Financial Crime Lab Digest: Key AML Updates and Enforcement Actions in Early 2026
July 31, 2026
The New Compliance Question: Is It Working?
August 5, 2026
This edition covers a record US broker-dealer penalty, proposed AML reforms, enforcement in France and Australia, crypto-laundering networks, deepfake fraud, and recurring failures in escalation and remediation.
The original LinkedIn edition stated that it was prepared by Financial Crime Lab with AI assistance.
Cover Story: FinCEN’s USD 80 Million Canaccord Penalty
On 6 March 2026, FinCEN imposed an USD 80 million civil penalty on Canaccord Genuity LLC. Coordinated actions by the SEC and FINRA added USD 20 million each, taking the combined US enforcement event to USD 120 million.
FinCEN said the failures extended from March 2018 to June 2024 and included at least 160 suspicious activity reports that were not filed. A central aggravating factor was that the firm had identified weaknesses years earlier without completing effective remediation.
The case is therefore as much about governance as detection. Once an institution records a control weakness, unresolved findings, missed milestones, and weak evidence of progress can materially increase its enforcement exposure.
Practical response
Compliance leaders should review unresolved examination, audit, and quality-assurance findings. Each item should have an accountable owner, a target date, evidence of progress, a clear closure standard, and documented escalation when delivery slips.
Regulatory Intelligence
1. Proposed US AML/CFT Program Reform
On 7 April 2026, FinCEN published a proposed rule that would change how AML/CFT programs are assessed. The proposal distinguished between establishing a program and implementing it, placed greater weight on risk assessments, and addressed the threshold and coordination process for significant supervisory action.
The consultation deadline in the original edition was 9 June 2026. Institutions should now check the current rulemaking status before relying on the proposal’s details.
2. Australia’s Expanded AML/CTF Regime
Australia’s reformed AML/CTF framework took effect on 31 March 2026, introducing changes to risk assessment, governance, and virtual-asset obligations. The original edition also highlighted a 1 July 2026 enrollment deadline for Tranche 2 entities such as real estate agents, lawyers, accountants, and precious-metals dealers.
Affected firms should confirm their current enrollment, customer due diligence, reporting, and governance obligations directly with AUSTRAC.
3. Stablecoin AML and Sanctions Expectations
The original edition reported a joint FinCEN and OFAC proposal addressing AML and sanctions controls for stablecoin issuers. It described an expected sanctions compliance framework covering management commitment, risk assessment, internal controls, testing, and training.
Stablecoin issuers, custody providers, banking partners, and other exposed institutions should verify the proposal and its current status before making implementation decisions.
4. UK Professional-Services Supervision
The FCA’s proposed role as a consolidated AML supervisor for legal, accountancy, and trust and company service providers would replace fragmented oversight by multiple professional bodies. Firms in these sectors should monitor the final scope, transition timetable, information-sharing arrangements, and enforcement powers.
5. UAE AML Law
The edition described stronger criminal penalties, corporate liability, confiscation powers, and enforcement activity under the UAE’s AML framework. Firms with a UAE presence or material Gulf exposure should assess the exact legal provisions with local counsel and primary regulatory sources.
Enforcement Watch
| Authority | Entity | Main issue | Action | Control lesson |
|---|---|---|---|---|
| FinCEN, SEC, and FINRA | Canaccord Genuity LLC | Unfiled SARs and longstanding unresolved AML weaknesses | Combined USD 120 million US enforcement event | Known deficiencies require timely, evidenced remediation |
| ACPR Sanctions Commission, France | MoneyGram International SA | Weak internal controls, customer due diligence, suspicious activity reporting, and transaction monitoring | Sanctions imposed under Decision No. 2024-06 | Global payment firms need jurisdiction-specific overlays on a common control baseline |
| AUSTRAC and the Federal Court of Australia | Castra Licence Pty Ltd and Princeton Securities (NSW) | Failure to submit required AML/CTF compliance reports | Civil penalty proceedings active in 2026 | Regulatory calendars need named owners, oversight, and escalation |
Typology: Professional Crypto-Laundering Networks
The 2026 indictment of Jorge Figueira was presented as an example of a network combining cash, cryptocurrency, over-the-counter brokerages, shell companies, and accounts at regulated financial institutions. OTC brokers can act as conversion points between crypto and fiat while multi-jurisdiction structures complicate transparency and information sharing.
Red flags
- Corporate accounts with vague currency-exchange or investment-advisory descriptions receiving large, irregular wires.
- OTC broker counterparties without clear registration or a verifiable customer base.
- UK, US, and Latin American fund movements without an evident commercial rationale.
- Opaque or circular beneficial-ownership chains.
- Repeated movement between fiat and crypto without a credible business purpose.
Typology: Escalation Failure
A January 2026 Spanish enforcement action involving CaixaBank illustrated a different control weakness: risk indicators were identified but did not reach the right decision-maker in time. This type of failure is particularly relevant to high-value real estate, commercial banking, and private banking activity.
Red flags
- Alerts closed without a complete risk-based rationale.
- Relationship managers repeatedly overriding alerts for the same clients.
- Transactions proceeding despite incomplete source-of-funds evidence.
- Closure notes referring to client seniority or relationship value.
- Material cases reaching the MLRO only after execution.
Practitioner Priorities
Treat the findings register as governance evidence
Manage regulatory, audit, and internal findings with assigned ownership, milestones, evidence, escalation, and formal closure. Old findings without documented progress require senior attention.
Test escalation paths
Use realistic scenarios to confirm that suspicious indicators reach the MLRO or other designated decision-maker with the necessary context and within required timeframes.
Keep risk assessments current
Define events that trigger targeted review, such as product launches, market expansion, major client onboarding, emerging typologies, or material regulatory change.
Give reporting deadlines senior ownership
Maintain a regulatory calendar with named owners, backup coverage, oversight, and escalation. Capacity constraints should be raised before they cause a missed obligation.
Forward Look
- FinCEN proposal: The original comment period was due to close on 9 June 2026.
- Australia FATF mutual evaluation: The 2026 evaluation was expected to test progress under the expanded AML/CTF regime.
- AUSTRAC Tranche 2 enrollment: The original edition highlighted 1 July 2026.
- US broker-dealer scrutiny: SEC examination priorities included AML program adequacy and OFAC compliance.
- Crypto enforcement: Regulators were expected to maintain pressure on OTC brokers and virtual-asset firms operating at the edge of regulatory coverage.
- EU AMLA: Cross-border institutions should map existing governance against the emerging supervisory framework.
Strengthen the Control Environment
The recurring pattern across these developments is not simply a lack of alerts. It is the failure to act on known weaknesses, move information to decision-makers, meet reporting obligations, and keep risk assessments aligned with changing exposure.
Supporting resources include Financial Crime Lab’s guides to financial crime compliance frameworks, sanctions compliance programs, and AML transaction monitoring.
Adapted from the Financial Crime Lab LinkedIn newsletter published on 3 May 2026.
This article is for informational purposes only and does not constitute legal, regulatory, or compliance advice. Confirm the current status of proposals, deadlines, penalties, and legal requirements with the relevant authority before acting.