Guest Opinion by Brad Levy, CEO, ThetaRay
This article is a contributed opinion piece. The views expressed are those of the author and do not necessarily reflect the views of Finnoex.
The financial industry has spent the last decade meticulously strengthening balance sheets, building capital cushions and improving liquidity ratios. Yet while institutions have focused on protecting reserves, the networks that move money around the world have become increasingly vulnerable to criminals exploiting legitimate financial channels. Record regulatory penalties and the continued movement of illicit funds through mainstream financial systems point to a different kind of systemic risk. The next financial crisis may not begin when a bank runs out of money. It could begin when markets, regulators and customers lose confidence in the integrity of the networks moving it.
The warning signs are already visible. The UK’s Financial Conduct Authority targeted Barclays over historic weaknesses in its anti-money laundering controls, highlighting how failures in financial crime risk management can persist inside major institutions. Even markets regarded as having highly developed financial systems are facing significant challenges. In Sweden, estimates of the scale of the criminal economy have raised concerns about illicit capital entering legitimate businesses and the wider economy. Petra Lundh, Sweden’s National Police Chief, has warned about the growing influence of criminal money across society.
Financial institutions therefore face a challenge that extends beyond regulatory compliance. The integrity of the networks themselves must be protected if trust in the financial system is to be maintained.
When Rules-Based Solutions Become Part of the Problem
Banks have spent decades protecting financial infrastructure using established rules-based monitoring systems. Those systems have played an important role in financial crime compliance, but criminals have also become increasingly sophisticated at understanding how static controls operate and how to avoid triggering them. Inside many institutions, compliance teams continue to process large volumes of alerts, many of which ultimately prove to be false positives. Valuable investigative capacity is consumed clearing low-value alerts rather than identifying hidden relationships and emerging threats.
This can create an operational illusion of security: substantial compliance activity is taking place, yet sophisticated criminal networks may still be able to exploit fragmented systems and move funds through multiple layers and jurisdictions without crossing predefined thresholds.
Regulators are responding to these weaknesses. The European Commission has strengthened its approach to confiscation and asset recovery as authorities seek to disrupt the financial structures supporting organised crime. European authorities estimate that organised criminal activity generates enormous illicit revenues, much of which ultimately needs to be laundered through legitimate economic and financial channels. In the United States, FinCEN has also proposed reforms intended to make financial institutions’ anti-money laundering and countering the financing of terrorism programmes more effective and risk-based.
The direction is increasingly clear. Compliance cannot remain primarily an exercise in demonstrating that prescribed processes have been followed. Banks and fintechs will increasingly be expected to show that their systems are actually capable of identifying and responding to meaningful financial crime risks. Compliance is becoming part of the infrastructure required to protect the integrity of global financial networks.
When Trust Erodes
Weaknesses in conventional AML practices are hardly unknown within the industry. Regulatory reforms taking place across major markets demonstrate that authorities themselves recognise the need for change. Yet investors and financial institutions have traditionally viewed compliance differently from capital adequacy, liquidity or credit risk. That distinction may become increasingly difficult to maintain.
Repeated compliance failures can damage more than the institution receiving a regulatory penalty. If illicit funds continue moving through legitimate financial infrastructure at scale, confidence in the ability of financial institutions to understand who is using their networks and why can deteriorate.
Trust is ultimately one of banking’s most important assets. Customers trust institutions to safeguard their money, banks trust counterparties, markets depend on the reliability of settlement networks, regulators rely on institutions to identify suspicious behaviour, and correspondent banks depend on one another to maintain adequate controls. A sufficiently serious breakdown in that chain of confidence can therefore become a financial stability issue, not merely a compliance problem.
The industry needs to address those weaknesses before the consequences extend beyond regulatory enforcement. Financial crime may traditionally have been treated primarily as a compliance concern, but the integrity of the networks through which money moves is increasingly inseparable from confidence in the financial system itself.
Transparent Detection Over AI Hype
Modernising financial crime infrastructure does not require tier-one financial institutions to immediately replace every existing compliance system, nor will simply adding more rules, processes and people necessarily solve the problem. A more practical path is to introduce artificial intelligence alongside existing infrastructure, allowing institutions to move beyond purely static monitoring towards systems capable of identifying patterns and relationships that traditional thresholds may miss.
The financial industry’s AI conversation is increasingly turning towards autonomous and agentic systems, but these technologies should not be viewed exclusively as future concepts. Financial institutions are already exploring and deploying machine learning and AI-driven approaches within financial crime detection and investigation. For regulated institutions, however, greater intelligence cannot come at the expense of transparency.
Systems used for financial crime detection need to produce explainable results that investigators and regulators can understand. Alerts need to be connected to identifiable risk indicators and the institution’s own risk profile rather than emerging from an unexplained black box. This becomes even more important as AI systems assume a greater role in identifying patterns, investigating anomalies and prioritising cases for human review.
AI can also take on more of the repetitive work currently performed by compliance teams. Instead of investigators spending substantial amounts of time collecting information, reconciling records and clearing low-risk alerts, intelligent systems can continuously analyse activity, identify anomalies and assemble relevant context. The role of the compliance professional can then move further towards investigation, judgement and decision-making.
Turning Data Into Action
Success in a high-speed, interconnected financial system increasingly depends on how quickly an institution can convert raw data into information, intelligence, insight and ultimately action. Criminal networks understand this dynamic too. Digital financial infrastructure enables legitimate money to move faster than ever, but those same capabilities can be exploited to move illicit funds across accounts, institutions and jurisdictions at a speed that manual investigations struggle to match.
Financial crime prevention therefore requires what might be described as patient urgency. Building trusted global financial infrastructure takes time, coordination and institutional commitment, but deploying more adaptive technologies to defend that infrastructure cannot wait for the threat environment to stand still.
The choice facing financial institutions is not simply between old compliance technology and new AI. It is whether compliance remains predominantly reactive or evolves into an intelligent layer of financial infrastructure capable of continuously assessing risk as money moves through increasingly interconnected networks.
The financial system has repeatedly demonstrated an ability to strengthen itself after periods of disruption. The same opportunity now exists in financial crime compliance. By combining institutional experience with adaptive intelligence, banks can begin repairing weaknesses in existing systems while building a more resilient architecture of trust. The objective is ultimately larger than reducing alerts or avoiding regulatory penalties. It is ensuring that global financial networks remain sufficiently secure, transparent and trusted to continue performing their fundamental role in the economy.
