GRC Report Staff

In a speech at Global FinTech Fest 2026, MAS Managing Director Chia Der Jiun signaled that supervisory focus is on AI governance, agentic AI safeguards, and cyber resilience as AI-enabled threats escalate. The speech points to the pending Guidelines for AI Risk Management, the SAFR framework, and Nexus payments connectivity. Compliance teams should treat these as indicators of upcoming supervisory expectations, even though the speech itself is not binding.

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about ambrielle-novairex-fr.com, a site originally blacklisted by France's Autorité des Marchés Financiers (AMF) under its crypto-currency category. Compliance teams should treat the domain as a high-risk, likely fraudulent or unauthorized platform and update screening and customer-protection controls accordingly.

ECB Executive Board member Philip Lane presented the September 2026 staff projections. They show 2026 headline HICP inflation of 3.0% (energy inflation of 9.3%) following an oil price shock tied to a conflict that began in March 2026, with real GDP growth of 1.2% to 1.4% projected for 2026 to 2028. This is a speech, not a rule, so it creates no direct compliance obligations. It does shape the macro assumptions behind stress testing, interest rate risk, credit risk, and capital planning at euro area institutions.

The Norway Financial Supervisory Authority (Finanstilsynet) has posted a warning about Legacy Trading Global, based on a notice originally issued by the UK Financial Conduct Authority (FCA). The source material is limited, but it signals a probable unauthorized or fraudulent investment solicitation that compliance teams should add to their screening and client-protection controls.

The FCA will pause document allocation, responses, and listing hearings from December 21, 2026 to January 4, 2027 inclusive, with normal activity resuming January 5, 2027. Those days will not count toward standard turnaround times, and revised timetables and early cutoffs apply to Final Terms and Outstanding Conditions. Compliance and deal teams should plan transaction timetables now to avoid missed windows and stale financial information.

The Norway Financial Supervisory Authority has published a warning that references a Central Bank of Ireland notice on "Carrowmore Financial Services (CLONE)," an unauthorized firm that appears to be impersonating a legitimate entity. Compliance teams should treat the name as a fraud and impersonation red flag and update screening and customer-warning controls. The source material is brief, so teams should consult the original Irish notice for specifics.

BaFin has warned against bi-ventures(.)de, biventures-kundenportal(.)de, and berlinventures(.)com, along with emails from the associated domains, for offering overnight and fixed-term deposit accounts without authorization. The warning is issued under Section 37 Paragraph 4 of the Banking Act. Compliance teams should treat it as a fraud typology and screening input, because it signals impersonation and unauthorized deposit-taking risk affecting customers, counterparties, and payment flows.