• SignalHKMA issued multiple bank-related scam alerts covering impersonation attacks, phishing and fake websites, each carrying a materiality score of 8.
• SignalHKMA specifically flagged fraudulent websites impersonating Octopus Cards, extending the impersonation vector beyond banks into payment brands.
• SignalHKICL warned of fraudulent websites impersonating FPS services, reinforcing a coordinated Hong Kong payments-fraud narrative today.
• SignalHong Kong Deposit Protection Board reported a record HK$3.6tn in covered deposits, signalling continued balance-sheet growth exposed to the same consumer fraud vectors.
• SignalBank of England research probed NBFI overnight liquidity provision to banks, keeping non-bank funding dependency on the prudential radar.
• SignalESMA opened phase-one ESAP data collection from OAMs and NCAs, moving the EU single access point from design into operational onboarding.
• SignalEBA published final guidelines on authorisation of third-country branches, tightening the perimeter for non-EU banking groups.
• SignalA UK logbook lender entered administration, raising conduct-risk exposure around vulnerable borrowers and orderly wind-down.

Four of today's nine signals originate from Hong Kong authorities warning of impersonation and phishing attacks against banks, Octopus Cards and FPS — a concentration that suggests an active, coordinated fraud campaign rather than isolated incidents, and one that lands as HK covered deposits hit a record HK$3.6tn. In parallel, the open-alert stack shows Conduct, AML, Sanctions and Market Integrity emerging as high-severity themes from a zero base over 30 days, alongside a 17pp jump in the Critical/High severity share and a 2.5× signal-velocity spike — the operating environment is broadening and intensifying, not just in Hong Kong. EU structural changes (EBA third-country branches, ESMA ESAP go-live) and a UK non-bank failure add conduct and perimeter workstreams that CROs cannot defer.

1. 1Stand up a Hong Kong impersonation-fraud task line: validate customer-facing domain monitoring, brand-abuse takedown SLAs and scam-alert customer communications against the HKMA and HKICL warnings issued today.
2. 2Commission a rapid read-across from the HK payments impersonation cluster to your own retail and payments brands in other jurisdictions — the same playbook is portable.
3. 3Task Compliance and Second Line with a gap assessment against the EBA final guidelines on third-country branch authorisation and confirm ESAP phase-one onboarding accountability with Investor Relations and Reporting.
4. 4Have Model Risk and Technology Risk close the two open scenario-trigger matches on frontier AI ICT risk in credit decisioning before the next risk committee.
5. 5Direct the horizon-scanning team to explain the 17pp severity-mix shift and the four new high-severity emerging themes (Conduct, AML, Sanctions, Market Integrity) — and whether current scenario packs cover them.

• Follow-through from the ESAs' frontier AI ICT governance push and whether it hardens into supervisory expectations for credit-decisioning models.
• Whether the elevated signal velocity (24/day vs 10/day 30-day average) persists into next week or reverts, which will determine if today's HK cluster is a spike or a regime shift.
• Trajectory of the 17pp increase in Critical/High severity share — a sustained level would warrant re-baselining risk appetite thresholds.
• Evolution of the four newly emergent high-severity themes (Conduct, AML, Sanctions, Market Integrity), each moving from zero to double-digit signals in 30 days.
• Close the identified scenario-pack gaps — particularly Cyber Threat Intelligence & Incident Reporting and Operational Resilience & Critical Third Parties — given today's fraud-vector signals.