The FCA identifies capital-bltd.com and capital-bltd.net as clone domains. Match the domain, firm, reference, permissions, contact and payment chain before acting.
The UK Financial Conduct Authority says capital-bltd.com and capital-bltd.net are a clone of an FCA-registered firm. The warning was first published on 28 May 2026 and updated on 14 September 2026. The FCA says the websites are not authorised by it and have no connection with the genuine firm, Capital-B Ltd, Firm Reference Number 763815.
Do not treat the shared name as proof of identity. A register match is valid only when the legal entity, reference number, domain or independently verified contact details, permissions and the service being offered all fit together. If you have already interacted with either warned domain, stop new payments, preserve the original records and contact the genuine firm or regulator through details obtained independently.
| Field | FCA warning for the clone | Genuine firm details published by the FCA |
|---|---|---|
| Name | capital-bltd.com / capital-bltd.net | Capital-B Ltd |
| Websites | capital-bltd.com; capital-bltd.net | The warning does not list either domain as belonging to the genuine firm |
| FCA reference | A clone may copy or invent reference numbers | 763815 |
| Address | Do not rely on an address supplied by the warned website | 14 Devonshire Square, London, EC2M 4YT |
| Telephone | A clone may change contact details | +44 07856 700019, as displayed in the FCA warning |
| Relationship | FCA says the warned websites are not authorised by it | FCA says the genuine firm has no connection with the clone |
Source: FCA warning for capital-bltd.com and capital-bltd.net. Recheck the live FCA page before acting because warning details can change.
A clone firm depends on a true fragment. It may copy a genuine company's name, address, Firm Reference Number or employee names, then substitute the domain, email, telephone number or payment destination. Searching only the copied name can therefore lead to a genuine register entry and create false confidence.
An FRN identifies a record, not every person who quotes it. The record must be connected back to the contact channel through independent evidence. The FCA explicitly warns that scammers may give other false details and may mix them with genuine details. It also notes that contact details can change over time.
Use identity matching as a chain rather than a single lookup:
Finding the genuine Capital-B Ltd entry does not authenticate capital-bltd.com or capital-bltd.net. The FCA warning makes the opposite relationship explicit.
| Test | What to compare | A result that requires a pause |
|---|---|---|
| Domain | Every character, top-level domain, redirects and login host | The website is absent from the official record or appears on a warning |
| Legal entity | Full company name in the agreement and onboarding screen | Only a brand is shown, or the agreement names another company |
| Reference number | Number type, firm name and live status | A number is copied from a different entity or activity |
| Permissions | Product, activity, client type and restrictions | The firm exists but lacks permission for the promoted service |
| Contact route | Telephone and email obtained independently | A salesperson says the official contact is obsolete and supplies a replacement |
| Payment chain | Beneficiary, processor and documented agency relationship | Personal, crypto or unexplained third-party recipient; pressure to bypass normal controls |
The test does not declare a provider safe. It is a minimum identity check. A correctly identified authorised or registered firm can still offer a high-risk product, and a registration does not necessarily authorise every investment activity.
The FCA's consumer guidance distinguishes being registered from being authorised. Registration can apply to particular requirements or activities; it is not a universal permission to provide all regulated investments. The right question is not simply “is the name in the register?” It is “does this exact entity have the permission required for this exact service offered to this customer?”
For a forex, CFD, investment or payment-related approach, record the product in plain words. Then inspect the permissions and restrictions on the genuine record. If the product promoted by the contact cannot be reconciled with the record, do not let a familiar company name close the gap.
| Evidence found | What it can establish | What it cannot establish alone |
|---|---|---|
| Companies House or company registration | A legal company with that name may exist | FCA authorisation for an investment service |
| FCA reference number | A specific FCA record exists | That the person, domain or payment account belongs to it |
| FCA status | The record's current regulatory status | Suitability, profitability or protection for every product |
| Permission entry | Scope of permitted activities and restrictions | That a cloned contact is genuine |
| Official contact confirmation | A verified connection to the genuine firm | That a high-risk product is suitable for you |
| Positive reviews | Other users report experiences | Identity, permission, solvency or guaranteed withdrawal |
The FCA guide to checking a firm or individual was updated on 9 September 2026 and explains when to use the Firm Checker or the full Financial Services Register. Use the current version, because statuses, contact information and restrictions can change.
People often inspect the marketing homepage but miss a different hostname used for registration, document upload, trading or payment. Record the full browser address at each step. A secure padlock shows that the connection to that domain is encrypted; it does not show that the domain belongs to the genuine firm.
Review at least these points:
| Journey stage | Record | Why it matters |
|---|---|---|
| Advertisement | Destination URL and account that placed the ad | The displayed brand can differ from the destination |
| Registration | Hostname, legal footer and privacy controller | Credentials may be collected by another entity |
| KYC upload | Exact upload domain and privacy notice | Identity documents are sensitive and difficult to recover |
| Agreement | Legal entity, version and governing terms | This identifies the stated contracting party |
| Trading login | Server name, app publisher and support route | A real trading interface does not prove the counterparty |
| Deposit | Beneficiary, account, wallet, currency and processor | The recipient must be reconciled with formal instructions |
| Withdrawal | Conditions, new fees and communication channel | New “tax”, “unlock” or volume requirements need independent verification |
Do not send a password, one-time code, full card photograph or wallet recovery phrase to a person who claims it is required for verification. If remote-control software has been used, treat the device and credentials as potentially compromised and seek appropriate security support.
