TR

Yield Harbor Scam Warning: Clone of an Authorised Firm

Savun Law & Consultancy · Updated 27 October 2026

Yield Harbor Scam Warning: Clone of an Authorised Firm

Yield Harbor is a name that has been entered on the UK financial regulator's warning list as a clone firm. What separates this case from other clone cases is that the name of the authorised firm has not been copied at all. What has been copied is something far more useful than a name — the authorisation itself.

In short: Yield Harbor is not authorised in Türkiye by the Capital Markets Board (SPK), and there is no SPK record showing that the name may offer investment services in Türkiye. The scheme uses the registration details of an authorised firm, yet there is no similarity of name at all between the copied record and the brand on the screen. The warning entry also lists no contact details, leaving only a domain name. In cases of this kind, tracing the flow of money early is decisive.

🚩 The Number Is Verified, the Name Is Not

The first check a careful investor makes is usually this: the registration number given to them is typed into the regulator's search screen. A genuinely authorised firm comes up on the screen and the check is considered complete.

Yet that search screen shows only whether the number is real. It does not show whether the number belongs to the brand on your screen. In this case there is no similarity of name between the firm whose registration details are used and "Yield Harbor"; the two are entirely different things. Because the names do not match, the question to be asked is ready but is almost never asked: "Is this number registered in your name?"

This gap is closed with the sentence: "We are the trade name / affiliate / representative of that firm." The sentence is short, checking it is long — and nobody checks. Yet if a real trade-name, affiliate or agency relationship exists, it appears separately in the regulator's record; it is not established by a verbal statement or a support message.

The complete absence of name similarity looks at first glance like the weak side of the scheme. In reality it is functional: had there been a similarity, the person would have felt the need to compare the two names. When there is none, the idea of comparing does not even occur, because the person has already stopped at the "number verified" stage. The scheme relies not on the check being done wrongly but on it being finished early.

📉 Scope of Authorisation: To Whom and for What Was the Record Issued?

This case has a second and more serious mismatch: the field of activity of the firm whose registration details are used is not investment intermediation. In other words, the copied permission does not cover the service offered on the screen.

The rule that follows can be summed up in one sentence: it is not enough that a record exists; what the record covers has to be read. Permissions are always limited — which activity, which product, which customer group. The party showing the record does not state these limits spontaneously; reading the limits is the job of the person making the search.

Verification is therefore not one step but three, and all three can be done on the same screen:

  • Is the number real? — The search screen shows this.
  • Does the number belong to the company name on the screen? — The name in the search result is read and compared.
  • Is the activity covered by the number the service being offered? — This is checked by reading the record's field of activity.

In practice people stop at the first step. All clone schemes live at that stop. As long as the word "authorised" is perceived as a seal, the failure to take the second and third steps is the scheme itself.

🔍 Findings and the Contact Gap

The web address identified is yieldharbor.co.uk. Apart from this, the warning entry contains no email address, telephone number or postal address; only the domain name remains.

This gap is information in itself. An organisation's identity is established through a postal address, a landline and a registry record; all three leave a trace even after being closed. That none of them exists suggests that the contact point was left only to an on-site form and live chat.

The practical consequence is this: correspondence conducted through an on-site chat and form does not remain with the other side once the server is shut down. An email exchange at least stays in the person's own mailbox with its headers; a chat window leaves only a screenshot once it is closed. Giving no identity details is a choice not to make communication easier but to stop the correspondence from serving as evidence.

For this reason, in cases where contact has been made with schemes of this kind, whatever is available — payment receipts, bank records, page images and any redirecting messages — is of importance when kept together and unaltered.

🌐 The Contradiction Carried by the Name Itself

While the extension points to the UK, the second word of the name is spelled not "harbour" but "harbor", that is, in American spelling.

A spelling choice alone is not evidence; but a brand that says it is based in the UK and does not use its own country's spelling suggests that the texts were not written in that country and for that market, and came from a template prepared elsewhere with only the extension changed. The shop front was chosen by country; the content was not written by country.

