Financial Crime Bulletin

Dive deep into the financial crime avenues and stay up-to-date with Indian and global regulatory initiatives

Financial Crime Bulletin

Financial crimes have become an ever-evolving problem. Methods of perpetrating such crimes are going beyond traditional avenues and increasing in sophistication and technological integration, posing new challenges for financial institutions (FIs). Around USD3.1 trillion in illicit funds and USD485.6 billion in fraud scams and bank fraud schemes is estimated to have happened in 2023 alone with technology playing a major role in helping such crimes. 

In 2024, we saw some major regulatory initiatives/enactments with the U.S.A. enacting the Corporate Transparency Act (CTA), while the European Union introduced the AML Package, including the establishment of the Anti-Money Laundering Authority (AMLA), a new 6th Anti-Money Laundering Directive, and updated Transfer of Funds Regulations (TFRs) for crypto asset transfers. The U.K. has rolled out the Economic Crime Plan 2 (ECP2) and the G7 countries are working on AI regulations to combat financial crimes more effectively.

Here's a snapshot of noted regulatory initiatives/enactments during 2024

Regulators speak – Global regulatory landscape

Corporate Transparency Act (CTA)2

Effective 1 January 2024, The U.S. Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) has started accepting beneficial ownership information reports under the Corporate Transparency Act (CTA). Existing companies must file by 1 January 2025, while new companies have 90 days from creation or registration to file beneficial ownership information such as name, date of birth, address, and identification number.

DOJ AML Policy Initiatives3

On 15 April 2024, the Department of Justice has introduced a pilot programme offering non-prosecution agreements (NPAs) to individuals who voluntarily disclose original information about corporate and white-collar crimes. The programme incentivises reporting by providing immunity in exchange for cooperation, including full disclosure, assistance in investigations, and restitution for disclosures made on or after 15 April 2024.

Regulation

Amended Money Laundering Regulations4

The Money Laundering and Terrorist Financing (Amendment) Regulations 2023, effective 10 January 2024 introduced effectively differentiating between domestic and non-domestic PEPs with Domestic PEPs / associates being considered low risk thus requiring less stringent diligence measures.

Failure to Prevent Fraud5

The UK government has published guidance on the new corporate criminal offence of 'failure to prevent fraud,' effective from 1 September 2025. This offence, part of the Economic Crime and Corporate Transparency Act, holds large organisations accountable if they profit from fraud committed by employees or associates. Organisations must demonstrate reasonable fraud prevention measures to avoid liability. The guidance aims to foster an anti-fraud culture, similar to the impact of anti-bribery legislation. Developed with input from multiple agencies, it underscores the urgency for corporations to enhance their fraud prevention efforts.

Regulation

6th Anti-Money Laundering Directive (6AMLD)6

On the mechanisms to be put in place by member states for the prevention of the use of the financial system for the purposes of money laundering or terrorist financing, amending directives. The 6AMLD enhances mechanisms to prevent the use of the financial system for money laundering and terrorist financing. It includes stricter rules on beneficial ownership transparency and harmonizes AML measures across member states and became effective on 9 July 2024.

Harmonisation of AML Rules7

The EU Council and Parliament agreed on a comprehensive AML package harmonising rules across the EU, expanding coverage to most of the crypto sector and luxury goods traders, introducing enhanced due diligence and a €10,000 cash payment limit, and strengthening beneficial ownership transparency and national AML systems. Authority for Anti-Money Laundering and Countering the Financing of Terrorism (AMLA) will be based in Frankfurt and start operations in mid-2025.

Detailed guideline for standardised test for the classification of crypto-assets8

The European Banking Authority released final guidelines on templates for explanations and opinions, and the standardised test for the classification of crypto-assets as per MiCAR guidelines (Article 97(1) of Regulation (EU) 2023/1114).

Regulation

COSMIC Platform Launch9

On 1 April 2024, MAS launched COSMIC (Collaborative Sharing of Money Laundering/Terrorism Financing (ML/TF) Information & Cases), a digital platform for sharing information on potential financial crimes, with six major Singaporean banks. COSMIC helps detect and deter criminal activity by focusing on misuse of legal persons, misuse of trade finance, and proliferation financing. COSMIC allows FIs to securely share with one another, information on customers who exhibit multiple “red flags” that may indicate potential financial crime concerns, if stipulated thresholds are met. This makes it easier for FIs to detect and thereby deter criminal activity.

Payment Services Act Amendments10

On 2 April 2024, MAS introduced amendments to the Payment Services Act to expand the scope of regulated payment services and impose new requirements on digital payment token (DPT) service providers. These include custodial services for DPTs, transmission and exchange facilitation, and cross-border money transfers. MAS will enforce anti-money laundering, user protection, and financial stability measures. Transitional arrangements are provided for entities to comply with the new regulations, which include safeguarding customer assets in trust accounts.

