Financial crime and fraud in financial services this week

Week ending 19 October 2026 · 32 sources

Bank of America's $1.21bn AML penalty sets the week's tone

The OCC imposed $750 million of a $1.21 billion set of US penalties on Bank of America for money laundering and sanctions failures 12. The IMF and World Bank also launched a Bangkok Blueprint to fight cyber fraud 34.

Which way the market is moving

Bank of America penalty leads a week of AML enforcement

US regulators imposed $1.21 billion in penalties on Bank of America for money laundering and sanctions failures 21415.

The OCC imposed a $750 million civil money penalty on Bank of America, N.A. for violations of the Bank Secrecy Act 1. Total penalties reached $1.21 billion, with the Treasury Department citing money laundering and sanctions law violations 21415. Coverage linked the case to suspected Chinese money laundering and to Russia and Iran sanctions 1617. The AML process was described as "deficient and ineffective" 5.

The penalty hit results: profit fell 17% and the shares fell 5% 61819. Separately, NYDFS fined SEB $33 million over a Baltic money laundering review, and TD Bank investors advanced a suit over money laundering issues 202122.

What it means: Supervisors are testing whether monitoring and screening controls actually work, not whether policies exist. Any financial institution should expect AML failures to reach earnings, investors and the board, not just the compliance team.

Questions for vendors:

  1. What evidence does your platform keep to show each alert was reviewed, escalated and closed within set timeframes?
  2. How do you document model tuning and validation in a form an examiner would accept?
  3. How does your screening handle sanctions exposure in correspondent and cross-border flows?

In the registry: AML (Hawk), Identity verification (Annature), Lens (Elliptic)

Digital fraud becomes a global policy question

The IMF and the World Bank launched the Bangkok Blueprint to fight cyber fraud in digital finance 34.

The IMF and the World Bank launched a framework called the Bangkok Blueprint to fight cyber fraud 34. The launch was reported by Reuters and The Paypers, putting digital fraud in front of an international finance audience 34.

Industry evidence suggests institutions may be underprepared. A Feedzai report found banks and fintechs are confident they are ready for the next wave of fraud, but the evidence suggests they are overestimating themselves 23. At Sibos 2026, Pay.UK's David Crawford described how deterministic and probabilistic AI can keep everyday payments fast, safe and free from fraud 24.

What it means: Fraud is being framed as a system-wide risk rather than a cost of doing business. Institutions should test their own readiness claims against evidence, not confidence surveys.

Questions for vendors:

  1. What measured results can you show for detection rates and false positives at institutions like ours?
  2. How do you combine rules and machine learning in real-time payment decisions, and how is each explained?

In the registry: Alterya (Chainalysis), AML (Hawk), Internal Threat Management (Bottomline)

Fraud intelligence sharing widens across sectors

Canadian banks and telecom companies launched a joint fraud intelligence-sharing platform, and Singapore expanded COSMIC 7258.

Canadian banks and telecommunications companies launched a joint platform to share fraud intelligence 725. The arrangement brings banks and telecom carriers into one intelligence-sharing setup 725. Singapore expanded COSMIC as financial crime risks evolve 8.

In the US, FinCEN issued an alert to help financial institutions identify and report potential Iranian abuse of religious charity networks 26. The alert gives institutions specific typologies to apply in their monitoring and reporting 26.

What it means: Scam and laundering signals increasingly sit outside any one institution's data. Institutions should plan for how external intelligence feeds into their monitoring, case handling and reporting.

Questions for vendors:

  1. Can your platform ingest and act on intelligence from shared industry or telecom feeds?
  2. How quickly can you add a new regulator typology, such as a charity network alert, to live monitoring?

In the registry: Alterya (Chainalysis), MiVIP (Mitek), AML (Hawk)

Device and network signals gain weight

Spanish banks reported a 150% spike in fraud conducted from stolen devices 92728.

Spanish banks reported a 150% spike in fraud conducted from stolen devices, according to research published by BioCatch 92728. Alkami and BioCatch moved to strengthen digital banking fraud prevention 10.

Sumsub, which serves over 4,000 clients across financial services, crypto, trading and iGaming, selected IPinfo as its primary source of IP geolocation and VPN detection 11. The choice adds evidence-backed IP intelligence to its fraud prevention 11.

What it means: When fraud runs from the customer's own device, login and device checks alone are weaker. Behavioural and network signals become more important across the session, not only at login.

Questions for vendors:

  1. How do you detect fraud carried out on a genuine, previously trusted customer device?
  2. What IP and VPN data sources do you use, and how do you validate their accuracy?

In the registry: AML (Hawk), Account Takeover Protection (BioCatch), Alterya (Chainalysis)

AI agents and digital ID enter compliance work

An FIS AML agent built with Anthropic reached US banks, and FinCEN clarified the use of mobile driver's licences in onboarding 1229.

