On November 4, 2026, Traders Magazine reported a warning from FINRA officials that artificial intelligence is making investment impostors more convincing. Christine Kieffer, who leads FINRA's investor education work, said "the 'how' has fundamentally changed," and noted that some fake sites now display legitimate registration numbers. FINRA's own advice to investors centers on the sender, meaning the website and email address a message comes from. A branded investor portal, with every page, document and email arriving from the sponsor's own domain, makes that check possible.
Investors who follow that advice will judge a sponsor partly by whether everything it sends comes from one recognizable name and domain. A sponsor should therefore treat its brand, its domain and its email authentication as part of how investors protect themselves, rather than as decoration. When a sponsor's genuine messages arrive from five different addresses, an investor has little reason to doubt a sixth. That consistency belongs alongside the other platform choices set out in the guide to capital raising for real estate sponsors.
What Investors Are Being Told to Check
FINRA set out the checks in an investor insight of April 29, 2026 on impostor scams. Impostor sites often take a real professional's name and other public details. Scammers use web and email addresses that initially appear correct, sometimes with the numeral 1 in place of the letter l. FINRA tells investors to confirm that the website and phone number they were given match the firm's own public records. It also tells them to be wary of any request to send information to a personal email address.
Credentials alone no longer settle the question. FINRA notes that securities regulators do not issue certificates to firms or professionals, yet fake ones are embedded in websites or sent to investors through encrypted messaging apps. Public records can be borrowed in the same way, so a Form D search tells an investor what an issuer has filed but not who sent a given email. A logo, seal or registration number can be copied outright, while a sponsor's real domain can only be imitated, and imitation is what investors and mail servers can be equipped to catch.
Why Scattered Senders Weaken That Check
Many sponsors assemble their investor operations from separate tools, and each one writes to investors under its own name. The portal sends login links from the vendor's domain and the signature service sends documents from another. The fund administrator or tax preparer sends K-1 notices from a third. The guide to switching a real estate investor portal describes investors receiving tax forms by email from a firm they did not recognize. Each of those senders is legitimate, yet together they teach investors that unfamiliar addresses are normal.
That habit is what impostors rely on. The FTC calls it spoofing when a scammer sends email that appears to come from a real company, and it calls that sender a business email imposter. A sponsor's investors already receive exactly the messages such a scammer would copy, from login links to distribution and K-1 notices. An investor used to unfamiliar senders has no baseline against which a fake stands out.
How a Branded Investor Portal Keeps One Domain in Front of Investors
A white label investor portal runs on software the sponsor licenses but shows investors only the sponsor's name. Its most useful feature is the custom domain, which puts the login page, the deal pages and every document link on an address the sponsor owns. An investor who bookmarked that address for the first raise finds it unchanged on the fourth.
The brand should cover every point where an investor signs, pays or reads a statement. That includes the deal page with its accredited only and risk language, the subscription documents and signature requests, and capital account statements. It also covers distribution notices, K-1 notices and every email the platform sends. An investor should learn one rule at onboarding and use it for the life of every deal. Genuine messages come from one domain and lead back to one portal.
Email Authentication Is the Part Investors Never See
A familiar domain helps only if impostors cannot send from it. The FTC's cybersecurity guidance for small businesses explains that without email authentication, scammers can use a company's domain to send phishing emails that look like the company's own. It describes three standards. SPF verifies that a mail server is allowed to send email for a domain. DKIM adds a digital signature so receiving servers can confirm the message came from the domain unaltered. DMARC checks that the result matches the visible "from" address and lets the domain owner tell receiving servers to reject failing messages, flag them as spam or take no action.
The portal's mail service must therefore be authorized in the sponsor's own domain records, so its messages pass the same checks as office email. The limits should be stated plainly. Authentication does nothing about a lookalike domain, which is a different address with its own records, and it cannot help when a genuine mailbox is compromised. It makes spoofing the real domain harder, which is why it belongs beside the brand rather than behind it.
