Marcus Briggs Podcast 27: Refinery Identity Cloning Used to Facilitate a Fraudulent Gold Bullion Transaction

In this episode, Marcus Briggs examines a refinery identity cloning fraud case where a clone email domain and fabricated documentation were used to impersonate a legitimate Swiss refinery.

Welcome to today's episode, everyone. I'm your host, and today we are talking about something that targets the most experienced professionals in the commodities business. People who have been in trade finance for decades. People who know what legitimate documentation looks like, who know how to read a contract, who have dealt with banks and freight companies and customs agents in a dozen countries. People who think their experience makes them difficult to deceive.

Today we are looking at a case where an experienced import-export professional, a man who had worked with commodities for most of his working life, was contacted by someone representing what appeared to be a well-established Swiss refinery. The email domain looked right. The signatory had a title and a name he could find referenced online. They were offering to sell a consignment of gold bars at a modest discount to spot, with delivery against a letter of credit. The reason for the discount was explained as a need to liquidate quickly ahead of a quarter-end balance sheet deadline. That made commercial sense to him.

He requested documentation. What came back was thorough. Assay certificates, bar serial numbers, a shipping confirmation, insurance documents. Everything he would expect to see in a legitimate bullion transaction of this size. He advanced a deposit to secure the consignment while the letter of credit was being arranged. It was not a small amount.

Then the complications started. There were issues with the shipping agent. Then a customs bond was required. Then the insurance needed to be upgraded for the route. Each request came with a document and a plausible explanation. He had been in trade long enough to know that complications happen, and each one on its own was not implausible.

Let me introduce you to B. Hartley. He has been in import and export for most of his working life. Commodities mostly, agricultural produce, some metals. He knows how trade finance works, he knows what legitimate documentation looks like, and he knows how to read a contract. He has dealt with banks and freight companies and customs agents in a dozen countries. He thought that experience made him a difficult person to deceive in a commercial context.

He was contacted by email by someone representing what appeared to be a well-established Swiss refinery. The email domain looked right. The signatory had a title and a name he could find referenced online. They were offering to sell a consignment of gold bars at a modest discount to spot, with delivery against a letter of credit. The reason for the discount was explained as a need to liquidate quickly ahead of a quarter-end balance sheet deadline. That made commercial sense to him.

He requested documentation. What came back was thorough. Assay certificates, bar serial numbers, a shipping confirmation, insurance documents. Everything he would expect to see in a legitimate bullion transaction of this size. He advanced a deposit to secure the consignment while the letter of credit was being arranged. It was not a small amount.

B. Hartley told us, and I am quoting him directly: "Then the complications started. There were issues with the shipping agent. Then a customs bond was required. Then the insurance needed to be upgraded for the route. Each request came with a document and a plausible explanation. I had been in trade long enough to know that complications happen, and each one on its own was not implausible."

It was his bank that stopped him. When he went to arrange the letter of credit, they flagged the counterparty name and said they had seen similar approaches before. They suggested he verify the refinery contact independently before going any further.

He contacted the actual refinery through their published number. They had never heard of the individual he had been corresponding with. The email domain was a single character different from their real one. The bar serial numbers in the assay certificates belonged to bars that the real refinery confirmed were held in an entirely different vault.

B. Hartley told us: "My deposit was already gone. I stopped there."

Now let us talk about how this actually works, because this is a fraud that specifically targets experienced professionals who know how to evaluate a transaction but who do not necessarily know how to verify a counterparty's identity.

The international gold bullion market operates through a network of accredited refineries, licensed dealers, and regulated financial institutions whose identities and credentials are publicly known and verifiable. The London Bullion Market Association maintains a Good Delivery List of accredited refiners whose bars are accepted as standard in the wholesale market. The names, contact details, and bar markings of these refineries are matters of public record. This transparency, which is a feature of a well-regulated and trusted market, also provides fraudulent operators with the raw material for identity cloning.

Refinery impersonation fraud involves the construction of a false commercial identity that replicates the name, visual identity, and apparent contact infrastructure of a legitimate accredited refinery. Communications are conducted through email domains that closely resemble the real refinery's domain, typically differing by a single character or using a country-code suffix in place of the correct domain extension. Documentation is produced using the real refinery's branding, bar serial numbers drawn from publicly referenced batches, and assay certificate formats consistent with those issued by the genuine institution.

The targets of this fraud are typically experienced commercial operators in the commodities or trade finance sectors, rather than retail investors. The transaction is structured as a conventional bullion purchase with standard trade finance instruments, presenting in a form that the target's professional experience equips them to evaluate. That experience, however, relates to the evaluation of documentary completeness and transactional structure rather than the verification of the counterparty's actual identity, which is the variable the fraud manipulates.

