Fake Regulators Selling “Licences”: The Nauru ISAN Warning
Nauru Issues Public Warning on “International Services Authority of Nauru (ISAN)” Offering Fake Financial Licences
A recurring pattern is back in circulation: a “regulator” contacts firms with a quick licensing offer, a polished website, and official-looking seals. In August 2024, the Republic of Nauru published a formal public notice warning that an “authority” is offering services under a fraudulent scheme in the name of the “International Services Authority of Nauru (ISAN)”. The notice is explicit: ISAN is not legally recognised or registered in Nauru or elsewhere, and the services are intended to defraud vulnerable people.
This matters because fake “licences” create real downstream risk. Even if you never onboard clients, the moment you use a fraudulent credential in banking, PSP onboarding, vendor contracting, or marketing, the exposure becomes operational: account closures, frozen funds, regulator referrals, and reputational damage that is hard to unwind.
Below we summarise what the Government notice actually says, what red flags to watch for, and a simple verification workflow we recommend before paying any “application fee” to a regulator you have not independently verified.
Publish Date
10 Mar 2026
Reading Time
6 minutes
Category
Legal News
Jurisdiction
Republic of Nauru
What the Government of Nauru notice says
The notice states that the Secretary for Justice and Border Control was alerted to an “authority” offering services to regulated financial service providers under a fraudulent scheme using the name “International Services Authority of Nauru (ISAN)”. It further states that ISAN is not a legally recognised or registered office or entity in Nauru or elsewhere.
The notice also addresses a common tactic used by impostor bodies: referencing “Gazette Notices” and implied statutory establishment. Nauru’s notice states that a referenced Gazette Notice is fraudulent and that claims about the authority’s establishment are not correct.
Finally, the warning is unambiguous on action: do not deal with, do not enter into agreements, and do not make payments to ISAN. It also requests that any person with information notify the Secretary for Justice and Border Control.
Why fake regulators keep working
Fraudsters exploit three pressure points:
- Speed: “fast licence” language targets teams that are trying to close banking, PSP, or partner onboarding.
- Authority theatre: national emblems, official-looking PDFs, and invented “gazette” references create false legitimacy.
- Payment inertia: small “application” or “processing” fees are used to establish the first transfer, then escalate.
If your internal process allows a business unit to pay a “regulator fee” without legal verification, you are relying on luck.
Red flags vs. verification steps
| Red Flag | What to Do Instead |
|---|---|
| Uses a government emblem or seal to imply official status | Verify the regulator on a government domain and locate the enabling instrument or official notice |
| “Licence issued in days” + payment requested upfront | Require a document trail: legal basis, licensing rules, register entry, contact points, and payment instructions on official channels |
| References “gazette notices” that you cannot validate | Demand the gazette link from an official publisher, then cross-check titles, dates, and numbering |
| Provides only a website and a PDF “certificate” | Treat as unverified until you find: official notice, legislation, registry records, and recognised supervisory references |
| Pressures you to keep it confidential | Escalate internally; treat it as a fraud indicator, not a commercial negotiation |
The Nauru notice is a good example of why this workflow matters. It explicitly calls out the misuse of the national emblem and rejects the “gazette” claims.
A practical verification workflow we use before engaging any “regulator”
When a licensing offer looks “too easy,” we run a short validation sequence. It is intentionally boring, because boring catches fraud.
Step 1 — Confirm the regulator exists on a government domain
Look for an official page hosted under a government website and verify the body’s mandate. If the only credible reference is the regulator’s own website, treat it as unverified.
Step 2 — Locate the legal basis
For legitimate regulators, you can trace authority to legislation or an official instrument. If you cannot find the legal basis, you do not have a regulator.
Step 3 — Find the register and test it
A real licensing regime typically has a register you can query, with consistent identifiers. If there is no register, or it cannot be tied back to official sources, pause.
Step 4 — Validate contact and payment channels
Cross-check phone/email/payment instructions against official publications. Fraud operations often route everything through one “case manager” and non-transparent payment flows.
Step 5 — Record the decision
Document a short memo: what we checked, what we found, and why we accept or reject. This protects you later during banking, PSP, and partner due diligence.
What to do if you already received an “ISAN” approach
If you have received outreach using the “ISAN” name, do not pay fees and do not sign documents. Preserve the materials (email headers, attachments, website screenshots), and escalate internally to legal/compliance for an incident record.
The Government of Nauru notice requests that anyone with information about the scheme notify the Secretary for Justice and Border Control.
FAQ About The Nauru ISAN Fake Regulator Warning
Is “International Services Authority of Nauru (ISAN)” a recognised regulator?
Nauru’s public notice states that ISAN is not legally recognised or registered in Nauru or elsewhere.
What is the safest way to verify a regulator offering a licence?
Verify the regulator through official government sources, locate the legal basis, confirm a public register, and validate contact/payment channels against official publications.
What is the main risk of using a fake licence?
You can trigger account closures, frozen funds, partner de-risking, and potential referrals once the credential is used in onboarding or marketing.
How do I get other licenses?
Europe’s MiCA CASP Register After March and April 2026
EU Parliament Floats Crypto and Online Gambling Levies for Future Budget
Digital Euro Pilot Moves Forward as PSP Application Deadline Approaches
Malta Gaming Operators Face New AML Expectations as MGA Points Industry to AMLA Consultations
UK Crypto Firms Can Request FCA Pre-Application Meetings From 11 May 2026
ESMA Warns Crypto Firms as MiCA Transitional Period Ends on 1 July 2026
South Africa FSP Licences and Market Overview for Investors
BVI Company Formation Guide: Setup Route, Compliance, Banking Reality
China Company Formation For Foreign Founders: Setup And Compliance














