FCA Warns of Clone Firm Impersonating Registered Entity as "Mastertrdlmt"

Key Takeaways

• The UK Financial Conduct Authority has issued a warning identifying "mastertrdlmt.com" as a clone firm fraudulently impersonating a genuine FCA-registered entity.
• The alert has been circulated by the Norway Financial Supervisory Authority, highlighting the cross-border nature of clone firm scams and the need for heightened customer due diligence across jurisdictions.

Deep Dive

This warning concerns a "clone firm" scam, in which fraudsters use the name, registration details, or branding of a legitimate FCA-authorized firm to deceive consumers and investors into believing they are dealing with a regulated entity. The entity operating under "mastertrdlmt.com" has no genuine connection to the authorized firm it is impersonating, and any engagement with this website poses significant risk of financial loss to consumers. The fact that this warning has been relayed by the Norway Financial Supervisory Authority, despite originating from the UK's FCA, underscores the cross-border reach of such scams and the importance of international regulatory cooperation in combating financial fraud.

For compliance teams, this type of alert is primarily relevant to customer protection, fraud prevention, and third-party/vendor due diligence functions. Firms should ensure that client-facing teams, fraud monitoring units, and cybersecurity teams are aware of this specific clone entity so that any related transactions, inquiries, or complaints can be flagged and escalated appropriately. Additionally, firms with retail or institutional clients in Norway or the UK should consider whether proactive client communications are warranted to reduce the risk of customers being defrauded by this specific entity.

No formal compliance deadlines are attached to this type of warning, as it is informational and investor-protection focused rather than a binding regulatory requirement. However, firms should treat these alerts as part of ongoing financial crime and fraud intelligence gathering, incorporating them into watchlists, transaction monitoring rules, and website/domain blocklists where applicable. Compliance and fraud teams should also verify that the firm being impersonated has been notified and that appropriate steps are being taken to protect its brand and clients.

From a risk perspective, the primary concerns are reputational risk to the impersonated firm, financial loss to consumers, and potential regulatory scrutiny if a financial institution is found to have facilitated transactions with the clone entity without adequate controls. Firms should update internal fraud databases, inform relevant client-facing and KYC teams, and monitor for any related suspicious activity reports (SARs) or client complaints referencing this domain.

Source: Norway Financial Supervisory Authority