Norway FSA Publishes Warning on TIBIPRO, Entity Flagged by Spain's CNMV

Key Takeaways

• The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about TIBIPRO, an entity identified with Spain as its issuer jurisdiction and referencing a Spanish CNMV warning notice.
• Compliance teams should treat TIBIPRO as a potentially unauthorized or high-risk counterparty and screen for any exposure.
• The source record is brief, so details of the underlying conduct should be confirmed in the linked CNMV notice.

Deep Dive

The update is an investor warning, not a rule change. The Norwegian authority is relaying or mirroring a warning that the Spanish Comisión Nacional del Mercado de Valores (CNMV) issued about TIBIPRO. Such warnings typically indicate that an entity is offering or promoting financial services or investments without the required authorization, or is otherwise suspected of misleading conduct. The record provided does not state the exact nature of the alleged violation, so any conclusions about the specific conduct should wait until the CNMV notice has been reviewed directly.

No new legal requirements, deadlines, or compliance dates are introduced. The warning is effective as of its publication date of September 2, 2026. Its relevance is practical: it is a regulatory signal that should feed into existing sanctions, adverse media, and counterparty due diligence processes. The cross-border element matters because warnings from one European regulator are often shared through international networks, and the entity may be targeting clients in multiple jurisdictions, including Norway.

Recommended actions for compliance professionals: - Review the linked CNMV notice and record the entity's details, including aliases, websites, and any associated individuals. - Add TIBIPRO to internal watchlists and screen existing customers, counterparties, payment flows, and introducers for matches. - Review transaction monitoring for payments to or from the entity, and file suspicious activity reports where warranted. - Alert client-facing and fraud teams so they can recognize and escalate customer inquiries or payments linked to the entity. - Consider whether client communications or scam awareness messaging are appropriate.

The risk impact is moderate and primarily related to fraud, unauthorized activity, and potential money laundering exposure. Institutions that process payments for retail customers face the greatest exposure, since victims of unlicensed investment schemes often fund them through bank transfers or card payments. Documenting the screening and response steps will help demonstrate a risk-based approach to supervisors.

Source: Norway Financial Supervisory Authority