Updated August 3, 2026. Quick answer: the dangerous version of this fraud is not an unregistered stranger. It is someone using a real adviser’s name, a real CRD number, and sometimes a link to that adviser’s genuine BrokerCheck page. Looking the name up and finding a clean record is exactly what the scam is designed to produce.
FINRA describes the mechanism directly
“scammers misuse the name of real registered investment professionals or firms to create the appearance of legitimacy” And more specifically: “The scammer might create a fake version of a public FINRA BrokerCheck report using the name and credentials of a legitimate registered investment professional”
“The scammer might then send the fake report to potential investors, using the name and registration number (known as a CRD number) of the registered investment professional but associating them with a company that isn’t registered”
Worse still, FINRA notes that “scammers might provide links to legitimate BrokerCheck profiles while impersonating the registered investment professional” — so the link you are sent can point at a real, accurate, entirely legitimate record belonging to a real person who has nothing to do with the approach you received.
The SEC describes the same pattern for firms: “Fraudsters may set up an account name, profile, or handle designed to mimic a particular individual or firm” and “They may create a webpage that uses the real firm’s logo, links to the firm’s actual website, or references the name of an actual person who works for the firm”
Why this defeats the normal advice
Standard guidance — ours included — is to look the person up before you do anything. That advice is right, and it is not sufficient on its own, because verification confirms that a record exists, not that you are talking to the person the record describes. The lookup answers a different question from the one you actually have.
The underlying lookups are still the right first move: what BrokerCheck, IAPD and a CRD number actually show, and the full vetting walkthrough.
The step that closes the gap
It is a single habit, and it costs a minute: never use contact details supplied by the person contacting you.
- Look the professional up yourself, starting from the regulator’s own site rather than a link you were sent.
- Find the firm’s phone number independently — from the regulator record or by typing the firm’s address yourself.
- Call that number and ask for the person by name. If the approach was genuine, you have lost sixty seconds. If it was not, the call ends the matter.
- Compare any document you were sent with the record you pulled yourself. FINRA’s own advice is to look for inconsistencies between the two.
FINRA puts the principle plainly: “Don’t assume that information you receive from a supposed investment professional is legitimate”
Two structural facts that make this harder than it should be
The databases are split. BrokerCheck covers brokers and their registered representatives. IAPD covers investment adviser firms and their representatives, and shows the current Form ADV. A person may legitimately appear in one and not the other, so an empty result in the first place you look is not by itself a finding.
Some people selling financial products appear in neither. Insurance producers are licensed by state insurance departments rather than registered with the SEC or FINRA. We state this as a structural feature of how licensing is divided; we were not able to source a regulator sentence saying it in these words, so treat it as a reason to ask which regulator licenses someone rather than as a quoted rule.
Related: the red flags worth knowing · whether yours is actually a fiduciary · what to do if money has already gone.
General information drawn from federal regulator and law-enforcement publications, not legal or investment advice. This page describes patterns reported by regulators; it does not accuse any company or person of wrongdoing. Sources and read dates are given so you can check them yourself.
The same architecture is used with the IRS’s name on it, including against people who genuinely do owe tax — verifying an IRS letter without calling the number on it.
For professionals, and for anyone helping someone else: this page is designed to print as a clean handout. Press Ctrl+P (Cmd+P on a Mac) and the site navigation drops away, leaving the guide and its sources.
Free to print, copy and share for any purpose, including commercially, with attribution — Creative Commons Attribution 4.0 (CC BY 4.0). No permission needed and no need to tell us. More printable guides, and the licence in full.