Norway FSA Warns of Suspected SwissBorg Impersonation Site Flagged by France's AMF

Key Takeaways

• The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about the website swissborg.com-accesprive.app, which the French AMF blacklisted as an impersonation (usurpation) of the SwissBorg brand.
• Compliance teams should treat the domain as a likely fraud vector and add it to blocklists and customer-warning processes.
• The action also shows how European regulators share warnings across borders.

Deep Dive

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about the website swissborg.com-accesprive.app, which the French AMF blacklisted as an impersonation (usurpation) of the SwissBorg brand. Compliance teams should treat the domain as a likely fraud vector and add it to blocklists and customer-warning processes. The action also shows how European regulators share warnings across borders.

The warning imposes no new obligations, deadlines, or compliance dates. Its practical effect is to raise the expected standard of vigilance. The domain pattern, a legitimate brand name followed by a deceptive suffix ("-accesprive" suggests "private access"), is a common tactic for credential harvesting and advance-fee or fake-investment fraud. Firms should expect victims, and possibly fraud proceeds, to pass through regulated channels such as bank transfers, card payments, and crypto on-ramps.

Recommended actions for compliance professionals:
- Add the domain, and any related variants, to web filtering, email security, and threat intelligence blocklists.
- Screen customer transactions and onboarding records for links to the domain or to payments to unknown crypto platforms.
- Alert fraud, AML, and customer service teams so they can recognize related victim reports and file suspicious activity or transaction reports where warranted.
- Consider customer communications that explain how to verify platform legitimacy through regulator registers and warning lists.
- Confirm whether the firm or its brand is affected, and if so, start takedown and domain-reporting procedures.

The risk impact is moderate. Direct regulatory exposure is limited unless a firm is the impersonated brand or its customers are targeted. The main exposures are customer fraud losses, reputational harm, and potential AML red flags from victim-funded transfers. Because the AMF source was republished by a second regulator, firms should monitor warning lists from several EU/EEA authorities and fold them into regular financial crime and third-party risk monitoring.

Source: Norway Financial Supervisory Authority