In-depth practical guides

Check financial authorisation and contact identity

Choose REGAFI, ORIAS or EBA for the activity and check contact details separately.

Updated :

Book and document digitization workstation. Illustrative scene.

Book and document digitization workstation. Illustrative scene.

Check financial authorisation and contact identity — method

A real company can be impersonated. Connect a register name to the proposed service, status and verified contacts. An authorisation number copied into an email is insufficient.

  1. Define activity

    Distinguish banking or insurance, intermediary activity and European credit institutions. The register must cover the claimed activity and country.

  2. Read the right register

    Since July 2026, REGAFI combines ACPR public banking and insurance registers. ORIAS concerns intermediaries. EBA aggregates information supplied by national authorities.

  3. Check scope and status

    Record identifier, category, country and competent authority. The EBA register confers no rights and has no legal significance for authorisation; confirm status with the competent authority.

  4. Verify contacts

    Open the official register yourself and use a contact independent of the received message. Read AMF warnings; absence from a blacklist is not authorisation.

Situations and decisions

Typical situations for preparing a check. They do not describe completed assignments or actual observations.

Registered name, different domain

Verify the domain independently before attributing the message to the entity.

Activity outside category

Compare the offered service with the exact registration scope, not only the name.

Record to retain

  • Identifier, status, category and authority.
  • Official URL, date and result extract.
  • Cross-checked contacts and discrepancies.

Official references

Related source profiles

Related protocols

Checks before reaching a conclusion

  • Verify the domain independently before attributing the message to the entity.
  • Compare the offered service with the exact registration scope, not only the name.

Frequently asked questions

Is a blacklist sufficient?

No. Warnings are not exhaustive; also check identity and authorisation.

Does EBA replace the national authority?

No: the aggregate guides research; the competent authority confirms authorisation.

TOOLS / REGISTERS

Write a record

Open the official register yourself and use a contact independent of the received message. Read AMF warnings; absence from a blacklist is not authorisation.

  • Access date and time zone
  • Exact URL
  • Entity identifier
  • Exact name
  • Country / jurisdiction
  • Application / registration number
  • Observed status
  • Relationship / link direction
  • Limit / uncertainty
  • Decision / next action
  • Review owner
  • Next review