GRC Report Staff

A De Nederlandsche Bank working paper surveying 5,672 Dutch respondents finds that 71% know the official cash recommendation but only 58% hold the advised amount, which points to a preparedness gap among households. The paper is research and not binding regulation, but it signals supervisory attention to payment resilience, consumer communication, and fallback capacity. Compliance and operational resilience teams should treat it as an indicator of where expectations may be heading.

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about fxr-ai.com, a website that France's Autorité des Marchés Financiers (AMF) placed on its blacklist of unauthorized crypto-asset derivatives offerings. Compliance teams should treat the site as a high-risk counterparty and fraud indicator, and update screening and monitoring controls accordingly.

The FCA's PS26/18 finalizes new PERG 18 perimeter guidance, largely as consulted on, to help firms determine whether their cryptoasset activities require authorization when the new regime begins on 25 October 2027. The application window opens 30 September 2026, and existing registrations or permissions will not convert automatically. Compliance teams should start perimeter assessments now, because the guidance does not yet reflect a pending statutory instrument that will change some business model outcomes.

The CFTC's Part 165 establishes the framework for its whistleblower award program under Section 23 of the Commodity Exchange Act, including eligibility, submission procedures, confidentiality, and anti-retaliation protections. Compliance teams at CFTC-regulated firms should treat this as a core reference for internal reporting program design, because the rules reward employees who report externally and create incentives that interact directly with internal reporting channels.

The Norway Financial Supervisory Authority has published a warning, originally issued by the Central Bank of Ireland, about an unauthorized "clone" entity using the name FPPE Fund plc. Clone firms impersonate legitimate authorized entities to defraud investors, so compliance teams should update screening controls and client-facing warnings.

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about the website investpathline.com/fr/3, referencing the French AMF's crypto-currency blacklist as the originating source. The notice signals a likely unauthorized or fraudulent crypto-related investment offering. Compliance teams should treat it as a cross-border red flag and update screening and monitoring controls.

In his closing speech at the Proportionality Conference in Bonn on September 16, 2026, BaFin President Mark Branson said the regulator will keep pushing for simpler, more proportionate, and more risk-oriented regulation, provided financial stability is not jeopardized. He tied the new flexibility to institutions' own governance and risk culture, and signaled that supervisors will scrutinize both more closely. Compliance teams should expect less rule-citing and more qualitative, institution-specific supervisory engagement.