{"id":2117,"date":"2026-08-25T20:45:38","date_gmt":"2026-08-25T20:45:38","guid":{"rendered":"https:\/\/icar-global.org\/blog\/?p=2117"},"modified":"2026-08-31T12:23:38","modified_gmt":"2026-08-31T12:23:38","slug":"clone-firm-warning-signs","status":"publish","type":"post","link":"https:\/\/icar-global.org\/blog\/clone-firm-warning-signs\/","title":{"rendered":"The Full List of Clone Firm Warning Signs | ICAR"},"content":{"rendered":"<p>A clone firm is a scam that uses a real, regulated company&#8217;s actual name, firm reference number, and branding to convince investors they&#8217;re dealing with a legitimate business and the UK&#8217;s FCA has reported over \u00a378 million in losses tied to this specific tactic. This guide brings together every warning sign worth checking, organized by category, plus the single verification habit that catches nearly all of them. (This is a companion piece to our Hub article, <strong><em><a href=\"https:\/\/icar-global.org\/blog\/fake-trading-platforms-forex-cfd-scams\/\">Fake Trading Platforms &amp; Forex\/CFD Scams<\/a><\/em><\/strong>, and our Pillar guide, <strong><em><a href=\"https:\/\/icar-global.org\/blog\/investment-scams-the-complete-guide-for-victims-in-2026\/\">Investment Scams \u2014 The Complete Guide<\/a><\/em><\/strong>.)<\/p>\n<table width=\"100%\">\n<tbody>\n<tr>\n<td><strong>\u00a378M+<\/strong><\/p>\n<p>Reported losses to clone firm investment scams in the UK, with reports continuing to rise year over year<\/p>\n<p><em>Source: UK Financial Conduct Authority \/ National Economic Crime Centre<\/em><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_86 counter-hierarchy ez-toc-counter ez-toc-white ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/icar-global.org\/blog\/clone-firm-warning-signs\/#Website_and_Domain_Warning_Signs\" >Website and Domain Warning Signs<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/icar-global.org\/blog\/clone-firm-warning-signs\/#Contact_Information_Warning_Signs\" >Contact Information Warning Signs<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/icar-global.org\/blog\/clone-firm-warning-signs\/#Sales_Conversation_Warning_Signs\" >Sales Conversation Warning Signs<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/icar-global.org\/blog\/clone-firm-warning-signs\/#Documentation_Warning_Signs\" >Documentation Warning Signs<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/icar-global.org\/blog\/clone-firm-warning-signs\/#Payment_Warning_Signs\" >Payment Warning Signs<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/icar-global.org\/blog\/clone-firm-warning-signs\/#The_One_Habit_That_Catches_Nearly_All_of_These\" >The One Habit That Catches Nearly All of These<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/icar-global.org\/blog\/clone-firm-warning-signs\/#A_Real_Case_What_This_Actually_Looks_Like\" >A Real Case: What This Actually Looks Like<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/icar-global.org\/blog\/clone-firm-warning-signs\/#The_2026_Evolution_AI_Platforms_and_Phishing-as-a-Service\" >The 2026 Evolution: AI Platforms and Phishing-as-a-Service<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/icar-global.org\/blog\/clone-firm-warning-signs\/#What_To_Do_If_You_Suspect_a_Clone_Firm\" >What To Do If You Suspect a Clone Firm<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/icar-global.org\/blog\/clone-firm-warning-signs\/#Frequently_Asked_Questions\" >Frequently Asked Questions<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/icar-global.org\/blog\/clone-firm-warning-signs\/#Is_there_any_legal_recourse_if_I_lose_money_to_a_clone_firm\" >Is there any legal recourse if I lose money to a clone firm?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/icar-global.org\/blog\/clone-firm-warning-signs\/#Why_is_checking_on_mobile_specifically_riskier\" >Why is checking on mobile specifically riskier?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/icar-global.org\/blog\/clone-firm-warning-signs\/#Why_would_a_scammer_use_a_real_firm_reference_number_instead_of_making_one_up\" >Why would a scammer use a real firm reference number instead of making one up?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/icar-global.org\/blog\/clone-firm-warning-signs\/#Are_AI-generated_fake_trading_platforms_harder_to_spot_than_older_scam_websites\" >Are AI-generated fake trading platforms harder to spot than older scam websites?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/icar-global.org\/blog\/clone-firm-warning-signs\/#What_should_I_do_immediately_if_I_think_Ive_found_a_clone_firms_website\" >What should I do immediately if I think I&#8217;ve found a clone firm&#8217;s website?