What are the red flags of investment fraud?
The main red flags of investment fraud are an unsolicited approach, a guaranteed or unusually high return, pressure to decide quickly, a request for secrecy, and an instruction to pay an account that isn't in the firm's own name, or to pay in crypto. Clone firms, 'exclusive' offers and recovery calls are variations on that pattern.
| Red flag | How it tends to sound | What to do |
|---|---|---|
| You didn't ask | 'We help companies like yours put idle cash to work.' | Ask where they got your details, then check them through sources they didn't supply |
| The return is too neat | 'Fixed, paid monthly, and your capital is protected.' | Ask, in writing, what the money is invested in and who holds it |
| There's a deadline | 'The allocation closes on Friday.' | Let it close. A sound offer survives a week of checks |
| Keep it quiet | 'Best not to involve your bank. They'll only push their own products.' | Tell your bank, your accountant and a fellow director |
| The money goes somewhere odd | 'Please pay our settlement agent', or 'send it as crypto' | Stop. Pay only the firm's or its custodian's own account, confirmed independently |
| The details don't match | A website, phone number or email that differs from the regulator's register | Use the register's contact details and ask the real firm whether it knows you |
No genuine firm minds being checked. If reasonable questions get an irritated or evasive answer, count that as one more red flag.
Why is an unsolicited approach a red flag?
An unsolicited approach is a red flag because the other side has chosen the product, the timing and the story before you've checked anything. Genuine investment firms rarely cold-call businesses with ready-made deals. The contact can come by phone, email, LinkedIn, a messaging app, or an introduction from someone who seems to know your company.
Businesses are easy to research. Registers, websites and social media show who runs the company and who signs off payments, and in some countries the filed accounts show its cash at the last year end. A caller who knows your finance director's name and your bank has proved only that they did their homework.
Take a fictional example. The finance manager of a joinery business gets a polite email offering a 'treasury deposit programme for SMEs'. It quotes the company's year-end cash figure and names its bank. Every fact in it came from public records. Nothing in it shows who the sender really is.
The test never changes. Who started the conversation, and have you verified them yourself, through sources they didn't supply? Many financial regulators list unexpected contact as a warning sign in its own right, and some countries ban certain kinds of investment cold calling outright.
Why do guaranteed returns, pressure and secrecy matter?
Guaranteed returns, pressure and secrecy matter because each one switches off a defence. A promised return stops you asking about risk. A deadline takes away the time to check. Secrecy cuts out the people, such as your bank, accountant or fellow directors, who might have spotted the problem. Fraudsters tend to use all three together.
Higher returns come with higher risk, and businesses get no exemption. If someone offers a fixed rate well above what your bank pays on deposits, ask what the money is actually invested in and who holds it. Then ask what happens if the borrower or issuer can't pay. Words like 'capital protected', 'asset backed' or 'insured' count for nothing until you've read the document that makes them true.
Pressure is rarely crude. It looks like a 'final allocation', a friendly salesperson who rings every afternoon, or flattery about how few companies have been invited. Secrecy tends to come dressed as professionalism: a confidentiality agreement before you've seen basic details, or a hint that your usual bank 'won't understand' the product.
In practice, a genuine opportunity will still be there after a week of checks. If the deadline won't allow that, treat the deadline itself as the warning sign.
Which payment requests should make you stop?
Stop if you're asked to pay a personal account, an account in another company's name, an overseas account that doesn't fit the firm's story, or a cryptocurrency wallet. Stop as well if a fee, tax or charge must be paid before your money can be withdrawn. A genuine firm has no need for any of these.
- The account name differs from the firm you checked, and there's an explanation ready, such as 'our settlement agent' or 'our escrow partner'. Ask the firm itself, on a number you found yourself.
- You're asked to buy crypto and send it to a wallet, or to pay through a platform the firm chooses. A bank can't recall a crypto transfer, and money sent this way is very rarely recovered.
- New bank details arrive by email just before a payment is due. The same trick drives most invoice and payment fraud.
- You're asked to split the amount into several smaller transfers, often to slip under your bank's checks or your own approval limits.
- Your money, or your 'profits', can be released once a fee, tax or compliance charge has been paid.
