Clone Forex Brokers: How Broker Impersonation Scams Work
How scammers impersonate a genuinely regulated broker's name and licence number to look legitimate, and the practical steps to spot a clone firm.
LEARN
A “clone firm” scam is a specific, well-documented pattern: scammers copy a genuinely regulated broker’s name, branding, and real licence number, then use that borrowed credibility to take deposits that have nothing to do with the actual regulated firm. The firm being impersonated is often entirely unaware its details are being used this way.
How the scam actually works
A clone operation typically sets up a website that looks similar to a real, licensed broker’s site, sometimes with a near-identical domain name, and quotes that broker’s genuine licence number and registered address as if the two were the same business. Contact usually comes through unsolicited channels — a cold call, a message on social media, or an advert that promises account management or trading signals — rather than through the real firm’s own advertising. Victims who check the licence number against the regulator’s register may see what looks like a valid result, because the number itself is genuine; what has been forged is the connection between that number and the website or contact details actually being used.
Why checking the number alone is not enough
This is the key thing to understand about clone scams: the licence number checking out is not proof you are dealing with the genuine firm. A real number can be quoted by an entirely unconnected operation. Verifying a licence properly means checking that the register’s own listed contact details, domain and registered office match what you are actually being given, not just confirming the number exists somewhere on the register.
Practical steps to detect a clone
- Go to the regulator’s register directly and look up the number, then compare the domain, email address and registered office shown there against what you’ve been given. A different domain or a contact email on a free webmail service, where the register shows a corporate one, is a serious warning sign.
- Check the regulator’s own clone-firm warning list. Several regulators, including the UK’s FCA, publish a specific list of firms known to be impersonating genuinely authorised entities, separate from the main register search. This is worth checking even when the main register search looks fine.
- Be wary of any unsolicited contact. A genuine, well-regulated broker generally does not cold-call or message people out of nowhere pushing a deposit. Unsolicited outreach, especially combined with pressure to act quickly, is one of the most consistent features of clone and impersonation scams.
- Look for small inconsistencies in domain and spelling. Clone sites often use a domain that differs from the genuine firm’s by a letter, a hyphen, or a different top-level domain (.net instead of .com, for example). Typing the real firm’s domain in directly, rather than clicking a link you were sent, avoids this trap entirely.
- Ask the genuine firm directly if you have any doubt. A real regulated broker’s official contact details, as listed on the regulator’s register, can confirm whether a given website, phone number or representative is actually connected to them.
Why clone scams work even on careful people
Clone scams succeed precisely because the surface-level check — “does this licence number exist?” — comes back looking fine. Someone who has learned to check a licence number but stops there, without comparing the register’s own contact details against what they’ve actually been given, can do everything that feels like due diligence and still be dealing with a clone. This is exactly why the register’s contact details matter as much as the number itself, not as an optional extra step.
What to do if you suspect a clone
Stop any further contact or payment immediately, and report it to the regulator whose name and licence number were used, as well as to the genuine firm being impersonated if you can identify it. The deciding step is always the direct comparison of contact details against the register itself — not the licence number alone — so if you haven’t already looked up the genuine firm’s registered domain and office address directly on the regulator’s site, do that before taking any further action or sending any further funds.