How to Spot an Investment Scam: Warning Signs, Fake Platforms and How to Check a Firm

The SEC’s investor website, Investor.gov, lists red flags that appear in scheme after scheme. Most are about pressure and promises, not about the product:

• Returns that sound too good to be true. Every investment carries some degree of risk, the SEC says, and high returns entail high risks, possibly including a total loss.
• Little or no risk. The SEC and the CFTC call claims such as “risk-free” and “zero risk” hallmarks of a fraud.
• Pressure to send money now. The SEC’s advice is to resist it and take the time to investigate before sending money.
• Contact you did not ask for. A message about an investment from someone you do not know calls for extreme caution.
• Unusual ways to pay. Investor.gov flags requests to pay by credit card, gift card, or by wiring money abroad or to a personal account.
• Unlicensed sellers. Many investment frauds involve unlicensed individuals or unregistered firms.

None of these signs proves fraud on its own. Together, they describe how most schemes are sold.

Many schemes now run through a trading website or app that looks real. The FBI describes victims sent to fake investment platforms or apps, shown fake profits, and offered loans to encourage larger investments.

The balance grows on the screen. When victims try to withdraw, the FBI says, they are charged taxes and fees before the scammers disappear with the funds.

Many begin with a friendship. The CFTC warns that a “wrong number” text or a friendly stranger online may be a criminal organization using a fake name and photo, and that building the relationship can take several weeks before the conversation turns to trading.

The CFTC calls these relationship confidence frauds; the criminals call them pig butchering. A small early withdrawal may be allowed at first. Then, in the CFTC’s words, “try to take out large sums, or close the account, and suddenly there are problems.”

A scheme is more convincing when it borrows a real firm’s identity. In December 2024 the FBI and the SEC warned of a significant uptick in impersonations of investment professionals and firms.

Impersonators may use a genuine firm’s name, logo and registration number, call from a spoofed number, and even encourage you to research the firm they are pretending to be. Some use cloned voices, altered images and deepfake videos.

Regulators are impersonated too. The DFSA, which regulates the DIFC in Dubai, has warned of fake websites that clone its Public Register and list firms it has not authorized. It says any address claiming to be its register on a domain other than “dfsa.ae” is not legitimate.

The defense is to reach the firm, and the regulator, through contact details you have found yourself. The SEC suggests the phone number or website in the firm’s own Client Relationship Summary (Form CRS), found through Investor.gov, and never the contact details the caller provides.

People who have lost money are often targeted again. The CFTC says it is not uncommon for victims of trading frauds to be approached by fraud-recovery scams, sometimes run by the same gang.

The caller may claim to be a law enforcement officer or a lawyer. The money, they say, has been found, or can be, once a tax, a fee or a retainer is paid; the CFTC also names a so-called “tax or insurance bond.”

Real regulators do not work this way. The US government will never email, call, or text you demanding money, the CFTC says, and the DFSA says it does not ask investors for advance fees.

Complaints cost nothing. The SEC notes that most regulatory agencies have free and simple ways to file one on their websites.

Registration is not a promise of honesty. The CFTC says a clean record won’t protect you from fraud, but that most scams involve unregistered entities, people and products. That makes the register the first check.

• Brokers and investment advisers: search the name on Investor.gov. It leads to the SEC’s adviser disclosure site or to FINRA’s BrokerCheck, which show registration and any disciplinary history.
• Futures, options and forex firms: search BASIC, the National Futures Association’s free database. The NFA registers these firms on behalf of the CFTC.
• A firm that is not found: the CFTC’s advice is to ask them why, and to check with the other regulators for the product offered.

In the UAE, the register to check depends on where the firm operates and what it offers. Each regulator publishes its own:

• Federal level: the Capital Market Authority (CMA) lists licensed companies on its website, with a separate list of warnings about entities it has not licensed.
• The DIFC: the Dubai Financial Services Authority (DFSA) keeps a Public Register of the firms and individuals it has licensed, at dfsa.ae.
• Abu Dhabi Global Market (ADGM): the Financial Services Regulatory Authority (FSRA) keeps a public register to help investors verify a firm’s regulatory status.
• Virtual assets in Dubai: the Virtual Assets Regulatory Authority (VARA) lists the providers it has licensed, with the services each may offer.

Read the activity, not just the name. The CMA’s own list explains that one category of license may be limited to introducing or advisory services, and does not authorize trading or executing clients’ orders.

Open every register from the regulator’s own website, typed in yourself, not from a link someone sends you. The DFSA recommends exactly that.

Stop sending money, and do not pay anyone to get money back. The DFSA’s advice on a scam is not to respond, and under no circumstances to send money to anyone connected to it.

Keep the messages, addresses and receipts, and report it: in the US to the SEC, or to the CFTC and the FBI’s Internet Crime Complaint Center at ic3.gov; in the DIFC through the DFSA’s complaints page.

A legitimate firm expects to be checked. It has a license you can find on the regulator’s own register, contact details that match it, and no reason to rush you.

A course can explain how markets and risk work. It cannot tell you that any market, platform or trade is safe.