GRC Report Staff

Danish FSA Warns Against Unauthorized Boiler Room Operator Corpholding Inc.

The Danish Financial Supervisory Authority (DFSA) issued a public warning on September 3, 2026 against Corpholding Inc., which is suspected of running a boiler room operation and soliciting Danish consumers without authorization. Compliance teams should treat this as a fraud typology and sanctions-adjacent intelligence item, and update monitoring, screening, and customer-protection controls accordingly.

Dutch DPA Releases Processing Register Template for SMEs Across 10 Industries

The Netherlands Data Protection Authority (Autoriteit Persoonsgegevens) has published a downloadable GDPR processing register template, plus a companion privacy notice template, for small and medium-sized enterprises in 10 industries. The templates are practical guidance rather than new law, but they signal the regulator's expectations for Article 30 recordkeeping. Compliance teams should use them as a benchmark for their own programs and for assessing SME vendors and partners.

FINRA Proposes Rule 4522 Amendment Easing Monthly Position Statement Requirements for Private Fund H

FINRA has filed a proposed amendment to Rule 4522(b)(1) that would except uncertificated investments in unregistered investment funds from the monthly position statement and reconciliation requirement, replacing it with a quarterly cadence. The change codifies and broadens the relief in a January 2026 SEC staff no-action letter that covered only capital balance funds. Carrying and clearing firms that custody private fund interests should assess how the exception affects their reconciliation procedures, while remembering that SEA Rule 17a-13 quarterly counts and the "prudent business practice" standard still apply.

Norway FSA Republishes Luxembourg CSSF Warning on Fraud Misusing Luxempart S.A. Name

The Norway Financial Supervisory Authority has posted a warning that originates from Luxembourg's CSSF. It concerns fraudulent actors misusing the name of Luxempart S.A., a Luxembourg-based issuer. Compliance teams should treat it as an impersonation-fraud alert and check their onboarding, payment, and client-communication controls for exposure.

Norway FSA Publishes Warning on MelzaPlay S.A., Luxembourg Issuer Tied to CSSF Website Alert

The Norway Financial Supervisory Authority has published a warning about MelzaPlay S.A., an entity identified as a Luxembourg issuer, and it references a CSSF warning about the website www.melzapay.com. The notice indicates that the entity or its website may be offering financial services without proper authorization. Compliance teams should screen for exposure and strengthen controls against potential fraud and unauthorized activity.

Norway FSA Republishes UK FCA Warning on Quanta North Clone Firm Impersonating Authorized Entity

The Norway Financial Supervisory Authority (Finanstilsynet) has relayed a warning, originally issued by the UK Financial Conduct Authority (FCA), about a clone of the FCA-authorized firm Quanta North. Clone firms use a legitimate firm's name and credentials to defraud consumers, so compliance teams should update screening and fraud controls and brief customer-facing staff.

Norway FSA Republishes UK FCA Warning on Unauthorized Firm 9M AI

The Norway Financial Supervisory Authority (Finanstilsynet) has listed "9M AI" in its warnings, citing a UK Financial Conduct Authority (FCA) warning as the source. Compliance teams should treat the entity and its associated names and domains as a potential unauthorized or fraudulent actor and screen for any exposure.