Eight SRA alerts: check who receives the files and the money

The brief

We identified eight unique SRA alerts dated 20–26 October in the regulator’s current index and checked each original page. They include a request for files using a genuine solicitor’s number and a supposed share-acquisition transfer using a law firm’s identity. Files request. Transfer warning.

The count measures published alerts, not victims, losses or distinct criminal groups. Our analysis focuses on the destination: who will receive the documents or money, and how was that route verified? A genuine professional identity does not authenticate a contact channel supplied by someone else. Before acting, establish the route independently and confirm the specific instruction. Keep the check with the instruction so another responsible person can see what was verified.

The full record

The eight source pages below were read for this edition, with the latest index checked during the 26 October scan. Names of genuine firms and professionals appear because their identities were misused; inclusion is not an allegation against them. SRA alert index.

The dated alert register

• 26 October — A Oldschool & Co. A website copied the genuine firm’s identity, SRA number and address and supplied different contact routes.
• 26 October — Jamie Dean Jones. A document used a genuine solicitor’s number and invited files through WhatsApp for a supposed legal letter.
• 22 October — Crypto Legal Aid. A Telegram exchange and document falsely claimed SRA regulation in connection with cryptocurrency.
• 22 October — Merit Law Firm. A website falsely presented a regulated law firm and individuals. The alert distinguishes the genuine Merit Legal Limited.
• 21 October — Wesley Gryk Solicitors LLP. A document and email about a supposed UK work visa application and job offer misused the genuine firm’s name.
• 20 October — Jepp Associates and Catherine Baines. A website copied the firm’s details and a solicitor’s image. The genuine firm said it had no website or email address.
• 20 October — Jepp Associates trademark emails. Emails used genuine solicitors’ names to invite businesses to register their names as trademarks, offering to assist.
• 20 October — CMS and Brynn Horner. A purported transfer agreement and emails sought funds for share acquisition while misusing genuine details.

Our analysis: an identity check has a destination

Checking that a solicitor exists answers only part of the problem. The next question is whether the person receiving the files or funds is acting through the genuine firm and authorised for this matter. A copied identifier can be accurate while the requested destination is false.

The Jepp website alert makes that distinction especially clear: the genuine firm said it had no website or email address. A plausible digital presence therefore needs verification in its own right. Read the original Jepp alert.

Confirm the instruction as well as the contact

For a hypothetical payment request, establish an independent contact route before discussing the destination and purpose. Keep the source of that route, who answered, what was confirmed and any unresolved discrepancy. If the proposed recipient changes, repeat the relevant check rather than carrying forward an earlier result without examining its scope.

For a document request, identify which files are needed, who will receive them and for what matter. An urgent request to move to a new messaging account deserves the same attention as changed payment details. The consequence may be disclosure of sensitive material even where no payment is requested.

Make the check usable by the next person

A colleague approving the next step should be able to see the original request and the verification outcome together. A bare “verified” label conceals whether the check concerned the professional’s existence, the communication route or the instruction itself.

The specific conclusion from this week’s register is to attach verification to the destination and action. This is an editorial workflow proposal, not proof that a particular platform prevents fraud. The linked SRA pages provide the warning details and the regulator’s contact advice.

Related reading: The preceding week’s SRA alert register.

Counted eight unique SRA alert URLs dated 20–26 October 2026; index checked on 26 October. Read all eight original pages. Counts concern alerts, not victims or losses. Multiple identities in one alert remain one entry. Later alerts may require an amendment.

1. SRA: A Oldschool & Co, 26 October 2026
2. SRA: Jamie Dean Jones, 26 October 2026
3. SRA: Crypto Legal Aid, 22 October 2026
4. SRA: Merit Law Firm, 22 October 2026
5. SRA: Wesley Gryk Solicitors LLP, 21 October 2026
6. SRA: Jepp Associates and Catherine Baines, 20 October 2026
7. SRA: Jepp Associates trademark emails, 20 October 2026
8. SRA: CMS and Brynn Horner, 20 October 2026