Do not ask the possibly cloned contact to prove itself by supplying another certificate, telephone number or link. Instead, navigate to the FCA website yourself and use the contact information presented through the FCA's Firm Checker or register. Explain that you are checking a separate domain and quote only the minimum information needed.
A concise written enquiry can be:
I was contacted through [domain, email or telephone]. Please confirm whether this channel, the proposed service and the payment instructions are operated or authorised by your firm. I obtained your contact details independently from the FCA service. I have not relied on contact details supplied by the approach itself.
Keep the response with its full headers or original message file. A screenshot is useful for quick reference, but the original preserves more context.
If a contact claims that the FCA record is outdated, do not switch back to its preferred channel. Ask the genuine firm and the FCA through official routes. The FCA says its own staff do not use WhatsApp or other messaging services and do not ask consumers for upfront fees; the regulator's contact page lists its current channels and warnings about fake FCA communications.
A payment processor may legitimately differ from the contracting firm. That difference needs a documented explanation and a verifiable relationship. It is not enough for a salesperson to say “this is our liquidity provider” or “the finance team uses another account.”
Create a reconciliation record before paying:
| Item | Expected evidence | Unresolved result |
|---|---|---|
| Contracting firm | Signed agreement with full legal name | No entity or a different entity appears |
| Payment beneficiary | Formal instruction from a verified channel | Personal account or unexplained company |
| Processor role | Terms describing the processor or agent | Relationship supported only by chat |
| Currency and amount | Invoice or deposit instruction matching the account | Last-minute change or split payment |
| Refund route | Written return-of-funds and withdrawal rules | Additional payment required to release an existing balance |
| Confirmation | Receipt linked to the correct account | Screenshot or dashboard balance without bank-level evidence |
Do not make a small payment merely to “test” a warned website. A successful small deposit or withdrawal proves only that one transaction happened under those conditions. It does not establish identity, future access to funds or eligibility for the Financial Ombudsman Service or Financial Services Compensation Scheme.
Act in a sequence that preserves options. Do not continue paying while trying to unlock a promised balance.
The FCA warning says people dealing with the clone will not have access to the Financial Ombudsman Service for complaints about that clone and will not receive FSCS protection if things go wrong. It also points to possible UK payment protections for some scam payments made on or after 7 October 2024. Eligibility depends on the payment method, date and circumstances; contact the payment provider rather than assuming that protection applies.
For a structured evidence pack, use FXCN's withdrawal problem action plan. The official-register verification guide covers the broader licence-checking process.
The update date tells readers to recheck the live warning, but it does not reveal every change made by the FCA. Do not invent a change log from the date alone. The current warning page identifies both capital-bltd.com and capital-bltd.net, the genuine Capital-B Ltd record and the contact details quoted above.
If you captured an earlier version, keep it alongside the current version and note the retrieval time. Domain additions, contact changes and new aliases can matter when matching historical communications. An old screenshot should not replace the current official page.
When sharing or forwarding the warning, repeat the regulator's exact relationship and date rather than a broader allegation. The verified statement is that the FCA identifies the two named domains as a clone of a registered firm and says they have no connection with the genuine firm.
Mark each row “matched,” “conflict” or “unknown.” Do not treat unknown as passed.
| Question | Your evidence | Result |
|---|---|---|
| What exact domain contacted me? | Full URL and first-contact record | |
| Does it appear on the FCA Warning List? | Dated FCA warning URL | |
| Which legal entity is in the agreement? | Agreement name and version | |
| Which FCA record does the number identify? | Live record opened independently | |
| Are the product permissions sufficient? | Permission and restriction entries | |
| Did I contact the genuine firm independently? | Original reply from verified route | |
| Is the payment recipient documented? | Formal instruction and processor relationship | |
| Are any material facts inconsistent? | List every mismatch rather than averaging them |
One conflict in domain identity cannot be cancelled by several matching cosmetic details. A professional design, valid TLS certificate, copied address and real FRN can all coexist with a clone warning.
The FCA warning says they are not authorised by it and identifies them as a clone of an FCA-registered firm. Check the live warning for any later update.
No, according to the FCA. The regulator says the genuine Capital-B Ltd, FRN 763815, has no connection with the clone.
No. A number must be matched to the live record, legal entity, permissions and independently obtained contact details. Clone firms may copy real numbers and addresses.
Record the full redirect chain and the final hostname. A redirect does not repair an identity mismatch. Confirm every service and payment domain through the genuine firm's official contact route.
No. HTTPS protects data in transit to the domain shown in the browser. It does not prove that the domain belongs to an authorised firm or that the product is permitted.
No. Company registration and financial-services permission are different questions. Check the relevant regulator record and the exact activity.
No. That returns to the same unverified channel. Obtain the genuine contact independently from the regulator's service.
Stop sending more information, preserve what happened, secure affected accounts and devices, and seek guidance from the relevant identity-fraud and data-protection channels in your location.
No. It does not establish the identity of the operator, access to the remaining balance or future protection.
No. It reports the FCA's warning about two clone domains and explains how to verify the separation. The FCA says the genuine firm has no connection with those domains.
This article is an identity-verification and evidence-preservation guide. It is not individual legal or investment advice and does not guarantee recovery, product suitability or the safety of any firm.