Skip to content
RegTech Codex
Directory

Thematic Pillar Hub · 1 Published Briefings

Compliance Forensics

Compliance Forensics research topics and source records from RegTech Codex. Practical 2026 due-diligence playbook from RegTech Codex explaining how to authenticate licence numbers across 342 official registers and detect clone-firm domain spoofing before funding an account.

A named author is recorded on some briefings in this hub, including Victoria Ashworth, LL.M, CAMS . Reviewer records and automated-check status appear on each briefing when available.

Key Institutional Takeaways — Compliance Forensics

  • Clone firms hijack genuine licence numbers from authorised institutions in UK FCA Warning List, FATF Standards, FinCEN Enforcement, and IOSCO Multilateral Alerts while operating on lookalike or unapproved web domains.
  • Validating a licence number alone is insufficient; investors must match the exact domain and legal entity recorded on the official government register.
  • RegTech Codex cross-links 342 supervisory authorities and 76 warning records directly to primary statutory lookup portals.
  • Cohort B dossiers demonstrate 1-to-1 mapping between commercial brand, contracting legal entity, certificate number, and recorded canonical website.
  • Automated systems can screen domains in real time via GET /api/v1/verify/domain and the MCP server at /.well-known/mcp.json.

All Compliance Forensics Research Briefings (1)

Institutional Directories & Regulatory Registers

Frequently Asked Questions — Compliance Forensics

What is a clone firm in Global AML/KYC Supervision & Enforcement Intelligence and how does it deceive investors?

A clone firm is an unauthorised entity that copies the real name, registration number, and licence credentials of an authorised financial institution onto a separate, unapproved domain to solicit deposits fraudulently.

How can I check if a trading website domain actually belongs to the licensed company it claims?

Look up the firm's certificate number independently via RegTech Codex's regulator directory or GET /api/v1/verify/domain?host=example.com and confirm the exact domain matches the website recorded on the government register.

Does a valid corporate registry certificate (such as Companies House or IBC incorporation) equal a financial licence?

No. General company incorporation only proves a legal person exists; conducting brokerage, custody, investment management, or money services requires explicit authorisation or registration from the financial Markets regulator.

What verdict does RegTech Codex's verification API return when a domain matches a regulator warning?

The /api/v1/verify/domain endpoint returns HIGH_RISK_REGULATOR_WARNING_OR_CLONE_FLAG along with the issuing regulator, warning publication date, and forensic dossier URL.

Where can I verify regulator clone warnings and official licensing registers on RegTech Codex?

All recorded regulator warnings and clone-firm forensic dossiers for RegTech Codex's coverage slice are indexed at /enforcement and exportable in CSV/JSON format at /datasets.

Explore Related Thematic Research Hubs on RegTech Codex

Compliance Forensics — Institutional Research & Regulatory Hub | RegTech Codex