The Certification That Certifies Nothing
On the website of a broker we will call Trade Pacific Markets — one of hundreds of near-identical operations that surfaced and vanished between 2023 and 2025 — the regulatory disclosure read as follows: “Trade Pacific Markets is a registered International Business Company, registration number 2024-00341, regulated by the Financial Services Authority of St. Lucia.”
This disclosure had the structure of a regulatory statement. It named a registration number. It named a regulatory body. It was printed in the site’s footer alongside padlock icons and trust badges. To a retail investor running a quick check on whether the broker was licensed, it looked like a credible answer.
It was not. The “Financial Services Authority of St. Lucia” is a real body, but its IBC licensing framework requires no capital adequacy, no client money segregation, no compensation scheme, and no meaningful ongoing supervision. The registration cost roughly $1,500 and involved no assessment of the firm’s principals, no audit of its financial infrastructure, and no verification of whether it was fit to hold client funds. The registration number confirmed that someone had filed an application and paid a fee. It confirmed nothing else.
Trade Pacific Markets accepted deposits for approximately fourteen months before ceasing all communications with clients. An estimated $4.2 million in client funds was lost across several hundred accounts. No compensation scheme applied. No regulator was positioned to pursue enforcement or recovery. The operators have not been identified.
This pattern — fraudulent broker registers offshore, presents registration as regulation, receives funds, disappears — is not an edge case. It is among the most systematic methods by which retail investors are defrauded globally, and it exploits a fundamental confusion in public understanding about what financial regulation actually means.
Registration and Authorisation Are Not the Same Thing
The critical distinction that fraudulent offshore brokers exploit is between corporate registration and financial services authorisation.
Corporate registration — including IBC registration — records that a legal entity exists. It establishes the company’s name, registered address, and directors or shareholders in a corporate registry. This is equivalent to the Companies House registration that every UK business must have, or the state incorporation filings that US companies complete. Corporate registration is a precondition for doing business. It is not permission to do anything in particular.
Financial services authorisation is a separate process, conducted by a sector-specific regulator, that grants permission to provide defined financial services and imposes ongoing obligations as a condition of holding that permission. To receive FCA authorisation, for example, a broker must demonstrate adequate capital resources, show that its principals are fit and proper persons with no relevant criminal history, implement specific client money rules that legally require client funds to be held separately from the firm’s own capital, establish systems for transaction reporting and complaints handling, and then submit to ongoing supervision including periodic audits and real-time transaction monitoring.
The distinction matters because it determines what happens to your money if something goes wrong. An FCA-authorised broker that becomes insolvent cannot simply take client funds with it — those funds are legally held in trust, separate from the firm’s balance sheet, and are returned to clients through a defined process. Additionally, the Financial Services Compensation Scheme provides up to £85,000 per client in the event that a firm fails and cannot return funds from its own resources.
An IBC-registered entity in St. Lucia, Vanuatu, or the Marshall Islands carries none of these obligations. Client funds may be — and routinely are — held in the same accounts as operational funds. There is no segregation requirement. There is no compensation scheme. If the firm fails, disappears, or simply transfers your deposits offshore and closes, there is no mechanism for recovery.
The Jurisdictions Most Commonly Misused
Fraud investigators and regulators have identified a consistent set of offshore jurisdictions that appear repeatedly in fraudulent broker registrations. Understanding these jurisdictions and what they do and do not require is essential context for evaluating any broker’s regulatory claims.
St. Lucia operates a Securities Act that permits licences to be issued to financial services firms. However, the FSRA’s licensing framework has minimal capital requirements, and enforcement resources are substantially limited compared to top-tier regulators. St. Lucia has appeared on international watchlists for inadequate AML supervision. Brokers citing St. Lucia FSRA regulation should be subject to independent verification through additional top-tier registers before any funds are deposited.
Vanuatu has been the subject of formal advisories from multiple top-tier regulators including the FCA and ASIC specifically because its Vanuatu Financial Services Commission licences have been misused extensively by fraudulent operators. The VFSC has made efforts to tighten its framework, but the jurisdiction continues to appear in a disproportionate share of fraud cases. A broker regulated exclusively by the VFSC should be treated with significant caution.
The Marshall Islands does not operate a financial services regulator in the conventional sense. IBCs registered in the Marshall Islands have no financial licence. Brokers claiming Marshall Islands “regulation” are presenting a corporate registration as a financial licence — a straightforward misrepresentation.
Comoros (specifically the Autonomous Island of Anjouan) became notorious in the 2010s and early 2020s for operating a Mwali International Services Authority that issued financial licences for a fee with no meaningful requirements. Multiple regulators have issued explicit warnings stating that Comoros/Anjouan licences provide no investor protection.
