DFSA warns of scam cloning authorised firm Menhir Capital

Dubai's financial regulator has warned the public about a scam that impersonates a legitimate DFSA Authorised Firm, Menhir Capital Management Limited. The Dubai Financial Services Authority (DFSA) said scammers set up a fraudulent website and email address pretending to belong to the firm, using its name, its address in the Dubai International Financial Centre (DIFC) and its DFSA Firm reference number without permission.

The DFSA confirmed that the fraudulent website, www.masiju.com, and the associated email address do not belong to Menhir Capital Management Limited. It said the firm's genuine email domain is “@menhircapital.ae” and its true website is “www.menhircapital.ae”.

How the clone site was dressed up

The fraudulent website presents itself under the name “Menhir Capital Management” and promotes real estate investment and consultancy services, including property management, investment advisory and citizenship programmes. The site lists a Dubai address at Unit 08A, Level 7, Building 1 Currency House, PO Box 482022, which is consistent with a DIFC address, along with a contact email and a phone number.

The DFSA said the scammers used the firm's name, its DIFC address and its DFSA Firm reference number fraudulently and without permission. The regulator stressed that the website and email address purporting to belong to the firm are fraudulent.

What the regulator is telling the public

The DFSA strongly advised the public not to respond to any communications regarding the scam and said that under no circumstances should anyone send money to any party connected to it. The warning was issued in English and in an Arabic-language alert dated 17 August 2026, which repeats the same guidance and confirms the firm's official email domain and website.

How to check before you deal

The DFSA encourages consumers to refer to its list of regulated firms and Authorised Individuals when dealing with financial services providers. Checking a firm's registration in the regulator's official register, and comparing official domains and contact details, can help identify possible clones. Requests for advance withdrawal or release fees are a general warning sign, and absence from a warning list does not prove that a firm is safe.