FCA Issues Warning Against Unauthorized Firm MPay Global

Key Takeaways

• The FCA has added MPay Global to its Warning List as an unauthorized entity potentially providing or promoting financial services in the UK without permission.
• Consumers dealing with this firm have no access to the Financial Ombudsman Service or FSCS protection, and compliance teams should ensure this entity is screened against onboarding, payments, and third-party due diligence systems.

Deep Dive

This FCA Warning List notice identifies MPay Global, operating under the website mpaybanking.com and claiming an address at 1 Canada Square, Canary Wharf, as an unauthorized firm potentially conducting unregistered financial services activity in the UK. For compliance teams, warnings of this nature are a key input into financial crime and consumer protection controls, particularly for firms involved in payments, correspondent banking, or customer onboarding where exposure to unauthorized counterparties could create regulatory, reputational, or financial risk.

The notice does not introduce new regulatory requirements but serves as an operational red flag. Firms should treat this as actionable intelligence: screening customer, counterparty, and payment beneficiary databases against the named entity, associated website, and email domain is a reasonable immediate step. Given the FCA's caution that unauthorized firms frequently use fabricated or borrowed legitimate business details (including addresses of genuine corporate locations like Canary Wharf), compliance teams should also be alert to similar impersonation patterns across other alerts, rather than relying solely on address-based screening.

There are no specific compliance deadlines attached to this warning; however, financial institutions should incorporate such alerts into ongoing fraud and AML monitoring processes promptly, given the risk of customers inadvertently transacting with this entity. Firms with UK retail exposure, particularly payment service providers, should also consider whether existing scam-prevention and APP (Authorized Push Payment) fraud controls—especially those tied to the PSR's reimbursement rules effective from October 2024—adequately cover payments potentially directed to this entity.

Recommended actions include: (1) adding MPay Global and its associated identifiers to internal watchlists and transaction monitoring rules; (2) briefing customer-facing and fraud teams on this warning to support customer inquiries or suspicious activity identification; (3) reviewing outbound payment screening to detect transfers to the listed entity; and (4) maintaining awareness of the broader FCA Warning List as part of routine third-party and counterparty risk management.

Risk implications are primarily centered on consumer protection, fraud facilitation, and reputational exposure should customers of a regulated institution be found transacting with this unauthorized entity. While the direct regulatory risk to institutions is low unless they have dealings with the firm, failure to act on such public warnings could raise conduct risk concerns in subsequent supervisory reviews.

Source: Financial Conduct Authority