Investment checks · UK examples; the identity-checking principle applies internationally
Clone investment firms: why a real registration number is not enough
Scammers copy genuine firms' details. Learn which contact information to compare and how to verify a financial approach.
By Stonebridge Resolution · Published 4 October 2026 · Updated 4 October 2026
AI-generated illustration; not a depiction of a real case.
The short answer
A clone firm borrows a genuine business's name, registration details or branding. Verify the exact website and contact details through the official register, then contact the genuine firm using information you found independently.
The stolen details may be completely accurate
A scammer can quote a real authorisation number and direct you to the genuine firm's register entry. That shows the real firm exists; it does not show that the caller, email sender or website belongs to it.
The fraud often sits in one changed detail: a similar domain, a new mobile number or an assistant's personal messaging account. Do not let correct background information distract from the route by which you were contacted.
Compare more than the business name
Check the legal name, trading names, website, phone number, address and permissions for the service offered. Similar spelling is not the same identity. Search the regulator's warning information as well as its register.
Absence from a warning list is not clearance. Regulators may not yet know about a new domain or impersonation. Independent contact remains important even when a search produces no warning.
Call back through a trusted route
Do not use the number in the suspicious email or let the caller transfer you to a supposed compliance department. End the conversation and use the contact details supplied by the official register or another independently verified official source.
Ask whether the person, domain and specific offer belong to the genuine firm. Avoid disclosing unnecessary financial information while verifying the approach. You are checking identity, not applying for the investment.
Check the payment destination too
A request to pay a personal account, unrelated company or crypto wallet should be questioned. A convincing explanation about a partner or settlement agent needs independent verification, not merely another document from the same contact.
Even if the beneficiary name looks familiar, verify the entire arrangement. A payment-provider name check is useful but does not prove that an investment is suitable or that the person instructing you is authorised.
If you have already paid
Contact the payment provider promptly, explain the impersonation and preserve the exact domain, messages, bank details and claimed registration number. Notify the genuine firm and the regulator through official channels.
Keep the clone distinct from the real business in your report. That helps institutions understand who is being impersonated and avoids treating the legitimate firm as the recipient without evidence.
Checklist
- Compare exact domains and contact details.
- Contact the real firm independently.
- Verify the offer and payment destination.
- Report the clone and preserve the impersonation evidence.
Common questions
Can a clone link to the genuine regulator website?
Yes. A real link can be part of the deception. It does not authenticate the sender or their payment instructions.
Is no regulator warning a good enough check?
No. New scams may not yet appear. Verify identity and permissions independently.