Warning concerning fraudulent activities by persons misusing the name of the Luxembourg company Fortuna Holding S.à r.l.

The CSSF has issued a public warning about fraudulent activity involving misuse of the Fortuna Holding S.à r.l. name. For compliance teams, this is a counterparty and impersonation risk signal rather than a direct supervisory measure against the named entity. Firms should treat unsolicited communications, onboarding documents, invoices, or payment instructions referencing Fortuna Holding as heightened risk until independently verified.

Recommended actions include checking the Luxembourg corporate registry and known contact channels, applying enhanced due diligence and escalation for name matches, briefing front office, KYC, payments, and client-service teams, and monitoring for clone-style websites, emails, and documents. Suspicious activity should be documented and escalated through internal fraud/AML processes and, where appropriate, reported to authorities. No new rule or compliance deadline is introduced, so implementation burden is low, but existing fraud controls should be tested and evidence retained.

The main business opportunity is to reinforce client trust through robust verification and fraud-awareness controls. Firms should avoid overly broad blocking that creates false positives and instead adopt a risk-based verification approach.