SRA warns fake online profiles and letters misused solicitors’ identities in separate scam attempts
The Solicitors Regulation Authority (SRA) has issued a public warning after fraudsters misused the identities of genuine solicitors and a regulated law firm in two separate incidents involving a fake online profile and a misleading letter.
In an alert published on 3 July 2026, the SRA said it had been informed about a false profile on the freelance marketplace Fiverr using the name “Cressida Lucy”. According to the regulator, the profile claimed to offer legal services and suggested that the individual was regulated by the SRA.
The SRA confirmed that it does not authorise or regulate any solicitor under the name “Cressida Lucy”. It also stated that any business or transaction conducted through the Fiverr profile is not carried out by an individual or firm authorised or regulated by the regulator.
Alongside the fake online profile, the SRA identified a separate letter sent to a member of the public concerning a tenancy matter. The letter misused the name and SRA number of a genuine solicitor, together with the name and genuine work email address of another solicitor. It also included the details of a legitimate law firm.
The regulator confirmed that the genuine firm involved is Harrowells Limited, which it authorises and regulates under SRA number 615304. The firm’s head office is based at 1 St Saviourgate, York, while it also operates a branch office at Moorgate House, Clifton Moor Gate, York.
The SRA further confirmed that Cressida Lucy Ada Killick, SRA number 7018414, is a genuine solicitor at Harrowells Limited. Robert Paul Onyett, SRA number 155983, is also a solicitor at the same firm.
Harrowells Limited, Cressida Lucy Ada Killick and Robert Paul Onyett have all confirmed that they have no connection with either the Fiverr profile or the tenancy-related correspondence described in the alert.
The SRA has urged members of the public to carry out appropriate due diligence whenever they receive correspondence claiming to come from a solicitor or law firm whose identity may have been copied or cloned.
The regulator advises anyone who receives similar communications to verify their authenticity by contacting the relevant law firm through trusted and established contact details rather than relying on information contained in the correspondence itself. It also recommends checking whether a solicitor or law firm is authorised and regulated by the SRA and, where necessary, using additional verification methods such as public records, telephone directories or company records before proceeding with any transaction.