Ilia Zavialov on scammers and warning lists: a dictionary of registers, clone firms, blacklists and complaint sites
Ilia Zavialov on scammers and warning lists: what a register, a warning list, an unauthorised firm, a clone firm, a blacklist and a complaint site each mean, who publishes them and what they prove. The word scammer appears on official notices and on anonymous pages alike, and the difference between them is the source. In the UK the FCA issued 2,329 warnings about unauthorised firms in 2025. This dictionary shows how to read each kind of list and how to check a firm on the FCA register before sending money.
Ilia Zavialov on scammers and warning lists: a dictionary of registers, clone firms, blacklists and complaint sitesBoth can use the word scammer. Only one can be checked.
Why the word scammer needs a source
The word scammer appears on thousands of pages, attached to companies, platforms and people. Some of those pages are official notices from a financial regulator, some are complaint boards, and some are anonymous posts written in a single afternoon.
For a reader the difference is everything. A regulator's warning is the result of a procedure with a named authority behind it. An anonymous post is a claim, and its weight depends entirely on the evidence it contains.
This dictionary explains the terms used on official lists and on the unofficial ones: register, warning list, unauthorised firm, clone firm, blacklist, consumer alert and complaint site. Each entry says what the term means, who publishes it and what it does not prove.
The goal is practical. Before sending money to a firm, or before believing a page that calls someone a fraudster, a reader should know which kind of source is speaking and what that source is able to know.
Register
A register is the official list of firms and people allowed to carry out a regulated activity: managing investments, holding client money, lending, dealing in securities or offering crypto services where a licence is required.
Presence on a register means the regulator authorised the firm for specific activities. It does not mean the regulator guarantees the firm's investments, and each entry lists exactly which activities are permitted.
Absence from a register is often the most important fact of all. A firm that manages other people's money and cannot be found on the register of the country where it operates is acting outside the law, whatever its website says.
Registers also show contact details: the official address, website and phone number. Those details are the key to the next term in this dictionary, because fraudsters often copy a real registered firm and change only the contacts.
Registers are national. A firm authorised in one country may be allowed to serve clients elsewhere only under specific rules, so the useful question is whether it is authorised where you live, and the register of your own country answers that.
Warning list
A warning list is a public list, published by a regulator, of firms and individuals it believes are offering financial services without permission or are running scams. Entries usually include names, websites, phone numbers and email addresses used by the firm.
A warning is a notice to the public, and it is issued quickly on purpose. The regulator does not need to finish an investigation to warn people that a firm is not authorised, because the lack of authorisation is itself the problem.
Warning lists grow constantly. Fraudulent firms change names and domains every few weeks, so a new entry often describes an old operation with a fresh website. The contact details in the entry are therefore as useful as the name.
A name that is missing from a warning list proves nothing. Lists cover the firms a regulator has noticed, and a brand new scheme may run for weeks before anyone reports it. The register check comes first for exactly that reason.
Entries can be corrected. A firm that obtains authorisation, or a person whose name was used by fraudsters without their involvement, can ask the regulator to update or clarify the entry, and regulators publish such clarifications on the same page.
Unauthorised firm and clone firm
An unauthorised firm offers regulated services without the required permission. Some are simply operating illegally, many are outright scams that never intend to invest anything.
A clone firm is more dangerous. It uses the name, registration number and sometimes the address of a real authorised firm, but gives its own website, phone number and email. A victim who checks the register finds the real firm listed and believes the clone.
The defence is to contact the firm only through the details shown on the register, never through those in the message or advert. If the phone number or domain in the offer differs from the register, the offer comes from somebody else.
Clone firms often copy the names of well known banks and brokers, and increasingly the names of real people who work in finance or speak about it publicly. A familiar name on a letterhead or in a messenger profile is exactly what the clone is selling.
Official lists in the United Kingdom
In the UK the Financial Services Register of the Financial Conduct Authority shows every authorised firm, its permitted activities and its official contact details. The FCA Warning List names firms and individuals that are not authorised, including clones of real firms.
The FCA issued 2,240 warnings about unauthorised and likely scam firms in 2024 and 2,329 in 2025. Each warning lists the names, websites, phones and emails the firm used, which makes the contact search as important as the name search.
Companies House shows whether a company exists and who runs it, but a company registration is a different thing from FCA authorisation. A firm registered at Companies House can still be unauthorised to manage anyone's money.
A reader in London, Manchester, Leeds or Glasgow can complete the register and warning list check in minutes on the FCA website.
Blacklist, consumer alert and blocked resource
Blacklist is an informal word used for several different things: a regulator's list of illegal operators, a bank's internal list of blocked recipients, a browser's list of dangerous websites, or a private site that collects accusations. The word alone says nothing about which one is meant.
