Some of the most convincing investment scams do not invent a company at all. They steal one. In a clone firm scam, fraudsters impersonate a genuine, regulated firm, copying its name, logo and even its official registration number, changing only the contact details so that you reach them instead. This explainer sets out how clone firms and impersonation scams work, the red flags, and how to verify a firm properly, drawing on guidance from the FCA. You can weigh up providers on cost and account type with our broker comparison tool. What a Clone Firm Is A clone firm is exactly what it sounds like. As the FCA explains, fraudsters sometimes claim to work for a genuine, authorised firm, copying that firm name, address, logo and even its firm reference number to appear legitimate. They build a website and literature that mirror the real company, so that everything looks correct at a glance. The one thing they change is the contact details, the phone number, email or web address, so that when you get in touch, you reach the scammers rather than the real firm. The products on offer are usually a means to an end. The FCA notes that clone firms often promote investments that are worthless, overpriced, impossible to sell, or simply fictitious, such as bonds, shares, foreign exchange or cryptocurrencies. The legitimate looking firm is the lure; the investment is how they extract your deposit. What makes this scam so effective is that it hijacks the very trust that regulation is meant to provide, presenting a stolen identity as a credential. The sections below show how the clone is built and, crucially, how to verify a firm in a way the scam cannot defeat. How the Scam Operates The method is methodical. Scammers pick a genuine, well regarded authorised firm, copy its website and branding onto a domain they control, and adopt its real firm reference number. They then contact you, often unexpectedly, or wait for you to find their cloned site, and present themselves as the real company. To seem convincing, they may even encourage you to look the firm up on the regulator register, knowing the genuine entry will appear. The steps below trace this path. Everything checks out except the detail that matters: the contact route, which leads to them. The Warning Signs Clone firms share a set of warning signs, and noticing even one is often enough. The summary below lists the common ones. They include unsolicited contact about an investment, a web address, email or phone number that differs subtly from the genuine firm, encouragement to check the firm reference number to prove legitimacy, claims that the register contact details are out of date, promises of returns that seem too good, and pressure to act quickly. The tactic of urging you to verify the reference number is especially telling, because it weaponises the very check you would rely on. How to Verify a Firm Properly The defence that defeats a clone firm is verifying in the right way, not just verifying at all. The comparison below contrasts proper verification with the trap. Look the firm up on your regulator official register, confirm it is authorised for the service it is offering, and then make contact using the phone number and email listed on the register, never the details the firm gave you. The FCA stresses this point, and notes that, contrary to what scammers claim, the register is kept current. If the contact details differ from the register, or the firm resists this, treat it as a clone. When They Impersonate the Regulator Impersonation does not stop at firms. The comparison below sets a clone firm against the related tactic of impersonating a regulator or official body itself. Scammers may pose as a financial regulator, a government agency or a recovery service, often to lend authority to a demand for money or information, and recovery scams frequently impersonate the very authorities that fight fraud. The same rule protects you in both cases: do not trust contact details, names or numbers provided in an unsolicited approach. Verify any supposed firm or authority independently, using official contact details you find yourself. Common Mistakes People Make These four mistakes lead people into clone firm and impersonation scams. Trusting a matching reference number Why it backfires: Treating a correct firm reference number as proof overlooks that scammers routinely copy it from the genuine firm. Do this instead: Never rely on a reference number alone, and verify using the contact details on the official register itself. Using the contact details provided Why it backfires: Calling or emailing the details the firm gives you can connect you straight to the scammers running the clone. Do this instead: Contact the firm only through the phone number and email listed on the regulator official register. Believing the register is out of date Why it backfires: Accepting a claim that the register contact details are outdated is a tactic clones use to steer you to their details. Do this instead: Trust the official register, which is kept current, and treat any claim that it is wrong as a warning sign. Acting on an unsolicited approach Why it backfires: Engaging with an unexpected investment approach, however professional, is how many clone firm scams begin. Do this instead: Be wary of unsolicited contact, verify the firm independently through your regulator, and never be