Norway FSA Warns of Clone Firm Impersonating FCA-Registered Hanbury Financial Planning

Key Takeaways

• Norway's Financial Supervisory Authority (Finanstilsynet) has published a warning about a clone of an FCA-registered firm, "hanbury_financial_p1lanning (Clone)," which links to a corresponding UK Financial Conduct Authority (FCA) warning.
• Clone firms use the identity of authorized firms to defraud consumers, so compliance teams should strengthen counterparty verification and fraud-monitoring controls.

Deep Dive

The notice is a cross-border fraud warning. The Norway FSA is relaying an alert originally issued by the FCA, which identifies an entity using the name "hanbury_financial_p1lanning" (with a numeral "1" replacing the letter "i") as a clone of a legitimate FCA-registered firm. Clone firms typically copy the name, address, and Firm Reference Number of an authorized entity to appear credible. The altered spelling is a common technique for evading basic name-matching and deceiving consumers.

The source content is limited. It gives no details on the clone's contact information, websites, or products offered, and it imposes no new regulatory requirements or deadlines. The action is informational and consumer-protective, and the full details are in the linked FCA warning page. Because the supplied text is thin, teams should review the FCA page directly for identifiers such as URLs, phone numbers, and email addresses before updating controls. We should not assume details beyond what the FCA has published.

For compliance teams, the main implications concern onboarding, payments, and customer protection. Institutions could be exposed if customers send funds to the clone, if the clone's accounts are held at or routed through the institution, or if the institution mistakenly treats the clone as the legitimate firm in due diligence. Because the warning appears on a Norwegian regulator's list, firms with Norwegian clients or operations should treat it as relevant locally, even though the legitimate firm is UK-registered.

Recommended actions: - Add the clone's name, spelling variants, and any identifiers from the FCA notice to internal watchlists and sanctions/adverse-media screening. - Run retrospective checks on customers, counterparties, and payees for matches or similar names. - Verify any firm claiming FCA authorization directly on the FCA Register, using contact details from the register rather than those supplied by the firm. - Strengthen transaction monitoring for payments to related beneficiaries, and file suspicious activity reports where appropriate. - Alert fraud, customer service, and relationship management teams, and consider customer communications on impersonation scams.

Overall risk is moderate. Direct regulatory exposure is low, but the potential for customer harm, fraud losses, and reputational damage is meaningful if clone-related payments are not detected and escalated.

Source: Norway Financial Supervisory Authority