GRC Report Staff

Norway FSA Relays CSSF Warning on Fraudsters Misusing Gekko Fund SICAV Name

The Norway Financial Supervisory Authority has published a warning that references a Luxembourg CSSF notice about fraudulent actors misusing the name of Gekko Fund SICAV. Compliance teams should treat this as an impersonation and investment fraud alert and update screening, monitoring, and customer-protection controls accordingly.

Norway FSA Republishes UK FCA Warning on Unauthorized Firm Impound Services Ltd

The Norway Financial Supervisory Authority (Finanstilsynet) has posted a warning about Impound Services Ltd, a United Kingdom-issued notice that links to the UK Financial Conduct Authority (FCA) warnings list. Compliance teams should treat the entity as a high-risk, potentially unauthorized or fraudulent counterparty and screen for any exposure. The source material is sparse, so internal verification against the FCA page is essential.

Norway FSA Relays UK FCA Warning on Blackswan Trading Clone of FCA-Registered Firm

The Norway Financial Supervisory Authority has published a warning that references a UK FCA alert about "Blackswan Trading," a clone of an FCA-registered firm. Clone firms impersonate legitimate authorized entities to defraud investors, so compliance teams should update screening controls and customer-protection messaging.

BaFin Warns Against Unauthorized Financial Services Offered via rollincapital(.)com Website

BaFin has issued a warning about rollincapital(.)com, whose unknown operators are suspected of offering financial and securities services in Germany without authorization. FINMA, the Swiss regulator, has already issued a corresponding warning. Compliance teams should treat the site as a high-risk counterparty and update screening and fraud controls accordingly.

Dutch DPA Objects to Human Trafficking Directive Decree Over Unregulated Processing Bases

The Dutch Data Protection Authority (AP) has formally objected to the draft decree implementing the revised EU Human Trafficking Directive. It found that the GDPR legal bases of public interest task and legal obligation are not properly established in law. Without further regulation, processing of victims' personal data, including special category and criminal data, could be unlawful. Compliance teams should treat this as a signal of how strictly regulators apply the Article 6(3) requirement.

Swedish FSA Launches Survey on AI Use and Risk Management Across Financial Sector

Finansinspektionen (FI) is surveying a wide range of supervised firms on how they use AI and manage its opportunities and risks. The survey also covers how firms expect the partially applicable EU AI Act to affect them. Compliance teams at Swedish-supervised institutions should expect a data request and treat the exercise as a signal of FI's supervisory priorities.

Norway FSA Publishes Warning on VrenKapstead Referencing UK FCA Alert

The Norway Financial Supervisory Authority (Finanstilsynet) has issued a warning on an entity named VrenKapstead, pointing to a corresponding UK Financial Conduct Authority (FCA) warning. The source content is minimal, so compliance teams should treat this as an unauthorized or suspicious firm alert and screen for exposure while verifying details directly with the FCA.