The FCA has warned that scammers have tried to clone the FCA website and are also regularly using fake emails to target regulated firms.
The watchdog says scammers are also attempting to trick firms by pretending to work for the FCA.
Crooks have been using fake emails but also the phone or post with “convincing communications” that appear genuine, the FCA warned.
The FCA has urged all firms to take care when replying to any emails and check carefully they are genuinely from the FCA, particularly if unexpected.
The FCA said: “Fraudsters are believed to be creating copies of FCA websites and changing the information. These cloned websites can be very convincing, with links and contact information that are the same as (or similar to) the real thing.”
Some fake versions of the FCA’s website have only small changes in the domain name. For example, ‘register-fca.org.uk’ instead of the genuine website ‘register.fca.org.uk’.
Genuine FCA websites and online systems have addresses that start with:
Fake FCA emails:
Genuine FCA emails are sent from addresses ending in:
- @fca.org.uk
- @fcanewsletters.org.uk
- @fcamail.org.uk
The following are suspicious email addresses used by scammers. The FCA says emails from these addresses should alway be deleted without opening.
|
Fake emails
|
Details
|
Date
|
|
@gabriel-FCA.org.uk
|
|
|
|
@opbas.net, @opbas.uk
|
|
|
|
@fca-eu.com
|
|
|
|
This email address is being protected from spambots. You need JavaScript enabled to view it., This email address is being protected from spambots. You need JavaScript enabled to view it., This email address is being protected from spambots. You need JavaScript enabled to view it., This email address is being protected from spambots. You need JavaScript enabled to view it.
|
This email asks people to complete a survey on FCA conduct rules and coronavirus.
|
|
|
This email address is being protected from spambots. You need JavaScript enabled to view it.
|
A fake email sent to firms regarding a due diligence request. This email is a clone address. Don’t open the link to the questionnaire in the email.
|
November 2020
|
|
rdc-fca.com, rdc-fca.org.uk
|
Fake emails claiming to be from RegData (data collection platform)
|
February 2021
|
|
@fca.com
|
Fake email about firm details attestations submissions. Emails are being spoofed so falsely appear to come from this address.
|
January 2022
|
|
@secure-fca.org.uk
|
Potential scam email to firms using this email address.
|
July 2022
|
|
This email address is being protected from spambots. You need JavaScript enabled to view it., This email address is being protected from spambots. You need JavaScript enabled to view it., This email address is being protected from spambots. You need JavaScript enabled to view it.
|
These email addresses don’t match any FCA employees, but are actually being sent by This email address is being protected from spambots. You need JavaScript enabled to view it. or This email address is being protected from spambots. You need JavaScript enabled to view it.. The top 3 subject lines in these fake emails are, ‘Project Loan’, ‘Project Seking’, and ‘Project Seking Loan’.
|
July 2022
|
Fake letters:
There have also been reports of a fake letter from an FCA director. The letter claims to relate to a review by the FCA of the ‘Star Like project’ (September 2022). The FCA warned firms to look out for fake FCA certificates using our name and logo.
Social media accounts:
The main FCA accounts include:
The FCA also uses TikTok and Instagram for campaigns and ads from time to time. It warned that if firms see another social media account claiming to represent the FCA, it’s probably a scam.
• Reports of fake FCA communication can be made to: 0300 500 0597 or use the FCA contact form.