Virtual Asset Risk Assessment Report11

MAS released its first Virtual Assets Risk Assessment Report. It provides a targeted review of the money laundering (ML), terrorism financing (TF) and proliferation financing (PF) risks associated with virtual assets, and complements Singapore’s national ML, TF and PF risk assessments. The VA RA identifies the key threats and vulnerabilities Singapore is exposed to. It also outlines relevant mitigation measures that government agencies and the private sector have put in place to mitigate the ML, TF and PF risks arising from virtual assets.

Regulation

National Strategy for AML/CFT12

On 2 September 2024, the UAE unveiled its 2024-27 National Strategy for AML/CFT/CPF, focusing on 11 strategic goals supported by legislative actions and regulatory reforms. The strategy emphasises risk-based compliance, effectiveness, and sustainability, aiming to enhance national and international coordination, supervision, and detection of illicit activities. It addresses emerging risks, including virtual assets and cybercrime, and aligns with international standards.

Collaboration between SCA and VARA (UAE) for regulating Virtual Assets and Crypto Currencies13

The SCA and VARA have signed a cooperation agreement to strengthen the UAE's position as a global hub for virtual assets on 2 September 2024. Under the agreement, the SCA and VARA will set forth rules and procedures for licensing and supervision VASPs and any related activities, services or associated transactions. The agreement also includes mutual supervision, information exchange, and employee training initiatives.

Regulation

AML/CTF Act Amendments by AUSTRAC14

AUSTRAC passed an AML/CTF Amendment Bill 2024, which modernises and expands the AML/CTF regime to include high-risk services by lawyers, accountants, and other professionals. The bill aims to simplify compliance, reduce regulatory burdens, and enhance the detection and disruption of financial crimes. The bill's role in closing gaps and improving financial intelligence collection.

Regulation

Regulators speak – Indian regulatory landscape

AML (Anti Money Laundering) Compliance for Securities Market15


On 6 June 2024, SEBI updated AML compliance requirements for securities market intermediaries, including enhanced due diligence and transaction monitoring. This aims to strengthen the integrity of the securities market and prevent financial crimes.

Internal Risk Assessment guidance for money laundering/terrorist financing risks16

The Reserve Bank of India issued comprehensive guidelines on 10 October 2024, for internal risk assessments by banks, NBFCs, and regulated entities to combat money laundering, terrorist financing, and proliferation financing. These guidelines aim to streamline the AML/TF risk assessment process, enhance operational efficiency, and align with global standards. They address sector-specific risks and provide a detailed methodology for risk identification. This move equips financial institutions to manage current and future financial crime challenges effectively.


Fraud Risk Management in Commercial Banks (including Regional Rural Banks) and All India Financial Institutions17

The Reserve Bank of India (RBI) issued the Master Directions on Fraud Risk Management in Commercial Banks (including Regional Rural Banks) and All India Financial Institutions (AIFIs) on 15 July 2024. These directions aim to provide a robust framework for the prevention, early detection, and timely reporting of frauds

You may refer our analysis of the said Master Directions by clicking here.

Brokers' institutional mechanism for prevention and detection of fraud or market abuse18

On 4 July 2024, SEBI introduced measures focusing on brokers' institutional mechanisms for the prevention and detection of fraud or market abuse like surveillance systems, employee obligations, escalation and reporting mechanisms, whistleblower policy, implementation standards, and compliance timeline as these provisions will be phased on broker size, with effective dates ranging from 1 January 2025, to 1 April 2026.

Way forward

We are already witnessing changes in the Financial Services landscape as result of Web 3.0 and digital payment advancements streamlining transactions. Such changes also provide fraudsters / criminals with advanced tools for more effective scams. Such evolutions in technology offers new avenues for deceptive tactics, from phishing scams utilising artificial intelligence to complex hacking methods that exploit blockchain vulnerabilities. 

Following are some of the tech assisted fincrime avenues being used extensively:
A man using smart phone to login for validate password to two-step authentication. Encrypted data. Business Technology security Concept.

Generative AI fraud has emerged as a significant threat to financial institutions. Criminals are increasingly leveraging AI to create deepfakes and synthetic identities, manipulate audio/video for identity theft, and clone voices to bypass biometrics. Robust AI-based counter analytics are needed to combat these advanced tactics effectively.

Cryptocurrency fraud poses significant challenges to financial institutions. Criminals use tools to create fake cryptocurrencies, deepfake exchanges, and sophisticated phishing schemes. Fake exchanges are available as Fraud-as-a-Service (FaaS), facilitating large-scale thefts and manipulation of digital assets. The decentralised nature of crypto exchanges makes it difficult to monitor and detect fraudulent transactions effectively.

