Starshine Capital Scam Review 2026: m.starshinecapital.cc

Everything about the site looked right. The dashboard gleamed. The balance climbed. And the man who recommended it — "Samuel," who said he was a director of artificial intelligence at a prominent tech company — had made his approach on LinkedIn, where a polished profile passes for a character reference. Then the victim tried to withdraw, and Starshine Capital collapsed into what California regulators say it always was: a fabricated trading platform running a pig-butchering con.

Starshine Capital is a scam. That is not our inference. It is the documented position of the California Department of Financial Protection and Innovation (DFPI), which lists m.starshinecapital.cc in its public Crypto Scam Tracker as a fraudulent trading platform after a Californian reported losing about $140,000 on it. Our own Starshine Capital scam review of the domain's registration record, its certificate history, and its live status lands in the same place: this operation displays multiple hallmarks of fraud, from a disposable one-year domain to infrastructure that has already vanished. If someone is talking to you about Starshine right now, keep every screenshot and every receipt. Then read on.

Domain dossier

Everything below comes from public registry records and live network checks we ran ourselves on August 12, 2026. No screenshots from the scammers, no marketing copy — just the plumbing.

Our trust score: 4/100 — see how we score.

What is Starshine Capital?

On paper, nothing. We could not verify a company registration, a financial license, a physical address, or one named human being behind Starshine Capital, and no regulator we checked lists it as an authorized trading platform — the single government database that names it at all is a scam tracker.

What we know about the operation comes from the victim who reported it and from the homepage screenshot the DFPI preserved alongside that complaint, a capture of m.starshinecapital.cc filed on the department's website like evidence in a case jacket. According to the complaint, Starshine presented itself as an online crypto trading platform. The "m." prefix is the conventional marker of a mobile site, and that detail fits the pattern: these platforms are built to live on a phone screen, inside an ongoing conversation, one tap away from the person doing the grooming.

It was never an exchange. It was a stage set — software that displays whatever balance the operator types in, charts that move because the chart widget shipped with the template. The deposits were real enough. They left as cryptocurrency, in transfers the victim was personally walked through, step by step.

Withdrawals were the fiction.

The DFPI files the entry under two labels: "Fraudulent Trading Platform" and "Pig Butchering Scam." Pig butchering is the industry's ugly name for a long con in which a stranger builds trust over weeks — romance, friendship, mentorship — and then steers the target into a rigged investment platform, fattening the account on screen before the slaughter. We have a full breakdown of how the pig-butchering playbook works, and Starshine follows it page by page.

The red flags we found

1. A state regulator names it, in writing, as a pig-butchering scam. The DFPI's Crypto Scam Tracker is not a forum or a rumor mill; it is a public database built from consumer complaints reviewed by a government agency, and the entry for m.starshinecapital.cc sits in it next to a victim-reported loss of about $140,000. When a financial regulator publishes your domain on a fraud list, the argument is over.

2. The recruitment was textbook grooming. According to the DFPI complaint, the victim was contacted on LinkedIn by "Samuel," who claimed to be a director of AI at a prominent company, instructed the victim to open an account on a trading platform called Starshine, and showed the victim how to transfer money to it. Read that last part again. A stranger with an impressive title personally coaching your deposits is not customer service. It is the con.

3. The domain was built to be thrown away. Registered June 15, 2025. Expired June 15, 2026. The operators paid for exactly one year of registration and never renewed, which is not an oversight — it is a business plan, and it is the same disposable-infrastructure pattern we lay out in our guide to spotting a crypto scam.

4. Everything about the operation was designed to leave no forwarding address. The site sat behind Cloudflare. Its certificates rotated every one to three months, all free, all automated, all requiring nothing but control of the domain. The Wayback Machine holds zero captures of any page. The RDAP record names no registrant. No license. No address. No accountability.

5. It vanished with the money. As of today the domain resolves to nothing — no website, no mail server, no support desk — and its registry status is "redemption period," the bureaucratic purgatory a domain enters when its owner stops paying and walks away. If your funds were inside when the lights went off, there is no one home to ask for them back.

