Watch out for clone sites copying a real license number

[crypto_clayton]

Wanted to warn people about something I almost got burned by last week.

Found a site that looked clean. Footer had a license number, audit logos, https, the whole thing. Looked legit at a glance. But something felt off so I actually copied the license number and looked it up on the regulator's own site. Turns out that license belongs to a totally different company. The clone just lifted a real number and slapped it in their footer.

So the footer license meant nothing. They counted on nobody checking.

Quick way I verify now: take the license number, go to the regulator's site directly (type the URL yourself, don't click their link), and confirm the number maps to that exact operator name and domain. If the name doesn't match, walk. Honestly never thought I'd have to do that but here we are.

Anyone else run into these copycats?

[skeptic_pete]

This is the scam I keep banging on about. A license logo in the footer is just an image, anybody can paste it.

The tells I look for: a regulator link that goes to a dead page or a screenshot instead of the live registry, audit "seals" that aren't clickable, and a domain that's a near miss of a known brand with an extra letter or a weird TLD. And remember if it's an offshore Curacao or MGA site there's basically no one to call when your money vanishes, so cloning those is low effort and high reward for the crooks. Verify the number against the registry like Clayton said, every time.

[payout_priya]

Adding one more check to the list. Cross reference the company NAME on the license, not just the number. The legit registry entry shows the licensed entity and approved domains. I keep a column in my tracking sheet for license entity + approved URL and I match it before I ever deposit.

Clones usually slip on the domain. The number checks out but the domain it's running on isn't one of the approved ones. Two minutes of work that saves you a chargeback fight you'll probably lose.

[brad_runs_the_board]

Pinning the gist of this. Steps for anyone skimming: type the regulator URL yourself, search the license NUMBER, confirm the operator name AND domain both match. If any piece is off, it's not the licensed site.

And a clone copying a US state license number is an extra red flag, because legit state regulated apps don't operate off some random offshore looking domain. Thanks for posting Clayton, this is the kind of thing that costs people real money.

[DenverDana]

Yep ran into one of these a few months back. The giveaway for me was support. Sent a basic question and got a reply that didn't even match what I asked, clearly a copy paste bot. Real operators aren't perfect but you can usually tell a human eventually reads it.

That plus an unverifiable license and I noped out. Good shout doing the registry lookup, I'll start checking the domain match too.