Risk & Resilience

The Hong Kong SFC has concluded its consultation on amendments to the Securities and Futures (Stock Market Listing) Rules, confirming it will proceed with proposals to introduce continuing conditions on listing applications, post-listing conditions, information requisition powers, and removal of automatic exemptions for certain share issuances. These changes, expected to take effect in Q1 2027, expand the SFC's regulatory toolkit for both IPO and post-IPO oversight, requiring compliance teams supporting listed issuers and sponsors to reassess disclosure, governance, and monitoring processes.

An ECB Lamfalussy Fellowship working paper argues that pairing common EU debt with a non-defaultable common tax can benefit both fiscally strong and fiscally weak member states, rather than functioning as a one-way transfer. While this is academic research rather than policy, it signals the direction of thinking around a future permanent EU common borrowing capacity, which compliance and public policy teams at financial institutions operating in the EU should monitor.

Financial market infrastructures are expected to maintain sufficient equity-backed liquid assets to withstand losses arising from their business operations. An international assessment found problems with how some of those institutions were applying that requirement, prompting further work by two of the financial system's principal standard-setting bodies.

The Malta Financial Services Authority (MFSA) has directed insurance and reinsurance companies to review their risk management arrangements after supervisory inspections uncovered weaknesses in risk assessment procedures, operational incident management, and business continuity planning.

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about BVF Capital S.à r.l., a Luxembourg-linked name, based on a warning issued by Luxembourg's CSSF concerning the website www.bvfcapital.com. The notice signals a likely unauthorized or fraudulent investment solicitation targeting investors. Compliance teams should treat the name and website as high-risk for onboarding, payments, and client-protection purposes.

The Hellenic Capital Market Commission (HCMC) has warned that Oversea Capital Markets Limited Single-Member Private Company (IKE) and the website overseatrades.com are not authorized to provide investment services or hold client funds. Compliance teams should treat both as unlicensed and high-risk, and update screening and monitoring controls accordingly.

The Norway Financial Supervisory Authority has listed a warning, originally issued by Luxembourg's CSSF, about fraudulent actors impersonating Eurizon Capital SGR S.p.A., Luxembourg Branch. Compliance teams should treat the name as a known impersonation vector and strengthen onboarding, payment, and client-communication controls accordingly.