broker’s favour.
The case for the defence, stated fairly:
- It is not impersonating anyone. This was the first thing we tested. The Comoros register records the licensed entity as Daoti.io LTD and the licensed website as daoti.io, which is exactly the operation we examined. DAOTI is not wearing another firm's licence number, entity name or address. That rules out the most damaging pattern in this market and it deserves to be said plainly.
- The licence was real. T2023343 is not invented. It appears on the issuer's own register with a matching entity, a matching website and coherent dates. Plenty of brokers at this end of the market simply print a number that resolves to nothing.
- It does not lie about its age. There is no since-2010 banner on a 2023 domain. The domain registration of 18 July 2023 and the licence issue date of 15 August 2023 line up, and the Comoros address in the footer is the same one behind the registration.
- No client has publicly accused it of taking their money. We looked across review platforms, trading forums and broker directories and found no withdrawal complaints at all. An operation that was actively stealing deposits at scale usually leaves a trail, and this one has not.
- The Russian listing has a narrower meaning than it first appears. The Bank of Russia lists firms that solicit Russian residents without a Russian licence. A broker can land on it for operating without local permission rather than for defrauding anyone. It is still a regulator's adverse finding, but it is not the same as a fraud charge.
Set against that: an expired permission from a non-supervisor, no disclosed counterparty, no European entity behind a European head office, and deposits accepted on an email address. The absence of complaints is also less reassuring than it sounds when there is no review footprint of any kind to complain in.
What would change this
What we would need to see to revise the verdict.
Concrete things that would move this verdict, in either direction:
- Towards a lower risk: the Comoros register showing a renewed licence for Daoti.io LTD with a current end date, rather than a term that closed in August 2025.
- The broker naming its contracting legal entity, its registration number and its registered address openly on its own website and in its terms, so a client knows who holds their money before they send it.
- An authorisation from a supervisor that actually supervises, with the entity that takes client deposits named on that regulator's register and the daoti.io domain listed against it.
- The Bank of Russia removing DAOTI.IO from its list of companies with signs of illegal activity, or the company successfully appealing the entry, which the list's own terms allow.
- Credible, checkable reports from clients who withdrew real money, with amounts and dates, across more than one independent platform.
- Towards a higher risk: any specific account of a withdrawal being refused, a balance being deleted, or a payment being demanded before funds are released. A single credible report of that last pattern would change this report substantially.
- A second regulator naming the domain, or any enforcement or court action against Daoti.io LTD.
Check it yourself
Official registers and warning lists. Verify every claim first-hand.
Bank of Russia, warning list entry for DAOTI.IO
The regulator's own record naming the domain, added 11 November 2025.
Mwali International Services Authority, licence verification T2023343
Shows the licensed entity, company number and the licence end date of 15 August 2025.
Mwali International Services Authority, authorised brokerage companies
The full list the entry sits on, with the recorded website for each licensee.
Cyprus Registrar of Companies, name search for Daoti
Returns no company, despite the advertised Limassol head office.
Frequently asked questions
Quick answers about this broker’s safety.
Is DAOTI a scam?
We classify DAOTI as a likely scam and rate the risk at 74 percent. The Bank of Russia added daoti.io to its list of companies showing signs of illegal financial activity in November 2025, and the broker's only licence expired in August 2025. We did not find reports of clients losing money, which is why the verdict is likely rather than confirmed.
Is DAOTI a fraud?
We have not found evidence that would let anyone state that as fact, and no regulator or court has made a fraud finding against this entity. What exists is a Bank of Russia listing recording signs of an illegal professional participant in the securities market, and a lapsed offshore registration. On that basis we assess the risk of fraud as high, but we are not asserting a crime.
Is DAOTI regulated?
Not in any meaningful sense. Its only permission was registration T2023343 from the Mwali International Services Authority in the Comoros, and the issuer's own record gives that an end date of 15 August 2025. Even while current it came from a company registrar, not a financial supervisor. There is no CySEC, FCA, ASIC or other mainstream authorisation.
