GRC Report Staff

The HKMA has issued a public alert regarding fraudulent websites, phishing emails, and spoofed internet banking login screens impersonating five Hong Kong banks: Bank of East Asia, Shanghai Commercial Bank, Chong Hing Bank, Chiyu Banking Corporation, and Ele Bank. Compliance teams should note this as part of an ongoing pattern of scam activity targeting the banking sector and ensure customer communication and fraud response protocols remain current.

The HKMA's September 1, 2026 Exchange Fund Bills tender results show average accepted yields of 2.84% and 2.96% for the 91-day and 182-day papers respectively, with demand significantly outstripping supply, particularly for the shorter tenor. Compliance and treasury teams at licensed institutions should note the tightening pro rata allotment ratios, which signal strong market demand for short-term HKD liquidity instruments and may affect balance sheet and liquidity management strategies.

BaFin has issued a public warning against emilkaelin(.)com for offering counterfeit subscription certificates of well-known stock corporations without the required regulatory authorization. The website is linked to IPO Nexus, an entity previously flagged by BaFin, indicating a potentially coordinated fraud network targeting retail investors.

The Danish Financial Supervisory Authority (Finanstilsynet) has appointed Rune Fuglsang Smet as Head of the Credit Risk Office, effective September 1, 2026. This is a routine leadership appointment with limited direct regulatory impact, though it signals continuity in the regulator's supervisory approach to credit risk at banks and mortgage credit institutions.

The European Central Bank has released its routine consolidated financial statement of the Eurosystem for the reporting period ending 28 August 2026. This is a standard disclosure reflecting the weekly financial position of the Eurosystem and does not introduce new regulatory requirements for financial institutions.

Poland's data protection authority (UODO) reported a 363% increase in total administrative fines and a 61% jump in complaints in 2025, signaling intensified enforcement activity. Compliance teams operating in Poland should note the sharp rise in breach notifications (51% increase) and inspections (52% increase), reflecting heightened regulatory scrutiny and public awareness of data protection rights.

APRA and ASIC jointly convened superannuation CEOs in June 2026 to discuss frontier AI, cyber risk, operational resilience, and crisis preparedness. While no new formal requirements were introduced, the roundtable signals heightened regulatory focus on these themes, which compliance teams should factor into ongoing risk and governance reviews.