GRC Report Staff

FinCEN, the Federal Reserve, FDIC, NCUA, and OCC jointly clarified that Suspicious Activity Report confidentiality requirements do not prevent banks from discussing potentially fraudulent transactions, suspicious activity, or account closures with affected customers. This guidance does not change existing BSA obligations or create new supervisory expectations, but it provides clarity that may help banks improve customer communication during fraud investigations while maintaining compliance.

The Norway Financial Supervisory Authority has issued a warning regarding "Yield Harbor (Clone)," a fraudulent entity impersonating a genuine FCA-authorized firm in the United Kingdom. Compliance teams should note this as a consumer protection alert rather than a rule change, and ensure appropriate client communication and fraud-prevention measures are in place.

The Luxembourg financial regulator (CSSF) has issued a public warning identifying SB Systems sp. z o.o. as an entity conducting unauthorized financial activities, despite this alert being logged under Norway's Financial Supervisory Authority jurisdiction tag. Compliance teams should treat this as a fraud/unauthorized-entity warning and ensure the firm is screened against onboarding and transaction monitoring systems regardless of jurisdictional labeling discrepancies.

Deutsche Bundesbank will reopen two existing Green Federal Bonds (2033 and 2041 maturities) via multi-ISIN auction on September 8, 2026, with a combined market maintenance quota of EUR 1.5 Billion. Compliance teams at eligible Federal Emissions Bidding Group member institutions must ensure timely, accurate bid submission in line with prescribed formats and deadlines.

The Bank of England, via its Frontier AI Information Sharing Forum, has published a thematic summary on how the design of surrounding tools, controls, and workflows ("harnesses") shapes the effectiveness of frontier AI in cyber defense. This is explicitly non-binding and does not introduce new supervisory expectations, but it signals areas of regulatory interest that firms deploying AI for cybersecurity should monitor closely.

The FSMA has scheduled its 2026 continuing professional training program for accredited auditors, held in person at its Brussels office in November. Compliance teams supporting occupational retirement institutions and collective investment undertakings must register by October 21, 2026, to ensure continued accreditation compliance.

De Nederlandsche Bank joined a roundtable hosted by the Dutch House of Representatives' Committee on Housing and Spatial Planning to discuss fiscal bottlenecks affecting the housing market, submitting a position paper on housing and taxation. While this is a low-intensity advisory engagement rather than a binding regulatory action, it signals DNB's ongoing policy influence on housing-related fiscal reform that could eventually shape mortgage lending and taxation frameworks.