Seychelles operates an FSA that has improved its requirements over time, but the jurisdiction remains on caution lists from several top-tier regulators and continues to appear in fraud cases more frequently than its legitimate financial sector would suggest. Some legitimate brokers hold Seychelles licences in addition to top-tier authorisations, but a Seychelles-only broker warrants careful independent verification.
The Scale of the Impersonation Problem
The offshore registration problem intersects directly with another fraud pattern: the impersonation of genuine top-tier regulated brokers. The Financial Conduct Authority received approximately 4,800 reports of clone firm impersonations in the first half of 2025 — a figure that reflects both the scale of fraudulent activity and growing public awareness of the phenomenon.
The mechanics are straightforward. A fraudulent operator registers an IBC offshore and creates a website that copies the name, branding, registration number, and regulatory disclosures of a legitimate FCA-authorised broker. When a prospective victim checks the FCA register and finds a valid registration number, they believe they have confirmed the broker’s legitimacy. What they have actually confirmed is that the real firm — whose identity is being stolen — holds FCA authorisation. The fake website impersonating that firm does not.
This fraud exploits the gap between knowing to check regulation and knowing how to check it correctly. Verification on the regulator’s own register is the essential step, but the verification only protects the investor if they confirm that the registered details — crucially, the website URL — match exactly what they have been presented with. Clone firms routinely use domain names that differ from the legitimate firm’s by a single character: one letter substitution, a hyphen added or removed, a country code suffix appended.
The FCA’s ScamSmart initiative (fca.org.uk/scamsmart) maintains a database of warning notices against specific named firms and provides guidance for checking the register correctly. Checking this database is a standard due diligence step that takes minutes and provides materially better protection than checking the main register alone.
How to Verify a Broker Correctly
The verification process that actually protects investors involves a specific sequence of steps, each of which closes one of the gaps that fraudulent operators exploit.
Start at the regulator’s official website. For FCA regulation, the address is register.fca.org.uk. For CySEC, cysec.gov.cy. For ASIC, connectonline.asic.gov.au. Do not navigate to these sites by clicking links — type the address directly into your browser. This eliminates the risk of a phishing page that mimics the regulator’s interface.
Search for the broker by name and confirm exact registration details. The register entry will show the registered firm name, registration number, regulatory status (authorised, cancelled, withdrawn), and the scope of permissions the firm holds. A firm that claims to offer CFD trading should show CFD permissions on its register entry.
Verify the website URL character by character. The register entry will show the firm’s official website. Compare this to the URL in your browser’s address bar when viewing the broker’s site. A single character difference is sufficient to indicate you are dealing with a clone or impersonator.
Check the FCA warning list. Even if a firm does not appear as authorised, it may have been specifically named in a warning notice. The FCA publishes warnings against firms operating without authorisation and clone firms. A broker named on this list has been specifically identified as a concern by the regulator.
Apply additional scrutiny to offshore-only claims. If a broker claims regulation only from St. Lucia, Vanuatu, Seychelles, Comoros, or the Marshall Islands — and has no additional authorisation from the FCA, CySEC, or ASIC — treat this as a significant flag. The absence of top-tier regulation is not decisive on its own, but in the context of high-pressure sales tactics, difficulty making withdrawals, or reluctance to provide company information, it becomes a serious warning sign.
The Fortrade Standard
Understanding what genuine top-tier regulation looks like helps clarify why its absence matters. Fortrade is authorised by the FCA in the UK under registration number 609970, by CySEC in Cyprus under licence number 385/20, and by ASIC in Australia under AFSL number 493520. Each of these licences is verifiable in seconds on the respective regulator’s public register.
The obligations attached to those licences — capital adequacy, client money segregation, FSCS compensation scheme membership in the UK, MiFID II compliance under CySEC — are not marketing claims. They are legal requirements enforced by regulators with genuine investigative and enforcement powers. A broker operating under these frameworks cannot simply take client funds and disappear in the way that IBC-registered entities in minimal-oversight jurisdictions routinely do.
This is the practical meaning of regulation: not a number in a footer, but a set of legally enforceable obligations backed by a regulator with the capacity and mandate to act when those obligations are breached.
The Underlying Vulnerability
The reason offshore registration fraud persists at scale is that financial regulation is genuinely complex, and the plausible presentation of fake compliance is relatively cheap. Registering an IBC, building a professional-looking website, and printing a registration number in the footer costs a few thousand dollars. Distinguishing this from genuine authorisation requires specific knowledge that most retail investors do not have and that no one has proactively ensured they acquire.
