Norway FSA Warns of hanfcl Clone Firm Impersonating FCA-Authorized UK Entity

Key Takeaways

• Finanstilsynet (Norway FSA) has issued a warning about "hanfcl (Clone)," a clone firm that appears to impersonate an FCA-authorized United Kingdom entity.
• The notice relays a UK Financial Conduct Authority warning, so compliance teams should treat it as a fraud and impersonation alert and update screening and customer-protection controls.

Deep Dive

The source record is brief. It identifies the subject as "hanfcl (Clone)," lists the United Kingdom as the issuer, and links to an FCA warning titled "hanfcl.com (clone) of FCA authorised firm." It contains no further detail on the legitimate firm being cloned, the fraudulent domain's activity, victim counts, or losses. The Norwegian notice appears to republish or cross-reference the FCA warning. We should not infer facts beyond those in the source, and teams should read the FCA page directly for the full details.

A clone firm fraudulently uses the name, Firm Reference Number, address, or other details of a genuine authorized firm to appear legitimate. Clone firms are commonly tied to investment scams, advance-fee fraud, and recovery scams. The warning imposes no new regulatory obligations and sets no deadlines. Its value is as a threat indicator that supports existing fraud prevention, AML, and consumer protection duties. The fact that a Norwegian authority has circulated it suggests Norwegian residents may be targeted, or that the entity has cross-border reach.

Compliance teams should take the following steps: - Add the entity name and associated domain, as identified in the FCA warning, to internal watchlists and adverse-media screening. - Review client onboarding, counterparty due diligence, and payment screening for any links to the entity, its domain, or related accounts. - Verify any contact claiming to represent an FCA-authorized firm through the FCA Register and independently sourced contact details, not those supplied by the counterparty. - Escalate any identified transactions or customer contacts to the fraud and financial crime units, and consider a suspicious activity report where warranted. - Alert customer-facing and fraud teams to the scam typology so they can intervene when customers attempt payments to the entity.

The overall impact is low to moderate for most institutions, but higher for firms with retail customers in Norway or the UK. The main risks are customer losses from authorized push payment fraud, inadvertent processing of illicit proceeds, and reputational harm if the institution's accounts are used by the clone. There is also a risk to the genuine firm whose identity is misused, including counterparties mistakenly rejecting or mistrusting it. Because the source lacks specifics, teams should monitor for FCA updates and for any further notices from Finanstilsynet or other European regulators.

Source: Norway Financial Supervisory Authority