Why clever people get caught

Investment scams aren't aimed at the gullible — they're engineered for people who feel financially competent. The scripts borrow the trappings of legitimate finance (glossy factsheets, professional platforms, plausible returns just above market rates) and then apply pressure techniques that work on everyone: authority, scarcity, social proof, and a ticking clock. Knowing the mechanics is the vaccine — which is why this guide pairs with our check-an-adviser toolkit: the same verification habit defeats both bad advisers and fake ones.

The warning signs that repeat in every scam

  • Unsolicited contact — a call, DM, WhatsApp group or "wrong number" text that turns to investing. Genuine firms are banned from cold-calling you about pensions, and no stranger with a genuinely good investment needs to find you.
  • Returns too smooth to be real: "guaranteed" 1–2% a month, "no risk", returns that never have a down month. Sanity-check any promised rate against the compound growth calculator — if it doubles your money in five years, ask why they're sharing it.
  • Pressure and deadlines — "allocation closes Friday", a "last slot", a bonus for deciding today. Legitimate investments survive a fortnight's thought; scams cannot.
  • Exclusivity and flattery — you've been "selected"; it's "not available to the general public".
  • Secrecy — any instruction to mislead your bank about the payment's purpose is the single loudest alarm in finance.
  • Unusual payment rails — cryptocurrency, transfers to a personal account, or a "payment agent". Regulated firms take payment in boring, traceable ways.
  • Celebrity endorsements — deepfaked video of famous names "backing" trading platforms is now the standard front door to these scams. The famous person has never heard of it.
  • Withdrawal friction — small withdrawals work (to build trust), then larger ones need a "tax payment" or "release fee" first. Paying it is lost money; it is the scam's second act.

The 30-second checks before any money moves

  1. Search the FCA Register for the firm. Not there? Stop — you'd have no FSCS or Ombudsman protection even if it were merely incompetent rather than criminal.
  2. Check the permissions on the entry match what you're being offered. Authorised-for-something is not authorised-for-this.
  3. Check the FCA Warning List — the FCA's running list of firms and clones actively reported for targeting UK consumers.
  4. Contact the firm via the Register's details only — the phone number and website on the Register entry, not the ones in the message. This one habit defeats clone fraud entirely.
  5. Run the offer past someone you trust — scams depend on isolation, and saying it out loud is a remarkably effective test. Our first-meeting questions work on salespeople of every kind.

Clone firms: the scam that passes the register check

Cloning is impersonation of a real authorised firm — same name, same register number, sometimes a near-identical website one letter off the real domain. The register entry is genuine; the people contacting you are not. That's why the check that matters isn't "is the firm on the Register?" but "am I talking to the contact details on the Register?". If in doubt, hang up and call the Register number cold.

The protection cliff-edge

Everything in the UK's consumer-protection machinery — the Ombudsman, FSCS compensation, complaint rights — attaches to authorised firms. Send money to an unauthorised one and you fall off that cliff: there is usually no scheme, no ombudsman, and little realistic prospect of recovery, especially via crypto. The one recent improvement: since October 2024, banks must reimburse most victims of authorised push payment fraud up to £85,000 (see FAQ). That helps after the fact; it doesn't replace the 30-second checks.

If you think you've been caught: the first hour

  1. Stop all contact with the "firm" — no explanations, no negotiations, and above all no further payments to "unlock" your money.
  2. Call your bank immediately (or dial 159, the anti-fraud hotline that routes you to your bank securely). Ask them to attempt recall and to flag your account — speed is the biggest variable in recovery.
  3. Report it: Action Fraud (in Scotland, Police Scotland on 101) and the FCA. Reports feed the Warning List that protects the next person.
  4. Secure yourself: change passwords the scammers may hold, and warn your other providers if you shared ID documents.
  5. Expect the second wave. Victim lists are sold on: "recovery firms" will call offering to retrieve your losses for an upfront fee. That is the same scam wearing a rescue uniform — genuine recovery never requires advance payment.

And tell someone. Scam losses stay hidden out of embarrassment, which is precisely what lets the fraud repeat. You were attacked by professionals running an industrial process; treating it like a crime rather than a personal failing is both accurate and useful.

Common questions

A firm is registered on Companies House — does that make it legitimate?
No. Companies House registration costs a few pounds and involves no vetting whatsoever; fraudsters register real companies precisely because it looks reassuring. The only register that matters for investments is the FCA's Financial Services Register — and even then, check that the firm's permissions cover the activity it's offering you and that you're dealing with the real firm, not a clone using its name.
Will my bank refund me if I've been scammed?
Sometimes. Under the reimbursement rules introduced in October 2024, banks must refund most victims of authorised push payment fraud up to £85,000 per claim — including many investment scams paid by UK bank transfer — usually within five business days, unless you acted with gross negligence. The big gaps: payments made in cryptocurrency, card payments (different protections apply), international transfers, and losses above the cap. Report to your bank immediately either way; speed materially improves recovery odds.
The firm shows up on the FCA Register — am I safe?
Safer, but not automatically safe, for two reasons. First, clone fraud: criminals impersonate genuine authorised firms, lifting their name and register number, and give you their own phone number and bank details — so always make contact using the details on the Register entry itself, never the ones in the email or ad. Second, permissions: a firm authorised for insurance isn't authorised to sell you bonds. Check the entry's listed activities match what you're being offered.

Sources and further reading

FCA — ScamSmart · FCA — Warning List · Action Fraud · Payment Systems Regulator — APP scam reimbursement

About this guide: general education only — not regulated advice or a personal recommendation, and FinancialAdvisor.co.uk is not an FCA-authorised firm. Scam techniques evolve; the verification habits above are the durable part. Related: check an adviser and investing basics.