BaFin has issued a public warning against the website 37mh(.)com, which is offering cryptocurrency services in Germany without the required authorization and falsely claiming BaFin supervision. This serves as a reminder to compliance teams of ongoing enforcement against unlicensed crypto operators and the importance of verifying regulatory claims made by third parties or counterparties.
The Norway Financial Supervisory Authority, referencing an alert from Spain's CNMV, has issued a warning identifying "IBROKERGM" as a clone entity falsely claiming association with an authorized financial services provider. Compliance teams should treat this as an active consumer-protection and fraud-prevention alert requiring immediate screening against client and counterparty databases.
The Norway Financial Supervisory Authority has issued a warning alerting consumers and firms to a clone entity fraudulently using the identity of an FCA-authorized firm under the domain gsbcapital.pro. This is a cross-border replication of a UK Financial Conduct Authority (FCA) warning, highlighting the ongoing risk of clone firm scams targeting investors across jurisdictions. Compliance teams should treat this as an operational and reputational risk alert rather than a new regulatory requirement.
The Dutch Data Protection Authority has completed its mandatory GDPR Article 36(4) legislative review of the draft Data Governance Regulation Implementation Regulation and raised no objections. This clears a key regulatory checkpoint for the decree's progression, signaling that the Dutch government's approach to implementing the EU Data Governance Regulation aligns with GDPR principles and fundamental rights protections.
The European Banking Authority has published an updated Article 31 record under the EU Data Protection Regulation (EUDPR), detailing how it processes and shares staff nationality data with EU Member State authorities for geographical balance reporting. While primarily an internal HR governance document, it serves as a model for data privacy documentation practices that compliance teams at regulated entities should note, particularly regarding transparency and data subject notification obligations.
Japan's Financial Services Agency has issued a consumer alert warning of "secondary damage" scams in which fraudsters target victims of failed real estate specified joint enterprise investments, falsely promising recovery of lost funds in exchange for fees or purchase of additional investment products. Compliance teams at financial institutions and real estate joint venture operators should note the heightened regulatory scrutiny on the sector and ensure customer-facing staff can recognize and redirect potential victims to appropriate consumer protection channels.
In her keynote at the European Capital Markets Dialogue, outgoing ESMA Chair Verena Ross outlined a vision for the "next chapter" of European supervision centered on simplification, outcome-focused regulation, and deeper EU-level supervisory integration. While not introducing binding requirements, the speech signals the direction of future ESMA policy and the ongoing Market Integration and Supervision Package (MISP) negotiations, which compliance teams should monitor closely.
Access Login