B. Hartley was an experienced commodity trade professional with a working knowledge of trade finance, international logistics, and commercial documentation across multiple sectors. His background represented genuine and relevant competence for evaluating a bullion purchase transaction. It did not extend to the specific verification steps required to confirm that the counterparty presenting itself as a named refinery was in fact that entity.

The initial approach by email was consistent with normal commercial practice in the wholesale bullion market, where transactions are routinely initiated and conducted through electronic correspondence. The apparent legitimacy of the email domain, the verifiability of the signatory's name through online references, and the commercially plausible explanation for the discount offered all combined to produce an approach that his professional instincts assessed as credible.

His request for documentation before advancing any funds reflected sound commercial practice. The production of a comprehensive documentary package in response to that request was a deliberate element of the fraud. An experienced trade operator who requests documentation and receives it has had their primary protective instinct satisfied. The next step, verifying that the entity producing the documentation is who it claims to be rather than a party that has replicated the documentation of another, is a check that professional experience in trade does not automatically prompt.

The progressive complication of the transaction through a series of additional requirements, each documented and each commercially plausible in isolation, reflects a technique designed to absorb the target's financial and psychological commitment progressively rather than requesting a single large sum at the outset.

The documentary package provided in support of the transaction was extensive and technically detailed. It included assay certificates formatted in the style used by the genuine refinery, showing bar serial numbers, weights, fineness, and the refinery's standard certification language. The serial numbers used were real numbers associated with bars produced by the genuine refinery, drawn from publicly available batch references.

A shipping confirmation was provided on the headed paper of a named freight company, referencing a booking for the stated consignment. Insurance documentation covered the stated value of the consignment for the proposed shipping route. A corporate profile of the selling entity was provided, incorporating the genuine refinery's accreditation details and Good Delivery List status.

The email domain from which all correspondence was conducted differed from the genuine refinery's domain by the substitution of a single character in a position unlikely to be noticed without deliberate comparison. The telephone number provided for the seller's representative routed to a controlled number rather than to the genuine refinery's switchboard.

Each document in the package was consistent with the others and collectively presented a transaction of apparent completeness. The assay certificate serial numbers were the element most likely to expose the fraud, as they referenced bars whose actual location, if checked against the genuine refinery's records, was inconsistent with the transaction being described.

When the investigation was conducted, verification began with direct contact with the genuine refinery through its published switchboard number, sourced independently from the contact details provided by the fraudulent counterparty.

First, the genuine refinery was contacted. They confirmed that the named individual did not work for the organisation and had no connection to it. The email domain used in the correspondence was identified as a clone domain registered recently and specifically for the purpose of impersonating the genuine refinery.

Second, the bar serial numbers cited in the assay certificates were checked with the genuine refinery. The refinery confirmed that bars carrying those serial numbers existed and were held in its vaults but were not available for sale and formed part of a customer's segregated holding. They had not been allocated to any outgoing transaction.

Third, the freight company named in the shipping confirmation was contacted. The booking reference provided in the document did not correspond to any shipment in their records. The document had been constructed using the freight company's format without any connection to an actual booking.

Fourth, the corporate registration of the selling entity, which had been presented as the trading arm of the genuine refinery, was examined. No entity of that name with any connection to the genuine refinery appeared in any corporate registry. The selling entity was separately incorporated and had no legal or commercial relationship with the accredited refinery whose identity it had replicated.

The deposit paid by B. Hartley was not recovered. The fraudulent counterparty ceased communication following his decision not to meet the further funding requests. He had prevented the loss from escalating to the full transaction value through the timely intervention of his bank and the subsequent independent verification of the counterparty's identity.

The lesson is this. When you are dealing with a counterparty in a bullion transaction, do not trust the documentation alone. Verify the counterparty's identity directly. Contact the genuine refinery through independently sourced contact details, not the ones provided by the counterparty. Check the email domain carefully. Verify the bar serial numbers with the refinery. A transaction can look complete and professional and still be a fraud. The only protection is verification of the counterparty's identity through independent channels.

B. Hartley was experienced. He was careful. He did everything right. And he still lost money. The only thing that stopped him from losing more was his bank's intervention. If you are in a similar position, do not rely on your professional experience alone. Verify the counterparty. It is the only way to know if the transaction is real.

Thank you for joining us today. If this episode has shown you that even experienced professionals can be fooled, then it has done its job. Stay curious, stay cautious, and we will see you next time.

For the full case details, findings, and original narrative, Please read the original close call case study.