Compliance Officers Playbook

DeepSeek AI, a newly released ChatGPT competitor, was quickly compromised via a simple SQL injection attack.  Despite promises of robust security and free access , the platform suffered a significant breach.  Attackers easily obtained sensitive data , including chat logs, encryption keys, and internal code. This highlights a substantial failure in DeepSeek AI's security measures.  The incident...

This episode discusses the evolving role of the Chief Risk Officer (CRO) in banks, particularly in the UAE, where stricter regulations have been implemented.  The traditional, centralised model of risk management, where the CRO oversees all risks , is questioned due to the increasing complexity of modern financial challenges.  This complexity includes cybersecurity, environmental concerns, and ope...

The Dutch central bank (DNB) fined Volksbank €5 million for significant and persistent failings in its anti-money laundering (AML) controls between 2020 and 2023.  These failures  included inadequate transaction monitoring, a backlog of unprocessed alerts, and insufficient customer due diligence.  The DNB highlighted  Volksbank's role as a gatekeeper in preventing criminal activity and stresse...

This podcast episode discusses the European Central Bank's (ECB) Legal Decision 2025/2, outlining the legal framework for the digital euro. The decision's implications for compliance are significant, impacting data protection, anti-money laundering (AML) procedures, and cybersecurity. The podcast highlights key compliance challenges, such as balancing user privacy with transaction transparency for...

This episode explains Source of Funds (SOF) and Source of Wealth (SOW) checks, crucial components of Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance. SOF investigates the origin of funds in a specific transaction, while SOW examines a client's overall wealth accumulation. Both are vital for identifying potential money laundering and terrorist financing. The guide details the di...

This episode outlines key deadlines for the EU's AI Act in 2025. February 2nd marks the enforcement of bans on high-risk AI systems. May 2nd initiates a process for establishing codes of conduct for general-purpose AI models, with a deadline of August 2nd. By August 2nd, further obligations for these models come into effect, covering documentation, compliance, and transparency. These dates represe...

The Italian data protection authority is investigating DeepSeek, a Chinese AI model, for potential breaches of the EU's General Data Protection Regulation (GDPR). Concerns have been raised about the handling of EU user data and its potential access by the Chinese government. The investigation follows complaints from consumer groups and is accompanied by a broader European Commission review of...

German financial regulator BaFin  has warned that the use of virtual IBANs presents a heightened risk of money laundering.  This warning highlights a concern  about the potential for increased illicit financial activity facilitated by this technology.  The statement underscores the need for enhanced monitoring  and regulatory measures to mitigate these risks.  BaFin's assessment  emphasizes th...

This episode covers the UK government 's document outlining the phased implementation of the Economic Crime and Corporate Transparency Act 2023.  This act significantly reforms Companies House , aiming to improve transparency and combat economic crime by enhancing data accuracy and verification processes. The second source is a news article summarising key updates from the government's tra...

This episode covers KuCoin's guilty plea to money laundering charges, resulting in a $297 million fine and the resignation of its CEO. The cryptocurrency exchange admitted to operating an unlicensed money transmitting business and failing to implement anti-money laundering protocols. Accompanying this news are various cryptocurrency price updates and related articles discussing recent events s...

Data governance is crucial for modern businesses, impacting compliance, cybersecurity, and ESG performance. Effective data governance ensures data accuracy, accessibility, and regulatory compliance, requiring organisations to understand their data holdings and access controls. Executive leadership buy-in is vital for successful implementation of data governance programs, which also necessitate nav...

French authorities have launched a formal investigation into Binance, the world's largest cryptocurrency exchange,  alleging money laundering, tax fraud, and other offences  spanning 2019-2024. This follows previous investigations and lawsuits in the US and Australia,  with accusations ranging from facilitating criminal activity to misselling unregistered tokens and failing to protect consumer...

The Financial Conduct Authority (FCA) issued a "Dear CEO" letter outlining its two-year strategy for supervising wholesale brokers in the UK.  Key concerns  include broker misconduct, inadequate financial crime controls, inconsistent remuneration practices, and insufficient financial resilience. The FCA highlights the need for improved corporate culture, robust risk management frameworks...