The surge in QR code usage has led to increased exploitation by scammers. These scams often involve tampering with legitimate QR codes to redirect payments to fraudulent accounts or phishing sites, causing significant financial losses. As QR codes become more widespread, these scams are expected to grow in sophistication.

FaaS (Fraud-as-a-Service) is an emerging cybercrime model where criminals offer services, tools, and expertise to low-tech fraudsters. Available on dark web marketplaces, these aids range from phishing kits and captcha readers to advanced tools for account takeovers, money laundering (as a service to hide fraud proceeds), synthetic identities (by filing returns, maintaining bank accounts, etc.), and ID databases (used by hackers to return favourable API results).


The financial crime landscape will continue to evolve, and staying ahead requires a proactive approach, leveraging the latest technologies and consistently updating strategies. It’s an arms race, but with the right tool and knowledge, FIs can effectively combat these emerging threats. In times to come, it is expected that regulatory changes will continue encompass and embrace the challenges posed by such emerging technologies.


India Insights

Our insights is your gateway to thought leadership and in-depth reports. Explore our curated collection of valuable content, where we delve into complex business challenges, share industry trends, and provide actionable insights.

SEBI CSCRF - Our Point of View

The Cybersecurity and Cyber Resilience Framework aims to strengthen cybersecurity measures and ensure adequate cyber resilience for regulated entities

Spotlight on Internal (office) accounts!

POV on usage and challenges for internal (office) accounts along with concerns raised by RBI and indicative actions for banks.

Money Mules: FinCrime’s Trojan Horse Unveiled

Originating from the ancient Trojan deception, money mules embody a modern-day Trojan horse strategy, navigating through digital financial systems.

RBI releases revised fraud risk management directions for Regulated Entities

This issue of the first notes aims to provide an overview of the revised fraud risk management system and framework for banks, NBFCs (including HFCs).

Three New Criminal Laws

The Indian Home Ministry announced the enactment of three new criminal laws, effective July 1, 2024

Generative AI: value, risk, and regulation

Generative AI - An exclusive summary based on KPMG survey and analysis showcasing how leaders are approaching Generative AI.

[1] Global Financial Crime Report: Criminals took US$3.1 Trillion in 2023, OCCRP, Henry Pope, Jan 2024 
[2] Corporate Transparency Act (CTA), Financial crimes Enforcement Networks, Jan 24
[3] The Criminal Division’s Pilot Program on Voluntary Self-Disclosures for Individuals, Department of Justice, Apr 24
[4] The Money Laundering and Terrorist Financing (Amendment) Regulations 2023, UK Statutory instruments, Jan 24
[5] New failure to prevent fraud guidance published, UK Home Office and The Rt Hon Lord Hanson of Flint, Nov 24
[6] DIRECTIVE (EU) 2024/1640 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL, European Parliament, Jun 24
[7] Press release: Anti-money laundering: Council adopts package of rules, European Council, May 24
[8] FINAL REPORT ON GUIDELINES UNDER ARTICLE 97 OF REGULATION (EU) 2023/1114, European Banking Authority, Jan 24
[9] Press Release: MAS Launches COSMIC Platform to Strengthen the Financial System’s Defence Against Money Laundering and Terrorism Financing, Monetary Authority of Singapore, Apr 24
[10] Press Release: MAS Expands Scope of Regulated Payment Services; Introduces User Protection Requirements for Digital Payment Token Service Providers, Monetary Authority of Singapore, Apr 24
[11] Virtual Assets Risk Assessment Report, Monetary Authority of Singapore, Oct 24
[12] Press release: United Arab Emirates Unveils National Strategy for Anti-Money Laundering, Countering the Financing of Terrorism and Proliferation Financing for 2024-27, UAE Ministry of Foreign Affairs, Sep 24
[13] Press release: SCA and VARA set regulatory framework for the UAE’s virtual assets sector in boost to the country’s global position in the field, Securities and Commodities Authority, Sep 24
[14] Press release: Legislation to strengthen Australia’s anti-money laundering and counter-terrorism financing regime has passed Parliament, Australian Transaction Reports and Analysis Centre (AUSTRAC), Nov 24
[15] Master Circular SEBI/HO/MIRSD/MIRSDSECFATF/P/CIR/2024/78, SEBI, Jun 24
[16] Press release - Internal Risk Assessment guidance for money laundering/terrorist financing risks, Reserve Bank of India, Oct 24
[17] Master Directions on Fraud Risk Management in Commercial Banks (including Regional Rural Banks) and All India Financial Institutions, Reserve Bank of India, Jul 24
[18] Circular SEBI/HO/MIRSD/MIRSD-PoD-1/P/CIR/2024/96, SEBI, Jul 24

 

Key Contact

Suveer Khanna

Partner and Head, Forensic Services

KPMG in India

Access our latest insights on Apple or Android devices