Fake Regulation and Clone Firms: Verifying a License Is Real

A prospective partner sends you a slide deck with a regulator's logo, a license number, and a link to a page that looks exactly like the real thing. Everything checks out — until you notice the license number belongs to a firm with a different name, or the "regulator" page isn't hosted on the regulator's actual domain. This is the moment most IBs get it wrong: they treat a license number as proof, when a license number is just a claim that has to be checked against the source.

Clone firms are the sharpest version of this problem. Fraudsters copy the name, address, and license details of a real, regulated broker and use them to dress up an unrelated, unauthorized operation. The clone isn't a knockoff with a similar-sounding name — it claims to be the genuine firm, right down to the registration number. If you promote a clone without catching it, your audience loses money to an entity you vouched for, and your name is now permanently associated with the loss.

This article gives you the exact steps to confirm a license is real, tells you what a clone firm looks like in practice, and gives you a short checklist to run before you ever put a partner link in front of your audience.

Why Fake Regulation Works on Experienced IBs, Not Just Beginners

Fake regulation claims succeed because they exploit trust shortcuts, not ignorance. An IB who already knows to check for a license number can still be fooled if they stop at "a number exists" instead of "the number matches, on the regulator's own site, for this exact entity."

Three patterns account for most of what you'll encounter:

• Clone firms. The fraudulent operation impersonates a real, regulated broker, using its actual license number, registered address, and sometimes its actual company name. The only differences are the website domain and the bank details you're told to send money to.
• Borrowed or expired credentials. A firm displays a real license number that either belonged to it in the past and has since lapsed, or belongs to an entirely different legal entity that happens to share a similar brand name.
• Fabricated regulator pages. Some operations build convincing lookalike pages — sometimes hosted on domains one character off from the real regulator — so that a link from the broker's site to "verify our license" leads somewhere that looks official but isn't controlled by the regulator at all.

The Three Things a Real License Check Confirms

Every legitimate check answers three separate questions. Skipping any one of them is how clone firms get through.

1. Does the entity name match exactly? The legal entity named on the client agreement or partner contract must appear on the register verbatim — not just the trading brand. A single-letter difference in the company suffix (Ltd vs LLC, or a different jurisdiction tag) can mean you're looking at an unrelated shell.
2. Is the authorization current? Registers show status, not just history. A license can be lapsed, withdrawn, restricted to certain activities, or under an active warning notice, and still appear in a search result if you don't read the status field.
3. Do the contact details match? The phone number, registered address, and domain on the register should match what the broker gave you. A mismatch here is one of the most common ways clone firms get caught, because fraudsters can copy a license number but rarely control the regulator's own record.

Where to Check, By Regulator

Go to the source register, not a broker's claim about the source register. The table below covers the registers IBs run into most often; always confirm you're on the regulator's real domain before searching.

Alongside the register, most regulators also publish a warning list naming known unauthorized firms and clone firms by name. The UK's FCA maintains a public warning list that is updated regularly and explicitly flags clone firms trading under a genuine authorized firm's identity — searching a prospective partner's name there takes under a minute and catches a meaningful share of impersonation attempts before you ever build a comparison page around them.

A Worked Example: Reading a Register Entry Correctly

Say a broker's site states: "Authorized and regulated by the FCA, FRN 123456." Here's the sequence that separates a real check from a rubber stamp:

1. Open register.fca.org.uk directly and search FRN 123456.
2. Read the legal entity name the FRN returns. Compare it, character by character, against the entity named in the partner agreement or client terms — not the marketing brand on the homepage.
3. Check the status field. "Authorised" with no restrictions is what you want; "Authorisation withdrawn," "Applied to cancel," or any note about restricted permissions is a stop signal.
4. Compare the registered trading address and any listed domain against what the broker gave you.
5. Separately, search the firm's name (and the FRN) against the FCA's warning list and clone-firm notices.

If any single step fails to line up, treat the partnership as unverified until the broker's compliance team resolves the discrepancy in writing — not verbally, and not through the same channel that raised the concern.

