Norway FSA Republishes French AMF Warning on Impersonation Domain amf.eigen.eng.br

Key Takeaways

• The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning that relays a French Autorité des marchés financiers (AMF) blacklist entry for the website amf.eigen.eng.br.
• The AMF lists the site under its "usurpation" category, meaning it appears to impersonate the AMF itself.
• Compliance teams should treat the domain as a fraud indicator and update their screening and customer-protection controls.

Deep Dive

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning that relays a French Autorité des marchés financiers (AMF) blacklist entry for the website amf.eigen.eng.br. The AMF lists the site under its "usurpation" category, meaning it appears to impersonate the AMF itself. Compliance teams should treat the domain as a fraud indicator and update their screening and customer-protection controls.

For compliance teams, the main significance is cross-border fraud intelligence. Impersonating a regulator is a common tactic in advance-fee fraud, "recovery" scams, and investment fraud. Fraudsters claim that a regulator has frozen funds or that a fee is owed before money can be released. Because Norway's authority republished the warning, the threat is considered relevant beyond France. Institutions with European retail clients, correspondent relationships, or payment flows to and from the EU should take note.

The notice sets no deadlines and creates no formal requirements. Recommended actions are as follows:
- Add the domain to web-filtering, email-security, and URL blocklists.
- Search email gateway, proxy, and communications logs for prior contact with the domain.
- Screen transaction monitoring and customer complaints for references to the site or to regulator-impersonation claims.
- Alert fraud, AML, and customer-service teams so they can recognize and escalate related reports.
- Consider suspicious activity reporting where customers have sent or received funds connected to the scheme.
- Add the case to customer awareness materials, reminding clients that regulators do not demand fees to release funds.

The direct risk to a regulated institution is moderate. The main exposure is customers who become victims of authorized push payment fraud, which leads to complaints, reputational harm, and possible reimbursement expectations. There is also a secondary AML risk if accounts are used to receive or move scam proceeds. Teams should record the review and any action taken to show a documented, risk-based response to external warnings.

Source: Norway Financial Supervisory Authority