Forex trading has long been a target for fraud, but the tactics have sharpened considerably. The days of obvious 'get-rich-quick' schemes are fading, replaced by a more insidious threat: the clone-firm scam. In this operation, fraudsters copy the name, logo, address, and even the Firm Reference Number (FRN) of a legitimate, regulated brokerage. They use this stolen identity to build trust, solicit deposits, and then disappear. For a careful investor, distinguishing a clone from a genuine broker requires more than a quick glance—it demands a systematic verification process.
This article provides a technical checklist to identify clone firms before you send any funds. We explain the mechanics of the scam, the specific steps regulators have taken to flag clones, and how to verify a broker's authenticity with absolute certainty. Understanding these methods is essential for protecting your capital.
How Clone-Firm Scams Work
A clone-firm scam is a form of financial fraud that relies on impersonation. The scammer takes the identity of a real, regulated company—often a well-known name like IG or Interactive Brokers—and creates a fake version of that company to lure investors. The approach can come through social media (Telegram, WhatsApp, Instagram), unsolicited cold calls, or even fake advertisements on search engines.
The process typically follows a pattern:
- The Approach: The scammer reaches out directly, often posing as an 'account manager' or 'trading guru'. They may reference the reputable broker's name during the call to build credibility.
- The Fake Website: The victim is directed to a website that closely mimics the real broker's site. The domain name may be subtly different—for example, 'ig-market-deals.com' instead of 'ig.com'—or may use a similar logo and layout.
- Proof of Regulation: When the victim asks for verification, the scammer provides the genuine FRN of the real broker. A check on the FCA Register shows the name and number match, creating a false sense of security.
- The Deposit: Once trust is established, the scammer requests a deposit. Payment is typically directed to a personal bank account, an unrelated business name, or a cryptocurrency wallet rather than the corporate account of the regulated entity.
- The Disappearance: After the deposit is made, the scammer either stops responding or fabricates excuses to request more funds. Eventually, the fake website goes offline, and the victim cannot recover the money.
This type of scam is a form of 'boiler room' fraud, where high-pressure sales tactics are used to push quick deposits. The clone aspect adds an extra layer of deception because it exploits the legitimate reputation of a real broker.
Technical Verification Checklist
Identifying a clone firm requires careful cross-referencing of multiple data points. Relying on a single check—like verifying the FRN—is insufficient because scammers can provide that number alongside a fake website. We recommend the following five-step verification process:
1. Cross-Reference the Official Website URL
Every regulated broker is required to list its official website address on the regulator's public register. For UK-based brokers, the FCA Register shows this URL. In Australia, ASIC provides the same information. In Germany, BaFin does. If the website you are using does not match the URL on the regulator’s site, it is likely a clone.
What to verify:
- Locate the broker's official website on the regulator's register.
- Compare that URL character by character with the site you are using.
- Do not click links in emails or social media messages—type the URL directly after verifying it.
Risk note: Some legitimate brokers may use multiple country-specific domains (e.g., 'ig.com' for global, 'ig.com.au' for Australia). In such cases, check the regulatory listing for the specific entity that holds your account. If the URL on the register is different from the one you are on, stop and investigate.
2. Verify Contact Details Independently
Scammers will provide phone numbers, email addresses, and physical addresses that may appear correct but are actually their own. The only reliable way to verify is to use the contact information listed on the regulator's register.
What to verify:
- Call the broker using the phone number from the regulatory register—not the number provided by the person contacting you.
- Ask to speak with the department or individual who reached out to you. Legitimate brokers rarely initiate contact via WhatsApp to discuss deposits or trade signals.
- Verify the physical address. A clone often uses a PO box or virtual office different from the real firm's headquarters.
Important context: The FCA specifically warns that clone firms often give out the genuine firm's contact details. However, when you call, you may actually reach the scammer if they have set up a call-forwarding system. Therefore, it is safer to initiate contact through the broker's official website (after verifying the URL) rather than relying on numbers provided in unsolicited messages.
3. Analyze Domain Age and Registration History
Clone firms frequently operate through newly created domains. While a new domain alone is not proof of fraud, it is a red flag when combined with claims of being a long-established broker.
What to verify:
- Use a Whois lookup tool (such as whois.domaintools.com or the ICANN lookup) to check the domain's creation date, registrar, and registrant information.
- If a broker claims to have been in business for 20 years but the domain was registered three months ago, you are likely looking at a clone.
- Check if the domain registration is private (registrant details hidden). While legitimate businesses can use privacy services, scammers almost always do.
Example: A legitimate broker like IG has a domain that was registered many years ago and has a consistent history. A clone of IG may have a domain registered last week.
