Depending on activity and location, check the relevant regulator, such as the Capital Market Authority, DFSA in the DIFC, or VARA for Dubai virtual assets outside the DIFC. The scope of permission matters.
Enter the register through the regulator's official website and match the entity, web address and permitted activity. VARA in-principle approval does not permit client services; an introduction licence does not necessarily authorise trading.
Do not substitute promised guaranteed returns or a postdated cheque for risk checks. Preserve evidence and report suspected fraud promptly; a future cheque date alone does not prevent reporting a suspected crime.
A practical next step
Do not transfer money until the entity and required permissions are verified; preserve records for reporting if you suspect fraud.