Norway FSA Relays UK FCA Warning on Spreadex-UK Clone of Authorized Firm

Key Takeaways

• The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about a clone of the FCA-authorized firm Spreadex, using the domain spreadex-uk.
• The warning originates from the UK Financial Conduct Authority (FCA).
• Compliance teams should treat it as an active impersonation and fraud risk affecting customers, onboarding, and payment flows.

Deep Dive

The notice identifies "spreadex-uk" as a clone, meaning fraudsters are impersonating a genuine FCA-authorized firm, probably by copying its name, branding, and firm reference details to appear legitimate. The Norwegian listing reflects the UK as issuer and links to the FCA's warning page. Finanstilsynet is therefore relaying a foreign authority's alert, which shows cross-border concern about the scheme and a likely reach into Norwegian and wider European retail audiences. The excerpt supplies no further detail on the fraudulent domain, contact details, or the scale of losses, so the FCA source page should be reviewed directly.

The warning creates no new regulatory obligations and sets no compliance deadlines. Its significance is in risk awareness. Clone firms are commonly used for investment and trading fraud, advance-fee schemes, and money mule recruitment. Consumers can be deceived because the genuine firm's authorization is real, so standard checks such as looking up the FCA register may appear to confirm legitimacy unless the contact details are compared carefully.

Compliance teams should take several steps. First, add the identified domain and any associated identifiers to internal blocklists, adverse media screening, and transaction monitoring watchlists. Second, review whether customers have sent payments to, or received funds from, accounts linked to the clone, and escalate suspicious activity reports where warranted. Third, update fraud and scam awareness messaging for customers, and brief front-line and call center staff on how to recognize victims of impersonation fraud. Fourth, verify that third-party due diligence and counterparty onboarding procedures confirm a firm's contact details against official regulator registers, not just its authorization status.

The impact is moderate for most institutions but higher for those with retail trading, payments, or brokerage exposure. Key risks include customer financial loss, reputational harm if the institution's channels are used to move scam proceeds, and potential AML exposure from mule accounts. Teams should also monitor for related clones, since such operations often reappear under new domains. Consider reporting any confirmed sightings to the FCA and Finanstilsynet.

Source: Norway Financial Supervisory Authority