Norway FSA Warns of pendoxa.com Impersonation Scam Flagged by France's AMF

Key Takeaways

• The Norwegian Financial Supervisory Authority (Finanstilsynet) has published a warning about pendoxa.com, a website that France's Autorité des marchés financiers (AMF) lists on its blacklist as an impersonation (usurpation) scheme.
• Compliance teams should treat the domain as a fraud indicator and update screening controls and customer-facing alerts accordingly.

Deep Dive

The Norwegian Financial Supervisory Authority (Finanstilsynet) has published a warning about pendoxa.com, a website that France's Autorité des marchés financiers (AMF) lists on its blacklist as an impersonation (usurpation) scheme. Compliance teams should treat the domain as a fraud indicator and update screening controls and customer-facing alerts accordingly.

The source record is sparse. It names the domain pendoxa.com, identifies the issuer as France, and links to an AMF blacklist entry under the "usurpation" category (the URL path references "supportpendoxacom"). The Norwegian regulator appears to be redistributing the French warning, which signals cross-border supervisory information sharing. The record gives no details on the entity being impersonated, the products offered, or the specific victims. Teams should read the AMF source page directly before drawing conclusions about the scheme's mechanics.

The warning imposes no new regulatory requirements, deadlines, or reporting obligations. It is an alert to the public and to regulated firms. The "usurpation" classification generally indicates that the site falsely presents itself as, or claims affiliation with, a legitimate authorized firm. Impersonation schemes commonly support investment fraud, phishing, and "recovery" scams, and the "support" element in the URL path may point to a fake customer-support or fund-recovery pretext. This is an inference and should be confirmed against the AMF listing.

Recommended actions for compliance professionals:
- Add pendoxa.com and any related domains to web-filtering, email-security, and fraud-monitoring blocklists.
- Screen customer transactions, payment beneficiaries, and onboarding data for links to the domain.
- Review recent customer complaints and call-center logs for mentions of "Pendoxa."
- Consider a customer alert if there is evidence of exposure.
- Verify that the firm's brand is not being spoofed in a similar way.
- Escalate any confirmed matches to the fraud and financial crime teams, and assess whether suspicious activity reporting is required under local rules.

The risk impact is moderate and mainly affects firms with retail clients in Norway, France, and the wider EEA, where victims may send funds linked to the scam. Exposure includes customer fraud losses, authorized push payment fraud, reputational harm, and potential AML concerns if accounts are used to receive or move proceeds. Because the entry is brief and lacks a stated effective date beyond the publication date of 2026-09-12, firms should monitor for updates from both Finanstilsynet and the AMF. The record also lists the jurisdiction as Norway while the issuer is France, so teams should note the two sources when documenting their response.

Source: Norway Financial Supervisory Authority