bondsmith.uk Scam: Clone Firm Warning for Two Addresses

This case concerns not a company but two internet addresses: bondsmith.uk and savings.bondsmith.uk. Both appear on the warning list of the UK financial regulator as clone firm entries. A clone entry means that no new company exists; the registration details of an existing authorised firm have been copied and used without permission.

🚩 Clone Firm Entry: What Is Copied Is Not a Company but the Registration Itself

An unauthorised firm warning and a clone firm warning describe two different situations. In an unauthorised firm entry, there is an operation carrying out activity without permission, and it is named under its own name. In a clone firm entry, no new name has been invented; the trade name, registration number, address and corporate appearance of an already authorised firm have been taken as they are and placed on another front site.

The practical result of this distinction is serious. When a person wants to verify, they search the registration number placed in front of them and actually find a record. The record found is authorised, current and looks clean. The verification technically "succeeds"; yet what has been verified is not the party on the other side but a third firm whose name is being used. The registration record, the only real piece of information the person has, stops being a source of trust for exactly this reason and turns into a tool of persuasion.

The point to underline here is this: the firm whose name was copied is the injured party in this case. Its details are being used without permission, it has no connection with the front site, and it is not responsible for transactions made through that site. For this reason, the trade name and registration details of the firm whose name was copied are not used in this article. In clone schemes, identifying the counterparty is done not from the copied record but from the account the money actually went to and the party operating the address.

For a detailed assessment of the common architecture of clone front sites and how a fake institutional identity is built, see our review of fake brokerage and bank clone sites.

🔤 The One-Part Extension Difference: Where the Eye Stops

The rule everyone is taught for spotting a fake address is: "look at the part before the slash." The mechanism here sits exactly in the blind spot of this rule.

The eye scans an address from left to right and stops the moment it catches a familiar string of letters. The extension that comes after the brand name is not read by most people, because the verification is already regarded as finished. In this case the clone front site uses the .uk extension, while the authorised firm whose name was copied has its own address under a different extension. The difference is a single additional part and sits precisely in the place that is not read.

Among the distinctions that can be made by looking at the address bar, this is the hardest. Methods such as swapping letters (for example "I" in place of "l"), adding an extra word or inserting a hyphen can be caught on careful reading, because the brand itself is distorted. With an extension difference, the brand name is correct letter for letter. The only thing wrong is the last part, which the person does not read anyway.

The legal ground for this is also notable: trademark registration and domain name registration are separate systems. Owning a trademark does not mean that every extension matching that mark is automatically protected. Extensions a firm has not taken sit idle and can be freely bought by persons with no connection to that firm. The gap in which clone front sites settle is mostly this one.

🔍 The "savings." Subdomain: The Impression of a Corporate Section

The second address is even more skilful. A form such as savings.bondsmith.uk leaves the impression not of a separate site but of the savings section of a corporate site. Large financial institutions really do have such a structure, with separate product lines offered on separate subdomains, and the person carries this habit over here.

In fact, the owner of a domain name can open as many subsections under that name as they like and give each any name they wish. A subdomain does not show an internal unit of an institution; it only shows that the same person has used the same name once more. Whoever holds the root address also holds every section beneath it.

The choice here is not random. The word "savings" directly evokes saving and deposits, and placing it at the subdomain level strengthens the impression that the product is a corporate line. In other words, the subdomain is designed not merely as a technical detail but as a marketing element supporting the product promise. When the person reads the address, they reach the conclusion "this is the institution's savings product" without needing any further information.

Indeed, in the lookup carried out, these two addresses resolve to separate server addresses; so the apparent impression of "two sections of the same institution" has no technical basis either.

🏦 The "Low-Risk Product" Disguise: Approaching with a Deposit Look

The most important feature separating this case from the usual forex front sites is that the scheme is built not on high-risk leveraged trading but on a saving and deposit interest theme. The language of the presentation works with words such as "savings", "interest rate" and "term" instead of words such as "profit", "leverage" and "signals".

The reason for this choice is clear. Front sites promising high returns raise a doubt in the other party from the start; the person knows they are taking a risk and behaves more cautiously with that awareness. A product with a deposit look is met with the opposite psychology: the person thinks they are not taking a risk, only keeping their money in a safe place. The reflex to verify weakens to the extent that the risk is assumed to be low.

There is a second effect. The deposit story widens the target audience. While leveraged trading front sites aim at a particular profile, a savings-themed front site also appeals to people with no investment experience at all. People who want to put their savings to use, who have no market knowledge and therefore cannot judge whether the documents presented are normal, are the real target of this scheme.

Third, the low-risk disguise lengthens the time the money is held on the front site. The concept of a term produces a natural reason for postponing a withdrawal request: the sentence "withdrawal is not possible before your term ends" looks entirely ordinary within a deposit framework. The same postponement can also be built through bonus and promotion conditions; our assessment of withdrawal conditions arising from bonuses and promotionsTR contains detailed information on how this mechanism works.

👤 A Named Personal Email: A Relationship with a Person, Not an Institution

In the warning entry, alongside a general corporate email address, there is also an email address carrying a person's name. This detail looks unimportant, but its function is one of the most decisive elements of the front site.

