WebVetted
+ New  
Site icon
domain

Castletrust.co.uk (Domain) Investigation Report

Generated on Jun 9, 2026

Recommendation
Proceed
Overall Summary
Safe
Β  Why we think so?Β 

🏦 castletrust.co.uk appears to be the legitimate Castle Trust Bank site, not a scam domain. The site has a long registration history, a valid SSL certificate, UK-based traffic, public contact details, a physical London address, and a Google Business Profile with 4.5β˜… from 268 reviews. Its infrastructure also looks normal for a regulated financial firm, using Amazon Route 53, Cloudflare, Mimecast, Google Workspace, Salesforce, and other common enterprise services.

One important caution: there is an FCA warning about a different lookalike domain β€” castletrustb.com β€” which is a clone of an authorised firm. That warning does not point to castletrust.co.uk itself, but it does mean users should verify the exact domain and email address before sharing any financial information.

Overall, this looks authentic and low risk, with the main threat coming from impersonation attempts rather than the domain itself. βœ…

Confidence Score Our overall confidence rating for this entity based on public signals, activity, and risk checks.
91%

Risk Insights

🏦

Looks like a real bank

  • The domain has been around since 2011.
  • There is a physical London location and real business contact info.
  • The site uses standard bank-grade tooling like Mimecast and Google Workspace.
πŸ›‘οΈ

Main risk is impersonation

  • FCA warnings mention a different lookalike domain, castletrustb.com.
  • That raises phishing risk even if castletrust.co.uk itself is genuine.
  • Verify the exact domain and sender address before sharing sensitive data.
βœ…

No direct blacklist hit

  • Google Safe Browsing did not flag the domain.
  • The crypto scam blacklist is also negative.
  • That lowers the chance of obvious malicious behavior.

Category Scores

Red Flags & Warnings

  • There is an FCA warning for a clone site using a similar name, which increases the risk of impersonation even though the reviewed domain itself is not flagged.

Detailed Checks & Insights

0-100 Scale

Domain age and registration stability

Score: 95
Passed

"A long-lived registration is a strong authenticity signal for a financial brand."

Reason: The WHOIS record shows a 2011 creation date and the domain is still active under a mainstream registrar.

Technical infrastructure legitimacy

Score: 92
Passed

"This is what you would expect from a regulated bank, not a disposable scam site."

Reason: The site uses normal enterprise infrastructure, including AWS Route 53, Cloudflare, Mimecast, Google Workspace, Salesforce, and SSL.

Public contact transparency

Score: 96
Passed

"The contact set includes savings, customer service, complaints, DPO, and new business addresses."

Reason: Multiple official email addresses and UK phone numbers are published across the site and related documents.

Physical presence and local business footprint

Score: 93
Passed

"A verified physical location is a strong trust indicator for a financial institution."

Reason: Google Places shows a bank at Tower 42 in London with a substantial review count and normal opening hours.

Reputation and complaint surface

Score: 82
Passed

"Review volume is limited, so this is supportive but not conclusive."

Reason: Public coverage is mostly normal business news, and the available review signal is positive overall with no obvious scam pattern.

Blacklist and malware/phishing checks

Score: 98
Passed

"This is one of the strongest direct safety signals in the evidence set."

Reason: Neither Google Safe Browsing nor the crypto scam blacklist flagged the domain.

Impersonation and legal risk

Score: 78
Passed

"This does not implicate castletrust.co.uk directly, but users should verify exact domains and sender addresses."

Reason: The main caution is an FCA warning about a separate clone domain, castletrustb.com, which raises impersonation risk around the brand.

Your Next Steps

  • 1

    If you plan to use the bank, confirm you are on castletrust.co.uk before entering passwords, payment details, or identity documents.

  • 2

    Use only email addresses ending in @castletrust.co.uk and phone numbers published on the official site.

  • 3

    If you receive a message from a lookalike domain such as castletrustb.com, treat it as suspicious and verify it independently.

  • 4

    For any financial decision, cross-check the firm’s authorisation status and product terms before transferring money.

Key Evidence & Citations

πŸ“Œ More actions for Castletrust.co.uk:

πŸ•΅πŸ» Keep vetting

Community feedback

Not rated yet

0 reviews published

5 stars 0%
4 stars 0%
3 stars 0%
2 stars 0%
1 star 0%

Leave a review

Reviews

No public reviews yet. Be the first to share your experience.

Analyst Briefing

Get answers grounded in the sourced data. Citations like will link to the evidence locker.

Evidence Locker
// Waiting for data ingestion...

Evidence Locked

This raw JSON payload contains sensitive intelligence data .

Unlock
638 data points collected