FCA Warning List October 2026: Unauthorized Brokers and Clone Firms to Beware Of

In October 2026, new additions to the Warning List piled up. In the first two days of the month alone, the FCA issued warnings for 155 new websites.

The Financial Conduct Authority (FCA), the UK's financial regulator, continuously updates its FCA Warning List. As of October 14, 2026, this article's data shows 179 new entries and 8 updated entries.

This figure is significantly higher than in September, but it doesn't mean that scammers have increased fivefold in a single month. The FCA typically adds names in batches, so the numbers fluctuate with inspection cycles. More interesting than the quantity is the nature of these entries. This article will therefore focus on trends and conclude with a real case involving clients of an authorized financial advisor.

Companies Added and Updated in October 2026

The list of new entries is too extensive to include entirely in one article. The table below features 37 selected entries from the announcements on October 1 and 2, combined with the latest additions from October 6 to 14.

The selection criteria include high-risk indicators such as FCA-identified Clone Firms, names impersonating well-known brands, subdomains hiding brand names, and names claiming AI or crypto technology. The table is not a risk ranking and does not imply that other entries are safer. For the complete list, please refer to the FCA Warning List.

Newly Added: New Companies Added to the Warning List

Updated: Companies with Updated Information

What is a Clone Firm and Why is it Dangerous?

A Clone Firm is a website or individual that impersonates a genuinely authorized company by using its name, address, registration number, or logo. The goal is to make investors believe they are dealing with a regulated firm.

When investors search for the company's name in the register, they find matching legitimate information, leading them to mistakenly believe it's safe, even though the contact channels belong to a different entity. Scammers often only slightly alter phone numbers, emails, or domain names.

Money transferred through these channels is not associated with the genuine company. Therefore, investors do not receive protection from the Financial Ombudsman Service or the Financial Services Compensation Scheme.

This month, the FCA identified 5 new Clone Firms: Quote Me Go, IPO Horizon, VFM Leasing, Coinhub.pro, and quorumcapitalltd.com. Cadwyn Capital was an updated entry. The way to protect yourself is to compare all contact channels with the information in the FCA Financial Services Register before contacting or transferring money.

Scam Trends Observed in October 2026

1. The Same Address Used by Dozens of Websites

The most prominent data point this month is addresses. Among the 179 new entries, 70 listed their address as 11 Grace Avenue, Great Neck, New York, and another 50 listed 1 Canada Square, Canary Wharf, London. These two addresses combined account for approximately 67% of the new entries, with another 32 entries having no address at all.

Compared to September, out of 35 new entries, only 2 listed a Canary Wharf address, and none listed a Great Neck address.

These addresses are information appearing in FCA announcements and do not confirm that the buildings themselves belong to scammers. However, dozens of unrelated investment firms should not share the same address. Investors can therefore use this as a warning sign that the address on a website might simply be a placeholder.

2. Websites Only, No Company Entity

Out of 179 new entries, 154 were listed solely by their domain name, with no company name or registration number. Concurrently, there were 15 .live domains.

Scammers can create new websites quickly and cheaply. If banned, they simply open a new one, making it difficult for victims to trace them. Seeing a website that doesn't clearly state the service provider's company is therefore sufficient reason to pause before transferring money.

3. Famous Brand Names Hidden in Subdomains

There are 18 entries that use subdomains or nested domains, such as ibkr.vectorexpress.online and consigreal.com.liquidcentralassets.com. The familiar name appears at the front, while the actual domain that users should look at is at the back.

Victims who only see the front part of the link often assume it's a website of a known broker. The way to protect yourself is to look at the main domain before the first slash (/), not the name at the beginning of the link.

4. AI and Crypto Names Still Used as Lures

There are 11 names that use terms like AI, algo, or bot, such as botprofitai.com, apextradeai.com, and neurosigmaaitrading.io. These terms imply an automated system that generates profits, which cannot be proven from the website alone.

No one can guarantee returns from trading, whether AI is used or not. Names emphasizing automation should therefore make you more cautious, not less.

5. Clone Firms Decreased Proportionally, But Not Gone

This month, Clone Firms accounted for 6 out of 187 entries, or 3.2%, whereas in September they were 47 out of 84 entries, or about 56%, and in July, 71 out of 404 entries, or about 18%.

