Norway FSA Warns of Clone Firm Impersonating FCA-Authorized Entity "Zenith Grow"

Key Takeaways

• The Norway Financial Supervisory Authority has issued a warning regarding "Zenith Grow," an entity fraudulently claiming authorization from the UK's Financial Conduct Authority.
• This is a clone firm scam, and compliance teams should ensure customer-facing staff and fraud detection systems are aware of this specific threat to prevent client losses and reputational exposure.

Deep Dive

This warning concerns a "clone firm" scheme, a common type of investment fraud where criminals use the name, registration details, or branding of a genuine FCA-authorized firm to deceive consumers into believing they are dealing with a legitimate, regulated entity. In this case, "Zenith Grow" has been identified as impersonating an authorized UK firm, and the warning has been echoed by the Norway Financial Supervisory Authority, indicating the scam has cross-border reach or has been marketed to Norwegian consumers.

For compliance teams, this type of alert is primarily relevant to fraud prevention, financial crime, and customer protection functions rather than direct prudential or conduct obligations. Institutions should treat this as actionable threat intelligence: payment processing, onboarding, and transaction monitoring teams should be alerted to the entity name "Zenith Grow" so that any associated wire transfers, account openings, or customer complaints can be flagged and investigated. Firms with retail banking or payments operations in Norway or the UK should consider adding this name to internal watchlists.

No specific regulatory deadline or compliance filing requirement is attached to this warning, as it is informational and investor-protection focused rather than a sanction or enforcement action. However, firms should act promptly to disseminate the alert internally, particularly to customer service, fraud, and AML teams, and to review any recent transactions or inquiries referencing this name.

Recommended actions include: (1) circulating the warning to fraud and AML teams, (2) updating screening lists and transaction monitoring rules to flag the entity name, (3) preparing customer communication templates in case clients ask about this firm or report being approached, and (4) monitoring for similar clone firm warnings from other regulators (e.g., FCA, ESMA) that may indicate a broader pattern. The reputational and consumer protection risk is the primary concern here; while the fraud is not directly tied to the receiving institution, failure to detect related transactions could expose the firm to facilitation risk or regulatory scrutiny over its fraud controls.

Source: Norway Financial Supervisory Authority