Clone brokers and impersonation
Look beyond a real licence
Impersonators can copy a genuine firm’s name, address and licence while changing its website, email or payment destination. HTTPS encrypts a connection; it does not authenticate the business. A convincing trading interface, certificate or regulator badge can also be copied.
Resolve each discrepancy
Compare exact domains and official contacts character by character. Verify unexpected payment instructions with the genuine firm independently. Do not accept a salesperson’s assertion that official details are outdated. Similarity is an investigation lead, not proof by itself; pause payments and retain the discrepancy for review.
An illustrative address trap
In the hypothetical address firm.example.attacker.test, the familiar words at the beginning do not make it the same host as firm.example. These are reserved demonstration domains, not real broker findings. Read the whole address, check the official association and avoid turning a spelling comparison into a conclusive accusation.
Check the whole contact package
Compare the website, reply-to email, telephone number and proposed payment route, not only the firm name. A mismatch should become a specific question for the genuine business. Save the exact characters rather than describing two addresses as nearly identical. If the caller sends you to a real company’s website but asks you to continue elsewhere, verify the separate destination independently. A genuine page cannot authenticate every message that links to it.
Interpret a possible clone finding
A domain resemblance or borrowed licence is a reason to investigate. A source-backed official clone warning is stronger evidence, but it still needs the correct subject and address. Distinguish the suspected impersonator from the genuine firm in any report. Do not attach a warning to every company with a similar brand. Where an official notice names several contacts, preserve the original list and its date rather than silently extending it to unrelated addresses.
Act on the mismatch safely
Do not confront the suspected operator by sharing more identity documents or opening supplied files. Use official enquiry and reporting channels, and contact the payment provider if money has already moved. Tell the genuine firm exactly which identity details appear copied. A later disappearance of the website does not resolve what happened; retain your original records and the official report reference for follow-up.