Norway FSA Flags Cronetrium-System-FR.com on Warning List Citing French AMF Crypto Blacklist

Key Takeaways

• The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about the website cronetrium-system-fr.com, which was originally flagged by France's Autorité des Marchés Financiers (AMF) on its crypto-currency blacklist.
• Compliance teams should treat the domain as a suspected unauthorized or fraudulent crypto-related operation and update screening and customer-protection controls accordingly.

Deep Dive

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about the website cronetrium-system-fr.com, which was originally flagged by France's Autorité des Marchés Financiers (AMF) on its crypto-currency blacklist. Compliance teams should treat the domain as a suspected unauthorized or fraudulent crypto-related operation and update screening and customer-protection controls accordingly.

For compliance teams, the notice means the domain is considered a likely unauthorized provider of crypto-asset or investment services, typically associated with investment scams or unregistered solicitation. The warning creates no new regulatory obligations and sets no deadlines. However, it is a credible, regulator-sourced indicator that supports risk-based controls under AML/CFT, fraud prevention, and consumer protection frameworks. Cross-border relays between regulators also show that such sites are targeting multiple European markets, including Norway.

Recommended actions: (1) add the domain, and any close variants, to web filtering, adverse media, and transaction-monitoring watchlists; (2) screen customer payments, wallet addresses, and onboarding data for links to the domain; (3) review recent customer inquiries, complaints, or unusual outbound crypto transfers for connections to the site; (4) where a link is found, escalate to the MLRO and evaluate the need for a suspicious transaction report to Norway's financial intelligence unit (Økokrim) or the relevant authority; (5) alert frontline and fraud teams, and consider customer awareness messaging about unauthorized crypto platforms; and (6) record the review for audit purposes.

Risk impact: Direct exposure for most institutions is likely low, but it rises if customers have sent funds to the site or if the institution processes related payments. Key risks include customer losses from fraud, reputational harm, and regulatory criticism if red flags from public warnings go unaddressed. Because the warning identifies only one domain, operators commonly rotate or clone domains, so monitoring should cover lookalike URLs and related names.

Source: Norway Financial Supervisory Authority