Skip to content
Institutional Ledger
Directory

Thematic Pillar Hub · 1 Published Briefings

Compliance Forensics

Compliance Forensics research topics and source records from Institutional Ledger. Practical 2026 due-diligence playbook from Institutional Ledger explaining how to authenticate licence numbers across 40 official registers and detect clone-firm domain spoofing before funding an account.

A named author is recorded on some briefings in this hub, including Julian Mercer, CFA . Reviewer records and automated-check status appear on each briefing when available.

Key Institutional Takeaways — Compliance Forensics

  • Clone firms hijack genuine licence numbers from authorised institutions in U.S. FinCEN MSB, EU MiCA CASP, Hong Kong SFC VATP, Singapore MAS MPI, and Dubai VARA while operating on lookalike or unapproved web domains.
  • Validating a licence number alone is insufficient; investors must match the exact domain and legal entity recorded on the official government register.
  • Institutional Ledger cross-links 40 supervisory authorities and 111 institutional profiles directly to primary statutory lookup portals.
  • Cohort B dossiers demonstrate 1-to-1 mapping between commercial brand, contracting legal entity, certificate number, and recorded canonical website.
  • Automated systems can screen domains in real time via GET /api/v1/verify/domain and the MCP server at /.well-known/mcp.json.

All Compliance Forensics Research Briefings (1)

Institutional Directories & Regulatory Registers

Frequently Asked Questions — Compliance Forensics

What is a clone firm in Institutional Digital Asset, Tokenized RWA & Custody Venues and how does it deceive investors?

A clone firm is an unauthorised entity that copies the real name, registration number, and licence credentials of an authorised financial institution onto a separate, unapproved domain to solicit deposits fraudulently.

How can I check if a trading website domain actually belongs to the licensed company it claims?

Look up the firm's certificate number independently via Institutional Ledger's regulator directory or GET /api/v1/verify/domain?host=example.com and confirm the exact domain matches the website recorded on the government register.

Does a valid corporate registry certificate (such as Companies House or IBC incorporation) equal a financial licence?

No. General company incorporation only proves a legal person exists; conducting brokerage, custody, investment management, or money services requires explicit authorisation or registration from the financial Markets regulator.

What verdict does Institutional Ledger's verification API return when a domain matches a regulator warning?

The /api/v1/verify/domain endpoint returns HIGH_RISK_REGULATOR_WARNING_OR_CLONE_FLAG along with the issuing regulator, warning publication date, and forensic dossier URL.

Where can I verify regulator clone warnings and official licensing registers on Institutional Ledger?

All 40 supervisory register links and 111 institutional licence records for Institutional Ledger are indexed at /regulators and exportable in CSV/JSON format at /datasets.

Explore Related Thematic Research Hubs on Institutional Ledger

Compliance Forensics — Institutional Research & Regulatory Hub | Institutional Ledger