Authorities from the U.S., U.K. and Canada target investment fraud schemes that exploit wallet permissions.