<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/icar-global.org\/blog\/clone-firm-warning-signs\/#Related_Reading\" >Related Reading<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"Website_and_Domain_Warning_Signs\"><\/span>Website and Domain Warning Signs<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ul>\n<li>A domain that&#8217;s a near-identical variation of a genuine firm&#8217;s real URL: an extra letter, a hyphen, a different top-level domain (.net instead of .com)<\/li>\n<li>A domain registered very recently, despite the firm claiming years of operating history<\/li>\n<li>A URL that gets truncated on mobile, making a subtly altered domain harder to spot, always expand the address bar and read the full domain before entering any credentials<\/li>\n<li>Website content, testimonials, or &#8220;as featured in&#8221; logos copied directly from the genuine firm&#8217;s real site<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"Contact_Information_Warning_Signs\"><\/span>Contact Information Warning Signs<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ul>\n<li>A phone number, email domain, or postal address that doesn&#8217;t match what&#8217;s listed on the regulator&#8217;s own register, even if everything else looks identical<\/li>\n<li>An email address using a free provider (Gmail, Outlook) rather than the firm&#8217;s own domain, despite claiming to be a large regulated institution<\/li>\n<li>Contact details that work initially but become unreachable once you&#8217;ve invested, numbers that go straight to voicemail or ring out entirely<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"Sales_Conversation_Warning_Signs\"><\/span>Sales Conversation Warning Signs<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ul>\n<li>Unsolicited contact: a cold call or message you didn&#8217;t initiate, even if it references a genuine, well-known firm&#8217;s name<\/li>\n<li>Pressure to act quickly, framed around a limited-time rate, bonus, or exclusive opportunity<\/li>\n<li>A caller who directs you to a specific &#8220;verification&#8221; link rather than encouraging you to search independently<\/li>\n<li>Reluctance or evasiveness when asked direct questions about regulatory status, fees, or what happens in a losing month<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"Documentation_Warning_Signs\"><\/span>Documentation Warning Signs<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ul>\n<li>A firm reference number (FRN) that matches a real firm, but a service or product being offered that firm doesn&#8217;t actually provide<\/li>\n<li>Account statements or trading confirmations with formatting inconsistencies compared to the genuine firm&#8217;s known documentation style<\/li>\n<li>An offer to send scanned &#8220;proof&#8221; of authorisation rather than directing you to check independently on the regulator&#8217;s public register<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"Payment_Warning_Signs\"><\/span>Payment Warning Signs<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ul>\n<li>A request to pay into an account under a different name than the firm you believe you&#8217;re dealing with<\/li>\n<li>Pressure to use cryptocurrency or an unconventional payment method rather than a standard bank transfer or card payment<\/li>\n<li>Any request for an additional payment (a &#8220;tax,&#8221; &#8220;compliance fee,&#8221; or &#8220;unlock fee&#8221;) before a withdrawal can be processed<\/li>\n<\/ul>\n<p><img fetchpriority=\"high\" decoding=\"async\" class=\"alignnone size-large wp-image-2085\" src=\"https:\/\/icar-global.org\/blog\/wp-content\/uploads\/2026\/08\/clone_firms2-1024x771.jpg\" alt=\"Clone Firms2\" width=\"1024\" height=\"771\" srcset=\"https:\/\/icar-global.org\/blog\/wp-content\/uploads\/2026\/08\/clone_firms2-1024x771.jpg 1024w, https:\/\/icar-global.org\/blog\/wp-content\/uploads\/2026\/08\/clone_firms2-300x226.jpg 300w, https:\/\/icar-global.org\/blog\/wp-content\/uploads\/2026\/08\/clone_firms2-768x578.jpg 768w, https:\/\/icar-global.org\/blog\/wp-content\/uploads\/2026\/08\/clone_firms2.jpg 1080w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/p>\n<h2><span class=\"ez-toc-section\" id=\"The_One_Habit_That_Catches_Nearly_All_of_These\"><\/span>The One Habit That Catches Nearly All of These<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The FCA&#8217;s own guidance is consistent and specific on this point: always use the contact details shown on its Financial Services Register and Firm Checker tool, never the ones a firm or caller gives you directly. Navigate to the regulator&#8217;s site by typing the address yourself, search the firm&#8217;s name, and compare every detail (phone number, email domain, physical address) against what&#8217;s officially listed. A single mismatch on any of these points is enough reason to stop and independently verify before proceeding, regardless of how convincing everything else appears.<\/p>\n<p>This habit alone addresses the large majority of warning signs above, because nearly every category ultimately traces back to the same underlying gap: a detail that looks right on the surface but doesn&#8217;t match the regulator&#8217;s own record. Making independent verification (not verification through a link or number the firm supplies) a non-negotiable step before any deposit closes off most of this list at once.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"A_Real_Case_What_This_Actually_Looks_Like\"><\/span>A Real Case: What This Actually Looks Like<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The FCA has publicly shared the account of a victim it identified as Janet, a finance officer from Chester who lost \u00a340,000 to a clone investment firm. By her own account, she considered herself financially savvy and confident she could spot a scam, three-quarters of investors in the FCA&#8217;s own research say the same about themselves. After searching online for high-return bonds, she received a call the next day about a student accommodation investment. She found what appeared to be legitimate details about the company online, and everything seemed genuine, so she invested and invested again over the following months. It was only when she couldn&#8217;t reach the numbers she&#8217;d been given, which had gone dead, that she realized what had happened.