Skip to content
VolSurface Desk
Directory

Thematic Pillar Hub · 1 Published Briefings

compliance-forensics

compliance-forensics research topics and source records from VolSurface Desk. Practical 2026 due-diligence playbook from VolSurface Desk explaining how to authenticate licence numbers across 21 official registers and detect clone-firm domain spoofing before funding an account.

A named author is recorded on some briefings in this hub, including Dr. Alistair Finch, CQF, FRM . Reviewer records and automated-check status appear on each briefing when available.

Key Institutional Takeaways — compliance-forensics

  • Clone firms hijack genuine licence numbers from authorised institutions in U.S. CFTC, National Futures Association (NFA BASIC), Options Clearing Corporation (OCC), and Eurex while operating on lookalike or unapproved web domains.
  • Validating a licence number alone is insufficient; investors must match the exact domain and legal entity recorded on the official government register.
  • VolSurface Desk cross-links 21 supervisory authorities and 0 warning records directly to primary statutory lookup portals.
  • Cohort B dossiers demonstrate 1-to-1 mapping between commercial brand, contracting legal entity, certificate number, and recorded canonical website.
  • Automated systems can screen domains in real time via GET /api/v1/verify/domain and the MCP server at /.well-known/mcp.json.

All compliance-forensics Research Briefings (1)

Interactive Quantitative Calculators & Models

All Calculators →

Frequently Asked Questions — compliance-forensics

What is a clone firm in Listed Options, Futures & Volatility Derivatives Venues and how does it deceive investors?

A clone firm is an unauthorised entity that copies the real name, registration number, and licence credentials of an authorised financial institution onto a separate, unapproved domain to solicit deposits fraudulently.

How can I check if a trading website domain actually belongs to the licensed company it claims?

Look up the firm's certificate number independently via VolSurface Desk's regulator directory or GET /api/v1/verify/domain?host=example.com and confirm the exact domain matches the website recorded on the government register.

Does a valid corporate registry certificate (such as Companies House or IBC incorporation) equal a financial licence?

No. General company incorporation only proves a legal person exists; conducting brokerage, custody, investment management, or money services requires explicit authorisation or registration from the financial Markets regulator.

What verdict does VolSurface Desk's verification API return when a domain matches a regulator warning?

The /api/v1/verify/domain endpoint returns HIGH_RISK_REGULATOR_WARNING_OR_CLONE_FLAG along with the issuing regulator, warning publication date, and forensic dossier URL.

Where can I browse all regulator clone warnings and unauthorised firm alerts on VolSurface Desk?

All recorded regulator warnings and clone-firm forensic dossiers for VolSurface Desk's coverage slice are indexed at /clone-checks and exportable in CSV/JSON format at /datasets.

Explore Related Thematic Research Hubs on VolSurface Desk

compliance-forensics — Institutional Research & Regulatory Hub | VolSurface Desk | VolSurface Desk