A named personal email is the technical leg of the "portfolio manager assigned to you" or "your personal adviser" story. The other party starts to think they are corresponding not with a corporate structure but with a specific human being. This relationship quickly becomes personal: replies come outside working hours, personal questions are asked, and expressions of privilege such as "I have secured a special rate for you" are used. What is built is not a service relationship but a bond of trust.

This bond has two results. First, the person asks the counterparty instead of verifying, and so naturally receives confirmation from the very party that needed verifying. Second, and more important, when the person disappears, the counterparty disappears too. When the front site closes, no institution, no contracting party and no reachable address is left; the only thing remaining is the name of an email box.

An email box can be given any name. A name does not show that there is a duty, an authorisation or a responsibility behind it. At authorised firms, the identity of a customer representative can be verified from the firm's own record; at clone front sites there is no record to verify. On how personalised contact is built within an organised structure, see our review of fake investment call centre operationsTR.

📍 124-128 City Road: An Address with No Verification Value

124-128 City Rd, London EC1V 2NJ, shown as the postal address in the warning entry, is a typical bulk registration address where many companies appear to be registered in London. Such addresses are operated by providers offering correspondence and registered address services to companies; thousands of legal entities can appear to be registered at the same door number.

The conclusion is clear: the existence of the address has no verification value. A postal address does not show that staff actually work there, that there is an office, or that the operation is under supervision in that country. It only shows that there is a point where post can be received.

The same logic applies to the telephone number. A fixed-line number with a London area code can be bought as a service without a physical switchboard, and calls can be routed to another country. When an address and a telephone number are presented together, they give the impression of an "established institution"; yet both are appearance elements that can be bought.

Whether a firm really operates is understood not from its address but from its regulatory record. Because the record itself may also have been copied, as in clone cases, verification is made through the regulator's own search screen and through the contact details written in the record.

📌 Information in the Warning Entry

The information found in the warning entry to be used by the party making contact through these addresses is as follows:

• Domain names: bondsmith.uk and savings.bondsmith.uk
• The place shown as the postal address: 124-128 City Rd, London EC1V 2NJ
• Telephone: 020 8073 0879
• Email: [email protected] and, in addition, a second address carrying a person's name

All of this information belongs to a clone front site in which the registration details of an authorised savings/deposit platform have been copied. None of the items on the list can be attributed to the authorised firm whose name is being used.

🛡️ Checks Before Investing

• Reading the address from right to left rather than left to right helps: the extension is checked first, then the brand name. On clone front sites the brand name is right and the extension is wrong.
• A subdomain is best not taken at face value: the two right-most parts separated by dots give the root address. Everything to its left consists of sections that the owner of the root address sets as they wish.
• Copying the registration number from the message received and searching it is not a real check. The reliable route is the regulator's own search screen, with contact re-established through the contact details written in the record; in clone cases the record is genuine and the party making contact is the fake.
• Expressions such as "deposit", "savings", "fixed interest" and "term" do not remove risk. Presenting a low-risk product does not reduce the need for verification; it increases it.
• Distance is appropriate towards a story of a personally assigned adviser. Verification is not asked of the person who needs to be verified.
• Firms that may provide investment services in Türkiye can be confirmed from the SPK list of authorised institutions; these addresses are not authorised by the SPK. For details of the verification method, see our guide to SPK licence queries and institution verificationTR.

🔗 Other Platforms Using the Same Method

A clone identity, a low-risk product disguise and personalised contact are patterns repeated across many front sites that look independent of one another. The reviews below concern the same family of methods:

• Fake brokerage and bank clone sites — the identity of an authorised firm is copied and used.
• Fake investment call centre operationsTR — the operational structure behind the "your assigned adviser" story.
• Withdrawal conditions arising from bonuses and promotionsTR — the contractual mechanisms that keep the money on the front site.
• Copy trading and social trading scamsTR — a different version of the "expert management" promise.
• Forex money transferred to a crypto exchangeTR — the payment chain is broken up to make tracing harder.

🧭 Legal Process

In clone front site cases, the first target of the legal process is not the copied record but the path the money actually followed. The authorised firm whose name is used is not a party; the counterparty is the account that received the payment and the operation managing that account.

• Evidence and first steps: The records usually kept in full from the moment the loss occurs include correspondence, transaction screens, payment receipts and records relating to the domain name. For the general framework of the process, see the roadmap followed by forex victims.
• Criminal investigation: The conduct is suitable to be assessed as qualified fraud; elements such as the use of information systems and banking instruments and the large number of victims are also taken into account in setting the penalty. For the scope and content of the complaint, our assessment of the criminal complaint process in forex fraud serves as a guide.
• Recall of the payment: For amounts sent abroad by bank transfer or EFT, running the interbank recall mechanism in time is decisive. For details, see the SWIFT transfer recall process.
• Refund claims with a foreign link: That the front site appears to have an address abroad does not create an absolute obstacle to a refund claim. For the routes that may apply, see our page on refunds from foreign forex firms.

For detailed information and legal support, you can contact Savun Law & Consultancy.

❓ Frequently Asked Questions