To verify a financial services firm in Ireland, check both corporate identity and regulatory permission. Match the legal entity and CRO number, then search the Central Bank of Ireland registers for the exact firm, permission and contact details. Finally, rule out a cloned-firm scam by contacting the genuine firm through information obtained independently from the regulator—not from the message or advert that reached you.
Direct answer
A CRO record proves that a company exists; it does not authorise financial services. Use the Central Bank registers and warning notices, confirm the service falls within the firm’s permission, compare regulated contact details and call back using an independently sourced number. For an EEA-passported firm, verify the home-state authorisation and Irish position.
Step 1: identify the legal firm
Financial brands, brokers and apps often use trading names. Find the legal entity named in the website footer, terms, client agreement, privacy notice and regulatory disclosure. Record its company number, registered office and any stated Central Bank reference or home-state regulator.
Search the Irish company record and compare names, directors and address. If the brand differs from the legal name, review our guide to legal names and trading names. A mismatch is not automatically fraud, but it must be explained before money or identity documents are sent.
Step 2: search the Central Bank registers
- Search the exact legal name and sensible name variations.
- Open the specific register result rather than relying on a search-engine snippet.
- Confirm the firm type and the regulated activity you are being offered.
- Check authorisation, registration, passporting or other status and relevant dates.
- Compare the official address, website, telephone and email where provided.
- Check linked agents, branches or trading names only through the official record.
- Contact the Central Bank if the position is unclear.
The registers include different categories of financial service providers and schemes. Being present in one category does not necessarily permit every product. A firm authorised for insurance distribution, for example, should not be assumed to hold investment, payment or deposit-taking permission.
Corporate registration and regulation answer different questions
| Check | What it establishes | What it does not establish |
|---|---|---|
| CRO company search | Irish company identity, status, officers and filings | Permission to provide a regulated financial service |
| Central Bank register | Regulatory listing and relevant category or status | That the person contacting you is the genuine firm |
| Warning notices | Published regulator warnings about named unauthorised activity | That every scam or unauthorised operator has already been identified |
| Website disclosure | The firm’s claimed regulator and legal identity | Authenticity; cloned websites can copy genuine disclosures |
| Company report | Organised company and available filing/financial context | Regulatory authorisation, investment suitability or product safety |
How cloned-firm scams work
Fraudsters may copy the name, authorisation number, directors, address and logo of a genuine firm. They then change one contact detail—a phone number, domain, email or bank account—so that the victim communicates and pays the clone. A perfect match on the public company record can therefore be part of the deception rather than reassurance.
Use the regulator’s register to obtain contact details and call the genuine firm independently. Do not use a link or number in an unsolicited message. Ask the firm to confirm the named employee, product, account and payment instructions. If the genuine firm cannot confirm them, stop.
EEA passporting requires careful matching
Some firms authorised in another European Economic Area state can provide services in Ireland through passporting arrangements. The Central Bank explains that regulatory disclosures may name the home-state regulator and describe the Irish conduct-of-business position. Check both the Irish register information and the home regulator when necessary.
Do not infer passporting merely because a website serves Irish users. Confirm the exact legal entity, service, branch or cross-border permission and country. UK, EU and EEA are not interchangeable concepts.
Red flags before you send money
- unsolicited pressure to invest immediately or keep the offer confidential;
- returns described as guaranteed, risk-free or unusually high;
- an email domain that differs subtly from the authorised firm’s domain;
- a request to pay a personal, unrelated or overseas account;
- cryptocurrency or remote-access software required for payment;
- the authorisation number matches but contact details do not;
- the offered service falls outside the permission found;
- documents that look professional but cannot be verified independently;
- refusal to allow time for legal, tax or financial advice.
A safe verification workflow
- Pause the transaction and preserve the advert, messages and documents.
- Identify the legal firm and product provider separately from any intermediary.
- Check CRO identity where an Irish company is claimed.
- Search the appropriate Central Bank registers and warning notices.
- Check the home-state regulator for a passported firm.
- Call back through regulator-sourced contact details.
- Verify payment instructions through a second trusted channel.
- Read product terms, fees, custody, compensation and complaints information.
- Obtain independent advice for material or complex decisions.
If the firm is not found
Do not assume the firm is fraudulent or authorised. Recheck spelling, legal and trading names, agents and home-state permissions. Contact the Central Bank directly if you cannot resolve the status. Until it is resolved, do not send money, identity documents, passwords or remote access.
If you suspect impersonation or unauthorised activity, preserve evidence and report it through the Central Bank’s current channels and to An Garda Síochána where appropriate. Contact your bank immediately if money or account credentials have already been transferred.
What to monitor after onboarding
Regulatory and company status can change. Check new communications, domains and account changes rather than assuming a previously valid relationship authenticates every message. For a business counterparty, also review filing and financial context using our Irish company KYC and AML guide, while remembering that corporate due diligence does not replace regulated-firm verification.
Sources and editorial review
This guide was reviewed on 24 August 2026 using the Central Bank of Ireland’s financial service provider registers, guidance on unauthorised firms and checking authorisation, its warning on cloned firms and scams, and its explanation of EEA passporting. It is general information, not financial, legal or investment advice.