GRC Report Staff

Norway FSA Republishes Warning on Fraudsters Misusing Name of Luxembourg Firm Crest Invest S.A.

The Norway Financial Supervisory Authority has published a warning about Crest Invest S.A., citing a notice issued by Luxembourg's CSSF concerning fraudulent activities by persons misusing the entity's name. Compliance teams should treat this as an identity-misuse (clone firm) alert and update screening, onboarding, and client-protection controls accordingly.

Norway FSA Republishes CSSF Warning on Suspected Impersonation of BVF Capital S.à r.l. Website

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about BVF Capital S.à r.l., a Luxembourg-linked name, based on a warning issued by Luxembourg's CSSF concerning the website www.bvfcapital.com. The notice signals a likely unauthorized or fraudulent investment solicitation targeting investors. Compliance teams should treat the name and website as high-risk for onboarding, payments, and client-protection purposes.

Norway FSA Relays FCA Warning on londoncourtlimited Clone of Previously Authorized Firm

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning, originally issued by the UK Financial Conduct Authority (FCA), about a clone of a previously FCA-authorized firm operating as londoncourtlimited. Clone firm fraud exploits the credentials of legitimate entities to deceive investors, so compliance teams should update screening controls and client-facing warnings.

Norway FSA Relays UK FCA Warning on Spreadex-UK Clone of Authorized Firm

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about a clone of the FCA-authorized firm Spreadex, using the domain spreadex-uk. The warning originates from the UK Financial Conduct Authority (FCA). Compliance teams should treat it as an active impersonation and fraud risk affecting customers, onboarding, and payment flows.

Spanish DPA Upholds Erasure Complaint Against ByteDance Over CapCut Account Deletion Barriers

The AEPD upheld a data subject's GDPR Article 17 complaint against ByteDance Pte. Ltd. after the company allegedly required a user to log in and accept new CapCut terms before it would process an erasure request. The decision shows that regulators will scrutinize identity verification steps that effectively block rights requests. It also shows that a controller's failure to engage with the regulator can lead to an adverse outcome by default.

Norway FSA Issues Warning on Finlto Clone Impersonating FCA-Authorized Firm

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about "Finlto (Clone)," which appears to be a clone of a UK FCA-authorized firm. The source material is limited, but clone-firm warnings signal active impersonation fraud that compliance teams should factor into onboarding, screening, and customer protection controls.

Norway FSA Warns of whitechurchnetwork Clone Impersonating FCA-Authorized Firm

The Norway Financial Supervisory Authority (Finanstilsynet) has republished a warning, originally issued by the UK Financial Conduct Authority (FCA), about "whitechurchnetwork (Clone)," an entity impersonating an FCA-authorized firm. Compliance teams should treat it as a clone-firm fraud indicator and update screening and client-protection controls accordingly.