One of the cleverest tricks used by pension fraudsters doesn't involve inventing a fake company at all — it involves impersonating a real one. This is known as a clone firm scam, and it is specifically designed to defeat the very check most people are told to rely on: looking a firm up to confirm it is regulated. This page explains exactly what a clone firm scam is, why it is so effective at getting past normal caution, the single verification step that reliably defeats it, other warning signs to watch for, and what to do if you think you have encountered one — including how to protect the genuine firm being impersonated.
What is a clone firm scam?
A clone firm scam involves fraudsters presenting themselves as a real, FCA-authorised (Financial Conduct Authority, the UK's financial regulator) firm — using that genuine firm's actual name, its real FCA reference number, its real registered address, and sometimes even the names of real staff members who work there. The genuine firm typically has no idea this is happening, and the fraudsters have no connection to it whatsoever beyond having copied its publicly available regulatory details.
Sometimes the impersonation is close to exact, right down to the firm's real details being quoted correctly; other times the fraudsters use a name that is almost identical to the genuine firm's, perhaps with a single letter changed, an extra word added, or a slightly different company suffix, alongside a website domain that looks correct at a glance but isn't quite the real one. Both versions rely on the same underlying trick: making you believe you are dealing with a business that is genuinely regulated and trustworthy, when in fact you are dealing with someone who has simply borrowed that appearance.
Why this is so effective and dangerous
The advice given throughout this site, and by every reputable consumer protection body, is to check a firm on the FCA register before trusting them with your pension. Clone firm scams are specifically built to survive exactly that check: if you search the real firm's name on the FCA register, you will find a genuine, correctly authorised firm — because that firm actually exists and is regulated. The problem is that the person who contacted you has no real connection to that genuine firm at all; they have simply used its identity as a costume.
This means a victim can do everything "right" by conventional standards — checking the FCA register, confirming the firm is authorised, even seeing the firm's real address and a plausible-looking phone number — and still be talking to a fraudster throughout, because the check confirmed that the real firm exists, not that the person on the phone is actually from it. This is precisely why clone firm scams catch out people who are otherwise careful and well-informed, and why understanding this specific technique matters even if you already know to check the FCA register in general.
The critical verification step that defeats clone scams
The single most effective defence against a clone firm scam is simple to describe, even though it requires one extra deliberate step most people skip: always find the real firm's contact details yourself, independently, via the FCA register directly — and then call that independently-found number, never a number or link given to you by the person who contacted you, and never a number from an email signature or text message, however official it looks.
This works because a clone scammer will happily "confirm" their own fake details if you call them back using the number they gave you in the first place — you have simply called the fraudster again, and they will assure you everything is genuine. But if you independently locate the real firm's switchboard number through the FCA register and call that number instead, you will reach the actual firm, who can tell you plainly whether they employ the person who contacted you and whether they made the approach described. This single habit — always sourcing contact details independently rather than trusting anything provided by the person you are verifying — is worth adopting as a standing rule for any financial contact, not just pension-related ones.
Other clone-firm warning signs
Beyond the core verification trick, several other signals often accompany clone firm scams. A slightly misspelled or unusual domain name in an email address or website — an extra hyphen, a different top-level domain, or a single substituted letter — is one of the most common tells, since registering a look-alike domain is cheap and easy for a fraudster, while a genuine firm's domain has typically been unchanged for years. Requests to move communication exclusively to personal email addresses, WhatsApp, or other messaging apps, rather than the firm's official channels, are also a strong signal, since genuine regulated firms generally communicate through recorded, auditable official channels for compliance reasons.
Watch too for documents, such as suitability reports or account statements, that use a slightly different letterhead, logo quality, or formatting than what you would expect from an established, professional firm — clone scammers often reproduce firm branding reasonably well but rarely perfectly. If anything about the communication feels inconsistent with how a large, established financial firm would normally operate, treat that inconsistency as worth investigating rather than dismissing.
Clone firm red flags versus genuine firm behaviour
Why clone firms specifically target pension transfers
Clone firm scams are not unique to pensions, but pensions are a particularly attractive target for this specific technique because the sums involved are large, decisions are often made only once or twice in a lifetime, and many savers genuinely do not have an existing relationship with a financial adviser to compare a new approach against. Someone who has never worked with a regulated adviser before has no prior experience of what a genuine firm's communication style, paperwork, or process actually looks like, which makes a competently executed clone considerably harder to spot than it might be for someone who deals with the same real firm regularly.
Fraudsters running clone firm operations typically research real, well-established, and reputable advice firms specifically because their good reputation does the persuasive work for the scammer — a lesser-known or newer firm would not carry the same instant credibility. This is one of the few areas of pension scam activity where a firm's genuine, hard-earned reputation for trustworthiness is turned into a liability for its unwitting former or prospective clients, which is exactly why the FCA maintains and publishes a specific warning list of firms known to have been cloned.