<\/p>\n<p>What makes this case worth including isn&#8217;t anything unusual about it, it&#8217;s how ordinary the process was. Nothing about the initial contact or the company details looked obviously fraudulent, which is exactly the point of a well-executed clone firm operation, and exactly why independent verification against the regulator&#8217;s own register matters more than trusting how convincing an approach feels in the moment.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"The_2026_Evolution_AI_Platforms_and_Phishing-as-a-Service\"><\/span>The 2026 Evolution: AI Platforms and Phishing-as-a-Service<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The FCA&#8217;s most recent Warning List updates continue to flag two accelerating trends worth knowing about specifically. First, clone operations increasingly pair a stolen identity with AI-generated &#8220;trading platforms&#8221;, realistic dashboards, profit displays, and fabricated trading histories generated to look indistinguishable from genuine account activity, sometimes even allowing a small initial withdrawal to build trust before larger deposits are requested. Second, security researchers have documented the rise of &#8220;Phishing-as-a-Service&#8221; toolkits \u2014 pre-built clone-website packages that let operators with minimal technical skill quickly stand up a convincing fake broker site, which helps explain why the volume of clone firm reports keeps climbing rather than leveling off.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"What_To_Do_If_You_Suspect_a_Clone_Firm\"><\/span>What To Do If You Suspect a Clone Firm<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ol>\n<li>Stop all further contact and do not send any additional funds.<\/li>\n<li>Independently verify the firm through the regulator&#8217;s own Register or Firm Checker tool, navigated to directly rather than via any link provided to you.<\/li>\n<li>If you already sent funds by card, contact your card issuer about a chargeback as soon as possible.<\/li>\n<li>Report the suspected clone firm to the FCA (or your national regulator) directly, including every contact detail you were given.<\/li>\n<li>If meaningful funds are involved, a professional case assessment can help trace where they went and support your dispute or report with documentation.<\/li>\n<\/ol>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-1534\" src=\"https:\/\/icar-global.org\/blog\/wp-content\/uploads\/2026\/03\/cropped-logo-2.png\" alt=\"logo\" width=\"512\" height=\"512\" srcset=\"https:\/\/icar-global.org\/blog\/wp-content\/uploads\/2026\/03\/cropped-logo-2.png 512w, https:\/\/icar-global.org\/blog\/wp-content\/uploads\/2026\/03\/cropped-logo-2-300x300.png 300w, https:\/\/icar-global.org\/blog\/wp-content\/uploads\/2026\/03\/cropped-logo-2-150x150.png 150w, https:\/\/icar-global.org\/blog\/wp-content\/uploads\/2026\/03\/cropped-logo-2-270x270.png 270w, https:\/\/icar-global.org\/blog\/wp-content\/uploads\/2026\/03\/cropped-logo-2-192x192.png 192w, https:\/\/icar-global.org\/blog\/wp-content\/uploads\/2026\/03\/cropped-logo-2-180x180.png 180w, https:\/\/icar-global.org\/blog\/wp-content\/uploads\/2026\/03\/cropped-logo-2-32x32.png 32w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/p>\n<p><strong>About ICAR:\u00a0 <\/strong>International Cyber Asset Recovery (ICAR) is a UK-based forensic investigation and asset recovery firm operating across the UK, US, Canada, Australia, Singapore, and Hong Kong. ICAR works alongside official fraud reporting\u00a0 providing blockchain tracing, OSINT investigation, and exchange cooperation services that complement law enforcement and bank fraud processes. Free initial case assessments, complete <strong><a href=\"https:\/\/tally.so\/r\/NpVNlp\">case form <\/a><\/strong>or contact support via<a href=\"https:\/\/wa.me\/447426426707\"><strong> WhatsApp\u00a0\u00a0<\/strong><\/a><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Frequently_Asked_Questions\"><\/span>Frequently Asked Questions<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<h3><span class=\"ez-toc-section\" id=\"Is_there_any_legal_recourse_if_I_lose_money_to_a_clone_firm\"><\/span><strong>Is there any legal recourse if I lose money to a clone firm?<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Clone firm victims typically don&#8217;t have access to the compensation schemes available to customers of genuinely authorised firms, since the clone was never actually regulated, which makes prevention, and a fast chargeback or reporting response, especially important.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Why_is_checking_on_mobile_specifically_riskier\"><\/span><strong>Why is checking on mobile specifically riskier?<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Mobile browsers often truncate long URLs in the address bar, making a subtly altered domain (an extra letter or hyphen) much easier to miss than it would be on a full desktop display. Make a habit of expanding the address bar to read the complete domain.