FIS said its AML agent built with Anthropic has reached US banks 12. GSS partnered with Storm Reply to introduce an AI-powered cloud capability for sanctions screening 13. Veryfi made generally available a configurable, API-first suite that detects fraudulent documents and checks 30.

On identity, FinCEN clarified the use of mobile driver's licences in bank onboarding 29. Separate industry commentary argued that traditional KYC no longer works 31.

What it means: AI is moving into the analyst and screening workflow, which raises questions of oversight and audit. Digital identity documents are becoming acceptable inputs, so onboarding systems need to handle them.

Questions for vendors:

  1. What human review and audit trail sits around decisions made by your AI agent?
  2. Do you support mobile driver's licences in onboarding, and how are they verified?
  3. How is your document fraud detection tested against new forgery methods?

In the registry: Identity verification (Annature), AML (Hawk), Lens (Elliptic)

Regulation and supervision

Sources

  1. Office of the Comptroller of the Currency, 2026-10-13: OCC Imposes $750 Million Assessment Against Bank of America for Deficient BSA/AML Compliance
  2. American Banker, 2026-10-13: BofA gets $1.21B penalty for money laundering
  3. Reuters, 2026-10-14: IMF, World Bank launch 'Bangkok Blueprint' to fight cyber fraud
  4. The Paypers, 2026-10-16: IMF, World Bank launch Bangkok Blueprint on digital fraud
  5. Finextra (security), 2026-10-14: BoA fined $1.2bn over "egregious" AML deficiencies
  6. Financial Times, 2026-10-14: Bank of America profits drop 17% after $1.2bn money laundering fine
  7. The Globe and Mail, 2026-10-14: Banks, telecoms launch fraud intelligence-sharing platform
  8. FinTech Global, 2026-10-15: Singapore expands COSMIC as financial crime risks evolve
  9. BioCatch, 2026-10-14: Spanish banks report 150% spike in fraud conducted from stolen devices
  10. FinTech Global, 2026-10-12: Alkami and BioCatch strengthen digital banking fraud prevention
  11. Finextra (security), 2026-10-14: Sumsub Selects IPinfo to Bring Evidence-Backed IP Intelligence to Fraud Prevention
  12. The Paypers, 2026-10-16: FIS AML agent built with Anthropic reaches US banks
  13. Finextra (cloud), 2026-10-14: GSS and Storm Reply collaborate on sanctions screening
  14. Banking Dive, 2026-10-13: BofA fined $1.21B over AML flaws
  15. CNN, 2026-10-13: Bank of America fined $1.2 billion by Treasury Department for violating money laundering and sanctions laws
  16. South China Morning Post, 2026-10-14: Bank of America fined US$1.21 billion for suspected Chinese money laundering
  17. The Times of India, 2026-10-14: From Chinese money laundering to Russia, Iran sanctions - why was Bank of America fined $1.21 billion?
  18. PYMNTS.com, 2026-10-14: Bank of America Profits Fall 17% Following $1.2 Billion Money Laundering Fine
  19. Yahoo Finance, 2026-10-14: Bank of America Falls 5% as $1.2B Money Laundering Penalty Drives Earnings Miss; JPMorgan Chase and Wells Fargo Hold Steady
  20. Banking Dive, 2026-10-16: NYDFS fines Swedish bank SEB $33M over AML issues
  21. Reuters, 2026-10-15: SEB pays $33 million to New York regulator over Baltic money laundering review
  22. Bloomberg Law News, 2026-10-14: TD Bank Investors Advance Suit Over Money Laundering Issues
  23. Finextra, 2026-10-16: Feedzai report shows banks' overconfidence on fraud
  24. Finextra, 2026-10-14: How Can AI in Payments Balance Innovation With Fraud Risk?
  25. Yahoo Finance, 2026-10-14: Canadian Banks, Telecom Companies Launch Joint Anti-Fraud Platform
  26. ABA Banking Journal, 2026-10-15: FinCEN issues alert on religious charities allegedly tied to Iran
  27. IBS Intelligence, 2026-10-14: Spanish banks report 150% surge in stolen device fraud, research reveals
  28. Finextra Research, 2026-10-14: Spanish banks report 150% spike in fraud
  29. FinTech Global, 2026-10-14: FinCEN clarifies use of mobile driver’s licences in bank onboarding
  30. Finextra (security), 2026-10-12: Veryfi launches AI-powered fraud prevention tools
  31. FinTech Global, 2026-10-14: Why traditional KYC no longer works – FinCrime Tech Awards 2026
  32. Moneycontrol.com, 2026-10-16: UPI scam emptied your bank account? Here’s when the bank may have to cover the loss

About financial crime and fraud software

Financial crime software helps institutions know their customers and stop money laundering and fraud: identity checks, screening and transaction monitoring.

Browse the products in the registry

Previous weeks

Get the market overview every Monday: subscribe to the Vederca newsletter.