Clone Firms and Look-Alike Domains

A clone is a fake that borrows the identity of something real. In finance, a fraudster may copy the name, logo or website of a registered firm, or even of a regulator, so that a crypto offer looks official. The copy can be convincing at a glance, because the colours, the wording and the layout are lifted from the original. A look-alike domain adds to the effect. It is a web address that differs from the real one by a small change that is easy to miss, such as a different ending or a swapped word. The reader sees a familiar name and assumes the registration is real. This article explains how the trick works and how to reach the genuine organization instead.

Regulators in Canada describe several versions of the trick. According to the Canadian Investment Regulatory Organization (CIRO), an alert listed in 2026 concerned a fraudulent crypto trading site that used a look-alike domain. Other CIRO alerts describe entities that copy the lists of registered firms, or that claim ties to registered firms without having any. According to the Financial and Consumer Affairs Authority of Saskatchewan, its 2026 news releases include impersonation scams that borrow the names of real firms and organizations. The pattern is the same each time. The fraudster takes a trusted name, attaches it to a new site or message, and counts on the reader not to check the details before acting on the message.

Consider a made-up case. Amira receives a message saying a trading platform has been approved by a regulator and is open to new members. The message includes a link to a page that displays a logo and a registration statement. The page looks like the regulator's own site. Instead of clicking further, Amira closes the message, types the regulator's name into a search engine herself, and opens the official site from the results. She finds the register of firms and searches for the platform. It is not listed. She also notices that the address in the original link differed from the official one by a single word. The offer ends there for her, and no payment was made, no personal details were shared and no app was installed.

Impersonation does not stop at firms. The Nova Scotia Securities Commission warns about people impersonating its own staff, so a call or message from someone who says they work for a regulator is not proof of anything. A related trap is the copy of a public office. A look-alike website describes itself as independent and is not the Manitoba government's consumer protection office, yet its name could suggest otherwise. The cause of these mistakes is simple. People trust a name more than an address, and fraudsters build pages that show the name prominently while the address in the browser bar gets little attention.

A few checks can be done alone. Did the contact arrive unasked, and does it include a link? If so, leave the link alone and find the organization yourself through a search or a number printed on an official document. Does the web address match the official one letter by letter? Is the firm named on the register of the relevant provincial regulator or of CIRO, found by your own search and not through the message? Does the person claiming to be staff of a regulator offer a way to confirm that through the regulator's published contact details? A mismatch on any of these is reason to stop, wait and ask the real organization directly, using details you found yourself.

To read the warnings in full, see the CIRO investor alert on fake registration claims, the Saskatchewan authority's news releases and the Nova Scotia Securities Commission's investor alert database. Each is dated, and new alerts appear over time, so check the date on any item before relying on it. This page is general education about copied identities. It cannot confirm that a given firm is registered, judge a particular website or replace the guidance of a securities regulator in your province or territory. When a name looks familiar but the details do not add up, the official register is the place to look, and a pause before any reply costs nothing.

• Fraudsters copy the names, logos and websites of real firms and regulators, so a familiar name proves nothing
• Reach the real organization through a search or a published number, not through the link you were sent
• Compare the web address letter by letter, and look the firm up on the register yourself