Norway FSA Republishes Portuguese CMVM Warning on Unauthorized Firm Neowintech

Key Takeaways

• The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about Neowintech, apparently relaying an alert issued by Portugal's securities regulator, the CMVM.
• Compliance teams should treat Neowintech as a potentially unauthorized or fraudulent investment entity and screen for any exposure.
• The source material is very limited, so details need to be verified directly.

Deep Dive

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about Neowintech, apparently relaying an alert issued by Portugal's securities regulator, the CMVM. Compliance teams should treat Neowintech as a potentially unauthorized or fraudulent investment entity and screen for any exposure. The source material is very limited, so details need to be verified directly.

The notice does not create new legal obligations, filing requirements, or deadlines. Its value is as an intelligence and risk-indicator input. It signals that European regulators regard Neowintech as a risk to investors, and that the name may be active in Norway or the broader EEA. Because the underlying CMVM page was not reproduced, the exact allegations (for example, unauthorized solicitation, impersonation of a licensed firm, or use of misleading websites) must be confirmed from the source.

Recommended actions:

(1) Retrieve and review the CMVM warning to capture the entity's aliases, websites, domains, and alleged activities.

(2) Add Neowintech and related identifiers to internal watchlists and adverse media or sanctions-style screening lists.

(3) Search customer, counterparty, payment, and vendor records for any links, including transactions to or from the entity.

(4) If hits are found, escalate for review and consider suspicious activity or transaction reporting under local AML requirements.

(5) Where relevant, alert fraud, customer service, and retail-facing teams so they can warn clients who ask about the firm or show signs of being victimized, such as unusual wire transfers or crypto purchases.

Risk implications are moderate and mostly indirect for institutions with no relationship to the entity. Exposure arises through facilitating payments for an unauthorized firm, onboarding related parties, or failing to act on available warning information. This can lead to AML control findings, customer harm, and reputational damage. Document the screening and decisions made, as this supports demonstrating a risk-based approach to regulators.

Source: Norway Financial Supervisory Authority