Finnova Limited Scam Warning: Real Company Name Misused

Finnova Limited is an operation that claims to offer investment services through addresses published under several domain extensions, and it has been listed as an unauthorised firm on the warning list of the UK financial regulator. The point of this case is not that the operation has no record at all — it is that a record exists and is never actually read. The existence of a genuine company with the same name does not make checking easier; on the contrary, it produces a misleading sense of trust.
The operation said to trade as Finnova Limited presents a "user panel" and a "web terminal" through the domains finnova-limited.com and finnova-limited.org and their user. and wt. subdomains. The address given is a single line with no street or building; a telephone number and an e-mail address are listed as contact channels. The regulator has also recorded that the operation has no connection with a genuine UK limited company bearing the same name. Finnova Limited is not authorised in Türkiye by the Capital Markets Board (SPK).
What this article covers
- A record exists, permission does not: the business activity in the register
- The genuine company with the same name versus the unauthorised front
- The identity details given and what is missing from them
- Subdomain architecture: the "panel" and the "web terminal"
- The name of the fee makes the fee look legitimate
- Technical findings
- What can be checked before investing
- Other platforms using the same method
- The legal process
- Frequently asked questions
📄 A Record Exists, Permission Does Not: The Business Activity in the Register
Someone researching a company name usually looks for the answer to one question: "Does this company really exist?" When the companies register shows an entry with the same name, an active status and up-to-date filings, the person feels they have found what they were looking for and stops.
Yet the most meaningful line of a register entry is not the name but the business activity written in the entry. In the entry matching this name, the registered activity is not investment services but IT consulting. In other words, the record says nothing about the service the operation claims to provide.
This distinction is vital and is often overlooked:
- The companies register shows that a name exists. Opening an entry is not a supervisory process; the applicant's declaration is taken as the basis and its accuracy is not separately tested.
- A regulatory authorisation shows that the named company may carry out a specific financial activity. It is an entirely separate record, held by a separate institution after a separate application and review.
Once these two records are treated as interchangeable, the check loses its purpose. The presence of the name in the register lets the operation "pass" the check people carry out, while the authorisation that actually matters is never looked at. Finnova Limited is not authorised by the Capital Markets Board (SPK) and has no authority to provide investment services in Türkiye. Which record should be used to verify an institution, and in what order, is covered in detail in SPK licence search and institution verificationTR.
🏢 The Genuine Company with the Same Name versus the Unauthorised Front
This is the most critical point of the case. The UK financial regulator did not limit its warning entry to the unauthorised activity; it also stated expressly that a genuine UK limited company with the same name and company number 09622034 has no connection with this operation.
This separate note is not a minor detail; it is the key information about the nature of the case. There are two different things involved:
- The genuine company: a properly incorporated legal entity with a company number, operating in its own line of business. In this case it is the injured party; its name is being used without its permission or knowledge. No accusation can be directed at this company.
- The unauthorised front: an operation, with unknown people behind it, that has taken that name and put it on a website, an "investment panel" and a set of contact channels.
For someone considering an investment, the consequence of this overlap is that a companies register search alone is not verification. The person searches the name, finds a genuine entry, sees that it is active, and may even note the incorporation date and company number. Everything found is true. The only thing that is not true is the link the person draws between that entry and the website that reached them.
A name is not a mark that legally belongs to its owner but a string written in a register; nothing technically prevents someone else from writing the same string onto their own front. The question to ask is therefore not "does this name exist?" but "is the site that reached me the owner of that name?" This second question can only be answered by comparing the contact details with official records. For the general working of schemes built on copying a name and identity, fake brokerage and bank clone sites may also be read.
🔎 The Identity Details Given and What Is Missing from Them
Compared with what is expected of a financial institution, the contact details in the warning entry show that missing information is not the exception but the rule.
- Address: Only "London, UNITED KINGDOM". No street name, no building number, no postcode. A city name is not an address; it points to no place where anyone could knock on the door, serve a notice or match it to a registration. When an entity claiming to provide investment services leaves its head office this vague, it is not a lack of information but a deliberate choice: the wider the address, the less verifiable it is.
- Telephone: +44 1975 968284. The existence of a number does not show that an office stands behind it. Whether a line is tied to a particular address, a particular entity and a particular record cannot be told from the line itself.
- E-mail: [email protected]. An e-mail address tied to a domain only shows that whoever controls the domain could create it; it does not provide corporate identity verification.
What these three lines have in common is that all of them are the other side's own statement. None comes from an independent record. Information that verifies an institution is not what the institution tells you, but what the authorising body states in its own register.
🧱 Subdomain Architecture: The "Panel" and the "Web Terminal"
This operation has set up not just one website but a set of addresses that complement each other:
- finnova-limited.com — the promotional face
- finnova-limited.org — a second copy of the same name with a different extension
- user.finnova-limited.org — a subdomain giving the impression of a "user panel"
- wt.finnova-limited.org/login — a subdomain giving the impression of a "web terminal", opening with a login screen
The purpose of this architecture is not technical but psychological. At genuine brokerages the trading platform sits on a separate subdomain, and logging in through a separate door is a familiar arrangement. The operation imitates this habit to create the impression that "there is real infrastructure here". When users log in to a separate terminal, they feel they are now connected to a system rather than a promotional page.
However, a screen looking like a trading terminal does not show that an order flow connected to the market stands behind it. The balances, profit rates and charts on the screen are only numbers written by the party that wrote the screen. A balance is not an asset but an image; whether it is real is tested only by a withdrawal request — and in these schemes the test fails at exactly that point. In the same way, how withdrawal barriers built with "bonus", "promotion" and trading-volume conditions work is covered in forex bonus and promotion withdrawal conditionsTR.