Mistakes IBs Make When Checking Regulation

• Trusting a certificate image or PDF. These are trivial to fabricate. A screenshot of a license certificate is marketing material, not verification.
• Checking once, at onboarding, and never again. Licenses get suspended or withdrawn mid-relationship. A quarterly re-check of every partner's register status is a small time cost against a large reputational risk.
• Confusing an offshore broker with an unregulated one. A firm licensed in a lighter-touch offshore jurisdiction is regulated — just under a different regulatory jurisdiction with different investor protections. That's a different risk conversation than a firm with no license at all, and conflating the two either overstates or understates the actual risk to your audience.
• Assuming a regulatory umbrella arrangement covers the entity you're dealing with. Appointed-representative and umbrella structures are legitimate, but the umbrella's license covers specific activities for specific entities — verify the exact scope, not just that an umbrella relationship exists somewhere in the corporate structure.
• Skipping the restricted jurisdictions question. Some firms are legitimately licensed but barred from soliciting clients in certain countries. Promoting them to an audience in a restricted jurisdiction creates compliance exposure even when the license itself is genuine.

This kind of gap is exactly what a structured process closes. If you haven't already, run new and existing partners through the complete IB due-diligence checklist — license verification is one line item in a longer list that also covers financial stability, payout history, and platform reliability.

How This Connects to Broader Red-Flag Screening

Fake regulation rarely shows up alone. It tends to cluster with other warning signs covered elsewhere in this due-diligence series:

• Firms that fail a license check often also match several entries on the broader list of broker scam red flags.
• Before promoting any partner, spend the 30 minutes it takes to research a broker's reputation across regulator filings, forums, and complaint databases — a clone or unregulated firm usually leaves a visible trail.
• If a broker is already active and its commissions look thinner than the agreed structure, that's worth cross-checking against how to detect commission shaving, since firms sliding toward insolvency or a rebrand sometimes let both regulatory status and commission accuracy slip at the same time.
• A firm whose license was recently withdrawn is also a candidate for the pattern described in broker rebrands and exit scams — the two often happen in sequence.

If you're unsure whether a license requirement even applies to your own activity as an IB, rather than to the broker, that's a separate question answered in do IBs need a license? regulatory status explained by region.

Finding Genuinely Vetted Partners

Manually checking a register for every prospective partner is necessary, but it doesn't have to be your only source of verification. Revenika's Partner Glossary documents the regulatory and structural terms you'll run into across brokers, exchanges, and prop firms, so you can recognize what a claim actually means before you go confirm it at the source. Use it alongside the regulator registers above, not instead of them.

Frequently Asked Questions

How can I tell a clone firm from the real regulated broker it's copying?

Compare the domain, registered address, and phone number on the regulator's official register against what the broker gave you. A clone firm typically gets the license number and company name right but fails to match on domain and contact details, because it doesn't control the real firm's actual records.

Is an unregulated broker automatically a scam?

No. An unregulated broker operates without oversight from a financial regulator, which is a real risk factor, but it isn't the same claim as fraud or impersonation. Fake regulation is a broker actively lying about a license it doesn't hold; being unregulated is the absence of a license altogether. Both warrant caution, but they call for different questions.

How often should I re-verify a partner's license once I've already onboarded them?

A quarterly check against the relevant register is a reasonable baseline for active partners, with an immediate check any time you notice unusual account behavior, a name or domain change, or a delayed payout.

Do clone firms only target big-name brokers?

No. Clone firms copy any authorized firm whose name carries credibility with the target audience, including smaller regional brokers. Size doesn't correlate with impersonation risk; visibility of the license number does.

What should I do if I already promoted a firm that turns out to be a clone?

Remove the link or listing immediately, notify your audience with a clear correction, and keep a record of the regulator's warning notice for your own files. Speed matters more than framing here — a fast, plain correction protects your credibility far better than a delayed or vague one.

Conclusion

A license number is a claim, and claims get verified at the source, not taken from a certificate, a partner deck, or a link the broker supplied themselves. Go to the regulator's own register, match the entity name exactly, confirm the authorization is current, and cross-check the firm against the regulator's clone and warning lists. That five-minute habit, repeated for every partner and refreshed periodically, is what keeps a fake-regulation claim from ever reaching your audience.