Evidence verified October 30, 2026

Name-collision trading sites are shadowing the MCM Securities name

This is a public evidence page from Scam Detective’s published research — and an honestly framed one. The genuine MCM Securities LLC is a FINRA-registered broker-dealer (CRD 41571, SEC 8-49496) in Troy, New York, operating at mcmsecurities.com. The domains below are an anonymous family of MCM-branded trading sites that borrow that name — and an FCA-warned predecessor whose listed contacts even included the real firm’s own email domain. On the current evidence this is a name-collision and search-visibility risk: nothing here establishes that the operators deliberately targeted the firm, and this page does not claim it. Either way the exposure is real, and the verification path is the one regulators publish: FINRA BrokerCheck. Every finding is backed by the independent sources listed further down the page.

4
Lookalike domains found
High
Overall risk level
6
Independent corroborating sources
October 30, 2026
Case verified
The evidence

Confirmed lookalike domains

High riskName-collision clone — FCA-warned unauthorised firm using the name

mcmsecuritiesllc.com

Registration profileDated by the UK FCA’s November 20, 2024 unauthorised-firm warning; NXDOMAIN now — registered, warned about, and dropped
First seenNovember 20, 2024, in the UK FCA’s unauthorised-firm warning
Evidence
  • Formally warned about by the UK Financial Conduct Authority as an unauthorised firm (November 20, 2024) — a regulator’s public notice, the strongest independent corroboration in this set.
  • The FCA’s warning itself explicitly noted a genuine FINRA-registered firm of the same name — even the regulator felt the need to separate the real MCM Securities from the site borrowing its name.
  • The fake’s listed contact email was [email protected] — the genuine firm’s own domain — routing victims’ trust through the real firm’s identity.
  • NXDOMAIN now: dead like the name-borrowers that follow it — a rotation pattern, not a retirement.
High riskLive MCM-branded trading site — anonymous “mcm-llc” family on .trading

web.mcm-llc.trading

Registration profileRegistered March 6, 2026 via NameCheap, with the registrant hidden behind “Withheld for Privacy” — anonymous
First seenLive at verification (October 2026)
Evidence
  • Live at verification: a Vue.js trading dashboard with a “your manager” live-chat widget — a personal handler pushing trades and deposits, the pig-butchering channel in widget form.
  • No company name, license number, regulatory registration, address, or contact detail anywhere on the site — nothing that could be checked against a register, which is the point.
  • Registered March 6, 2026 via NameCheap behind Withheld for Privacy — months old and anonymous, trading on a name the genuine firm has carried since its FINRA registration.
High riskLive MCM-branded site — same anonymous family on .capital

mcm-llc.capital

Registration profileSame “mcm-llc” family construction — an anonymous multi-TLD footprint (.trading, .capital, .markets) rather than a single site
First seenLive at verification (October 2026)
Evidence
  • Live at verification, extending the same anonymous mcm-llc name across another TLD — a family of sites, not one platform.
  • Carries a purchased-looking Trustpilot presence: 10 reviews, 4.3 stars, every one from an account whose only review is this site — the review profile of a bought batch, not a customer base.
  • Same construction as its siblings: MCM branding on an anonymous registration, with nothing verifiable against FINRA, the SEC, or any register.
High riskLive MCM-branded trading site — “web.” subdomain on .markets

web.mcm-llc.markets

Registration profileSame “mcm-llc” family — the “web.” subdomain pattern mirrors the family’s .trading deployment
First seenLive at verification (October 2026); independently scored 58/100 by Gridinsoft
Evidence
  • Independently scored 58/100 by Gridinsoft — a third-party risk rating of the site itself, corroborating that it is suspicious regardless of the name-collision question.
  • Mirrors the family’s deployment pattern — a “web.” subdomain on a fresh TLD — the interchangeable-name rotation that name-borrowing operations rely on once one site accumulates reports.
  • No affiliation with the genuine MCM Securities LLC verifiable anywhere: the site offers no company or license details that could be checked against FINRA BrokerCheck.
The pattern

Red flags in this name-collision case

  1. 01The verification path is one place: FINRA BrokerCheck (brokercheck.finra.org). The genuine MCM Securities LLC is registered there — CRD 41571, SEC 8-49496, Troy, NY. Any “MCM” trading site that BrokerCheck does not back is borrowing the name; that single check resolves this entire case.
  2. 02A dashboard, a “manager,” and nothing else — web.mcm-llc.trading shows a Vue.js dashboard and a “your manager” live chat, with no company, license, address, or contact anywhere. A real broker-dealer is checkable in five places; an unattributable trading site is checkable in none.
  3. 03Purchased-looking trust — mcm-llc.capital’s Trustpilot shows 10 reviews, 4.3 stars, all from single-review accounts. Ten first-time reviewers and no history is the profile of a bought batch, not a customer base.
  4. 04Contacts that borrow the real firm’s domain — the FCA-warned mcmsecuritiesllc.com listed [email protected], the genuine firm’s own email domain, as its contact. When a site’s contact address belongs to a real company it never properly names, treat the site as the intruder.
  5. 05A documented victim pattern under the same name — a July 2026 victim-registry case file under the MCM name documents the pig-butchering / fee-wall pattern: deposits solicited through a handler, then withdrawals blocked behind escalating fabricated fees.
  6. 06Search pollution is the exposure — BrokerChooser’s result for the firm’s name is already polluted, surfacing the anonymous family’s sites in the search path where a prospective client looks for the genuine firm. The honest framing is name-collision, not proven deliberate impersonation — but the remedy is the same either way: verify the firm in BrokerCheck, not just the name in the browser.
Independent confirmation

Who corroborates this evidence

UK Financial Conduct Authority (November 20, 2024)

The FCA’s unauthorised-firm warning on mcmsecuritiesllc.com — which explicitly noted a genuine FINRA-registered firm of the same name, and whose listed contacts included [email protected], the real firm’s own domain.