How widespread this problem is
Clone firm scams targeting pension savers are reported regularly enough that the FCA maintains an ongoing, publicly accessible list of firms it knows have been impersonated, updated as new clones are identified. This list exists precisely because the problem is common enough, and damaging enough, to warrant an official, continuously maintained public resource — it is not a rare or theoretical risk confined to a handful of isolated cases. Checking this list specifically, in addition to the general FCA register search, is a useful extra step if you have any doubt about a firm that has approached you, since it directly documents known impersonation attempts rather than simply confirming that the real firm exists.
It is also worth knowing that clone firm techniques are not limited to phone calls and emails — they increasingly appear in social media advertising, search engine adverts, and even paid listings designed to appear alongside genuine search results for a real firm's name. Wherever the approach originates, the same underlying principle for protecting yourself applies: the channel through which you were contacted tells you nothing reliable about whether the sender is who they claim to be, and only independent verification, sourced by you rather than provided to you, closes that gap.
A realistic example of how this can unfold
Imagine receiving an email that appears to come from a well-known, genuinely FCA-authorised advice firm, quoting their real FCA reference number and inviting you to discuss transferring your pension for better returns. The email address looks almost right, perhaps ending in "-advisers.co.uk" rather than the real firm's actual "-advice.co.uk" domain — a difference easy to miss when scanning quickly. If you search the firm's name on the FCA register, you find a real, properly authorised business, which appears to confirm everything is legitimate. Only by independently finding the real firm's official phone number — not the one in the email signature — and calling to ask "did you send me this?" would you discover that the real firm has never heard of the email, the sender, or the advice being offered.
What to do if you suspect a clone firm
If you suspect you have been contacted by a clone firm, stop all engagement with whoever contacted you and do not act on anything they have recommended, including any transfer, payment, or document signing. Independently find the genuine firm's contact details via the FCA register and call them directly to check whether they recognise the approach, the individual named, and the communication you received.
Report what happened to the FCA, since clone firm warnings help protect other potential victims and contribute to the FCA's published list of known clone scams, and to Action Fraud, the UK's national reporting centre for fraud and cybercrime, at actionfraud.police.uk or by calling 0300 123 2040, particularly if you have already provided money or personal details. If possible, also let the genuine firm know their identity is being used this way, since they may not otherwise become aware their name is being exploited, and their own warning to other customers can help limit the wider damage.
Never verify a firm using contact details the firm — or someone claiming to represent it — has given you. Always find the number independently through the FCA register at register.fca.org.uk and call that number instead. This single habit defeats clone firm scams more reliably than any other single check.
Getting independent help
If you are unsure whether a firm that has contacted you is genuine, MoneyHelper, the free and impartial guidance service backed by government, can help you think it through at moneyhelper.org.uk or by calling 0800 011 3797. The FCA's ScamSmart tool at register.fca.org.uk is also specifically designed to help identify clone firms and other pension and investment scams, and includes a published list of firms known to have been cloned, which is worth checking if you have any doubt at all about a recent approach.
Quick checklist before trusting any adviser contact
Find the firm's number yourself via the FCA register — never use a number the caller or email gave you.
Check the exact spelling of the email domain and website address, letter by letter, against the firm's known official domain.
Ask the firm directly, via your independently found number, whether they employ the named individual and made the contact.
Be cautious of any request to move communication to personal email or messaging apps instead of official channels.
If anything still feels inconsistent after checking, pause and contact MoneyHelper or the FCA before proceeding further.
If you've been affected, it isn't a reflection on you
Clone firm scams are specifically designed to survive the exact due-diligence steps that consumer advice, including this page, recommends — that is what makes them different from cruder scams, and it is why falling for one says nothing about your carefulness or judgement. People who have spent careers in financial services, journalists who write about scams professionally, and experienced independent advisers have all been deceived by well-executed clone firm approaches, precisely because the technique targets the verification process itself rather than relying on a victim skipping it.
If you are dealing with the aftermath of a clone firm scam, focus your energy on the practical steps available now — verifying independently, reporting to the FCA and Action Fraud, and warning the genuine firm — rather than on questioning what you should have done differently. The people who built the deception are responsible for it; your role now is limiting the damage and helping prevent the same approach from working on someone else.
Whenever your pension is involved, treat the extra few minutes it takes to independently find and call a firm's real number as a normal, sensible part of the process, not an inconvenience or an insult to the person asking you to trust them. A genuine firm will never be troubled by this small delay, and that single habit remains the most reliable protection against this entire category of fraud.
If you take away only one thing from this page, let it be this: source your own contact details, always, and never the other way around.