Regulatory Warning Lists: How to Use Them
How to use a regulatory warning list to check a crypto platform: where to find official lists, how to search them well, and what a result does and doesn't mean.
A regulatory warning list is an official, public list of firms and websites that a financial regulator has flagged, usually because they appear to offer financial or crypto services without authorization or show signs of fraud; you use it by searching the platform's name, website domain and any aliases before you deposit money. A match is a serious red flag, but the absence of a match does not mean a firm is safe or licensed.
Most crypto scams look professional on the surface: polished websites, live chat and dashboards showing rising profits. Warning lists are one of the few free tools that let ordinary investors check what regulators have already found. They take minutes to search and can prevent a costly mistake. This guide explains where to find these lists, how to search them effectively and how to interpret the results. Rules and registers differ by country, so always check the official sources for your jurisdiction.
Warning Lists vs Authorized Registers
Regulators usually publish two different kinds of information:
| Resource | What it shows | How to use it |
|---|---|---|
| Warning list | Firms or websites the regulator has warned about | A match means stay away |
| Register of authorized firms | Companies licensed or registered to provide services | Confirm a firm is authorized and that its details match |
| Enforcement actions | Penalties and legal actions against firms | Check history and patterns |
The most reliable check uses both: confirm the firm is on the authorized register, with matching contact details, and is not on any warning list. Our guide to checking whether an exchange is licensed covers registers in more depth.
Where to Find Warning Lists
Many financial regulators publish warnings. Examples include:
- IOSCO I-SCAN. The International Organization of Securities Commissions (IOSCO) runs I-SCAN, a portal that gathers investor alerts from its member regulators worldwide.
- UK Financial Conduct Authority. The FCA maintains a public Warning List of firms to avoid.
- US regulators. The Commodity Futures Trading Commission publishes a RED List of unregistered foreign entities, and the Securities and Exchange Commission publishes investor alerts and enforcement actions. US state securities regulators also issue warnings.
- EU national regulators. Each member state's regulator publishes its own warnings, and many EU regulators maintain registers of crypto service providers authorized under MiCA. See our guide to MiCA regulation.
- Other national regulators. Many countries' securities or financial regulators publish similar lists; check your own country's regulator website.
Always reach these sites by typing the regulator's address yourself or using a search engine carefully. Fake "regulator" sites and fake certificates are used by scammers too. We cover this in more detail in Fake ICOs and Presales.
How to Search a Warning List Effectively
Scammers rebrand constantly, so a single search is rarely enough:
- 1Search the company's name exactly as shown on the website and in any documents.
- 2Search every domain you have seen, including variations and mirror sites.
- 3Search trading names and app names, which may differ from the legal entity's name.
- 4Search the people involved, such as "account managers," if the list includes individual names.
- 5Check clone warnings. Some lists warn about "clone firms" that copy the name and registration number of a real authorized firm. If a firm's contact details differ from those on the official register, treat it as a clone.
- 6Search more than one jurisdiction, especially the country where the firm claims to be based and your own.
- 7Record what you found, including the date and the search terms.
How to Interpret the Results
| Result | What it means | What to do |
|---|---|---|
| Listed on a warning list | A regulator has flagged the firm or site | Do not deposit; withdraw if you can; report if you have lost money |
| Authorized, details match | The firm is licensed for certain activities | Still check what services it is authorized for |
| Authorized, details differ | Possible clone firm | Contact the real firm through details on the register |
| Not on any list | Unknown status | Continue your due diligence; absence proves nothing |
Also check what a firm is authorized for. A firm may be registered for one activity, such as anti-money laundering purposes, but not licensed for others, such as offering derivatives or custody.
Warning Signs That Should Trigger a Search
Search warning lists immediately if a platform:
- Promises guaranteed or very high returns.
- Contacted you first through social media, messaging apps or a dating site.
- Asks you to pay fees or "taxes" before withdrawing.
- Claims regulation by an authority you cannot verify.
- Pressures you to deposit quickly or keep the investment secret.
These patterns are typical of fake crypto exchanges and pig butchering scams.
Limitations of Warning Lists
- They lag behind scams. New sites can operate for weeks or months before being listed.
- Coverage varies. Some regulators publish detailed lists; others publish very little.
- Names change. Scammers drop listed domains and launch new ones.
- They are not complete records of risk. Licensed firms can still fail, be hacked or mistreat customers.
Bottom line
Regulatory warning lists are a fast, free way to catch many crypto scams before they catch you. Search every name and domain, check both warning lists and authorized registers, and treat a listing as a clear signal to stay away. But remember that silence proves nothing: a firm that is not listed still has to earn your trust through verifiable licensing and transparent operations. If you come across a suspicious platform, you can also report it to us so others are warned.
Pertanyaan umum
What is a regulatory warning list?
A regulatory warning list is a public list, published by a financial regulator, of firms or websites that the regulator believes are operating without the required authorization or may be running scams. Investors can search it to check whether a platform they are considering has been flagged.
If a crypto company is not on a warning list, is it safe?
No. Warning lists only include firms the regulator knows about and has chosen to publish. New scam sites appear constantly and may not be listed yet. Not appearing on a warning list is not a sign of approval. Check the regulator's register of authorized firms as well.
Where can I find crypto warning lists from several countries?
IOSCO, the international organization of securities regulators, runs I-SCAN, which gathers warnings issued by its member regulators in one searchable portal. You should also check the website of the regulator in your own country and in the country where the firm claims to be based.
What should I do if a platform I use appears on a warning list?
Stop depositing money, try to withdraw what you can through the platform's normal process, and keep records of your account, deposits and communications. Be careful with anyone offering to help recover funds for a fee. Report your situation to your national regulator or police.