GRC Report Staff

The Financial Function Enhancement Review Board of Japan's Financial Services Agency approved the organizational restructuring and merger implementation plan submitted by Niigata Prefectural Credit Union and Koei Credit Union. The minutes highlight regulatory emphasis on branch strategy sustainability, revenue synergy transparency, and compliance oversight for financial product sales to elderly customers—themes relevant to other cooperative financial institutions undergoing consolidation.

Norway's Financial Supervisory Authority (Finanstilsynet) has issued a public warning regarding the unregistered entity operating as "my.aipltfrm.com," echoing an earlier alert from Spain's CNMV. Compliance teams should treat this as a notice of an unauthorized financial services provider with potential cross-border exposure affecting European retail investors.

FinCEN, the Federal Reserve, FDIC, NCUA, and OCC jointly clarified that Suspicious Activity Report confidentiality requirements do not prevent banks from discussing potentially fraudulent transactions, suspicious activity, or account closures with affected customers. This guidance does not change existing BSA obligations or create new supervisory expectations, but it provides clarity that may help banks improve customer communication during fraud investigations while maintaining compliance.

The Norway Financial Supervisory Authority has issued a warning regarding "Yield Harbor (Clone)," a fraudulent entity impersonating a genuine FCA-authorized firm in the United Kingdom. Compliance teams should note this as a consumer protection alert rather than a rule change, and ensure appropriate client communication and fraud-prevention measures are in place.

The Luxembourg financial regulator (CSSF) has issued a public warning identifying SB Systems sp. z o.o. as an entity conducting unauthorized financial activities, despite this alert being logged under Norway's Financial Supervisory Authority jurisdiction tag. Compliance teams should treat this as a fraud/unauthorized-entity warning and ensure the firm is screened against onboarding and transaction monitoring systems regardless of jurisdictional labeling discrepancies.

Deutsche Bundesbank will reopen two existing Green Federal Bonds (2033 and 2041 maturities) via multi-ISIN auction on September 8, 2026, with a combined market maintenance quota of EUR 1.5 Billion. Compliance teams at eligible Federal Emissions Bidding Group member institutions must ensure timely, accurate bid submission in line with prescribed formats and deadlines.

The Bank of England, via its Frontier AI Information Sharing Forum, has published a thematic summary on how the design of surrounding tools, controls, and workflows ("harnesses") shapes the effectiveness of frontier AI in cyber defense. This is explicitly non-binding and does not introduce new supervisory expectations, but it signals areas of regulatory interest that firms deploying AI for cybersecurity should monitor closely.