Norway FSA Warns of Eoscoinvest Clone of FCA-Registered Firm

Key Takeaways

• Norway's Financial Supervisory Authority (Finanstilsynet) has published a warning about Eoscoinvest, citing a UK Financial Conduct Authority (FCA) notice that the entity operates as a clone of an FCA-registered firm.
• Compliance teams should treat Eoscoinvest and its associated websites as high-risk for investment fraud and update screening and customer protection controls accordingly.

Deep Dive

The Norwegian notice is a republication of an FCA warning, which identifies Eoscoinvest (associated with the domains eoscoinvest.io and eoscoinvest.co.uk) as a clone of a legitimately FCA-registered firm. In a clone scam, fraudsters copy the name, address, and Firm Reference Number of an authorized firm to appear credible. The source text provided is brief and does not name the impersonated firm, describe the products offered, or identify victims or losses. Findings beyond the warning itself should therefore be verified against the FCA notice.

For compliance teams, the main implication is that the entity is not authorized and should not be treated as a legitimate counterparty, intermediary, or payment recipient. The notice does not introduce new legal requirements, deadlines, or reporting obligations. It does, however, serve as an indicator of active fraud typologies targeting retail investors in Norway and the UK. The cross-border nature of the warning, with Norway echoing a UK regulator, also shows that regulators share fraud intelligence internationally.

Recommended actions include: - Add Eoscoinvest and the named domains to internal watchlists, adverse media screening, and web or email filtering blocklists. - Review transaction monitoring and payment screening for transfers to or from related accounts, wallets, or payment processors, particularly crypto-related flows given the name. - Escalate any matches to the financial crime unit and file suspicious activity or transaction reports where warranted. - Alert customer-facing staff and fraud teams so they can identify and intervene with customers who may be victims. - Verify any firm claiming FCA registration directly through the FCA Register, using independently sourced contact details.

The risk impact is moderate to high for retail-facing institutions. Exposure includes customer losses from authorized push payment fraud, reputational harm if customers' funds pass through the institution, and potential AML failures if proceeds are not detected. Institutions should also consider whether their own brand or that of an affiliated authorized firm could be cloned, and should monitor for impersonation. Customer education campaigns on clone firm tactics are advisable.

Source: Norway Financial Supervisory Authority