In the online forex and CFD sector, a recurring scam is the "clone broker." Simply put, it's creating a website that mimics a legitimate broker, copying their brand language, regulatory claims, even fabricating addresses. Once you deposit money, withdrawing it becomes problematic—they delay with various excuses, requesting additional fees and taxes.
Regulatory bodies have long warned about such operations. The UK's FCA is blunt: clone companies are not authorized and use the names, addresses, and registration numbers of real companies to deceive people.[1][2]
There's an evolution of this scam, presented as an "investment platform." You open an account, see low spreads and bonuses, and are urged by customer service to deposit more. When you attempt to withdraw money, numerous charges like "verification fee," "deposit," or "risk management deposit" start appearing.[3]
We examined Doto's Japanese site jpdoto.com and found issues closely matching this playbook.
What Doto Says About Itself
On the English page of jpdoto.com, it claims to be "strictly regulated," with global business coverage. The login points to an external site, m.jpdoto.cc.[5] The customer service email uses [email protected], which doesn't match the main domain. The office address is a street in Denver, Colorado.[5][6]
The "About Us" page is even bolder: it claims to be in the "top 50 US financial services companies" with over 10 million global clients and an annual trading volume of "billions of dollars."[6] Yet, throughout the site, there is no evidence to substantiate these claims—no company registration number or regulator’s license number. We've seen too many scam sites with this "grandiose boasting + absence of verifiable information" combo.
Recently Registered Domain Pretending to be Long Established
Checking the WHOIS records: jpdoto.com was registered on March 2, 2026, and expires next March. The registrant information is protected by privacy services, hiding actual ownership.[4]
A genuine top 50 US financial company would never use a freshly registered domain without fully transparent company background information. While a new domain doesn't necessarily indicate a scam, it certainly doesn't align with the website's "established institution" tone.[4][6]
Just to note, old domains don't guarantee safety either—scammers also buy old domains to appear established. However, this Doto site didn’t even bother with buying an old domain; it brazenly uses a new one to impersonate a giant.[4]
The Executive Team Page is Just Copy-Paste
The most outrageous part is the "Our Team" page. It names a CEO called Terrence Anderson, claiming 35 years of experience and a senior position at Franklin Templeton, while also being the CEO of "Mitrade."[7]
We did a search on this text and found identical content on another site called RBC Direct in US, even the "Mitrade" term is the same.[8] Another site, HantecTraderR, has copied the same resume.[9]
This makes it clear: these executive bios are not about real people; they are template texts copied from elsewhere. Genuine financial companies' executive information can usually be cross-referenced through company registration records, regulatory databases, and media reports. Doto's site has none of this—it's all borrowed.[7][8][9]
The Denver Address Shared by Multiple Questionable Platforms
Doto lists its office address as 1430 Stout St, Denver, Colorado.[5][6] An address alone proves nothing. However, we found on third-party platforms that this address also appears in the directories of other high-risk, unlicensed brokers. In other words, it's likely a template virtual office address shared among multiple "brokers," not a location where employees actually work.
The Regulatory Aspect Doesn't Add Up
The Doto brand itself has legitimate operations. According to public information, Doto has registered entities in Mauritius, South Africa, Seychelles, and Cyprus. The main websites are doto.com and doto.eu.[11][12][13]
Cyprus's CySEC has an "approved domains" list, which includes domains that related Doto entities can use: www.doto.eu, www.eu.doto.com, www.doto.com/eu.[13] jpdoto.com is not on this list. A regulated company must report to the regulator which domain it uses to serve clients. jpdoto.com not being on the list but still operating to attract customers is itself a significant problem.[5][13]
Moreover, there's a contradiction: Doto's official site on doto.com clearly states in the risk warning that its services do not target Japanese residents.[11] However, jpdoto.com is a Japanese site, obviously targeting the Japanese market.[5][11] This is puzzling: on one hand, saying "we don't serve Japan," while on the other, creating a Japanese domain and page—isn't this a contradiction? The more reasonable explanation is that jpdoto.com is a clone site, not part of the legitimate regulatory framework.[1][11][13]
Once Money Goes In, It's Hard to Get Out
These platforms generally follow the same script: initially, they let you make small profits, making the dashboard display impressive returns. Customer service urges you to upgrade accounts, deposit more, and leverage higher. When you attempt to withdraw large sums, they stall—demanding fees for "taxes," "deposits," "unlocking fees," with new charges constantly emerging.[3][16]
The U.S. FBI plainly states in warnings: the scam aims to get you to invest more until you try to stop, only to find you can't withdraw your money.[3] To make matters worse, after losing money, someone may impersonate a "recovery team" offering to help retrieve the funds for a "service fee"—this is yet another layer of the scam.[14][16]
If You've Already Invested, What to Do
Once money is transferred out, the chances to recover it are minimal and the window is very short. If using a credit card or bank transfer, immediately contact the bank to initiate dispute procedures and save all transaction and conversation records.[16] For cryptocurrency, recovery is nearly impossible, but still report to the exchange to keep a record.[3][16]
Additionally, don't trust any "paid recovery" promises. These so-called recovery services are likely the same scammers targeting you for the second time.[14][16]
Conclusion: Doto (jpdoto.com) is a Clone Site
We don't conclude from just a couple of suspicious points. The problem is there are too many of these points, and each one is critical:
- Domain registered in March 2026, yet claims to be a top 50 US financial firm.[4][6]
- Login and support email don't match the main domain; company registration info is completely opaque.[5][6]
- Executive resumes are copied directly from other sites, proving fake identities.[7][8][9]
- Office address is shared by multiple problematic platforms, likely a virtual address template.
- CySEC's approved domain list doesn't include jpdoto.com, and Doto's official stance says Japan is a restricted area.[11][13]
Putting these together, the conclusion is clear: Doto (jpdoto.com) is highly suspected of being a clone broker scam platform. It's advised to stay away and refrain from depositing funds. [1][4][7][13]
References
[1] https://www.fca.org.uk/consumers/clone-firms-individuals
[4] https://www.cysec.gov.cy/en-gb/entities/investment-firms/approved-domains/
[5] https://jpdoto.com/en/index
[6] https://jpdoto.com/en/about
[7] https://jpdoto.com/en/team
[8] https://www.rbcdirectinus.com/en/team
[9] https://www.hantectraderr.com/en/team
[10] https://www.fsa.go.jp/en/refer/cold/index.html
[11] https://doto.com/
[12] https://doto.com/regulation/
[13] https://www.cysec.gov.cy/en-gb/entities/investment-firms/approved-domains/
[14] https://consumer.ftc.gov/articles/refund-and-recovery-scams
[16] https://www.finra.org/investors/insights/recovering-from-investment-fraudhttps://www.fca.org.uk/consumers/clone-firms-individuals