Moreover, obtaining an address with a country extension gives no authority to offer investment services in that country. An extension produces an impression of geography; it does not produce legal status. To the extent that the two elements here — an extension belonging to the country and a spelling not belonging to the country — contradict each other, they show that the name is less an identity than a shop-front decision.

Putting the words "yield" (return) and "harbor" (port) together follows the same logic: one evokes profit, the other safety. The name does not describe the activity; it only builds the desired feeling. Names that describe an activity can be compared with a permission document; names that build a feeling cannot.

One more detail: this address resolves to the same server address as another financial name that entered the warning list in the same period. A shared server does not by itself show shared ownership; but it is a trace often seen in schemes where shop fronts are produced in bulk rather than one by one.

⚖️ Legal Position and SPK Authorisation

In Türkiye, offering leveraged trading and similar capital markets activities to people resident in the country requires the permission of the Capital Markets Board. The name Yield Harbor is not among the firms holding this permission. The existence of a foreign regulator's record does not change this conclusion; and what is at issue here is not its own record but the use of someone else's record.

Collecting money by creating the impression of dealing with an authorised firm points to a picture in which the element of deceit is carried out through the imitation of a corporate identity. The situations in which the aggravating circumstances in qualified fraudTR come into play are among the headings that determine the criminal framework of this type of case.

The party whose identity and registration details are used is in the position of the injured party in this incident. For this reason the name, registration number and contact details of that firm are deliberately not included in this article. The real firm has no connection with this scheme; its name is being misused.

🛡️ Checks Before Investing

  • When searching a registration number, the name that appears is read. If that name is not the same as the brand serving you, the verification is incomplete.
  • The scope of the record matters: for which activity was it granted? If the service offered lies outside that scope, the number proves nothing; it helps to know in advance which fields are compared in licence searches and firm verificationTR.
  • A verbal statement such as "we are the trade name / representative" is not accepted as such; if such a relationship exists, it appears separately in the regulator's record. The firms that may provide investment services in Türkiye are published in the SPK list of authorised firms. Before investing, check whether a platform is authorised by the regulator in your own country (for example the FCA, ASIC or SEC).

🔗 Other Platforms Using the Same Method

Borrowing the permission of an authorised firm is not a scheme specific to one brand. We have covered in separate articles the types of case in which the same mechanism is repeated with different shop fronts.

🧭 The Legal Process

In cases of this kind the process consists of several stages. What follows only describes the process; each case is assessed under its own conditions.

For detailed information and legal support, you can contact Savun Law & Consultancy.

❓ Frequently Asked Questions

If the registration number is real, is the platform not real too?

That a number is real does not show that it belongs to the brand serving you. If the name in the search result does not match the brand name on your screen, no verification has been done.

What does the "scope" of a record mean and how is it checked?

Every permission is granted for a specific activity. In a search result, not only the word "authorised" but also the field of activity for which the record was issued is looked at. In this case the field of activity of the party whose registration details are used is not investment intermediation; the copied permission does not cover the service offered.

What does it mean that the warning entry has no telephone or address?

An organisation's identity is established through an address, a landline and a registry record. The absence of all of them shows that contact was left only to an on-site form and chat. Once these channels are closed, no correspondence remains with the other side.

Is the firm whose registration details are used responsible?

The party whose identity is used without permission is in the position of the injured party in this incident. It has no link with the clone scheme, and its name is therefore not repeated here.

Does a ".co.uk" extension not inspire trust?

Obtaining an address with a country extension gives no authority to offer investment services in that country. An extension produces an impression of geography; it does not produce legal status.

Is the "harbor" spelling really a sign?

It is not proof on its own. However, the texts of a brand that does not use the spelling habit of the country it claims to be based in most likely come from a ready-made template not prepared for that market.

I was harmed through this scheme. What are the options?

For detailed information and legal support, you can contact Savun Law & Consultancy.
3 attorneys registered with the Istanbul Bar Association · verifyGoogle 4.8 ★ · 123+ reviews · seeOffice in Istanbul · English-speaking team · about us

This page is an English adaptation of our Turkish article Yield Harbor Forex Dolandırıcılığı.

More from Forex & CFD Broker Scams

All articles in this section →

WhatsApp