The technical picture

The certificate transparency log is the closest thing to a diary this operation left behind, and it tells a tight little story. The first certificate for starshinecapital.cc was issued on June 15, 2025 — the same day the domain was registered, which tells you the site was purpose-built for this name and nothing else. Through its short life it cycled through certificates from Cloudflare and Google Trust Services, the free automated kind that any teenager can obtain in minutes, before a final 90-day certificate from Sectigo was issued on February 16, 2026 and left to expire on May 17, 2026. After that: silence. The domain itself died on June 15, 2026, one year to the day after it was born, and the registrar moved its nameservers to expiration parking. Every DNS query we ran on August 12 — address records, mail records, nameserver records — came back empty.

Each piece of that is ordinary on its own. Honest sites use Cloudflare. Honest sites use free certificates; the padlock in your browser has never meant anything more than "the connection is encrypted," and it has certainly never meant "the people behind this are honest." But stack the pieces together — a one-year domain, anonymous registration, a rotating cast of disposable certificates, no archived history, and a death date that arrived precisely on schedule — and you are not looking at a business that failed. You are looking at infrastructure that performed exactly as designed, for exactly as long as designed, and was then abandoned the way you abandon a burner phone.

What are victims saying about Starshine?

One account is on the public record, and it is damning enough. In the DFPI complaint, a Californian reports being contacted via LinkedIn by "Samuel," who claimed to be a director of AI at a prominent company; Samuel instructed the victim to open an account on the Starshine platform at m.starshinecapital.cc and showed the victim how to transfer money to it. All told, the victim lost about $140,000 on the platform. That is the entire arc of a pig-butchering fraud compressed into one complaint — the approach, the borrowed credibility, the guided deposits, the balance that grows on screen, the withdrawal that never arrives.

Beyond the tracker, we looked for an independent footprint — Trustpilot reviews, Reddit threads, a Better Business Bureau profile — and could not verify any. For a platform that solicited the public's money, that silence is its own data point. Real brokers accumulate angry customers, glowing shills, arguments. Starshine accumulated nothing, because there was never a customer base — only targets.

Zoom out and Starshine is one row in a very long table. The FBI's Internet Crime Complaint Center took 149,686 cryptocurrency-related complaints in 2024, with reported losses of $9.3 billion; the largest single slice was crypto investment fraud, the bucket pig butchering falls into, at $5.8 billion across 41,557 complaints, per the IC3 2024 annual report. California's DFPI said in March 2025 that it had logged 2,668 crypto scam complaints in 2024 alone and, working with the state attorney general, shut down 26 fraudulent websites. The machine that built Starshine is still stamping out copies.

How do you protect yourself from platforms like this?

Most people find a Starshine Capital scam review the hard way — after the first deposit. You can skip that tuition with five habits.

1. Check the domain before the dream. A WHOIS or RDAP lookup takes sixty seconds and tells you when a site was actually born — our guide on how to check if a website is legit walks you through it. A trading platform whose domain is younger than your houseplant is not a trading platform.

2. Verify the license, not the logo. Search the regulator's own register — the DFPI, the SEC, the FCA — and take the absence of a result as an answer, because authorization is not optional for a firm holding the public's money. When the only government database that names the company is a scam tracker, the research phase is finished.

3. Interrogate the introducer. A new contact — romantic, professional, "wrong number" — who steers you toward one specific platform and then coaches your transfers is running the play described in our pig-butchering explainer. It does not matter how patient they are. Patience is the product.

4. Refuse every fee to withdraw. The demand for a "tax," a "security deposit," or an "unlocking fee" before you can touch your own balance is the signature move of this fraud, not a quirk of the platform. No legitimate broker works that way. None.

5. If you already sent money, move fast and document everything. Follow our first-48-hours protocol, report the crime to the FBI at ic3.gov and the FTC at reportfraud.ftc.gov, and file a complaint with the DFPI so the tracker gets one row stronger. Then ignore every stranger who slides into your messages promising to recover the funds — that is the recovery scam, the second fraud, and it preys on the same people twice. If you want a human to sanity-check your situation first, contact us.