4. Check the Payment Recipient
Regulated brokers are required to hold client funds in segregated accounts under the legal name of the regulated entity. Payment methods are also carefully controlled.
What to verify:
- If you are asked to send money to a personal bank account, an unrelated business name, or a cryptocurrency wallet without a clear corporate gateway, stop the transaction immediately.
- For legitimate brokers, deposits are made via their official payment portal, which should show the company's registered name.
- Check if the payment recipient matches the name on the regulatory register. A variance is a major red flag.
Real-world caution: Scammers often request payment via bank transfer to a 'holding account' or a personal account, claiming it is for administrative reasons. They may also ask for cryptocurrency because it is harder to trace. Never proceed with such a payment without independent verification.
5. Consult Regulatory Warning Lists
Regulators maintain lists of known clone firms and unauthorized businesses. The FCA, for example, publishes an 'Unauthorised firms and individuals' list. ASIC and BaFin have similar databases.
What to verify:
- Before depositing, check the relevant regulator's warning list for the broker name. If the broker appears on the list, it is confirmed as a clone or unauthorized entity.
- However, understand that scammers create new clones faster than regulators can update their lists. The absence of a warning does not guarantee safety—it may simply mean the scam has not yet been reported.
- Use the warning list as one piece of evidence, not the sole determinant.
Common Red Flags That Suggest a Clone Firm
Even without running through the full checklist, certain behaviors should immediately raise suspicion:
- Unsolicited contact: If you receive a call, email, or social media message from someone claiming to represent a broker you have no prior relationship with, treat it as a potential scam. Legitimate brokers do not cold-call potential clients to offer trading accounts.
- Pressure to act quickly: Scammers often create a false sense of urgency—'limited spots available' or 'this offer expires today'. Regulated brokers do not use such tactics.
- Promises of high returns with low risk: If an offer sounds too good to be true, it probably is. Clone firms often promise guaranteed profits or risk-free trading.
- Payment to a personal account: As noted, regulated brokers do not accept deposits to personal accounts. Any request for such a transfer is a red flag.
- Suspicious user interface: The clone website may have minor differences in layout, spelling errors, or broken links. Compare it side-by-side with the real broker's site.
The Danger of 'Recovery Room' Scams
If you have already been caught by a clone firm, a second wave of fraud may target you. These are known as 'recovery room' scams. Scammers, sometimes the same individuals who operated the original clone, pose as lawyers, police officers, or 'blockchain recovery experts'. They claim they can retrieve your lost funds for an upfront fee or a percentage of the recovered amount.
Key facts to know:
- Legitimate recovery services exist, but they are rare and operate under strict legal frameworks. Most offers you receive via unsolicited communication are fraudulent.
- The scammers may even refer to your previous experience, using the details you provided earlier, to build trust.
- Never pay an upfront fee for fund recovery. Instead, report the original scam to the regulator or law enforcement (such as Action Fraud in the UK) and seek advice from a trusted source.
What to Do If You Suspect a Clone Firm
If you believe you have been contacted by a clone firm or have already deposited funds into a potentially fake account, take these steps:
- Stop all communication with the suspected scammer. Do not engage further, even to confront them.
- Do not send any more money under any pretext, including 'fees' or 'taxes' to release funds.
- Report the scam to the relevant regulator and law enforcement. In the UK, report to the FCA and Action Fraud. In Australia, report to ASIC. Provide as much detail as possible—names, phone numbers, website URLs, payment details.
- Contact your bank or payment provider immediately to see if the transaction can be reversed. Cryptocurrency payments are typically irreversible, but bank transfers may be recoverable if reported quickly.
- Change your passwords and enable two-factor authentication on any accounts you may have used with the scammer.
Limitations and Verification Note
The methods described in this article are based on general principles of fraud detection and regulatory practice. Individual broker verification requirements may vary by jurisdiction and regulation type (FCA, ASIC, CySEC, etc.). Always confirm the specific verification process with the relevant regulator for your account. This content does not constitute legal or financial advice, and no guarantee is made that following these steps will prevent all fraud. Clone firms are constantly adapting, and new scams emerge regularly. Independent verification is essential before any financial transaction.
Summary of Protection
- Never trust an investment opportunity promoted via social media direct messages or unsolicited calls.
- Always initiate contact with a broker through their verified regulatory listing.
- Verify the domain history, official URL, payment recipient, and contact details before depositing funds.
- Use regulatory warning lists as one tool, but do not rely solely on them.
- Be wary of recovery room scams if you have already been a victim.
Protecting your capital starts with extreme skepticism toward unsolicited outreach. The clone-firm threat is real, but with a systematic verification approach, you can significantly reduce your risk.
