GRC Report Staff

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about the website amforg.laxmipackaging.co.in, which was originally flagged by France's Autorité des marchés financiers (AMF) as impersonating the AMF. Compliance teams should treat the domain as a fraud indicator and strengthen controls against regulator-impersonation scams that target customers and employees.

The FCA has published its post-implementation review of the general insurance (GI) value measures rules. It found positive effects on transparency, competition, and fair value compliance, but also inconsistent reporting across firms. Compliance teams should expect a consultation on minor changes in the first half of 2027 and should use the interim period to improve data quality and reporting accuracy.

The OCC, with the Federal Reserve, FDIC, and NCUA, has issued proposed guidance that would revise and replace existing third-party risk management guidance and ask banks to tailor their practices to the assessed risk of each relationship. The guidance is non-enforceable, but it will likely shape examiner expectations and would apply to community banks once final. Compliance teams should review current programs and consider submitting comments within 60 days of Federal Register publication.

On September 11, 2026, the Austrian Financial Market Authority (FMA) issued a public warning about BCLS Assets, an entity apparently based in Switzerland, for offering securities services in Austria without the required license. Compliance teams should treat the entity as a high-risk, unauthorized counterparty and update screening and monitoring controls accordingly.

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning that relays a French Autorité des marchés financiers (AMF) blacklist entry for the website amf.eigen.eng.br. The AMF lists the site under its "usurpation" category, meaning it appears to impersonate the AMF itself. Compliance teams should treat the domain as a fraud indicator and update their screening and customer-protection controls.

The Norway Financial Supervisory Authority has issued a warning about "GM Trade / GM TradeAI," referencing a FINMA (Switzerland) warning-list entry. Compliance teams should treat the entities as unauthorized or high-risk and screen for any exposure, since the source content is minimal and details must be verified directly with FINMA.

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about cryptobullbear.com, which the French Autorité des Marchés Financiers (AMF) added to its blacklist of crypto-currency websites. Compliance teams should treat the domain as a high-risk, likely unauthorized actor and update screening and customer-protection controls accordingly.