FCA Issues Warning Against Unauthorized Firm Aurum Foundation Limited

Key Takeaways

• The FCA has published a warning identifying Aurum Foundation Limited as an unauthorized entity potentially targeting UK consumers, with the alert also being disseminated by the Norway Financial Supervisory Authority.
• Compliance teams should treat this as a consumer protection and fraud-prevention alert, ensuring no client or counterparty relationships exist with this entity.

Deep Dive

This warning falls into the category of unauthorized firm alerts, which regulators issue to protect consumers and the integrity of financial markets from entities operating without proper licensing or authorization. The fact that the Norway Financial Supervisory Authority is circulating an FCA-originated warning indicates cross-border regulatory cooperation, a common practice to ensure that warnings about potentially fraudulent or unlicensed firms reach a wider audience across jurisdictions, including Nordic markets where the entity may be soliciting business.

For compliance teams, the core requirement is straightforward: ensure that Aurum Foundation Limited does not appear in any client onboarding, transaction monitoring, or third-party due diligence records. Firms should cross-check this name (and any known aliases) against existing customer databases, counterparty lists, and marketing materials to confirm no inadvertent business relationship or referral arrangement exists. Given the "Issuer" designation combined with a "United Kingdom" jurisdictional tag, there is a possibility this entity was promoting investment products or acting as a financial intermediary without proper authorization—heightening the risk of investor harm.

No specific remediation deadline is provided in the source warning, which is typical for this type of alert; however, compliance teams should treat such notices as immediate action items rather than deferred tasks. Recommended steps include: (1) screening this entity against sanctions, PEP, and adverse media databases; (2) flagging the name in AML/KYC systems to prevent onboarding; (3) alerting relevant business units (e.g., wealth management, retail banking) that may interact with cross-border investment solicitations; and (4) documenting the review as part of ongoing third-party risk management records.

From a risk perspective, failure to act on such warnings can expose institutions to reputational damage, regulatory scrutiny, and potential facilitation of fraud if any inadvertent dealings with the named entity are later discovered. While the direct financial exposure may be limited absent an existing relationship, the broader implication is the need for robust horizon-scanning processes that capture and act on unauthorized firm warnings issued by the FCA and other regulators on a timely basis.

Source: Norway Financial Supervisory Authority