Cloned forex brokers: the name is real, the website is not

Among the methods used to take money from traders in Vietnam, the cloned broker, a website copying the name and the interface of a trusted broker, is the most dangerous one in use right now.

The reason is that the victim already “did their own research”. They saw a large name and a serious licence. But what they looked up was the real broker, and where they deposited was a fake website built by the people running the fraud.

Which websites have the police named?

In public warnings about forex investment fraud, Vietnamese police have named specific cloned or fake platforms, including:

• xtbexnesss.com, welding together and misspelling the names of two real brokers, XTB and Exness (note the three letters “s”), to borrow their credibility.
• Oandagroup.com, copying the name of the broker OANDA, whose real website is oanda.com.
• Fake platforms such as Fnory.com, advertised as a “legal international financial platform with high returns”, which operate until enough money has been collected and then block withdrawals.

We have recorded the same pattern with Tickmill: a website calling itself “TickMill Pro Trade” had nothing to do with the real Tickmill (FCA 717270). The detail is in our Tickmill account opening guide and our Tickmill review.

The trick is common enough that the FCA in the United Kingdom has to list clones directly on its own Register.

When we looked up FXCM, the result returned the real legal entity, the specific company that signs the contract with you, as Stratos Markets Limited, number 217689, alongside five cloned websites marked “Unauthorised”, including “FXCM Germany”, “FXC Markets” and “FXCM International Finance Group”:

The familiar script, in four steps

1. Approach. An advertisement on Facebook, TikTok or Telegram, or an “expert” who messages you first, promising 10 to 15% a day with someone to guide you through it.
2. Build trust. You are allowed to win, and to withdraw, a few small amounts at the start. That is the bait.
3. Concentrate the money. You are persuaded to deposit heavily for a “VIP position”, sometimes encouraged to borrow in order to do it.
4. Close the valve. When you try to withdraw, the system returns an error and asks for an “insurance fee”, a “system fee” or a “tax”. No amount paid releases the money, and eventually the platform disappears.

A two-minute check before you deposit

• Check the official domain. Go to the website recorded on the regulator’s licence, not a link from a message or an advertisement. The real Exness is exness.com, the real OANDA is oanda.com, the real XTB is xtb.com.
• Trace the licence to its source. Every licence has a public reference number, for example at the FCA (register.fca.org.uk), CySEC or ASIC. Compare the domain recorded in the licence file as well, because cloned platforms usually borrow a real broker’s licence number.
• Look for the red flags. A fixed daily return, someone offering to trade for you, contact only through Telegram or Zalo, a website a few months old, or pressure to deposit into a personal domestic bank account.
• Compare against independent reviews. We keep a detailed assessment of each broker in our review section, and every one of them carries the licence number and the official website so you can check for yourself.

If you have already deposited with a clone

Stop depositing immediately, and in particular stop paying any “fee required before you can withdraw”. That is the second round of the fraud. Save all the evidence you have: the account numbers you transferred to, the transaction history, the messages, and the website details. Then report it to the police as early as you can.

Online fraud carries a sentence of up to twenty years in Vietnam, and your report becomes part of cases already under investigation.

A clone lives on somebody else’s reputation, so the weapon is verification at source

A cloned platform survives on exactly one thing: someone else’s reputation. Your weapon is verification at source, meaning the right domain, the right licence and the right legal entity.

Before you put money anywhere, spend the two minutes on the checklist above, and read is forex a scam for the full legal picture.

How a cloned platform works: five common moves

• Copying the name and domain. A name close to a large broker, with a letter added or removed, or .com swapped for .net or .co, and a website copying the interface closely enough that you believe it is the official page.
• Impersonating a licence. Displaying the licence number of a different, real broker, or an invented one, which does not match or does not exist when you check the regulator’s website.
• “Staff” who contact you first. A call or a Zalo or Telegram message from someone claiming to represent a large broker, inviting a deposit, offering to trade for you, giving away signals or promising a return.
• Allowing early withdrawals. Letting you withdraw a small amount to build trust, then blocking withdrawals or “locking the account” as soon as you deposit a large one.
• Manufacturing time pressure. “The offer is limited”, “the VIP room is closing”, “the position has to be taken today”, so that you never get time to verify anything.

Two minutes of self-defence

Before you deposit anything: first, type the official website address yourself rather than clicking a link from an unfamiliar message or advertisement. Second, look up the licence number directly on the regulator’s website (fca.org.uk, asic.gov.au, cysec.gov.cy and so on). Third, never hand money or account access to anyone offering to trade on your behalf.

The full procedure is in how to verify a forex broker before you deposit.

Spotted something inaccurate? Tell us and we will check it and publish a correction.