Familiar branding can hide a different destination.

Understand what is being copied

The FCA describes clone firms as impersonators of genuine authorized firms. Names, addresses, reference numbers and website designs can be copied. A convincing certificate or a polished page therefore needs an independent identity check, rather than a visual judgment.

Examine the whole contact path

Write down the exact domain, the email address, the telephone number and how the conversation began. Look at the complete address rather than the display name or a familiar logo. A small spelling change, a different email domain or an unexpected redirect is a reason to pause and investigate.

Keep your notes private. Do not publish a suspected impersonation as a proven finding simply because two details differ.

Re-establish contact independently

Leave the message thread and open the authority’s website directly. Compare the contact details recorded there. The FCA warns that impersonators may say official contact details are outdated; a claim like that should be resolved with the authority or the genuine firm through an independently obtained channel.

Retain evidence and use official reporting

Keep the messages, addresses and relevant dates in case a report is needed. Follow the reporting instructions of the appropriate authority in your location. Avoid sending additional personal documents through a disputed channel while you are checking its identity. This page describes a pattern, not an allegation against any company.