Find the Right GRC Solution

Search and compare GRC technology built for the problems you’re trying to solve

Norway FSA Relays Warning on Clone Firm Impersonating FCA-Authorised Trusted PCP Claims

Norway FSA Relays Warning on Clone Firm Impersonating FCA-Authorised Trusted PCP Claims

By
Regulatory data powered by Corlytics
The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning that relays a UK Financial Conduct Authority (FCA) alert about a clone of a…
🔒
Cancel anytime
Full archive access
Custom alerts
Key Takeaways
  • The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning that relays a UK Financial Conduct Authority (FCA) alert about a clone of an FCA-authorized firm operating under the name "Trusted PCP Claims." Clone firms use the details of legitimate authorized entities to defraud consumers, so compliance teams should treat this as a fraud and impersonation risk and take steps to protect customers and the institution.
Deep Dive

The source material is limited. It consists of a title, the issuing jurisdiction (United Kingdom), the document type (Warning), and a link to the FCA's warning page. It does not include the clone firm's contact details, the legitimate firm's name or reference number, or the specific conduct involved. Based on the title, the warning appears to concern a clone of an authorized firm in the UK motor finance claims space (PCP refers to personal contract purchase agreements). This reading is an inference and should be confirmed against the FCA page before any action is taken.

A clone firm fraudulently uses the name, address, or FCA Firm Reference Number of a genuine authorized firm to appear legitimate. Typical harms include advance-fee claims scams, collection of personal and banking data, and misdirected payments. The warning imposes no new regulatory obligations and sets no deadlines. Its value is as a threat intelligence signal. The Norwegian authority's decision to republish it suggests the activity may target, or be accessible to, consumers outside the UK, including in Norway and the wider EEA.

Compliance teams should first retrieve the full FCA warning and extract the indicators of compromise, including the websites, phone numbers, email addresses, and the legitimate firm's details. Next, they should screen these indicators against customer onboarding, payment, and transaction monitoring systems. Where appropriate, they should add the entities to internal watchlists. Fraud and AML teams should review whether any customers have made payments to, or received funds from, related parties, and should consider suspicious activity or transaction reporting where indicators are found.

Teams should also update customer-facing fraud awareness materials and brief frontline and complaints staff on the scam typology, especially for customers who hold or have held vehicle finance. Third-party and correspondent due diligence should verify the identity of any claims-management or UK counterparties directly through the FCA Register, using independently sourced contact details rather than those supplied by the counterparty. The overall impact is low to moderate for most institutions. It is higher for firms with retail exposure to UK consumers or motor finance products, where customer harm, reputational damage, and potential reimbursement exposure are the main concerns.

Source: Norway Financial Supervisory Authority

Oops! Something went wrong