Our verdict

Starshine Capital appears to be exactly what the California DFPI says it is: a fraudulent trading platform that ran a pig-butchering scheme and cost at least one victim about $140,000. That is our assessment based on publicly available data — the registry record, the certificate logs, the live network evidence, and a complaint published by a state regulator — and we could not verify a single legitimate attribute for this operation: no company, no license, no address, no functioning website, no refunds. One star out of five, four points out of a hundred, and the four points are charity. If "Samuel" or someone just like him is in your inbox tonight, understand that the platform is dead but the playbook is not, and the next disposable domain has already been registered somewhere.

Frequently asked questions

Is Starshine Capital legit?

No. The California DFPI lists m.starshinecapital.cc on its Crypto Scam Tracker as a fraudulent trading platform tied to a pig-butchering scheme, and we could not verify a company, license, or physical address behind it. The domain has now expired and resolves to nothing. Everything in this Starshine Capital scam review traces to public records you can check yourself.

I already deposited with Starshine — what now?

Stop sending money immediately, and above all refuse any "tax" or "fee" demanded to unlock a withdrawal — that demand is the fraud, not a procedure. Preserve everything: chats, profiles, transaction hashes, emails. Then work through our first-48-hours guide and report to the FBI at ic3.gov and the FTC at reportfraud.ftc.gov.

Can I get my money back from starshinecapital.cc?

Honest answer: full recovery is rare, because crypto transfers are effectively irreversible and the operators are anonymous. Report anyway — complaints are what put domains on trackers and takedown lists — and treat anyone who guarantees recovery for an upfront fee as the second fraud, because that is precisely what they are.

Why did the Starshine Capital website disappear?

Because the operators let it. The domain was registered for exactly one year on June 15, 2025, the renewal was never paid, and it expired on June 15, 2026; it now sits in redemption period with no DNS records at all. A real brokerage does not forget to renew the domain that holds client money.

Who is "Samuel"?

Almost certainly not a director of AI at a prominent company. "Samuel" is a persona — possibly one person, possibly a team sharing a script — and the LinkedIn profile used to approach the victim is as disposable as the domain was. Assume the name, the photo, and the biography were all borrowed.

How do I report Starshine Capital?

File with the FBI at ic3.gov, the FTC at reportfraud.ftc.gov, and the DFPI's complaint portal at dfpi.ca.gov — and if you are unsure what to include, contact us and we will point you in the right direction.

Frequently asked questions

Is Starshine Capital legit?+

No. The California DFPI lists m.starshinecapital.cc on its Crypto Scam Tracker as a fraudulent trading platform tied to a pig-butchering scheme, and we could not verify a company, license, or physical address behind it. The domain has now expired and resolves to nothing. Everything in this Starshine Capital scam review traces to public records you can check yourself.

I already deposited with Starshine — what now?+

Stop sending money immediately, and above all refuse any "tax" or "fee" demanded to unlock a withdrawal — that demand is the fraud, not a procedure. Preserve everything: chats, profiles, transaction hashes, emails. Then work through our first-48-hours guide and report to the FBI at ic3.gov and the FTC at reportfraud.ftc.gov.

Can I get my money back from starshinecapital.cc?+

Honest answer: full recovery is rare, because crypto transfers are effectively irreversible and the operators are anonymous. Report anyway — complaints are what put domains on trackers and takedown lists — and treat anyone who guarantees recovery for an upfront fee as the second fraud, because that is precisely what they are.

Why did the Starshine Capital website disappear?+

Because the operators let it. The domain was registered for exactly one year on June 15, 2025, the renewal was never paid, and it expired on June 15, 2026; it now sits in redemption period with no DNS records at all. A real brokerage does not forget to renew the domain that holds client money.

Who is "Samuel"?+

Almost certainly not a director of AI at a prominent company. "Samuel" is a persona — possibly one person, possibly a team sharing a script — and the LinkedIn profile used to approach the victim is as disposable as the domain was. Assume the name, the photo, and the biography were all borrowed.

How do I report Starshine Capital?+

File with the FBI at ic3.gov, the FTC at reportfraud.ftc.gov, and the DFPI's complaint portal at dfpi.ca.gov — and if you are unsure what to include, contact us and we will point you in the right direction.

About the investigator

Dana Whitfield

Technology journalist · narrative investigations

Dana Whitfield has covered the intersection of technology and fraud for twelve years, tracing pig-butchering compounds, fake exchange networks and the boiler rooms behind them across three continents.

All investigations by Dana →