Can I withdraw my money from DAOTI?
We cannot promise either way, because we found no reports from clients who tried. If you hold a balance, attempt a withdrawal now and start with a small test amount. Keep every reference number. If you are asked to pay a fee, a tax or a verification charge before your funds are released, stop and treat the money as at risk.
Is my money safe with DAOTI?
No. There is no supervisor overseeing how client funds are held, no requirement to keep them separate from company money, and no compensation scheme if the operation fails. A Comoros registration gives a client no deposit protection and no ombudsman to appeal to.
Who owns DAOTI?
The website does not say. The About page, the Contacts page and the footer give an address and a phone number but no company name. The only entity on any register is Daoti.io LTD, company number HY00723021, recorded in the Comoros. No directors or owners are published.
How old is DAOTI?
The daoti.io domain was registered on 18 July 2023 and the Comoros licence was issued on 15 August 2023, so a little over three years. That is an upper bound: the Comoros registrar publishes no dated company record, so the operating company itself could not be dated.
What is a MISA licence and is it worth anything?
MISA is the Mwali International Services Authority, a registrar on the autonomous Comorian island of Moheli. It registers companies and issues brokerage permissions cheaply, but it does not supervise conduct, set capital requirements or protect client deposits. It is at the bottom of any ranking of financial authorities and should not be read as regulation.
Is DAOTI a clone of another broker?
No, and we checked this specifically. The Comoros register records the licensed entity as Daoti.io LTD and the licensed website as daoti.io, matching the operation exactly. DAOTI is not using another company's licence number, name or address.
Why does daoti.io not open in my browser?
The security certificate for daoti.io expired on 13 September 2026 and has not been renewed, so browsers show a warning instead of the site. The client portal at my.daoti.io still loads and still accepts new registrations, which is an odd combination for a business that is maintaining its systems.
Is DAOTI based in Cyprus?
It advertises an office at Foti Kolakidi 16 in Limassol and a Cyprus phone number, but the Cyprus Registrar of Companies holds no company matching this name, and there is no CySEC authorisation. The only registered entity is in the Comoros, so we record the country of incorporation as Comoros rather than Cyprus.
What should I check before depositing with any broker?
Find the legal entity name and registration number on the broker's own site, then look that entity up on the regulator's public register yourself rather than trusting a badge or a PDF. Check the licence is current and that the register lists the website you are actually using. If any of those steps fails, do not deposit.
What do I do if I have already sent money to DAOTI?
Request a withdrawal in writing and keep the records. If you paid by card or bank transfer, contact your bank quickly about a chargeback or payment recall, because these have deadlines. Report the matter to your national financial regulator and cybercrime unit, and ignore anyone who offers to recover your funds for an upfront fee.
What we recommend
The practical takeaway from everything above.
Our advice to anyone considering this broker:
- Do not send new money. The permission the site relies on ended in August 2025 and a national regulator has flagged the domain. There is no supervisor to complain to and no compensation scheme behind your deposit.
- If you already hold a balance, try to withdraw it now and start with a small test amount. Keep every ticket number, transaction reference and chat log.
- Establish who you are contracting with before anything else. If support cannot give you a company name and registration number in writing, that alone answers the question.
- Treat any request for an extra payment as the end of the matter. No legitimate broker asks for a tax, an unlocking fee, an insurance payment or a verification charge before releasing your own funds.
- If you paid by card or bank transfer, contact your bank about a chargeback or recall promptly, because these routes are time limited. Crypto transfers are generally not reversible.
- Report it. File with the financial regulator where you live, and with your national cybercrime or consumer protection body.
- Ignore anyone who contacts you offering to recover your losses for an upfront fee. Victims of unregulated brokers are routinely approached a second time by recovery scams.
This is an independent assessment of risk, not a legal ruling. Scores and verdicts follow the Wikilix broker-safety methodology and can change as new evidence appears. Review scores are treated with caution when a broker’s reviews look manipulated. Last reviewed September 18, 2026. If any detail here is out of date or incorrect, or you represent this broker, please contact us.