GRC Report Staff

Norway's Financial Supervisory Authority (Finanstilsynet) published a warning about "Luminex STO," a security token offering whose issuer is listed as based in the Netherlands. The notice points to a Dutch Authority for the Financial Markets (AFM) boiler room warning, which suggests a suspected investment fraud. Compliance teams should treat the entity as high risk and update screening and client-protection controls.

A De Nederlandsche Bank working paper surveying 5,672 Dutch respondents finds that 71% know the official cash recommendation but only 58% hold the advised amount, which points to a preparedness gap among households. The paper is research and not binding regulation, but it signals supervisory attention to payment resilience, consumer communication, and fallback capacity. Compliance and operational resilience teams should treat it as an indicator of where expectations may be heading.

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about fxr-ai.com, a website that France's Autorité des Marchés Financiers (AMF) placed on its blacklist of unauthorized crypto-asset derivatives offerings. Compliance teams should treat the site as a high-risk counterparty and fraud indicator, and update screening and monitoring controls accordingly.

The FCA's PS26/18 finalizes new PERG 18 perimeter guidance, largely as consulted on, to help firms determine whether their cryptoasset activities require authorization when the new regime begins on 25 October 2027. The application window opens 30 September 2026, and existing registrations or permissions will not convert automatically. Compliance teams should start perimeter assessments now, because the guidance does not yet reflect a pending statutory instrument that will change some business model outcomes.

The CFTC's Part 165 establishes the framework for its whistleblower award program under Section 23 of the Commodity Exchange Act, including eligibility, submission procedures, confidentiality, and anti-retaliation protections. Compliance teams at CFTC-regulated firms should treat this as a core reference for internal reporting program design, because the rules reward employees who report externally and create incentives that interact directly with internal reporting channels.

The Norway Financial Supervisory Authority has published a warning, originally issued by the Central Bank of Ireland, about an unauthorized "clone" entity using the name FPPE Fund plc. Clone firms impersonate legitimate authorized entities to defraud investors, so compliance teams should update screening controls and client-facing warnings.

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about the website investpathline.com/fr/3, referencing the French AMF's crypto-currency blacklist as the originating source. The notice signals a likely unauthorized or fraudulent crypto-related investment offering. Compliance teams should treat it as a cross-border red flag and update screening and monitoring controls.