Norway FSA Warns of Clone Firm Impersonating FCA-Registered International Securities & Financial Com

Key Takeaways

• The Norway Financial Supervisory Authority (Finanstilsynet) has republished a warning about a clone firm impersonating the FCA-registered International Securities & Financial Compliance Authority.
• The warning originates from the UK Financial Conduct Authority (FCA).
• Compliance teams should treat it as a fraud and impersonation alert that calls for enhanced due diligence and customer protection measures.

Deep Dive

The notice is a warning, not a rulemaking, and it carries no new regulatory requirements. The source content is limited to the firm name, the UK as issuer, and a link to the FCA warning page. The FCA's URL indicates that a fraudulent party is using the name and details of a legitimate FCA-registered firm, which is a "clone firm" scheme. The Norwegian regulator's republication suggests that Norwegian residents or institutions may be targeted or exposed.

Clone firms typically copy a legitimate firm's name, address, and FCA reference number, but use different contact details, websites, or email domains. They commonly solicit investments, advance-fee payments, or personal data. For compliance teams, the main exposure is facilitating or processing payments connected to fraud, onboarding counterparties who are not who they claim to be, and customers falling victim to scams. The source material provides no specific deadlines, no confirmed financial loss figures, and no enforcement penalties. Specific domain names and contact details are only available on the FCA page and should be verified there directly.

Recommended actions: (1) review the FCA warning page and extract all listed fraudulent identifiers, including domains, phone numbers, and email addresses; (2) add these to sanctions, adverse media, and internal watchlists; (3) screen existing customers, counterparties, and payment flows for links to the clone entity; (4) confirm the identity of any firm claiming to be the genuine entity by using contact details from the official FCA Register, not those supplied by the counterparty; (5) alert fraud, AML, and client-facing teams, and consider a customer advisory; and (6) file suspicious activity reports where warranted.

Risk impact is moderate and primarily affects fraud, AML, and reputational exposure. Institutions that fail to detect payments to clone entities may face scrutiny over transaction monitoring and customer protection controls. Cross-border regulator sharing of such warnings also indicates that clone firm activity is not confined to the UK, so Norwegian-facing and wider European activity should be monitored.

Source: Norway Financial Supervisory Authority