Topic starter
10/06/2026 10:40 pm
TL;DR: Financial crime in APAC is converging across fraud, money laundering, and mule-account abuse, with defenders from Coinbase Singapore, Mastercard, and ACAMS warning that criminals move funds across borders faster than banks can coordinate response, according to SumSub's WTF? Summit discussion. For identity teams, the lesson is that governance, monitoring, and data-sharing latency now shape financial risk as much as transaction controls.
Editorial analysis by NHI Mgmt Group, based on content published by SumSub: “APAC Fraud Insights: Singapore WTF? Summit - Part 1”.
Key questions
Q: How should teams stop mule accounts from laundering fraud proceeds across institutions?
A: Teams should combine identity proofing, device intelligence, payment velocity analysis, and rapid escalation so mule accounts are flagged before funds are split across multiple destinations.
Q: Why do static identity checks fail against deepfakes and synthetic identities?
A: Static checks fail because they usually verify a captured moment, not an ongoing identity state.
Q: What breaks when fraud, AML, and account teams cannot share signals quickly?
A: The response window breaks.
Practitioner guidance
- Strengthen mule-account monitoring Correlate account opening signals, payment velocity, device anomalies, and cross-border transfer patterns so mule activity is detected before value is fragmented across institutions.
- Tighten identity proofing for high-risk flows Apply stronger re-verification to customers and counterparties involved in crypto, remittance, and cross-border payment activity where synthetic identity risk is highest.
- Shorten fraud-to-AML escalation paths Create a single escalation path that lets fraud, AML, and account risk teams act on the same identity case without waiting for separate reviews.
Bottom line: APAC financial crime is no longer a set of isolated fraud and AML cases, because criminals now link identity abuse, mule accounts, and laundering into one operating model.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 1 day ago by NHI Mgmt Group
11/06/2026 2:47 am
Fraud and laundering are now one identity problem, not two separate crime categories. The article's central warning is that defenders are still organised around old functional boundaries while attackers are not. Fraud teams, AML teams, and identity teams each see part of the picture, but the criminal workflow spans them all. Practitioners should treat account trust, transaction velocity, and behavioral anomalies as one coordinated control surface.
A few things that frame the scale:
- Organisations maintain an average of 6 distinct secrets manager instances, creating fragmentation that undermines centralised control, according to The State of Secrets in AppSec.
- 43% of security professionals are concerned about AI systems learning and reproducing sensitive information patterns from codebases.
A question worth separating out:
Q: Who is accountable when mule accounts are used to launder stolen funds?
A: Accountability is shared across the institution that opened the account, the team that monitored it, and the counterparties that accepted its activity signals. In practice, the failure is usually a lifecycle gap, a response gap, and a coordination gap happening together. The organisation that can act fastest on evidence usually has the best chance of limiting loss.
👉 Read our full editorial: APAC financial crime now merges fraud, laundering, and identity risk
12/06/2026 4:21 am
APAC financial crime is now an identity problem as much as a payment problem. The article shows that fraud, laundering, and account abuse now operate as one workflow rather than separate cases. That convergence means the trust decisions made at onboarding, authentication, and account maintenance now determine how far criminal value can move. Practitioners should treat identity evidence as a control input to financial crime operations, not a downstream support function.
A few things that frame the scale:
- Nearly 60% of companies reported that fraud losses were still increasing in 2025.
A question worth separating out:
Q: What is the difference between onboarding verification and post-onboarding identity monitoring?
A: Onboarding verification answers whether an identity looked legitimate at entry, while post-onboarding monitoring asks whether its behaviour remains consistent over time. The second is essential in APAC financial crime because many losses emerge only after the account begins moving value across borders.
👉 Read our full editorial: APAC financial crime now merges fraud, laundering, and identity risk
This post was modified 1 day ago by NHI Mgmt Group