Find out about some of the common ways scammers may contact you claiming to be from the Financial Conduct Authority (FCA).
If you get an email, letter or phone call from someone claiming to work for the FCA, it’s important you consider the possibility that it could be scam.
Find out how to protect yourself from fake FCA communications or learn how to report a scam to them.
The FCA has received reports of a fake letter from an FCA director. The letter claims to relate to a review by the FCA of the ‘Star Like project’ (September 2022).
Signs that a letter may be fake include spelling mistakes and poor grammar. See tips for spotting fake communications.
Fake FCA emails
The FCA send emails from addresses ending in:
They have measures in place to prevent fraudsters spoofing our email addresses. But fraudsters often use similar email addresses to make emails appear genuine.
The FCA has received reports of fake emails from several domains, including:
- firstname.lastname@example.org, email@example.com, firstname.lastname@example.org. These email addresses do not match any FCA employees, but are actually being sent by email@example.com or firstname.lastname@example.org. The top 3 subject lines in these fake emails are, “Project Loan”, “Project Seking”, and “Project Seking Loan” (July 2022)
- @secure-fca.org.uk: potential scam email to firms using this email address (July 2022)
- @opbas.net and @opbas.uk
- email@example.com, firstname.lastname@example.org, email@example.com, firstname.lastname@example.org (this email asks to complete a survey on our conduct rules and coronavirus)
- email@example.com (a fake email sent to firms regarding a due diligence request. This email is a clone address. Don’t open the link to the questionnaire in the email. November 2020)
- fake emails claiming to be from RegData (data collection platform) with the domains rdc-fca.com and rdc-fca.org.uk (February 2021)
- @fca.com – fake email about firm details attestations submissions. Emails are being spoofed so falsely appear to come from this address (January 2022)
You should always delete suspicious emails without opening them.
Fake versions of FCA websites
Fraudsters may create copies of the FCA websites and change the information. They may change FCA warnings pages so it looks like scam firms are authorised by them.
These cloned websites can be very convincing, with links and contact information copied from the FCA website.
You can make sure the website is genuine by checking the website address that appears in the address bar at the top of the webpage. It should always begin with: www.fca.org.uk or register.fca.org.uk/s/ for the FS Register.
Be aware that some fake versions of our website will make small changes in the domain name to make them look similar (eg ‘register-fca.org.uk’ instead of the real website ‘register.fca.org.uk’).
FCA online systems for firms have web addresses that start with:
FCA social media accounts
- Facebook (ScamSmart) www.facebook.com/FCAScamSmart
- LinkedIn www.linkedin.com/company/financial-conduct-authority, www.linkedin.com/showcase/transforming-culture-
- Twitter twitter.com/TheFCA, twitter.com/FCAInsight, twitter.com/FCACymru
- YouTube www.youtube.com/user/TheFCAtv
Scammers can make FCA switchboard numbers – 020 7066 1000, 0300 500 8082 and 0800 111 6768 – appear in your caller ID.
Remember, do not give out any personal information following an incoming call and do not call these people back using the contact details they have provided.
The FCA do sometimes call consumers in connection with investigations. If this happens and you want to check you are speaking to a genuine FCA employee, please contact the consumer helpline.
Read Ofcom’s guide on how to avoid ‘caller ID spoofing’.
If you’re concerned about a communication you’ve received, contact the FCA consumer helpline via the webform or call 0800 111 6768.