rushed. The Honest Bottom Line The honest lesson of clone firms is that looking legitimate and being legitimate are no longer the same thing. A scammer can copy a real firm name, branding, website and registration number so faithfully that nearly every surface check passes, which is precisely why surface checks are not enough. The single point of failure they cannot fake is the contact route on the official register, because that connects you to the real company rather than to them. So the habit that protects you is narrow but decisive: verify through the register and reach the firm only via the register own contact details. It is worth being clear about why a clone is so hard to catch by eye. Almost everything a scammer shows you can be copied perfectly: the logo, the website design, the registered address, the corporate history, even the wording of genuine documents. None of those details prove anything, because all of them are public and reproducible. The contact route on the official register is different in kind, because it does not describe the firm, it connects you to it. That is why verification has to run through the register rather than through anything the firm itself presents to you. Two further points complete the picture. First, although the clone firm is a concept defined by the United Kingdom regulator, the tactic is global, and scammers clone firms registered with authorities everywhere, including ASIC in Australia and the SEC in the United States, so verify through whichever regulator authorises the firm. Second, a matching reference number should never reassure you on its own, since copying it is part of the scam. Treat unsolicited approaches with caution, distrust urgency, and if anything about the contact details or the regulator status does not line up, walk away and contact the regulator directly. This article is educational information, not financial advice. Bringing it together, defending against clone firms means verifying in the one way the scam cannot beat: look the firm up on the official register and contact it only through the register own details. That means distrusting unsolicited approaches, never treating a matching reference number as proof, and walking away if the contact details do not match the register. The contrast below pairs the response that falls for a clone with the one that exposes it. Frequently asked questions What is a clone firm? A clone firm is a scam in which fraudsters pretend to be a genuine, authorised firm. As the FCA explains, they often use the real firm’s name, address, logo and even its firm reference number, while changing the contact details so that you reach the scammers instead of the real company. The aim is to borrow a legitimate firm’s reputation to take your money. How do clone firms make themselves look real? They copy almost everything. Scammers mirror the genuine firm’s website, literature and registration details, and may even encourage you to look the firm up on the regulator’s register to seem convincing. The FCA notes they sometimes claim the contact details on the register are out of date, when in fact the register is kept current. If the firm reference number checks out, is it safe? No. Scammers often copy a real firm’s reference number, so a matching number alone proves nothing. The genuine danger is in the contact details: the clone changes the phone number, email or web address so they lead to the scammers. Always verify using the contact details on the official register, not the ones the firm gives you. What do clone firms try to sell? Typically investments that are worthless, overpriced, impossible to sell, or entirely fictitious, such as bonds, shares, foreign exchange or cryptocurrencies. The product is usually a vehicle for taking your deposit. The polished, legitimate seeming firm is the lure, and the investment is the means of extracting your money. Does this only happen in the United Kingdom? No. The clone firm is a concept defined by the United Kingdom’s FCA, but the tactic is global. Scammers clone firms registered with regulators everywhere, including ASIC in Australia and the SEC in the United States, and may even impersonate a regulator itself. Wherever you are, verify firms through your own regulator’s official register. How do I protect myself? Only deal with firms authorised by your regulator, and verify them using the official register. Crucially, contact the firm using the phone number and email listed on the register, not the details the firm provides, and be wary of unsolicited approaches and anyone urging you to act quickly. If in doubt, contact the regulator directly. Sources All claims in this article are supported by the sources listed below. Verify details against the originals before making investment decisions. U.K. Financial Conduct Authority. Clone firms and individuals. Accessed 10 June 2026. U.K. Financial Conduct Authority. ScamSmart warning on clone firm investment scams. Accessed 10 June 2026. Before you act on thisThis article explains how something works. It is general education, not advice about your situation. It does not consider your goals, income, tax position or how much risk you can afford.Investing involves risk, including losing money. Before you act, speak to a licensed professional. You can check whether someone is licensed at Investor.gov and FINRA BrokerCheck.Disclaimer · Terms of Use
