Norway FSA Warns of whitechurchnetwork Clone Impersonating FCA-Authorized Firm

Key Takeaways

• The Norway Financial Supervisory Authority (Finanstilsynet) has republished a warning, originally issued by the UK Financial Conduct Authority (FCA), about "whitechurchnetwork (Clone)," an entity impersonating an FCA-authorized firm.
• Compliance teams should treat it as a clone-firm fraud indicator and update screening and client-protection controls accordingly.

Deep Dive

The notice is a cross-border warning. The Norwegian regulator is relaying an FCA alert that a party is posing as a legitimate FCA-authorized firm, a typology known as a "clone firm." Clone firms typically copy the name, Firm Reference Number (FRN), address, and other details of a genuine authorized firm to appear credible and solicit investments or collect payments. The source content is brief and gives no specifics on the products offered, the contact details used, or the number of victims. The FCA warning page linked in the notice is the authoritative source for those identifiers.

The update imposes no new legal requirements, deadlines, or compliance obligations. It is an investor-protection and intelligence notice. Its relevance lies in the signal it gives about active impersonation of a UK-authorized entity, with Norwegian authorities indicating that the activity may reach or affect Norwegian residents or counterparties. No effective dates or remediation timelines are stated.

Recommended actions for compliance professionals: - Retrieve the full FCA warning and extract all listed identifiers (names, domains, phone numbers, email addresses, FRN). - Add these identifiers to sanctions, adverse-media, and internal watchlists, and screen existing customers, counterparties, and payment beneficiaries for matches. - Review transaction monitoring for payments to or from linked accounts, and file suspicious activity or transaction reports where warranted. - Verify any UK-authorized counterparty claims against the FCA Register using independently sourced contact details, not those supplied by the counterparty. - Alert front-line, onboarding, and fraud teams, and consider customer communications if retail clients may be targeted.

Risk implications are moderate. Direct exposure is likely limited unless the institution deals with the named entity or its customers fall victim. However, onboarding of an impersonator, facilitation of fraud proceeds through accounts, or failure to act on a published warning could lead to financial crime exposure, customer losses, regulatory criticism, and reputational harm. Because the details are sparse, teams should confirm the scope of the warning rather than rely on this notice alone.

Source: Norway Financial Supervisory Authority