Norway FSA Warns of palamonpartners Clone of FCA-Authorized Firm
Key Takeaways
- The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about "palamonpartners (Clone)," an entity that appears to impersonate an FCA-authorized firm.
- The notice is based on a United Kingdom warning, so it signals a cross-border clone-firm fraud risk.
- Compliance teams should screen for the name and related identifiers, and reinforce onboarding and customer-protection controls.
Deep Dive
The notice flags "palamonpartners (Clone)," which the issuing source identifies as a clone of a legitimate FCA-authorized firm. In a clone-firm scheme, fraudsters copy the name, firm reference number, address, or other details of an authorized entity to appear credible and solicit investments or personal data. The Norwegian listing references the FCA warning (published at fca.org.uk), which indicates that the alert is being shared across jurisdictions. The content provided is brief and does not specify the fraudulent websites, contact details, or the exact legitimate firm being cloned. Those details should be confirmed directly from the FCA source.
This is a warning, not a rule change, so it creates no new regulatory obligations and sets no deadlines. Its practical significance is as a threat indicator. Institutions are still expected, under AML/CFT and fraud-prevention frameworks, to act on credible warnings from supervisory authorities, particularly where payments, accounts, or customers may be linked to the flagged entity. The date shown (2026-09-03) should be treated as the Norwegian listing date, and the original FCA publication date should be verified.
Recommended actions: (1) Retrieve the FCA warning and extract all identifiers, including domains, phone numbers, email addresses, and any misused firm reference numbers. (2) Add these to sanctions, adverse media, and internal watchlists, and run retrospective screening of customers, counterparties, and transaction data. (3) Review payment monitoring rules for transfers to or from related beneficiaries, and consider filing suspicious activity reports where hits are found. (4) Verify third-party and correspondent relationships against the official FCA Register, using independently sourced contact details rather than those supplied by the counterparty. (5) Alert fraud, customer service, and relationship teams, and consider a customer advisory if retail clients in Norway or the UK may be targeted.
Risk implications: The primary exposures are customer fraud losses, reputational harm if the institution's channels are used to move proceeds, and AML/CFT failures if flagged parties are not detected. Impact is moderate and mainly operational, but it escalates if screening gaps allow transactions with the clone entity. Because the warning is cross-border, firms with Norway-UK flows should confirm that their warning intake processes capture notices from multiple regulators.

