"Final Notice" and £191,000 You Never Had: How to Spot the Fake FCA Account-Seizure Scam

A reader recently forwarded us an alarming email. It claimed to be a "final notice" from the FCA, warned that an account had been frozen for inactivity, and threatened to seize a balance of over £191,000 within seven days unless the recipient acted immediately. It looked official, quoted legal articles, and gave a case number. It is also a complete fabrication, and a good example of a scam doing the rounds in 2026 that is worth learning to recognise, because the same tricks turn up again and again.

What Is This Scam, in Short?

It is a phishing and recovery scam wearing an official costume. The email pretends to be from the Financial Conduct Authority, the UK's financial regulator, and also name-drops CertiK, a real blockchain security firm, to sound credible. The story is that you have a large sum sitting in a dormant account, and that unless you verify yourself and act fast, the money will be seized. The goal is not really about your account at all. It is to frighten you into handing over your personal details and, at the next stage, your money. Criminals impersonating the FCA are increasing across the UK, often targeting people who have invested before, and the pattern always involves urgency, payment requests or secrecy.

How Does the Scam Try to Hook You?

By pulling two emotional levers at once: fear and greed. The fear comes from the threat, an official body about to freeze your account, seize your funds and take legal action, all on a seven-day clock. The greed, or at least the curiosity, comes from the sum. Telling you there is £191,000 in an account is designed to make you think "wait, do I have money I have forgotten about?" and engage before your common sense catches up. That combination, panic plus a dangled reward, is the engine of almost every scam of this type, and the tight deadline exists purely to stop you pausing to check.

What Are the Red Flags in This Email?

Once you know what to look for, this one gives itself away quickly. The clearest signs:

• The sender address does not match the sender. It claims to be the FCA but comes from a random commercial domain, and the reply address is a different domain again. Genuine FCA emails only ever come from an fca.org.uk address. Two or three unrelated domains in one "official" email is a dead giveaway. FCA

• Extreme urgency and threats. "Final notice", a seven-day deadline, and the threat to seize everything are pressure tactics. Real regulators and banks do not operate on panic deadlines like this.

• A large sum you do not recognise. A specific, tempting balance you have no memory of is bait, not a fact.

• A request for all your personal details. The email asks for your full name, date of birth, full address, phone number and more. That is the harvest: enough to attempt identity theft or to sound convincing when they call you next.

• The real sting, hidden in the process. It says verifying your account "may include requesting a withdrawal or completing a transaction". That is the money-extraction step, where you are eventually asked to pay a "fee" or move money to "release" funds that never existed.

• Inconsistent contact details. Personal-style mobile numbers, a WhatsApp "text only" line, and business hours quoted in a European time zone rather than UK time do not belong to a UK regulator.

Any one of these should make you suspicious. All of them together make it certain.

Why the Legal Jargon Is Fake

The email leans hard on official-sounding law to intimidate you, citing "General Terms and Conditions", a "Code of Obligations" and a "Federal Act" with lots of section symbols. It is meaningless. The Code of Obligations is a piece of Swiss law and has nothing to do with a UK consumer or the FCA, and the other references are invented. Scammers use dense legal citations precisely because most people will not check them and will assume that anything quoting article numbers must be genuine. Official-looking does not mean official. The jargon is there to switch off your scepticism, not to inform you.

What Do the FCA and Real Firms Actually Do?

Knowing the real behaviour makes the fake obvious. The FCA never asks you to transfer money to it and never asks for your bank PINs or passwords. It also does not contact consumers to recover lost investments or funds. So an email from the "FCA" threatening to seize your money, or offering to help release it, is a contradiction in terms. The regulator simply does not work that way. CertiK, meanwhile, is a blockchain auditing company, not a body that manages your bank account or seizes balances, so a "CertiK case officer" guiding you through "verification" makes no sense either. Genuine organisations also do not ask you to confirm your account by making a withdrawal or a payment. That request alone marks any message as a scam.

What Should You Do If You Get One?

The safest response is to do nothing the email asks and take a few simple steps instead:

• Do not reply, do not click any links, and do not share any personal or financial details.

• Forward the email to the National Cyber Security Centre at report@phishing.gov.uk, then delete it. This is the official suspicious email reporting service. FCA

• Report it to Action Fraud at actionfraud.police.uk or on 0300 123 2040. In Scotland, report to Police Scotland on 101. slaptonparishcouncil-devon

• Report the FCA impersonation to the FCA directly. You can call them on 0800 111 6768 or use their contact form, and you can check whether any firm is genuine on the FCA Register. Quilter

• If you have already shared details or sent money, act at once. Contact your bank immediately, which you can do by calling 159, and report it to Action Fraud.

One more warning. If you have been scammed once, you are at greater risk of being targeted again by recovery-room scammers who pretend to help you get your money back. If someone contacts you offering to recover funds you have lost, treat that as a fresh scam too.

Why Businesses Should Care, Not Just Individuals

These emails do not only land in personal inboxes. The same tactics, urgency, fake authority, requests to verify or pay, are aimed at finance teams and staff every day, and a convincing one aimed at an employee can cost a company dearly. The defences are the same at work as at home: people who recognise the warning signs, a habit of verifying anything urgent through a known, separate channel, and never acting on a threatening email at face value. Building that awareness into staff training, alongside proper email security and monitoring, is part of what a modern managed security setup should cover, an approach we describe in our managed security service.

The Bottom Line

This "final notice" email is a fake, and a fairly typical one. It impersonates a regulator, invents a large sum to tempt you, threatens seizure to frighten you, quotes meaningless law to seem official, and tries to extract both your personal details and, eventually, your money. The single most useful habit is this: when a message pressures you to act urgently on money, stop and verify it through a channel you trust, never through the details in the message itself. Regulators do not seize your savings by email, and nobody legitimate asks you to make a payment to prove an account is yours. If in doubt, report it and delete it.

Because scams like this evolve constantly, this is a topic worth revisiting each quarter with fresh examples so it stays useful.