FINRA BrokerCheck and SEC EDGAR

The genuine firm’s registrations are independently verifiable: FINRA CRD 41571 and SEC file 8-49496 — the authoritative record that separates the real MCM Securities LLC (Troy, NY) from every site borrowing its name.

Gridinsoft

Gridinsoft independently scores web.mcm-llc.markets 58/100 — third-party risk rating corroborating that the family’s sites are suspicious in their own right.

Trustpilot public review profile

mcm-llc.capital’s public Trustpilot profile — 10 reviews, 4.3 stars, all from single-review accounts — is itself evidence: the shape of a purchased review batch rather than an organic customer base.

Victim-registry case file (July 2026)

A July 2026 victim case file registered under the MCM name documents the pig-butchering / fee-wall pattern — deposits solicited through a handler, then withdrawals blocked behind escalating fees.

BrokerChooser search result

BrokerChooser’s listing for the firm’s name is polluted — surfacing the anonymous family’s sites in the search path where a prospective client looks for the genuine firm, corroborating the search-visibility exposure.

Full investigative write-up: Is StoneX a Scam? How Fake Trading Platforms Impersonate a Real Financial Company.

See exactly what you get

The audit, opened up

Findings · Risk ratings · Takedown template

Below is an abbreviated sample from a real audit format — the same report structure every $29 audit follows. The brand and domains shown are an illustrative example; your audit researches the company name and official domain you enter and documents what it finds the same way.

Sample — from a real audit format
Report date: March 14
Brand impersonation audit
Harborline Supply Co.
Official domain: harborlinesupply.com · 6 findings (5 shown) · 2 High · 2 Medium · 1 Low
Findings — lookalike domains
DomainTypeRiskEvidence
harborline-supply.comFake storefrontHighFull copy of the official site — same logo placement, layout, and product photography. Checkout collects card details before account creation. Registered 9 days ago behind a privacy proxy.
harborl1nesupply.comTyposquatHighDigit-for-letter swap ("1" for "l"). Redirect chain lands on a replica storefront with a cloned login form. SSL certificate issued 4 days after registration.
harborlinesupply-outlet.shopFake outletMediumPoses as a discount outlet channel. No affiliation disclosed anywhere on the site; the footer copies Harborline's legal text verbatim.
getharborlinesupply.comLookalikeMediumRoutes brand-name search traffic to a survey-with-prize flow before offering any products. Registered in the same bulk batch as the fake storefront above.
harborlinesupply.shopLookalikeLowBrand-name domain, currently parked with no active checkout. Rated Low and flagged for a re-check in 30 days in case it activates.

+ 1 more finding in the full report, documented the same way. Report summary: active impersonation campaign — act on the two High-risk domains first.

Takedown-request template — excerpt
Subject: Takedown request — <lookalike-domain> To the Abuse Team at <registrar / hosting provider>, I am writing on behalf of Harborline Supply Co., owner of the trademark HARBORLINE SUPPLY and the official website harborlinesupply.com. The domain <lookalike-domain>, registered through your service on <registration date>, impersonates our brand to deceive our customers: 1. Copies our logo, site layout, and product photography 2. Operates a checkout that collects visitors' card details 3. Discloses no affiliation with our company We request the immediate suspension of <lookalike-domain> …

The full template ships pre-filled with your brand, your official domain, and each finding's evidence — one per high-risk domain, ready to send to its registrar or host.

Your $29 audit follows this exact format for your company — every lookalike, typosquat, and copycat store found, each with its evidence and risk rating, plus the takedown template. Delivered instantly after checkout.

One-time payment

We found this without being asked

A brand impersonation audit does the same sweep for your company: every lookalike domain, typosquat, and copycat store impersonating your brand — each with evidence and a risk rating, plus a ready-to-send takedown-request template. Delivered instantly, $29 one-time, no subscription.

Audit my brand — $29
Questions about this evidence, or need it for a takedown request? Email [email protected].
Not ready to buy?

Get the free MCM Securities impersonation evidence pack

Every confirmed lookalike domain, the red-flag pattern, and the independent corroboration from this page — compiled into one file and emailed to you, free. Useful for your security or legal team even if you never buy anything from us.

Ready now? The brand impersonation audit sweeps your own company for every lookalike domain, typosquat, and copycat store — with evidence, risk ratings, and a takedown-request template. $29 one-time, delivered instantly, no subscription.

Other brand evidence pages
Corkcicle →StoneX →Fidelity →Owala →BrüMate →MrBeast →USPS →LEGO →AMLBot →Amazon →Huawei →Daniel Wellington →SodaStream →CurrentBody →Dreame →Grubhub →TikTok Shop →Ooni →Simple Modern →Vessi →Swig Life →Barefoot Dreams →Midsummer Agency →Grow & Convert →Wordibly →Labrys →Arctoris →Staffology by IRIS →KeenLogic →Dotinum →Vosyn →OpenSea →Merkle →THE OUTNET →Jelurida →Xeno →The Nexus Project →CoinGate →TechSolutions Group →Foundation Devices →Dave’s Hot Chicken →CX Investment →All evidence pages