Paul Hottinger , a member of a prominent Swiss banking family, is facing trial in France for tax fraud and money laundering.  He allegedly concealed millions of euros in income  by falsely claiming Swiss residency to avoid French taxes. The prosecution's case rests on evidence including invoices, travel records, and financial documents.  Hottinger denies the charges , claiming Swiss residency...

This episode provides a guide for creating effective Suspicious Activity/Transaction Reports (SAR/STRs) to help law enforcement. Key elements highlighted include detailed transaction information, clear identification of red flags, comprehensive customer and entity information, a concise narrative explaining suspicious activity, and supporting documentation. The guide stresses the importance of pro...

This episode discusses the rapid advancements in artificial intelligence, specifically large language models (LLMs), by a Chinese company called DeepSeek.  DeepSeek's significantly cheaper and open-source LLMs  challenge the previously assumed dominance of US companies like OpenAI and Google, causing a dramatic shift in the AI landscape and impacting the valuations of companies like Nvidia. Ho...

This episode discusses Klarna's CEO, Sebastian Siemiatkowski's, claim that AI can perform all human tasks, leading Klarna to halt hiring and reduce its workforce by 1,000 employees while increasing business volume and profits. However, the second source notes that Klarna still has open job positions, suggesting AI's role is to augment, not entirely replace, human workers. The articles...

a January 2025 UKFIU Reporter Booklet,  summarises feedback from law enforcement agencies  on their use of Suspicious Activity Reports (SARs) in the UK.  It includes sanitised case studies  illustrating how SARs aided investigations into money laundering and fraud, showcasing the role of SARs in identifying criminals and recovering assets. The booklet  aims to share best practices  among SAR repor...

A large-scale, multinational investigation, supported by Eurojust and Europol, successfully disrupted a sophisticated money laundering operation.  The criminal group , based primarily in Spain and Cyprus, laundered approximately €100 million using various methods, including physical cash transfers, cryptocurrencies, and commercial companies.  The operation  involved at least 52 individuals and res...

A London law firm, Law and Lawyers Limited, and its compliance officer, Francis Mathew, were each fined £25,000 for multiple rule breaches.  The Solicitors Disciplinary Tribunal  found significant client account shortfalls and inadequate anti-money laundering (AML) procedures.  Mathew's false declaration  regarding a compliant risk assessment contributed to the penalties. Despite no client los...

This episode covers a massive malware attack resulting in the theft of over one billion passwords.  The breach highlights  the widespread vulnerability of passwords, even strong ones, and emphasises the urgent need for improved security practices.  Recommendations  include using a password manager, enabling multi-factor authentication (MFA), and regularly updating software.  Experts warn  that the...

This episodes presents numerous examples showcasing how compliance, often viewed as a cost, actually functions as a  significant investment  for organisations. It demonstrates how adhering to regulations in diverse areas, from  financial reporting to environmental protection , yields substantial returns by  preventing costly fines, lawsuits, and operational disruptions . These benefits extend to ...

This episode covers the complex European cybersecurity regulatory landscape, focusing on three key regulations:  DORA  (Digital Operational Resilience Act), targeting the financial sector and ICT providers;  NIS2  (Network and Information Systems directive), covering 18 critical sectors; and  CRA  (Cyber Resilience Act), addressing cybersecurity in digital products. The piece highlights the challe...

Robert Mazur , a former undercover agent, recounts his two-year infiltration of Pablo Escobar's Medellín cartel in his book excerpts. He details creating a convincing persona,  building trust  with cartel members, and operating within their  black-money market  to launder millions. The operation involved complex financial transactions, using various legitimate businesses as fronts, ultimately...

This podcast episode discusses cybersecurity challenges specific to remote work.  It highlights the increased risk of breaches due to accidental employee errors , such as clicking phishing links or using weak passwords.  The episode then outlines four key preventative strategies : employee cybersecurity training, multi-factor authentication, mandatory VPN use, and regular software updates.  These...