Key takeaways
- Scams copy the look of real firms; verify the entity on the regulator's own register instead of trusting appearance.
- Unsolicited contact, high returns, personal account managers and payments to personal or crypto accounts are classic red flags.
- Clone firms use real names and numbers with different domains; compare every detail with the register.
- Recovery services that ask for upfront fees are a second scam.
- If you have paid, act within hours: contact your bank or card issuer, save evidence and report to the regulator and police.
- Never share login codes, install remote-control software or pay fees to release your own money.
Online trading attracts fraud because the products are complex, results are easy to fake and money moves across borders. Scam brokers do not look like scams: they look like professional firms with live chat, a polished platform and a friendly account manager. They also do not announce themselves, so recognising the pattern matters more than recognising a particular name. This guide explains how the main schemes work, lists the signs that appear in nearly all of them, gives a verification routine that takes minutes and sets out what to do within the first hours if you have already sent money.
How the main schemes work
| Scheme | How it starts | How the money is taken | Typical sign |
|---|---|---|---|
| Boiler room broker | An advert, a call or a social media contact promising high returns with an expert guiding you | You deposit; the platform shows growing profits; withdrawals are blocked by fees, taxes or new deposits | Account manager pushes bigger deposits; no verifiable licence |
| Clone firm | A website copying the name and details of a real regulated firm | You deposit with the clone, believing it to be the real firm | Domain differs slightly from the real firm's register entry |
| Fake platform or app | A trading app installed from a link or an unofficial store | Balances shown are simulated; funds go to the scammer | App not available on official stores or the broker's own site |
| Romance or social scheme | A friendly online relationship that turns to investing tips | You send funds to an account the contact recommends | Sudden investment advice from someone you have never met in person |
| Recovery scam | A message offering to retrieve money lost to a previous scam for an upfront fee | You pay fees; nothing is recovered, and sometimes more is requested | Unsolicited contact; upfront payment required |
The red flags that appear again and again
- You were contacted first, by phone, message or social media, about an investment.
- Promised or implied returns that are high, fast or guaranteed.
- A personal account manager or coach who urges you to deposit more or to act quickly.
- No legal entity name, address or licence number, or details that do not match the regulator's register.
- A website domain, company name or contact detail slightly different from the real firm you looked up.
- Payments requested to a personal account, a different company or a crypto wallet.
- Withdrawals blocked by fees, taxes, verification fees or demands for more deposits.
- Pressure to install remote-access software or to share screens and one-time codes.
- Large deposit bonuses with conditions that make withdrawal practically impossible.
A ten-minute verification routine
Check any firm before you send money
- Get the legal entity name and licence number. From the firm's legal page or agreement. If you cannot find them, treat it as a no.
- Open the regulator's register yourself. Type the regulator's address, do not follow a link from the firm or an advert.
- Match name, number, status and website. All four must agree. A different domain or an inactive status is a stop.Tip: Real licence numbers are often copied by scammers.
- Search regulator warning lists. Look up the firm name and domain on the warning lists and clone alerts of your own and other regulators.
- Search independent reports with care. Check reputable sources and our scam check tool, remembering that scammers also post fake positive reviews.
- Ask three direct questions in writing. Which entity holds my money, which licence covers my product and how do I withdraw? Evasive answers are answers.
Clone firms: the trap with a real name
A clone firm copies the name, logo, licence number and sometimes the address of a genuine firm, then uses a different domain and different bank accounts. The register entry looks correct because it belongs to the real firm. The only reliable defence is to compare every detail, especially the website address, with the entry on the regulator's register, and to read the regulator's clone warnings. If the real firm's register entry lists a website, that is the only domain you should use. Be sceptical of any firm that contacts you uninvited, even if its name is real.
Recovery scams: the second hit
After a loss, victims are often contacted by people offering to recover the money, claiming links to lawyers, regulators, blockchain investigators or police. They ask for an upfront fee, a tax payment or a deposit to unlock the funds. No legitimate authority charges you to recover money in this way. Reputable help comes from regulators, police, consumer bodies and your bank or card issuer, and is free to start. Be especially careful if the contact knows details of your loss: they bought them from the original scam.
If you have already paid: the first 48 hours
A response plan
- Stop sending money. Do not pay any release fee, tax or further deposit, whatever the platform shows.
- Preserve evidence. Save emails, chats, screenshots, payment receipts, wallet addresses and the website address.Tip: Do not delete anything, even if it is embarrassing.
- Contact your bank or card issuer immediately. Ask for a chargeback or a payment recall and report fraud. Time limits apply and are measured in weeks or months, so act now.Tip: Card schemes commonly allow disputes for a limited period, often around 120 days.
- Report to the regulator and the police. Use your regulator's reporting tool and file a police or national fraud report; the reference number helps with banks.
- Secure your accounts. Change passwords, remove any remote-access software and enable two-factor authentication on email and financial accounts.
- Warn your contacts and report the domain. Report the website to the hosting provider and search engines, and tell anyone else involved.
| Payment method used | Typical recovery options | Notes |
|---|---|---|
| Debit or credit card | Chargeback or consumer-credit dispute through the issuer | Best prospects if started quickly with evidence |
| Bank transfer | Ask the bank to recall the payment and to contact the receiving bank | Success is higher when reported within hours |
| E-wallet | Report to the wallet provider's fraud team | Policies vary by provider |
| Crypto transfer | Report to the exchange and authorities; tracing may help | Transfers are generally irreversible |
How to protect yourself for the long term
- Only open accounts on websites you reached yourself and verified.
- Use a broker's own app downloaded from the official store or its verified website.
- Never act on an unsolicited investment message, however friendly the sender.
- Treat any promised return as a warning; legitimate firms describe risk, not guarantees.
- Keep a short list of verified brokers and use only them.
- Talk to someone you trust before sending a large sum to a new firm.
Frequently asked questions
How can I tell if a broker is a scam?
Verify the legal entity and licence number on the regulator's own register, compare the website address, look for warnings and check for red flags such as unsolicited contact and guaranteed returns.
Is a licence number enough?
No. Scammers copy real numbers. The name, status and website on the register must all match the site you are using.
What if the broker's reviews are all positive?
Positive reviews can be bought or faked. Rely on regulatory information and independent sources with a clear methodology.
Can I get my money back?
Sometimes, especially when paid by card or bank transfer and reported quickly. Chances fall with time, and crypto payments are rarely recoverable.
Should I pay a recovery company?
No. Be suspicious of anyone who contacts you offering to recover money for an upfront fee. Use your bank, the regulator and the police.
What is a boiler room?
A high-pressure sales operation that uses calls or messages to push people into trading with a fake or abusive broker, often showing fake profits to encourage larger deposits.
What should I do if I gave remote access to my computer?
Disconnect from the internet, remove the software, run a security scan, change all passwords from a clean device and tell your bank.
Where can I report a scam broker?
Report to your national financial regulator and to the police or national fraud service, and tell your bank or card provider. Also report the website to its hosting provider.