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Why_would_a_scammer_use_a_real_firm_reference_number_instead_of_making_one_up\"><\/span><strong>Why would a scammer use a real firm reference number instead of making one up?<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Because a fabricated number would fail a basic register check instantly, while a genuine, borrowed number passes that same check, the fraud relies on you stopping at &#8220;is this number real&#8221; rather than confirming it&#8217;s connected to the entity you&#8217;re actually dealing with.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Are_AI-generated_fake_trading_platforms_harder_to_spot_than_older_scam_websites\"><\/span><strong>Are AI-generated fake trading platforms harder to spot than older scam websites?<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Often yes \u2014 current AI-generated dashboards, profit displays, and trading histories can look highly convincing, which is exactly why independent regulatory verification matters more than visual impressions of legitimacy.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"What_should_I_do_immediately_if_I_think_Ive_found_a_clone_firms_website\"><\/span><strong>What should I do immediately if I think I&#8217;ve found a clone firm&#8217;s website?<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Don&#8217;t interact further with the site, report it directly to the regulator whose identity was cloned, since that report helps the FCA (or equivalent) get it added to public warning resources faster, protecting the next potential victim.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Related_Reading\"><\/span>Related Reading<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><em>\u2192 Parent Hub:<span style=\"color: #3366ff;\"><strong><a style=\"color: #3366ff;\" href=\"https:\/\/icar-global.org\/blog\/fake-trading-platforms-forex-cfd-scams\/\"> Fake Trading Platforms &amp; Forex\/CFD Scams<\/a><\/strong><\/span><\/em><\/p>\n<p><em>\u2192 Pillar guide: <strong><a href=\"https:\/\/icar-global.org\/blog\/investment-scams-the-complete-guide-for-victims-in-2026\/\"><span style=\"color: #3366ff;\">Investment Scams \u2014 The Complete Guide<\/span><\/a><\/strong><\/em><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A clone firm is a scam that uses a real, regulated company&#8217;s actual name, firm reference number, and branding to convince investors they&#8217;re dealing with a legitimate business and the UK&#8217;s FCA has reported over \u00a378 million in losses tied to this specific tactic. This guide brings together every warning sign worth checking, organized by category, plus the single verification habit that catches nearly all of them. (This is a companion piece to our Hub article, Fake Trading Platforms &amp; Forex\/CFD Scams, and our Pillar guide, Investment Scams \u2014 The Complete Guide.) \u00a378M+ Reported losses to clone firm investment scams in the UK, with reports continuing to rise year over year Source: UK Financial Conduct Authority \/ National Economic Crime Centre Website and Domain Warning Signs A domain that&#8217;s a near-identical variation of a genuine firm&#8217;s real URL: an extra letter, a hyphen, a different top-level domain (.net instead of .com) A domain registered very recently, despite the firm claiming years of operating history A URL that gets truncated on mobile, making a subtly altered domain harder to spot, always expand the address bar and read the full domain before entering any credentials Website content, testimonials, or &#8220;as featured in&#8221; logos copied directly from the genuine firm&#8217;s real site Contact Information Warning Signs A phone number, email domain, or postal address that doesn&#8217;t match what&#8217;s listed on the regulator&#8217;s own register, even if everything else looks identical An email address using a free provider (Gmail, Outlook) rather than the firm&#8217;s own domain, despite claiming to be a large regulated institution Contact details that work initially but become unreachable once you&#8217;ve invested, numbers that go straight to voicemail or ring out entirely Sales Conversation Warning Signs Unsolicited contact: a cold call or message you didn&#8217;t initiate, even if it references a genuine, well-known firm&#8217;s name Pressure to act quickly, framed around a limited-time rate, bonus, or exclusive opportunity A caller who directs you to a specific &#8220;verification&#8221; link rather than encouraging you to search independently Reluctance or evasiveness when asked direct questions about regulatory status, fees, or what happens in a losing month Documentation Warning Signs A firm reference number (FRN) that matches a real firm, but a service or product being offered that firm doesn&#8217;t actually provide Account statements or trading confirmations with formatting inconsistencies compared to the genuine firm&#8217;s known documentation style An offer to send scanned &#8220;proof&#8221; of authorisation rather than directing you to check independently on the regulator&#8217;s public register Payment Warning Signs A request to pay into an account under a different name than