GRC Report Staff

Norway FSA Republishes French AMF Warning on Unauthorized Crypto Derivatives Site fxr-ai.com

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about fxr-ai.com, a website that France's Autorité des Marchés Financiers (AMF) placed on its blacklist of unauthorized crypto-asset derivatives offerings. Compliance teams should treat the site as a high-risk counterparty and fraud indicator, and update screening and monitoring controls accordingly.

FCA Finalizes Cryptoasset Perimeter Guidance Ahead of October 2027 Regime Start

The FCA's PS26/18 finalizes new PERG 18 perimeter guidance, largely as consulted on, to help firms determine whether their cryptoasset activities require authorization when the new regime begins on 25 October 2027. The application window opens 30 September 2026, and existing registrations or permissions will not convert automatically. Compliance teams should start perimeter assessments now, because the guidance does not yet reflect a pending statutory instrument that will change some business model outcomes.

CFTC Whistleblower Rules Under 17 CFR Part 165 Set Award Eligibility and Anti-Retaliation Standards

The CFTC's Part 165 establishes the framework for its whistleblower award program under Section 23 of the Commodity Exchange Act, including eligibility, submission procedures, confidentiality, and anti-retaliation protections. Compliance teams at CFTC-regulated firms should treat this as a core reference for internal reporting program design, because the rules reward employees who report externally and create incentives that interact directly with internal reporting channels.

Norway FSA Relays Irish Central Bank Warning on Clone Firm Impersonating FPPE Fund plc

The Norway Financial Supervisory Authority has published a warning, originally issued by the Central Bank of Ireland, about an unauthorized "clone" entity using the name FPPE Fund plc. Clone firms impersonate legitimate authorized entities to defraud investors, so compliance teams should update screening controls and client-facing warnings.

Norway FSA Flags Investpathline.com/fr/3 on Crypto Blacklist Citing French AMF Warning

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about the website investpathline.com/fr/3, referencing the French AMF's crypto-currency blacklist as the originating source. The notice signals a likely unauthorized or fraudulent crypto-related investment offering. Compliance teams should treat it as a cross-border red flag and update screening and monitoring controls.

BaFin President Links Greater Proportionality to Stronger Governance and Risk Culture at Institution

In his closing speech at the Proportionality Conference in Bonn on September 16, 2026, BaFin President Mark Branson said the regulator will keep pushing for simpler, more proportionate, and more risk-oriented regulation, provided financial stability is not jeopardized. He tied the new flexibility to institutions' own governance and risk culture, and signaled that supervisors will scrutinize both more closely. Compliance teams should expect less rule-citing and more qualitative, institution-specific supervisory engagement.

ESAs Board of Appeal Member Margarida Lima Rego Files Public Declaration of Commitment and Interests

A newly published declaration from Margarida Lima Rego, a member of the Board of Appeal of the European Supervisory Authorities (ESAs), affirms her independence and the absence of any conflicting interests under Article 59(6) of the ESA founding regulations. This is a routine governance filing, not a new obligation. It still matters to compliance teams because the Board of Appeal's independence underpins the integrity of appeals against EBA, EIOPA, and ESMA decisions.