A clone broker borrows a real financial firm’s identity to make a fraudulent offer look regulated. The company name may be genuine. The license number may lead to a genuine register entry. Neither proves that the person contacting you works for that company.
The check that matters is whether the registered business confirms the website, representative, account opening process and payment instructions you have been given. Treat those as separate questions, not one box marked “regulated.”
Fraudsters copy names, addresses, firm reference numbers and websites, then substitute their own contact details. The FCA’s guidance on clone firms and individuals identifies this mix of genuine credentials and false contact information as a central feature of the scam.
Why a Real License Number Can Still Lead to a Scam
A registration number identifies a record. It does not authenticate the email, phone call or trading app placed in front of you.
This distinction explains why searching a number and finding a legitimate business is only the beginning. You have established that the business exists in a regulatory database. You have not established that your proposed transaction involves that business.
Impersonators can copy employment histories and registration details, link to genuine websites and even encourage investors to research the professional whose identity they have stolen. Caller ID can also be spoofed. These tactics appear in the SEC and FBI investor alert on impersonated investment professionals.
Separate the evidence into two categories: information about a genuine firm, and evidence connecting your contact to that firm. A copied license belongs in the first category. Independent confirmation from the real business belongs in the second.
Ten documents repeating the same number do not bridge that gap. They may just be ten copies of the same claim.
Check the Broker’s Identity Through the Right Register
Start with the product and your jurisdiction
Ask for the full legal entity name, regulator, registration number and the service being offered. Record your country of residence too. Avoid starting with a trading brand alone, particularly if the account agreement names a different business.
For US securities brokers, use FINRA BrokerCheck. For investment advisers, check the SEC’s Investment Adviser Public Disclosure database and relevant state records. For futures, retail forex and other derivatives intermediaries, NFA BASIC provides registration and disciplinary information. The CFTC’s registration and background checking resource sets out the relevant databases and notes that requirements depend on the activity, with some exemptions.
Do not interpret absence from one database as automatic proof of fraud. Equally, do not accept “we are exempt” without checking that explanation with the relevant authority. A foreign registration also needs checking against the rules applying to the service offered to you.
If the pitch involves currencies, the wider forex scam warning signs can help assess the offer. They do not replace identifying the business behind it.
Compare the whole identity, not just the number
Build a comparison before opening an account. Keep the details supplied by the salesperson beside the information you obtain independently. This makes inconsistencies harder to explain away with a hurried phone call.
| Detail | Question to resolve |
|---|---|
| Legal entity | Does the account agreement name the business you checked? |
| Registration status | What does the current record say about the firm and relevant activity? |
| Website and email | Has the genuine firm confirmed these exact addresses? |
| Representative | Does the firm confirm this person and their involvement in your offer? |
| Trading portal or app | Does the business confirm that it operates or authorizes this service? |
| Payment recipient | Has the firm independently confirmed the proposed funding instructions? |
Use the table as a record of unresolved questions, not a scoring system. Five reassuring answers should not cancel out an unexplained payment destination.
Contact the genuine firm independently
For a UK firm, check its authorization, relevant permissions and contact details through the FCA’s official services. For a US securities firm, contact information in its independently retrieved Client Relationship Summary, or Form CRS, provides a verification route. The SEC’s impersonation guidance gives the steps for finding that document through Investor.gov.
Do not ask the suspected salesperson to arrange the verification call. Start a fresh conversation using the independently obtained details.
Ask a practical question: “Someone using this name and email has offered me this account through this website. Can you confirm the person, portal and offer?” Read the addresses carefully rather than saying they “look like yours.”
Ask separately about payment instructions before sending funds. Request confirmation through the business’s established process, and retain it.
If nobody can confirm the arrangement, leave it unresolved. You do not need to prove a criminal case before deciding not to transfer your savings.
Look for the Mismatch the Scammer Wants You to Ignore
Focus your attention on anything that changes between the registered identity and your actual dealings. An email address may use an extra word. A portal may have a different domain. The account agreement may introduce another legal entity without explaining its role.
Copy the exact strings into your comparison record. “Almost the same” is not a useful result for an address that will receive identity documents or money.
Do not let polished design settle the question. Impersonators can fabricate BrokerCheck reports, copy branding and distribute fraudulent apps, including through legitimate app stores. A professional appearance does not establish ownership. These methods are covered in FINRA’s warning about imposter websites, documents and trading apps.
