Safety & regulation

Clone firms and trading scams in Europe – how they work and how to spot them

Clone firms copy the names and licence numbers of real brokers. Here are the scam patterns European regulators warn about most, the red flags, and what to do if you have already paid.

Investment fraud has moved from cold calls to social media, messaging apps and fake news articles, but the underlying playbook has barely changed. Knowing the patterns is the best defence, because a convincing scam will survive a quick glance at a licence number.

How a clone firm works

A clone firm takes the identity of a real, authorised firm – its name, sometimes its registered address and licence number – and pairs it with a new website, phone number and email domain. Victims who search the regulator's register find the genuine firm and assume they are dealing with it.

The giveaway is in the details. Registers such as the FCA register and CySEC's list of investment firms show the websites and phone numbers a firm may use. The FCA also lists known clones against the genuine firm's entry. Always contact a firm using the details from the register, never the ones in an advert or message. Our guide to checking a licence walks through it.

The five patterns regulators see most

1. Fake celebrity endorsements

Paid adverts and fake news pages claim a well-known entrepreneur or TV presenter made a fortune with an "AI trading platform". Deepfake videos make these more convincing. No genuine public figure is endorsing a platform in a sponsored social-media post.

2. The "account manager"

After you register on a landing page, a friendly "senior analyst" calls. A small first deposit (often around €250) shows fast profits on a dashboard. Then comes pressure to deposit more, borrow, or move savings. The dashboard is fiction; the money was never traded.

3. Remote-access takeover

You are asked to install AnyDesk, TeamViewer or a similar app "to help set up your account". With access to your device, the fraudster can open loans, make transfers from your bank, or create crypto accounts in your name. No legitimate broker needs remote control of your computer.

4. Romance and "pig-butchering" schemes

A new online friend or romantic contact gradually introduces an investment opportunity, usually crypto. The platform is controlled by the fraudsters, and early small withdrawals are allowed to build trust before the victim invests much larger sums.

5. Recovery scams

People who have already lost money are contacted by "lawyers", "recovery agents", fake regulators or even fake police units offering to get the money back for an upfront fee or a "tax". These are often run by the same networks. Genuine compensation schemes and regulators never charge victims, and never ask for payment in crypto.

Red flags checklist

  • You were contacted first, or found the offer through a social-media advert.
  • Returns are "guaranteed", or far above what any regulated investment offers.
  • There is urgency: a bonus that expires today, a "limited window".
  • The company is registered offshore, or the licence shown is for a different company name.
  • You are asked to pay by crypto, card to a third-party merchant, or transfer to an individual.
  • Withdrawals require a fee, tax or further deposit.
  • Trading "bonuses" are offered – these are prohibited for retail CFD clients in the EU. See why bonuses disappeared.

If you have already paid

  1. Call your bank or card issuer now. The faster you act, the better the chance of stopping a transfer or starting a chargeback.
  2. Secure your devices. Uninstall remote-access tools, change passwords, and enable two-factor authentication on email and banking.
  3. Report it to the police and to your national financial regulator. Our country guides list the right authority.
  4. Keep evidence: emails, chat logs, transaction references, website addresses.
  5. Expect follow-up contact – and treat every offer of recovery with suspicion.

Being targeted is not a sign of foolishness; these operations employ professional salespeople and psychological techniques. Talking about it helps others avoid the same trap.

Frequently asked questions

What is a clone firm?
A fraudster that copies the name, address, licence number or website design of a genuinely authorised firm, so that a quick search seems to confirm it is legitimate. The difference is usually in the contact details or website domain.
I have sent money to a scam. What should I do first?
Contact your bank or card issuer immediately to try to stop or recall the payment, report the fraud to the police and your national financial regulator, change passwords, and remove any remote-access software from your devices. Ignore anyone who offers to recover the money for a fee.

This guide is general information, not personal financial, tax or legal advice. Rules change; we review this page regularly and show the date of the last update above. Found an error? Tell us. See our editorial policy.

Related guides