fidus-capital(.)com: Bafin warnt vor Website und weist auf Identitätsdiebstahl hin

The regulator cites §37(4) KWG and §10(7) Kryptomärkteaufsichtsgesetz. For compliance teams, this is a timely reminder that clone-firm and identity-theft scams are an operational and reputational risk. Firms should verify that their brands are not being abused online, review third-party onboarding and payment flows for links to unlicensed providers, and ensure customer-facing teams can quickly respond to client queries about suspicious websites.

Enhanced monitoring of domain registrations, social media, and crypto-related offerings can help detect impersonation early. If a firm discovers misuse of its identity, it should notify BaFin, law enforcement, and affected customers, and consider takedown requests. The warning also underscores the importance of BaFin's company database as a licensing check: before engaging with any new counterparty, especially in banking, payments, or crypto, confirm its authorisation status.

Although the immediate supervisory action targets an unauthorised website, the broader message is that robust due diligence, fraud controls, and clear customer communication are essential. Compliance leaders should brief boards on the rising use of regulatory brands and legitimate firm identities in online fraud, and update incident response playbooks accordingly. No new direct obligations arise for authorised firms, but the risk of contagion through customer confusion and brand damage is real.

Proactive verification and education can turn this warning into a trust-building opportunity.