GRC Report Staff

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning that relays a French Autorité des marchés financiers (AMF) blacklist entry for the website amf.eigen.eng.br. The AMF lists the site under its "usurpation" category, meaning it appears to impersonate the AMF itself. Compliance teams should treat the domain as a fraud indicator and update their screening and customer-protection controls.

The Norway Financial Supervisory Authority has issued a warning about "GM Trade / GM TradeAI," referencing a FINMA (Switzerland) warning-list entry. Compliance teams should treat the entities as unauthorized or high-risk and screen for any exposure, since the source content is minimal and details must be verified directly with FINMA.

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about cryptobullbear.com, which the French Autorité des Marchés Financiers (AMF) added to its blacklist of crypto-currency websites. Compliance teams should treat the domain as a high-risk, likely unauthorized actor and update screening and customer-protection controls accordingly.

The CFTC approved a final rule establishing a 30 percent presumptive award for whistleblower awards of USD $5 Million or less, subject to Commission discretion and its analysis of relevant regulatory factors. Modeled on SEC Rule 21F-6(c), the rule aligns the two agencies' whistleblower frameworks. Compliance teams should reassess internal reporting programs, because the clearer and more predictable award structure may increase incentives for employees to report externally.

The Bundesbank's September 11, 2026 press release shows domestic bond issuance surged in July 2026, driven by federal government and credit institution issuance and heavy foreign investor demand. This is a statistical release, not a rule change, so it creates no new obligations. It does provide useful market context for compliance, treasury, and risk teams assessing liquidity, concentration, and funding conditions.

The ECB's 2026 reverse stress test found that banks need stronger risk data aggregation, board-led scenario planning, and more realistic assumptions about crisis management actions. Supervisors identified weak links between capital, liquidity, and operational impacts, as well as overreliance on mitigating measures that may be unavailable when many banks act at once. Compliance teams should expect continued supervisory scrutiny of geopolitical risk and capital planning frameworks.

The UK's Financial Reporting Council has revised two auditing standards governing how auditors consider possible breaches of laws and regulations, replacing a more procedural approach with one that places greater weight on the risks identified during an audit.