Fake FCA Scams: How to Check Whether a Regulatory Contact Is Genuine
Fraudsters may impersonate the Financial Conduct Authority to obtain money, personal information or access to financial accounts.
They may contact someone by telephone, email, text message, letter or messaging application and claim that the FCA has recovered money from an earlier investment, cryptocurrency, pension or loan scam.
Other approaches involve fabricated court judgments, regulatory charges or urgent identity checks.
The contact may appear convincing. Fraudsters can copy the FCA’s name, logo, employee details and official-looking language. They may also create websites and email addresses that differ from genuine FCA details by only a few characters.
The FCA will not ask consumers to transfer money to it or disclose banking PINs and passwords.
Unexpected contact should therefore be verified directly with the FCA through independently obtained official details.
How Common Are Fake FCA Scams?
The FCA received 4,465 reports of impersonation scams during the first six months of 2025.
Of those reporting an approach, 480 people said they had transferred money to the fraudsters. Almost two-thirds of reports involved people aged 56 or over.
During 2024, the FCA received 10,379 impersonation reports, with 991 people saying they had sent money.
These figures concern reported approaches and losses. They may not include everyone who received a fraudulent communication, failed to recognise it or chose not to report it.
Fake FCA communications often target people who have already experienced investment or cryptocurrency fraud. Information about the earlier loss can make the new approach appear relevant and credible.
For broader guidance on fraudulent investments, read our principal guide to Investment Fraud.
How FCA Impersonation Scams Work
A fraudster may pose as an FCA employee, investigator, compensation officer or recovery specialist.
They may already know:
- The name of an earlier investment platform
- The amount transferred
- The recipient company
- The victim’s telephone number
- Details of a cryptocurrency payment
- Information from a previous complaint
This information may have come from the original fraud network, leaked or sold data, public complaints or social-media posts.
The fraudster then claims that money has been located, restrained or approved for repayment.
Before the supposed funds can be released, the victim is asked to pay a tax, administration fee, legal charge or verification payment.
Paying the first demand commonly leads to further requests.
Common Claims Used by FCA Impersonators
Recovered cryptocurrency
The victim may be told that the FCA has identified a cryptocurrency wallet opened in their name or located funds linked to an earlier scam.
A fee is then demanded before the cryptocurrency can supposedly be released.
The FCA does not operate consumer cryptocurrency wallets or require payment to release digital assets.
Investment-fraud compensation
Someone who previously lost money may be told that compensation has been approved.
The fraudster may quote accurate details about the original investment to create confidence.
Any compensation process should be verified independently with the genuine organisation administering it.
County Court Judgment demands
Fraudsters may claim that a County Court Judgment requires the recipient to pay money to the FCA.
They may threaten enforcement, additional fees or damage to the person’s credit record.
The court and the FCA should be contacted independently before any payment is made.
Regulatory or identity-verification charges
The fraudster may claim that payment or personal information is required to:
- Remove an account restriction
- Confirm regulatory compliance
- Avoid a penalty
- Release a suspended payment
- Verify the source of funds
Urgency and threats are often used to discourage independent checks.
What the FCA Will Not Ask You to Do
The FCA will not ask consumers to transfer money to the regulator.
It will not ask for:
- A banking PIN
- An online-banking password
- A complete card security code
- A cryptocurrency private key
- A wallet recovery phrase
- Remote access to a device
- A payment to release compensation
- Tax before returning recovered funds
The FCA may contact members of the public during legitimate regulatory or consumer work. Unexpected communication is therefore not proof of fraud by itself.
It should still be verified independently before the recipient responds, shares information or takes financial action.
How to Verify FCA Contact
Do not use the details in the message
Do not click a link, reply to the email or call the number supplied in the communication.
Visit the FCA website independently.
Contact the FCA directly
Use the official consumer contact details published by the regulator.
Explain:
- How you were contacted
- The name used by the caller
- The telephone number or email address
- What the person claimed
- Whether money or information was requested
Check any financial firm mentioned
Where the communication refers to an investment company, adviser or financial provider, use the FCA Firm Checker.
Confirm the exact legal name, permissions and official contact details.
A genuine firm name or reference number does not verify a different telephone number, email address or website.
For detailed guidance on cloned financial firms, read our Coutts Clone Scam guide.
End the call and ring back independently
Caller-identification information can be manipulated.
Use a different telephone where possible and call the FCA through its published official details.
Warning Signs of a Fake FCA Communication
Warning signs may include:
- Unexpected contact about an earlier loss
- Claims that money has already been recovered
- A demand for tax or release fees
- Pressure to act immediately
- Requests for cryptocurrency
- Threats of court or regulatory action
- Requests for banking credentials
- Requests for private keys or recovery phrases
- Links to unfamiliar websites
- Slightly altered FCA email addresses
- Refusal to allow independent verification
- Guarantees of full compensation
Several warning signs appearing together should be treated seriously.
What to Do After Responding or Paying
- Contact the bank, card provider or exchange and explain that the payment may relate to FCA impersonation fraud.
- Stop all further payments.
- Change affected passwords and secure relevant accounts and devices.
- Preserve the messages, documents, websites and payment records.
- Contact the FCA independently and report the communication.
- Report the fraud through the appropriate national service.
- Be alert to follow-up recovery approaches.
Useful evidence may include:
- Original emails, messages and letters
- Telephone numbers and email addresses
- Website and domain details
- Payment and recipient information
- Cryptocurrency wallet addresses
- Earlier investment or recovery documents
For a fuller response checklist, read Scammed Online? What Victims Should Do First.
Beware of Recovery Scams
A fake FCA approach may form part of a wider recovery scam targeting someone who has already lost money.
The caller may impersonate a regulator, police officer, solicitor, compensation administrator, investigator or cryptocurrency specialist.
A legitimate professional provider may charge an agreed fee. The existence of an upfront or staged fee does not by itself prove fraud.
Stronger warning signs include:
- Guaranteed recovery
- Claims that funds are already waiting
- Unexplained tax or release payments
- Impersonation of a regulator or court
- No verifiable company information
- Requests for passwords or wallet credentials
- Pressure to act immediately
Any unexpected recovery provider should be verified independently and should provide a clear written scope of work before payment.
Fraud and Financial Investigation Services
Conflict International provides Fraud and Financial Investigation Services to individuals, businesses, law firms and professional advisers dealing with impersonation fraud, investment scams and disputed financial activity.
Depending on the available evidence, our work may include:
- Company and connected-party research
- Website and domain enquiries
- Payment-recipient research
- Review of communications and documents
- Cryptocurrency transaction mapping where relevant
- International corporate research
- Evidence chronology preparation
- Clearly sourced reporting for legal and professional review
An account, website or telephone number may belong to an intermediary rather than the person directing the fraud.
Private investigators cannot compel banks or exchanges to disclose protected customer information. They also cannot independently freeze accounts, seize assets or guarantee repayment.
We distinguish confirmed information from possible connections and matters that remain unverified.
Discuss a Suspected FCA Impersonation Scam
If you are concerned about an unexpected FCA communication or recovery approach, contact Conflict International with the available messages, documents, payment records and recipient details.
We can assess what corporate, digital and financial enquiries may be proportionate.
Complete the enquiry form below to request an initial assessment.