What Sponsors Can Do
The steps below run from inventory to investor communication. Each can be finished before the next deal launches.
- List every domain and address that writes to investors today, including vendors, and note which messages carry links or documents.
- Move the portal, deal pages and document links onto a custom domain the sponsor owns, and send all portal email from that domain.
- Publish SPF and DKIM records for every service that sends on the sponsor's behalf, then set a DMARC policy and read its reports.
- Tell investors at onboarding, in writing, which domain and portal the sponsor uses and that payment instructions never change by email alone.
- Keep the same domain and sender across every deal, so a new raise looks like the last one.
- If the domain is spoofed, follow the FTC's advice to report it to IC3.gov and warn investors with a message that contains no links.
Raveum gives U.S. real estate sponsors a white label platform to run their raises, either on their own with Tier 1 Self-Managed or with Raveum's operations team on Tier 2 Assisted, where the sponsor's own counsel approves every document the team drafts. Every tier includes a branded investor portal on the sponsor's custom domain, email sent from its own domain, deal pages with accredited only and risk language, and investor communications run from one dashboard. See how the Raveum Sponsor Program works.
The Domain Is the Credential Investors Keep
The FINRA warning was about tools that make impostors convincing. Logos, seals and registration numbers can be copied, as FINRA's officials describe. A domain the investor has used for years, carrying mail that passes authentication, is the one marker an impostor has to imitate rather than copy. A sponsor that sends everything from that one place gives investors a test they can run on every message. Seen that way, a branded investor portal is part of the investor relationship that the guide to capital raising for real estate sponsors treats as the sponsor's own.
Frequently Asked Questions
What Is a Branded Investor Portal
A branded investor portal is investor portal software that shows investors only the sponsor's name, logo and domain. Investors log in, sign subscription documents, read statements and receive notices under the sponsor's identity, while the software provider stays in the background. It is often called a white label investor portal, and it works best when email also comes from the sponsor's own domain.
Can an Investor Portal Run on a Sponsor's Own Domain
Yes, where the platform supports a custom domain. The sponsor points an address it owns at the portal through DNS records it controls, so login pages and document links carry its own domain. Sending portal email from that domain also requires authorizing the platform's mail service with SPF and DKIM, so messages pass the checks receiving servers apply.
What Are SPF, DKIM and DMARC
They are the three email authentication standards the FTC describes for businesses. SPF verifies that a mail server is allowed to send email for a domain. DKIM adds a digital signature that lets servers verify the message came from the domain unaltered. DMARC checks that these results match the visible sender and tells receiving servers whether to reject, flag or accept messages that fail.
How Can Investors Tell an Email From a Sponsor Is Genuine
You can tell investors to compare the sender's domain with the one the sponsor named at onboarding, character by character, since FINRA warns that impostors substitute similar characters. They should reach the sponsor through the portal or a phone number they already hold, never through links in an unexpected message, and treat any request to use a personal email address as a warning sign.
Does a Branded Portal Stop Impersonation of a Sponsor
No. A branded portal and email authentication give investors a consistent sender to check, but they do not stop lookalike domains, compromised mailboxes or impersonation by phone and messaging apps, and investors can still lose money. When a sponsor learns it is being impersonated, the FTC advises reporting the scam to IC3.gov and telling customers quickly. A warning with no links gives investors nothing new to click.
What Should Carry a Sponsor's Brand in a Raise
Everything an investor reads or acts on. That covers the portal login, deal pages with their risk language, subscription documents and signature requests, capital account statements, distribution notices, K-1 notices and every email the platform sends. Investors should see one name and one domain across all of it, on every deal, so any message that breaks the pattern stands out.
This article is for general education only and is not legal, tax or investment advice. Securities and tax rules change and depend on each sponsor's facts, so work with qualified securities counsel and tax advisors before launching an offering. Real estate investments involve risk, including loss of capital, illiquidity and changes in property values. Offerings on Raveum are available to eligible investors only and are not open to the general public.