Your payment controls are the last line of defence. If no investment payment can leave the account without a second approver and an independent check of the receiving account, most of these requests fail there. Approval rules like that are part of our cash flow and treasury work.
How do clone firms and 'exclusive' offers work?
A clone firm copies a real, authorised firm's name, address and reference number, then gives you its own phone number, email or website. An 'exclusive' offer sells access to something that sounds scarce, such as shares before a stock market listing or a high-interest bond. Both are designed to survive a quick glance.
Clone firms
A clone passes a quick register search, because the firm it copies is genuine. The giveaway sits in the contact details. Reach the firm only through the details the regulator holds, never the ones in the approach. Our guide on how to check an investment firm before your business pays walks through each step.
Pre-IPO shares
Your company is offered shares in a business 'about to list' on a stock exchange, at a discount to the expected price. The listing may never happen; the shares may not exist. Even genuine unlisted shares can be impossible to sell, so ask how you would ever sell them and who records ownership.
High-yield bonds and loan notes
The offer is a fixed rate well above deposit rates, often secured on property, energy projects or a lending business. Some are legitimate but high risk. Others just move investors' money around connected companies. Ask who issues the bond, whether its accounts are filed and audited, and whether the seller is authorised to sell it.
Fake lenders and investors
Companies raising money meet the same trick: funding approved suspiciously fast, then an 'arrangement' or 'insurance' fee before anything is released. Our financial model guide explains how to check that a lender or investor is genuine.
What is a recovery-room scam?
A recovery-room scam targets people and businesses that have already lost money. A caller posing as a lawyer, a regulator, a police unit or an 'asset recovery' firm offers to get the money back for an upfront fee. Often they are the original fraudsters, or have bought their records, and the fee disappears too.
Recovery callers are convincing because they know details of the loss: the amount, the date, perhaps the name of the 'adviser' your company dealt with. They may say the funds have been frozen and can be released once a legal fee or tax is paid, or ask for remote access to a laptop to 'trace' the money.
Regulators and the police don't charge to investigate a fraud, and they don't ring victims asking for payment. End the conversation, then tell your bank and the police about the approach, since it may help the original case.
What should your company do if it has already paid?
If your company has already paid, ring your bank's fraud line straight away, using the number on its website or your card, and ask it to stop or recall the payment. Then report the fraud to the police and the financial regulator, keep every record, and send no more money, whatever you're told.
Ring the bank now
Minutes count. A bank that acts quickly can sometimes stop a payment or ask the receiving bank to freeze the funds. Have the date, amount, receiving account and reference ready.
Report it
Tell the police or your national fraud reporting service, and the financial regulator in the country where the firm claims to operate. Many countries also run a dedicated service for reporting internet fraud. Note every reference number.
Keep everything
Save emails, messages, contracts, web addresses, call logs and payment confirmations. Delete nothing, however embarrassing it feels.
Lock down your systems
If anyone shared a login or allowed remote access, change passwords, switch on multi-factor authentication and have your IT provider check the devices involved.
Tell the board and the insurer
Inform your directors and auditor as well. Some insurance policies cover fraud losses but set strict deadlines for notifying the insurer.
Expect a second approach
Treat any offer to recover the money, or any 'final payment' to release it, as part of the same scam.
Money sent to fraudsters often isn't recovered, even when the bank moves fast. Afterwards, work out how the payment was approved and close the gap.
Where can you check a firm or report a scam?
- The public register of the financial regulator in the firm's country: whether it is authorised, for what, and the contact details the regulator holds for it.
- The same regulator's warning list of unauthorised firms and clones of real ones.
- The scam guidance most financial regulators publish, with the warning signs they see most often.
- The police or your national fraud reporting service, if your company has already paid.
Open each of these by typing the official address yourself or from a bookmark, never through a link in a message you were sent.
How can BrndTst help?
BrndTst gives your company checks that make these red flags hard to miss: a written policy for spare cash, a due-diligence checklist for any firm or offer, and approval rules for investment payments. If an offer is in front of you now, we can review that one firm and give you a written record of what we found.
The policy and checklist come from our safe investing service for company cash; the approval rules come from our treasury and payment controls. To start, get in touch by email with the firm's name and how it first contacted you. The introductory consultation is where we agree what needs checking and what you'll receive.