Ask the real business to resolve differences rather than deciding yourself that every variation proves fraud. There may be a valid explanation; the person whose identity is in doubt should not be your only authority for accepting it.
The same principle applies when the pitch changes from brokerage services to an automated strategy. Claims about proprietary software do not answer who controls the account. An offer resembling AI trading bot scams promising guaranteed daily returns deserves scrutiny, not a shorter identity check.
A Hypothetical Clone Broker Check
Consider a hypothetical investor who receives an offer from someone claiming to represent a regulated securities firm. The salesperson supplies the firm’s correct registration number and a link to its genuine public record.
The investor searches independently and finds the business. So far, the number checks out.
But the invitation leads to a separate trading portal. The salesperson says it is a private client service that does not appear on the main website. Funding instructions then name another company, described as a processing partner.
None of these explanations should be accepted simply because the registration number was correct. The investor contacts the firm through independently verified details and asks it to confirm the portal, salesperson and payment recipient.
If the firm denies the connection, the copied registration has not passed the check. It has exposed the impersonation.
If the firm needs time to investigate, the investor waits. The useful outcome is not “the number exists.” It is “the genuine business confirms this exact arrangement.”
Search Regulatory Warnings Without Treating Silence as Approval
Search the claimed name, website address and contact details in the relevant regulator’s warnings. Read any matching notice carefully: a clone warning can distinguish the impersonator’s details from those of the genuine business.
The absence of a warning does not clear an offer. The FCA Warning List states that a firm may still be unauthorized or a scam even when it is not listed, including where the regulator is not yet aware of it.
Avoid repeating a warning as an accusation against the company being impersonated. Keep your notes precise: which domain, email address, phone number or payment instruction does the warning identify?
Do Not Substitute Social Proof for Identity Checks
A testimonial, profit screenshot or convincing conversation does not answer whether your contact represents the registered firm. Keep those questions separate.
When a promoter supplies “proof,” ask what it actually establishes. A screenshot might show a claimed balance. It does not establish who operates the account, whether the displayed trades occurred or where your deposit would go.
Use the checks for a WhatsApp trading mentor’s profit screenshots when that material supports the pitch. Do not turn screenshot analysis into a substitute for contacting the real business.
Likewise, assess the trading interface separately from the identity claim. The checks for fake platforms that display profits but block withdrawals address another part of the risk. For this decision, the first question remains simpler: has the genuine firm confirmed that this is its platform?
Verify the Payment Route Before Sending Money
Stop if funding instructions depart from the arrangement you verified. Requests to pay an individual, an unexplained third party or to fund a securities investment through crypto assets are danger signs identified in FINRA’s broker imposter scam factsheet.
Ask the genuine business to confirm the recipient and instructions independently. Do not rely on another invoice or letter supplied through the same disputed conversation.
A useful final check is whether you can explain the transaction in one sentence: “I am sending this amount to this recipient for an account operated by this verified legal entity.” If part of that sentence depends on an unconfirmed claim, postpone the transfer.
Do not send a small deposit merely to settle an identity question. Resolve the identity first; money should not be the diagnostic tool.
What to Do If You Already Paid a Suspected Clone
Stop further payments and contact the bank, card issuer, payment service or cryptocurrency exchange you used immediately. Explain that you suspect an investment impersonation scam, describe the transaction accurately and ask what recall, reversal or dispute options are available. Recovery is not guaranteed. The FTC’s steps after paying a scammer provide guidance by payment method.
Preserve the website addresses, messages, account agreement, payment instructions and transaction records. Keep the claimed registration number alongside them, but clearly label it as a credential the suspected impersonator used.
Notify the genuine firm through verified contact details. Report the suspected impersonation to the relevant financial regulator and law enforcement; US victims can also report internet enabled fraud to the FBI’s Internet Crime Complaint Center.
If you shared passwords, change them on affected accounts and anywhere you reused them. Turn on multifactor authentication. Tell your financial institutions what information may have been exposed.
Do not pay another demand just because it is described as tax, compliance or account clearance. Use the separate steps for withdrawals blocked by demands for tax payments rather than negotiating another deposit.
Apply the same independent identity checks to anyone offering help afterward. Before paying for promised tracing or retrieval, review how crypto recovery scammers target trading fraud victims.
The decision rule is straightforward: a real firm’s credentials cannot authenticate someone who has copied them. Keep your money and documents back until the genuine business confirms the person, service and payment route you are dealing with.