💳 The Name of the Fee Makes the Fee Look Legitimate
The pattern repeated in reports follows this order: a small withdrawal request is met without trouble; once the balance has grown, a large withdrawal is met with a demand for a new payment under the name of an "escrow account fee" and "tax" before any payout.
The strength of this demand lies not in its amount but in its name. "Escrow account" and "tax" are concepts with real counterparts in legal and financial practice, and they seem to serve a procedure rather than the other side's own interest. Presented under these names, the demand looks to the person not like a party asking for money but like a procedure to be completed. In reality:
- There is no legitimate payment method that requires a person to send new money up front in order to reach their own money.
- If a deduction is genuinely due, it is taken from the amount to be paid out; it does not require money to be requested from outside.
- Once a payment is made the demand does not end; it is renewed with a changed justification: after one fee is paid, a "transfer commission" is added to the queue, then a "compliance check charge".
- With each repeat, the person chooses to continue rather than turn back, because the last amount paid makes giving up look more costly.
Meeting the first small withdrawal is not a sign of good faith but the preparation that gets the later demand accepted. A small payout is the cheapest investment for buying trust.
The "collateral" or "guarantee" documents presented at this stage serve the same function: they are images shown to bring about payment, recorded in no bank's books. For the details of this method, see investing with a fake letter of guaranteeTR.
🔍 Technical Findings
- The panel is embedded from another address: The screen where the user sees the balance is not the site's own page; content hosted at another address is framed and displayed. Which party the screen belongs to cannot be understood from the brand shown above it.
- The address is newer than the history it claims: The domain was registered recently, which does not match the impression of a long-established institution given on the pages.
- Ownership record is hidden: The registration details of the domain are closed; who stands behind the address cannot be learned from the record.
- Extension variations: The same name is used under more than one extension, with some not opening and others remaining online. A closed address does not show that the operation has ended; it shows only that the front has moved.
- Separate login doors: The promotional page and the login screen sitting on different subdomains is an arrangement made to strengthen the corporate impression, not for infrastructure reasons.
- The displayed "document": An image of a document giving the impression of regulatory approval is shared. An authorisation is confirmed not from an image shared by one of the parties but from the register of the authorising institution itself.
🛡️ What Can Be Checked Before Investing
- When a register entry is found, the name alone is not enough; the business activity written in the entry is read and compared with the service being offered.
- The existence of a genuine company with the same name does not show that the site that reached you is that company. A name match and an identity match are different things.
- The address line is worth reading: an address limited to a city name, with no street or building, is given because it cannot be verified.
- Authority to provide investment services in Türkiye can be verified from SPK's list of authorised institutions: spk.gov.tr/faaliyet-izinleri/araci-kurumlar
- Images of documents sent by the other side do not count as confirmation; confirmation comes from the register of the institution said to have issued the document.
- The basis is not the balance screen but the result of a withdrawal. A number on a screen creates no right.
Before investing, check whether a platform is authorised by the regulator in your own country (for example the FCA, ASIC or SEC).
🔗 Other Platforms Using the Same Method
A name overlap, a fake panel and a fee demand that appears at the withdrawal stage are not specific to a single platform. For other faces of the same scheme:
- Fake brokerage and bank clone sites — operations built by copying the identity of an authorised institution
- Forex bonus and promotion withdrawal conditionsTR — volume conditions that make withdrawal impossible
- Investing with a fake letter of guaranteeTR — assurance documents shown before payment
- Arbitration in disputes with overseas brokers — the effect of jurisdiction and arbitration clauses written into the contract
🧭 The Legal Process
When loss has been suffered through an unauthorised operation, the process consists of steps that complement one another. Each step has its own procedure and its own timing:
- 1. Gathering evidence: Correspondence, screenshots, payment receipts and panel records are preserved before they disappear. For the first stage, see what forex victims face first
- 2. Documenting institution verification: The fact that the other side is unauthorised is shown through the records of authorised institutions: SPK licence search and institution verificationTR
- 3. Criminal complaint: For the content and annexes of the application made to the Chief Public Prosecutor's Office: criminal complaint for forex fraud
- 4. Asset investigation: Tracing the money and identifying the accounts it was moved to is at the centre of the investigation: asset investigation in investment fraudTR
- 5. Refund claim: For the routes by which a refund can be pursued against overseas-based operations: refund from an overseas forex firm
For detailed information and legal support, you can contact Savun Law & Consultancy.
❓ Frequently Asked Questions
I found the name in the companies register. Is that not a sufficient check?
Does the genuine company with the same name have anything to do with this operation?
Why is a companies register search not verification on its own?
Why does it matter that the address says only "London"?
I can log in to a separate "web terminal" address. Does that not mean real infrastructure?
A small withdrawal of mine was paid without problems. Is that not a good sign?
Could an "escrow account fee" or "tax" payment be a normal procedure?
Why does it matter that the panel is embedded from another address?
One extension of the site has closed. Is the operation over?
I am a victim of Finnova Limited. What can I do?
This page is an English adaptation of our Turkish article Finnova Limited Forex Dolandırıcılığı.
More from Forex & CFD Broker Scams
- Ava Plus Global Markets Scam: AvaTrade Name Clone
- Sygnum Global Scam: Misusing the Sygnum Bank Name
- Warven Wealthvale Scam: UK Warning, No Address
- T&T Global Markets Scam: Template Site, Frozen Prices
- Keyline Finance Scam Warning: FCA Lists Only a Domain Name
- Yield Harbor Scam Warning: Clone of an Authorised Firm