Six clone warnings linked to Interactive Brokers show why a genuine firm number is not enough

Two-thirds of the linked clones used another name

The Financial Conduct Authority’s register record for Interactive Brokers (U.K.) Limited links six clone identities recorded between 2016 and 2024. Only two of the six used “Interactive Brokers” as a clear part of the public name: “Interactive Brokers” and “Interactive Brokers / Polar Capital.” The other four were IBL Markets, Immediate Matrix, Broker and xtradecons.com. In other words, two-thirds of the linked clone identities did not use the authorised firm’s full name.[1]

That finding changes how customers should search for impersonation. Looking only for warnings containing the famous broker brand will miss a clone that presents itself under an unrelated label while borrowing a genuine firm reference number, address or regulatory description elsewhere in the sales process. The FCA’s own guidance says clone operators can copy real details to appear authorised. Verification must therefore start from the regulator’s record and approved contact information, not from whether the website name resembles the broker a customer expected.[1][2]

A genuine reference number can become part of the deception

A clone does not need to invent every credential. The more convincing method is to copy selected information from an authorised firm: its name, firm reference number, address or licence description. A prospective customer who checks only that the number exists can be reassured by a genuine register entry while sending money to someone using different phone numbers, email addresses or bank details. The real data become camouflage for the fake relationship.[2]

The FCA’s 2021 warning concerning an Interactive Brokers clone states that the unauthorised operator had no connection with the genuine firm. It directs consumers to use the Firm Checker and the contact details on the authorised record. That final step is decisive. A number copied onto a website is not proof that the website belongs to the entity whose record contains the number.[3][2]

The name can be generic enough to evade a brand search

Four labels linked from the record do not contain the full Interactive Brokers name: IBL Markets, Immediate Matrix, Broker and xtradecons.com. That is a classification of the displayed names, not evidence of exactly what every customer saw or how a particular search engine ranks the warnings. The regulatory links make the relationship visible even where the label differs.[1]

This pattern also complicates search-engine due diligence. Clone sites can change domains, use paid advertisements and place the genuine firm’s credentials in fine print or private messages rather than the main brand. A clean-looking search result for the displayed name does not establish authorisation. The question is whether the legal person taking the money matches the authorised record and can be contacted through regulator-verified channels.[2][4]

Other large broker brands face the same mechanism

The FCA has published clone warnings connected to other prominent trading brands. An “AI-Arbitrage” warning identified the genuine eToro UK firm and its reference number while stating that the clone had no connection to it. A Trading212 clone warning similarly distinguished the unauthorised operator from Trading 212 UK Limited. A warning for Wig Markets identified a clone of an authorised IG entity. The impersonating label does not always need to reproduce the genuine name; it needs only enough authentic detail to lower the victim’s guard.[5][6][7]

The genuine firms are victims of the impersonation, not the subject of the warning. A customer loss caused by a clone should not be reported as a failure by Interactive Brokers, eToro, Trading 212 or IG unless evidence connects the authorised entity to the transaction. Precision protects both consumers and firms: the report must identify the bank account, domain, contact details and legal entity actually used.[3][5][6][7]

The warning list is necessary but not complete

The FCA says consumers should check its warning list, but it also cautions that a firm’s absence does not prove authorisation. New clones can operate before a warning is published, and existing operators can change names and domains. The regulator says information is updated regularly, yet no public authority can list every fraudulent contact in advance. A negative search is therefore a starting point, not a clean bill of health.[4][2]

The register record of the genuine firm can be more useful than a free-text warning search because it anchors the enquiry to the authorised entity. Customers should initiate contact through the telephone number, email or website shown by the regulator, not by clicking a link sent by the salesperson. If the person refuses that channel or says a special desk uses unlisted details, the customer should stop until the regulator or authorised firm confirms the relationship.[1][2]

Payments reveal what branding can conceal

The decisive evidence often appears at the payment stage. The name on a bank account, crypto wallet request or card merchant should be reconciled with the authorised legal entity and the documented funding instructions reached through the genuine firm’s site. A clone may explain a mismatch as a payment processor, liquidity partner or regional agent. Such relationships can exist in legitimate businesses, but they require independent confirmation from the authorised firm through verified contact details.[2]

Customers should also distrust remote-access requests, pressure to pay tax or release fees before withdrawal and instructions to move communication into encrypted messaging. Those behaviours can occur after an apparently convincing onboarding process. The copied licence details do not become more reliable because the account dashboard shows profits. The dashboard can be part of the impersonation.[2][4]

The six-name trail changes the verification rule

The six entries are the warnings linked from this particular record in the version reviewed. They do not establish that Interactive Brokers faces more impersonation than another firm, that six distinct operators were involved or that the list is a complete census. They illustrate why a brand-name check alone is narrower than checking the legal entity and independently verified contact route.[1][2]

The correct verification question is therefore not “Does this company name appear regulated?” It is “Does the exact legal entity, domain, contact route and payment instruction match the regulator-verified firm?” A clone can borrow a real number. It cannot make an unrelated phone line or bank account become part of the authorised firm merely by displaying that number on a website.[2][4]

The warnings span almost eight years

The linked dates run from August 2016 to May 2024. They establish that warnings appeared at different times, not an uninterrupted eight-year campaign. The underlying operators, duration of activity and number of affected customers cannot be inferred simply from that date range. Historical warnings can still help identify an earlier contact after a website has disappeared.[1]

The names vary from abbreviations to direct brand references and unrelated labels. The sequence does not prove that the same operators adapted their methods or that any one detection system missed them. The useful distinction is between a copied credential and a verified relationship with the authorised company.[1][2]

Verification requires a multi-field match

A safe check compares at least six fields: legal name, firm reference number, website domain, email domain, telephone number and payment beneficiary. Matching one or two is insufficient because clone operators can copy public register data. The customer should reach the genuine firm through the FCA record and ask it to confirm any unfamiliar domain, representative or bank account.[2][4]

The payment beneficiary deserves special weight. An authorised broker can use regulated payment partners, but the relationship should be documented through its verified site. A salesperson’s explanation that money must go to an individual, unrelated company or crypto wallet should not override the mismatch. Stop the transfer and verify independently.[2]

A register search can reassure the victim for the wrong reason

When a clone supplies a real FRN, the customer may search it and see an authorised firm with the expected permissions. The search has confirmed the copied credential, not the caller. The next step must be to compare contact details and initiate a new conversation through the regulator-listed route. Continuing the same message thread preserves the clone’s control of the verification process.[2][3]

This is especially important when the displayed brand is unrelated. A victim may assume that “Immediate Matrix” is a trading system operated by Interactive Brokers or that xtradecons.com is an appointed regional portal. The authorised firm’s confirmation—not the clone’s explanation—determines whether that relationship exists.[1][2]

An unauthorised clone is different from the regulated firm it impersonates, so protections that apply to a qualifying claim against the genuine firm should not be assumed. A victim should contact the payment provider promptly. The FCA’s warning pages also note that eligible authorised-push-payment scam payments can fall within the separate reimbursement framework applying from 7 October 2024, subject to its conditions. That is not a guarantee of recovery or an FSCS investment claim against the impersonated broker.[5][6][7]

Report an error or submit an update