GRC Report Staff

FCA Issues Warning Against Unauthorized Firm Pilotrade AI

The FCA has added Pilotrade AI to its Warning List for providing or promoting financial services in the UK without authorization. Compliance teams should note this designation for screening purposes, as consumers dealing with this firm lack access to the Financial Ombudsman Service and FSCS protections.

ESMA Issues New Guidance on Impact and Climate Transition Claims to Curb Greenwashing

ESMA has published two thematic notes addressing sustainability-related impact claims and climate transition claims made through funds, bonds, and benchmarks. While non-binding, the notes clarify regulatory expectations under the existing "clear, fair and not misleading" communication standard and provide concrete examples of good and poor market practice. Compliance teams should use these notes to benchmark current disclosure practices and reduce greenwashing risk ahead of the SFDR review.

FSMA Warns of Fraudulent Trading Platform Falsely Claiming Regulatory Approval

The FSMA has issued a public warning that Neura-L, operating via trade-platform.space, is falsely claiming FSMA registration to defraud investors. The entity is not authorized to provide financial services in Belgium, and the FSMA has flagged it as an investment fraud and fake trading platform. This serves as a reminder for compliance teams to monitor regulator warning lists and reinforce investor due diligence protocols.

Austrian FMA Approves Licence Spin-Off Creating Weilburg Invest GmbH

The Austrian Financial Market Authority has approved the proportional spin-off of the investment services provider licence held by Weilburg Family Office GmbH into a newly established entity, Weilburg Invest GmbH. Compliance teams engaging with either entity should update counterparty due diligence records and confirm the new entity's licensing status and scope of authorization.

FCA Issues Warning Against Unauthorized Firm Quantumtradedesk.org

The FCA has added Quantumtradedesk.org to its Warning List as an unauthorized entity potentially targeting UK consumers with financial services or products. Compliance teams should note this action as part of ongoing FCA efforts to combat unauthorized trading platforms and investment scams, and ensure customer-facing staff are aware of the firm's details to prevent potential customer harm.

EBA Updates Validation Rules Package for Supervisory Reporting Framework

The European Banking Authority has published an updated set of validation rules (effective 12 October 2026) applicable to framework releases from version 4.0 onward, alongside a history of quarterly "small validation rules packages" that adjust rule severity and activation status. Compliance and regulatory reporting teams must ensure reporting systems and taxonomies align with the latest validation logic to avoid submission errors or rejected filings.

Norway Fines Xandr NOK 92 Million Over Unlawful Sharing of Grindr Users' Sensitive Data

The Norwegian Data Protection Authority has issued its largest-ever fine—NOK 92 million (€8.6 million)—against Microsoft-owned ad-tech company Xandr for unlawfully processing and sharing sensitive personal data, including sexual orientation data derived from Grindr app usage, through real-time bidding. The decision reinforces that joint controllers cannot shift data protection responsibility to counterparties and underscores heightened regulatory scrutiny of the ad-tech ecosystem's handling of special category data.