the firm you believe you&#8217;re dealing with Pressure to use cryptocurrency or an unconventional payment method rather than a standard bank transfer or card payment Any request for an additional payment (a &#8220;tax,&#8221; &#8220;compliance fee,&#8221; or &#8220;unlock fee&#8221;) before a withdrawal can be processed The One Habit That Catches Nearly All of These The FCA&#8217;s own guidance is consistent and specific on this point: always use the contact details shown on its Financial Services Register and Firm Checker tool, never the ones a firm or caller gives you directly. Navigate to the regulator&#8217;s site by typing the address yourself, search the firm&#8217;s name, and compare every detail (phone number, email domain, physical address) against what&#8217;s officially listed. A single mismatch on any of these points is enough reason to stop and independently verify before proceeding, regardless of how convincing everything else appears. This habit alone addresses the large majority of warning signs above, because nearly every category ultimately traces back to the same underlying gap: a detail that looks right on the surface but doesn&#8217;t match the regulator&#8217;s own record. Making independent verification (not verification through a link or number the firm supplies) a non-negotiable step before any deposit closes off most of this list at once. A Real Case: What This Actually Looks Like The FCA has publicly shared the account of a victim it identified as Janet, a finance officer from Chester who lost \u00a340,000 to a clone investment firm. By her own account, she considered herself financially savvy and confident she could spot a scam, three-quarters of investors in the FCA&#8217;s own research say the same about themselves. After searching online for high-return bonds, she received a call the next day about a student accommodation investment. She found what appeared to be legitimate details about the company online, and everything seemed genuine, so she invested and invested again over the following months. It was only when she couldn&#8217;t reach the numbers she&#8217;d been given, which had gone dead, that she realized what had happened. What makes this case worth including isn&#8217;t anything unusual about it, it&#8217;s how ordinary the process was. Nothing about the initial contact or the company details looked obviously fraudulent, which is exactly the point of a well-executed clone firm operation, and exactly why independent verification against the regulator&#8217;s own register matters more than trusting how convincing an approach feels in the moment. The 2026 Evolution: AI Platforms and Phishing-as-a-Service The FCA&#8217;s most recent Warning List updates continue to flag two accelerating trends worth knowing about specifically. First, clone operations increasingly pair a stolen identity with AI-generated &#8220;trading platforms&#8221;, realistic dashboards, profit displays, and fabricated trading histories generated to look indistinguishable from genuine account activity, sometimes even allowing a small initial withdrawal to build trust before larger deposits are requested. Second, security researchers have documented the rise of &#8220;Phishing-as-a-Service&#8221; toolkits \u2014 pre-built clone-website packages that let operators with minimal technical skill quickly stand up a convincing fake broker site, which helps explain why the volume of clone firm reports keeps climbing rather than leveling off. What To Do If You Suspect a Clone Firm Stop all further contact and do not send any additional funds. Independently verify the firm through the regulator&#8217;s own Register or Firm Checker tool, navigated to directly rather than via any link provided to you. If you already sent funds by card, contact your card issuer about a chargeback as soon<\/p>\n","protected":false},"author":1,"featured_media":2084,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"pagelayer_contact_templates":[],"_pagelayer_content":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[9,10],"tags":[],"class_list":["post-2117","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-online-safety","category-scam-prevention"],"_links":{"self":[{"href":"https:\/\/icar-global.org\/blog\/wp-json\/wp\/v2\/posts\/2117","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/icar-global.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/icar-global.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/icar-global.org\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/icar-global.org\/blog\/wp-json\/wp\/v2\/comments?post=2117"}],"version-history":[{"count":7,"href":"https:\/\/icar-global.org\/blog\/wp-json\/wp\/v2\/posts\/2117\/revisions"}],"predecessor-version":[{"id":2185,"href":"https:\/\/icar-global.org\/blog\/wp-json\/wp\/v2\/posts\/2117\/revisions\/2185"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/icar-global.org\/blog\/wp-json\/wp\/v2\/media\/2084"}],"wp:attachment":[{"href":"https:\/\/icar-global.org\/blog\/wp-json\/wp\/v2\/media?parent=2117"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/icar-global.org\/blog\/wp-json\/wp\/v2\/categories?post=2117"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/icar-global.org\/blog\/wp-json\/wp\/v2\/tags?post=2117"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}