The decrease in numbers is due to the large number of website-only entries, which diluted the proportion. It does not mean that impersonations of genuine companies have decreased. When looking only at new entries, there are still 5 Clone Firms.

Real Case: Nexus IFA Financial Advisor Pleads Guilty After 4 Clients Lose £2 Million

This case differs from the Warning List entries because the companies involved were genuinely FCA-authorized firms. According to the FCA's statement on October 13, 2026, Kerry Nelson, a director of Nexus Independent Financial Advisers Limited and Nexus Investment Managers Limited, and Jacqueline Stephens, operations manager for both companies, pleaded guilty to all charges brought by the FCA at Portsmouth Crown Court.

What Happened?

Both admitted to defrauding clients between January 2019 and January 2023 and using forged documents to facilitate their actions. Four clients collectively lost £2 million. Additionally, Nelson pleaded guilty to money laundering after funds were withdrawn from the companies for personal expenses.

Why Didn't Clients Notice?

Both companies were authorized by the FCA. Nexus IFA provided advice on investments, mortgages, and pensions, while Nexus IM offered discretionary fund management services. Clients therefore had reason to trust them, as the company names were genuinely listed in the register.

Retrospective Warning Signs

The FCA stated that neither company was authorized to hold or control client money. If client funds flowed into accounts controlled by the companies themselves, that was a breach of their authorized permissions. The FCA issued an order restricting the activities of both companies on January 25, 2023, and the High Court ordered them into administration the following day.

Lessons for Investors

Being listed in the register does not prove that everything is safe. Investors should also check what activities a company is authorized to perform and where money should be transferred. If asked to transfer money into an account that is not clearly designated as belonging to a custodian or fund, stop and verify with the FCA first. Both will be sentenced at Portsmouth Crown Court on December 10, 2026, and the FCA will pursue confiscation proceedings against Kerry Nelson.

Warning Signs of Unauthorized Investment Websites and Clone Firms

• Official name is only a domain name, with no verifiable company name or registration number.
• Website address matches a building used by numerous other investment websites.
• Nested domains that place a known brand name at the front.
• Names or advertisements emphasizing AI, bots, or automated profit-generating systems.
• Names similar to genuinely authorized companies, but with slight spelling or suffix differences.
• Phone number or email does not match the official information of the genuine company.
• Asked to transfer money into the advisor's own company account, not a custodian's account.
• Urges you to transfer more funds or invite acquaintances to invest.
• Evades answers when asked about licenses and what the company is authorized to do.
• Uses a new domain every time it is shut down or reported.

How to Check Financial Companies Before Investing

Don't solely trust advertisements, websites, or the words of an advisor. Always verify with neutral sources.

• Search for the company name and domain in the FCA Warning List.
• Check the company in the FCA Financial Services Register and see what activities it is authorized to perform.
• Compare phone numbers, emails, domains, and addresses with official information.
• Look at the main domain of the link, not just the name at the front.
• Search for the address listed on the website to see if other companies use the same address.
• Confirm with the service provider whose account the money will go into, and whether that account is separate from the company's own funds.
• Find additional information on the TrustFinance broker search page to view licenses and reviews.
• If you suspect you have already transferred money, contact your bank immediately.

Supplement Your Checks with TrustFinance

TrustFinance is a supplementary resource that investors can use in conjunction with official information from regulatory bodies.

TrustFinance compiles license statuses, company information, and user reviews in one place. Search for company or platform names on the TrustFinance broker search page. The TrustScore system summarizes overall trustworthiness, while the License Monitoring Program (LMP) tracks license statuses and changes.

No score or platform should be used as sole evidence. Always verify directly with regulatory authorities.

Conclusion

The FCA Warning List for October 2026 features a large number of new entries, most of which are website-only entities using common addresses in clusters. Some entries hide well-known brand names in subdomains. Clone Firms are still present, although their proportion has decreased.

The Nexus IFA case serves as another reminder that even authorized companies must be checked for what they are permitted to do and where client money is held.

Before entering information or transferring money, always verify licenses and contact channels with official sources. If a name is found on the Warning List, cease contact and stop transferring money immediately.

Check the latest list on the FCA Warning List.