GRC Report Staff

At the 2026 Green Fintech Symposium, HKMA Chief Executive Eddie Yue called on the financial sector to use technology and data to direct capital to high-impact decarbonization projects and guard against greenwashing. The event introduced no new rules or deadlines, but it signals HKMA supervisory priorities on climate risk, ESG data integrity, and AI-enabled sustainable finance. Compliance teams should treat it as a directional indicator when planning ESG and climate-risk controls.

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about the website accsmanager.com, relaying a listing by France's Autorité des Marchés Financiers (AMF) on its blacklist of impersonation (usurpation) schemes. Compliance teams should treat the domain as a likely fraudulent or unauthorized actor and update their controls and customer-protection measures accordingly.

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about pgroup-client.com, a site the French Autorité des marchés financiers (AMF) flagged on its blacklist for impersonation (usurpation). Compliance teams should treat the domain as a likely fraud vector and add it to screening and monitoring controls, since impersonation schemes target both customers and institutions.

The FCA's CP26/33 finds that general insurance (GI) value measures have improved transparency and customer outcomes, but that inconsistent reporting limits the data's usefulness. It proposes two minor burden-reducing changes now and signals broader rule changes in the first half of 2027. Responses are due by 9 October 2026, so compliance teams have a short window to comment and should begin planning for the wider reforms.

On September 11, 2026, Japan's Financial Services Agency (FSA) issued a written warning against Bit Hills Inc., a British Virgin Islands-based entity that operates the online lending platform "CryptoPawn" without registration as a money lender. The action shows continued FSA enforcement against offshore, internet-based lenders that target Japanese residents. Compliance teams should use the warning to update screening, counterparty, and fraud-prevention controls.

Norway's Financial Supervisory Authority (Finanstilsynet) has published a warning about Profit Ventures Limited, citing a UK Financial Conduct Authority (FCA) notice. Compliance teams should treat the entity as high risk for unauthorized investment activity and screen for any exposure. The source record is brief, so teams should review the FCA notice for specifics.

The FCA's updated Senior Managers Regime guidance restates that Senior Management Function (SMF) holders need regulatory approval before starting their roles, must have a Statement of Responsibilities, and carry a statutory Duty of Responsibility. Requirements differ by firm type (solo- or dual-regulated) and category, so compliance teams should confirm that their categorization, responsibility allocation, and fitness and propriety processes align with the guidance. Senior individuals face personal accountability if reasonable steps are not taken to prevent or stop breaches.