A clone firm is a scam that borrows the identity of a real, reputable business — its name, logo, address, staff names, even its official registration number — to convince you it's legitimate. You think you're dealing with a bank, an investment firm, a recruitment agency, or a well-known supplier, but you're actually talking to a fraudster using that company's name as a mask. Because the underlying company is genuine and often has a good reputation, victims lower their guard. Knowing how these scams work, and the simple checks that unmask them, can save you serious money and stress.
How clone-firm scams usually work
Fraudsters pick a well-regarded company — often one that is licensed or regulated, since that adds instant credibility — and build a fake version of it. This might include a copycat website with a similar-looking domain name, a cloned brochure or price list, fake staff email addresses, and sometimes a spoofed phone number that shows the real company's name on your caller ID. They may even quote the real firm's genuine registration or license number, hoping you won't check it against the actual company's details.
Contact usually starts with an unsolicited email, a social media message, a cold call, or an online ad. The pitch varies: a "too good to be true" investment return, a job offer that requires an upfront fee, a supplier offering goods at an unusually low price, or a request to pay an invoice to a "new" bank account. The common thread is urgency — you're pushed to act, pay, or share information quickly, before you have time to verify anything.
Warning signs that a company may be cloned
- Contact details don't match: the email domain, phone number, or postal address differs slightly from what's listed in the official company/business registry or on the real company's own website.
- Unusual payment requests: you're asked to send money to a personal account, a different country, or a newly created business account instead of the company's known account.
- Pressure to move fast: limited-time offers, threats of losing a deal, or discouragement from "checking with anyone else".
- Unsolicited approach: the first contact came out of nowhere — you didn't request information or apply for anything.
- Website inconsistencies: a domain that's almost right but not exact (extra word, different ending, misspelling), poor grammar, or a site that was registered very recently.
- Refusal to be verified: the person avoids a callback on a number you find independently, or gets evasive when you ask basic questions a real employee would answer easily.
How to verify the real company
- Go direct, not through the link given to you. Close the email or message, and independently search for the company's official website and phone number. Contact them using those details, not the ones the sender provided.
- Check the official registry. Look the company up in your country's official business or company registry to confirm its registration number, registered address, and status match what you were told.
- Compare contact details carefully. Check the email domain letter by letter, look at the phone number's country and area code, and compare the postal address against the one on file with the registry or on the company's own site.
- Ask the real company directly. Call the number listed on the official website or registry and ask whether the person, offer, or invoice you received is genuine. Reputable companies are used to this question and will help.
- Search for independent reviews and reports. Look for recent, independent commentary about the offer or contact method you received — not just testimonials on the suspicious website itself, which can be fabricated.
- Check with your bank before paying. If you're asked to pay an invoice or make an investment, your bank can often flag known scam patterns and may delay a payment to let you verify it.
If you're dealing with an invoice or supplier change
Clone-firm scams are especially common in B2B settings, where a fraudster impersonates an existing supplier and asks you to redirect payment to a "new" account. Before changing any payment details:
- Call your existing contact at the supplier using a number you already have on file, not one from the new email.
- Confirm the change verbally with someone you've dealt with before, ideally by phone, not just by replying to the email.
- Be suspicious of any account-change request that arrives close to a payment deadline.
What to do if you suspect a clone scam
Stop all communication and don't send any money or personal information. Keep records of emails, messages, and phone numbers used. Report the impersonation to the real company so they can warn other customers, and report the scam attempt to your local consumer-protection or fraud-reporting authority. If you've already sent money, contact your bank immediately — the sooner a payment is flagged, the better the chance of stopping or recovering it.
The bottom line
A familiar, trustworthy name is exactly what makes clone-firm scams effective — fraudsters rely on you recognizing the brand and skipping the verification step. Slow down, verify contact details independently, check the official registry, and call the real company using information you found yourself. A few minutes of checking is a small price for avoiding a costly mistake.