A consumer alert is a regulator's short notice about a type of scheme or a specific firm. It often describes a pattern, such as fake investment platforms using celebrity images, and it is written for the public in plain language.
A blocked resource is a website that a regulator or court has ordered internet providers to block. Blocking shows that an authority acted against that address, and a new copy of the site at a new address will need a new decision.
When a page cites a blacklist, the reader should ask whose list it is and follow the link to the source. A real regulator's entry can always be found on the regulator's own website.
Screenshots of lists deserve the same caution as screenshots of profits. An image of a list entry proves only that somebody made an image, and the entry itself should be opened on the regulator's site before it is believed.
Complaint sites and anonymous accusations
Complaint sites and forums collect stories from people who say they lost money. Many of those stories are true and useful, especially when they include dates, amounts, the platform's address and the payment details.
The same sites are also used as weapons. Anyone can create a page that calls a company or a person a scammer, repeat it on several sites, and let search engines do the rest. A page with a strong title and no evidence remains an accusation without a source.
Some complaint pages exist to sell a service. A post about a lost deposit ends with thanks to a lawyer or recovery firm, and that thanks is the advertisement. Recovery offers aimed at victims are a known fraud of their own.
The fair way to read such a page is to separate three things: what the author says happened, what documents are shown, and whether any official source confirms it. Only the last two can be checked.
When a person's name meets the word scammer
Names of real people appear next to the word scammer for different reasons. Sometimes a person was convicted or named by a regulator. Sometimes a fraudster used a real name as a fake identity. Sometimes a dispute or a campaign produced a set of hostile pages.
Official lists name firms and, less often, individuals, and every entry comes from an authority that can be contacted. If a name appears only on anonymous pages, the question to ask is who wrote them and what they prove.
Search results make this harder to judge. A search for a name together with the word scammer returns pages that contain both words, whatever they say. A page that explains how to recognise scammers ranks for the same words as a page that accuses someone.
Before repeating any claim about a named person, check it against primary sources: registers, court databases, regulator announcements and reporting by journalists who sign their work. What cannot be found there is a claim, and it should be read as one.
A five minute check before sending money
Find the firm on the register of the country where it says it operates, and compare the website and phone number with the ones on the register.
Search the regulator's warning list for the firm's name and also for its website and phone number, because entries often list contacts under a different name.
Search the firm's name with the words scam and review, and read the pages that give evidence: dates, amounts, addresses. Treat pages without evidence as noise.
Stop if the firm asks for payment in cryptocurrency, for a fee to withdraw, or for remote access to your device. Each of these is enough to end the conversation on its own.
Write down what you found and when. A short note with the register result, the warning list result and the links you checked is useful if you later need to report the firm or explain your decision to a bank.
Where to report in the UK
Report an unauthorised firm or a clone to the FCA through its online reporting form.
Report the loss to Report Fraud at reportfraud.police.uk or on 0300 123 2040, and tell your bank at once if you paid by bank transfer.
Scam texts can be sent on to 7726, and suspicious emails to report@phishing.gov.uk, which feeds the national takedown service.
If fraudsters used your name or your firm's name, tell the FCA as well. A clarification on the FCA website is the most credible answer a reader can find when searching your name.
The register first, because new schemes are on no list yet.
Terms used on scam lists, who publishes them and what they prove
Term
Who publishes it
What it proves
Register
The FCA Financial Services Register
That a firm is authorised for listed activities
Warning List entry
The FCA
That the FCA warns the public about the firm
Unauthorised firm
The FCA Warning List
That the firm lacks required permission
Clone firm
The FCA Warning List
That somebody is copying a real firm's identity
Company registration
Companies House
That a company exists, and nothing about authorisation
Complaint site
Private websites
Only what its evidence shows
Anonymous accusation
Anyone
Nothing without documents and a source
Call the number from the register, never the one in the offer.
Questions and answers
What is the difference between a register and a warning list?
A register lists firms that are authorised for regulated activities. A warning list names firms and people the regulator believes are acting without permission or running scams. The register check comes first, because a new scheme may not be on any warning list yet.
What is a clone firm?
A fraudster that copies the name and registration details of a real authorised firm but gives its own phone, website and email. Contact a firm only through the details shown on the register.
Does a page calling someone a scammer prove anything?
Only the evidence on it does: dates, amounts, documents and confirmation from an official source. An anonymous accusation repeated on several sites remains one claim.
If a firm is not on the warning list, is it safe?
No. Warning lists cover the firms a regulator has noticed. Check the register first, then the warning list, then the contacts.
Which lists should I check in the UK?
The FCA Financial Services Register for authorisation and the FCA Warning List for unauthorised firms and clones, searching by name, website and phone number.
Written by Ilia Zavialov, digital security consultant. All glossary terms