Awareness of this specific deception — that registration and authorisation are different things, and that different jurisdictions offer vastly different levels of protection — is one of the most practically useful pieces of financial literacy available to retail investors. The broker who cannot point to FCA, CySEC, ASIC, or equivalent top-tier authorisation on a verifiable register is not regulated in any meaningful sense, regardless of how many registration numbers and certification badges their website displays.
The question to ask of any broker is not “are you registered?” but “are you authorised, by whom, and can I verify that directly on their register right now?” The answer to those questions will tell you everything that matters.
This article is for educational and informational purposes only and does not constitute financial or legal advice. Always verify broker authorisation directly through official regulatory registers before depositing funds. If you suspect a broker is misrepresenting its regulatory status, report it to the relevant financial authority.
Frequently Asked Questions
What is an IBC registration and why does it not protect investors?
An International Business Company (IBC) registration is a corporate structure available in offshore financial centres such as the British Virgin Islands, St. Lucia, Seychelles, Vanuatu, and the Marshall Islands. It is the equivalent of incorporating a company — it records that the entity legally exists. It carries no requirement for the company to hold client funds responsibly, maintain capital reserves, implement client money protection, submit to audits, or provide any consumer recourse in the event of disputes. An IBC registration tells you that a company filed some paperwork and paid a fee. It tells you nothing about whether that company is permitted to provide financial services, holds client funds separately from its own capital, or is subject to any meaningful oversight. A fraudulent broker presenting an IBC registration number as evidence of regulatory compliance is committing a straightforward misrepresentation.
Which jurisdictions offer the weakest investor protection for brokers?
The jurisdictions most commonly used by fraudulent brokers to claim a veneer of legitimacy while avoiding substantive oversight include: St. Lucia (Financial Services Regulatory Authority issues licences with minimal capital requirements and limited enforcement capacity); Vanuatu (Vanuatu Financial Services Commission has licences that carry virtually no investor protection provisions); Marshall Islands (no financial services regulator — entities incorporated here have no financial licence at all); Comoros (Union of Comoros licences are widely regarded by fraud investigators as providing zero meaningful oversight); and the Seychelles FSA (which has improved but historically issued licences with weak enforcement). For comparison, the FCA in the UK requires brokers to hold a minimum of €730,000 in capital, maintain full segregation of client funds, participate in a £85,000-per-client compensation scheme, and submit to real-time transaction reporting. The difference between these standards and an IBC registration in Vanuatu is the difference between regulation and a filing receipt.
How did the FCA receive nearly 5,000 impersonation reports in H1 2025?
The FCA's H1 2025 figures reflect a sustained campaign by fraudulent operators to misuse the identities, registration numbers, and branding of legitimate FCA-authorised firms — a practice known as 'clone firm' fraud. Fraudsters register an IBC offshore, create a website that copies a real FCA-regulated broker's branding and registration number, then present themselves as that broker to prospective customers. When victims check the FCA register and find the genuine registration number, they believe they have verified the firm. They have verified the real firm's existence — not the fake website using its identity. The volume of reports indicates both the scale of the problem and growing awareness among targeted individuals. The actual number of fraud operations behind those 5,000 reports may be smaller, as single operations often generate hundreds of individual reports before being identified and warned against.
How do I verify a broker's genuine regulatory status?
Always begin verification at the official regulator's website — never at the broker's own website or through links in advertising. The key registers are: FCA (UK) at register.fca.org.uk; CySEC (Cyprus/EU) at cysec.gov.cy; ASIC (Australia) at connectonline.asic.gov.au; and the NFA (US) at nfa.futures.org/basicnet. On the regulator's register, search for the broker by name and confirm that the registered website URL matches exactly — character by character — the site you are visiting. Confirm the registered address and phone number also match. Then check whether the broker appears on any regulator warning list: the FCA maintains a public list of firms and individuals confirmed to be operating without authorisation. A broker's presence on a warning list is definitive. A broker's absence from a top-tier regulatory register — or presence only on an IBC register or in a minimal-oversight jurisdiction — should be treated as a significant red flag regardless of any other claims they make.
What should I do if a broker I am using turns out to be operating from an unregulated jurisdiction?
First, do not deposit any additional funds. If you have an existing balance you are trying to withdraw, document everything now — screenshots of your account balance, all communications, all transaction records, and any promotional materials you received. Then attempt a standard withdrawal and document any obstacles or fee demands that arise. If your deposits were made by credit card or bank transfer, contact your card provider or bank immediately to report potential fraud and inquire about chargeback options — time limits apply and acting quickly significantly improves your chances. Report the broker to the financial regulator in your jurisdiction, your national cybercrime authority, and, if the broker is misusing a real firm's FCA registration number, to the FCA directly via their ScamSmart reporting page. Be aware that 'recovery firms' offering to retrieve your funds for an upfront fee are themselves very commonly scams — exercise extreme caution.
