When FinCEN Director Andrea Gacki appeared before the U.S. House Financial Services Subcommittee on National Security, Illicit Finance, and International Financial Institutions on July 21, 2026, her testimony did more than provide an update on FinCEN’s activities. It offered a practical roadmap for where U.S. anti-money laundering and counter-terrorist financing (AML/CFT) expectations are heading.
For compliance professionals, this was not simply another congressional hearing. It was a clear signal that financial crime risk management is evolving rapidly. Financial institutions are expected to become more agile, intelligence-led, and technology-enabled while continuing to meet their regulatory obligations.
Several themes emerged from the testimony that deserve the attention of every board member, executive, Chief Compliance Officer, BSA Officer, MLRO, financial crime investigator, and risk professional.
1. Fraud Has Become a National Security Priority
Fraud is no longer viewed as a consumer protection issue alone. It has become one of the largest drivers of illicit finance.
Investment scams, romance scams, business email compromise, elder financial exploitation, account takeover, synthetic identity fraud, and cyber-enabled fraud continue to generate billions of dollars in losses while feeding broader criminal networks.
Financial institutions should therefore ensure that fraud risk management is fully integrated into their AML frameworks rather than operating as a separate function.
2. Modernizing the Bank Secrecy Act
Director Gacki acknowledged a concern shared across the industry. Compliance resources should focus on generating meaningful financial intelligence rather than producing reports that add limited investigative value.
The direction is becoming increasingly clear.
Institutions are expected to adopt a more risk-based approach that improves the quality of investigations and Suspicious Activity Reports (SARs), rather than simply increasing reporting volumes.
Success will increasingly be measured by effectiveness rather than activity.
3. Artificial Intelligence Is Becoming Part of the Compliance Toolkit
Artificial intelligence has become a strategic opportunity for financial crime compliance.
AI can strengthen transaction monitoring, identify hidden patterns across large datasets, prioritize high-risk alerts, improve customer risk scoring, and reduce false positives.
However, regulators are equally clear that AI cannot replace sound governance.
Financial institutions remain accountable for model validation, oversight, explainability, data quality, and human decision-making. AI should support compliance professionals, not replace them.
4. Information Sharing Is More Important Than Ever
Financial crime rarely exists in isolation.
Criminal networks operate across institutions, jurisdictions, and products.
Director Gacki emphasized the value of stronger public-private partnerships and continued collaboration between FinCEN, law enforcement, regulators, and financial institutions.
Information-sharing mechanisms, including Section 314(b), remain powerful tools for identifying complex criminal networks that no single institution could detect independently.
5. National Security Risks Continue to Expand
The testimony reinforced that AML compliance now sits at the intersection of financial regulation and national security.
Priority threats continue to include:
- Terrorist financing
- Sanctions evasion
- Transnational organized crime
- Human trafficking
- Drug trafficking
- Cyber-enabled crime
- Virtual asset abuse
- State-sponsored illicit finance
Risk assessments should reflect these evolving threats and not rely solely on historical typologies.
6. Beneficial Ownership Remains Fundamental
Anonymous ownership structures continue to present significant challenges for law enforcement.
FinCEN reaffirmed the importance of beneficial ownership transparency in identifying the individuals who ultimately own or control legal entities.
Financial institutions should continue strengthening customer due diligence processes and ensure beneficial ownership information is accurate, complete, and appropriately risk-assessed throughout the customer relationship.
7. Digital Assets Are Now Mainstream Compliance Risks
Cryptocurrency is no longer a niche issue.
As digital assets become more integrated into the global financial system, regulators expect financial institutions to understand blockchain-related risks, monitor virtual asset activity appropriately, and maintain effective controls against money laundering, sanctions evasion, terrorist financing, and fraud.
Institutions operating in this space should ensure that blockchain analytics, transaction monitoring, sanctions screening, and customer due diligence evolve alongside emerging criminal typologies.
What This Means for Financial Institutions
The testimony reinforces a broader shift in regulatory expectations. Compliance programs should not only satisfy regulatory requirements but also produce intelligence that helps detect, disrupt, and prevent financial crime.
The following actions should be priorities.
| Regulatory Theme | Expected Actions for Financial Institutions |
|---|---|
| Fraud Prevention | Integrate fraud and AML programs, enhance fraud analytics, strengthen customer education, and improve fraud detection capabilities. |
| Risk-Based AML | Focus resources on higher-risk customers, products, channels, and jurisdictions while improving the quality of investigations and SARs. |
| Artificial Intelligence | Implement AI responsibly with appropriate governance, model validation, oversight, documentation, and human review. |
| Transaction Monitoring | Continuously refine monitoring scenarios, reduce false positives, improve alert quality, and strengthen investigative workflows. |
| Customer Due Diligence | Maintain robust KYC, Enhanced Due Diligence, and beneficial ownership verification throughout the customer lifecycle. |
| Digital Assets | Enhance blockchain analytics, wallet risk assessments, sanctions screening, Travel Rule compliance where applicable, and cryptocurrency transaction monitoring. |
| Sanctions Compliance | Strengthen sanctions screening, sanctions evasion detection, customer risk assessments, and escalation procedures. |
| Information Sharing | Participate in appropriate public-private partnerships and use lawful information-sharing mechanisms to combat complex financial crime. |
| Staff Training | Provide regular training on emerging typologies, AI-enabled fraud, cybercrime, deepfakes, virtual assets, and evolving regulatory expectations. |
| Governance | Ensure boards and senior management receive meaningful financial crime risk reporting and maintain effective oversight of AML/CFT programs. |
Looking Ahead
Director Gacki’s testimony reinforces a broader trend that has been building over the past several years.
Financial crime compliance is becoming increasingly intelligence-driven, technology-enabled, and closely aligned with national security priorities.
Institutions that continue to rely on legacy processes and reactive compliance models may find it increasingly difficult to meet regulatory expectations.
Those that invest in skilled investigators, modern technology, strong governance, effective data management, and a genuine risk-based culture will be better positioned to manage emerging threats and demonstrate regulatory effectiveness.
For compliance professionals, the message is straightforward.
The future of AML/CFT is not about doing more.
It is about doing the right things better.
What changes is your organization making to prepare for the next generation of financial crime risks?
I would be interested to hear how your institution is approaching AI, fraud prevention, digital assets, and intelligence-led compliance. Share your thoughts in the comments and join the conversation.
0 Comments