Norway FSA Warns of Suspected Impersonation Site marketorbitlabs.it.com Flagged by France AMF

Key Takeaways

• The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about the website marketorbitlabs.it.com, citing a France-issued alert from the AMF's impersonation (usurpation) blacklist.
• Compliance teams should treat the domain as a suspected fraudulent or unauthorized investment site and update screening, blocking, and customer-protection controls accordingly.

Deep Dive

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about the website marketorbitlabs.it.com, citing a France-issued alert from the AMF's impersonation (usurpation) blacklist. Compliance teams should treat the domain as a suspected fraudulent or unauthorized investment site and update screening, blocking, and customer-protection controls accordingly.

The notice introduces no new legal obligations, reporting requirements, or deadlines. Its significance is as a threat-intelligence and consumer-protection signal. It is dated 2026-09-15, so no compliance deadline applies. However, firms should act promptly, since fraudulent investment sites typically operate for short periods and often reappear under new domains. Because the domain uses a ".it.com" suffix, which is a commercial second-level domain and not an Italian country-code domain, teams should not assume any link to Italy or to an Italian regulator.

Recommended actions include:
- Add the domain to internal blocklists, web-filtering tools, and fraud-monitoring watchlists.
- Screen client onboarding records, payment instructions, and transaction narratives for references to the domain.
- Review recent customer complaints and unusual outgoing transfers to unfamiliar platforms.
- Brief customer-facing and fraud-operations staff on the warning.
- If the site is found to impersonate your organization or a group entity, escalate to legal and information security for takedown requests and consider reporting to the AMF and Finanstilsynet.
- Retain documentation of the checks performed.

The risk impact is moderate and mostly indirect. Exposure includes customers falling victim to investment or impersonation fraud, possible use of client accounts to route victim funds, and reputational harm if the brand is spoofed. Institutions may also face heightened suspicious activity reporting obligations if they detect payments connected to the domain. Teams should monitor for related domains and for updates to the AMF and Finanstilsynet warning lists.

Source: Norway Financial Supervisory Authority