Digital Asset AML and Proactive Fraud Prevention

TrustDecision Global Risk Pulse | November 2–6, 2026

01 | Weekly Overview

Last week, several developments highlighted a fundamental shift in global financial risk management.

First, digital-asset AML enforcement moved toward infrastructure-level restrictions. FinCEN's action against MEXC Global demonstrated how regulators can restrict high-risk platforms' access to the traditional financial system.

Second, cross-border investment fraud continued to industrialize. Europol's international operation exposed a professionalized Crime-as-a-Service ecosystem operating across more than 50 countries.

Third, anti-scam operations moved further upstream. Singapore's blockchain analytics initiative identified more than 383 potential scam victims and prevented over S$17.4 million in potential losses.

Fourth, fraud attacks increasingly exploited devices, physical payment cards and internal access privileges, highlighting the limitations of traditional credential-based security.

Finally, Agentic AI governance emerged as a growing priority as financial institutions moved toward more autonomous AI-driven operations.

Key Takeaway: Financial risk management is expanding beyond individual accounts and transactions toward identities, devices, business entities, fund flows, digital assets and AI-agent authorization.

‍

02 | Policy & Regulation

United States | FinCEN Restricts MEXC Global

On November 6, FinCEN issued a special measure effectively restricting MEXC Global's access to the U.S. financial system. FinCEN stated that the platform had facilitated at least US$16 billion in illicit transactions.

FATF | Scam Compounds Become a Global AML Priority

FATF highlighted illicit financial flows linked to scam compounds, emphasizing the need to disrupt the financial and operational infrastructure supporting organized scam networks.

Singapore | Quantum-Safe Migration

MAS initiated a consultation on quantum-safe migration guidance and timelines, encouraging financial institutions to prepare for next-generation cryptographic security.

Malaysia | Unauthorized Financial Activities

Bank Negara Malaysia continued enforcement against entities suspected of promoting foreign-exchange activities without proper authorization.

‍

03 | Market & Business

Indonesia | BNPL Financing Continues to Expand

As of September 2026, Indonesia's BNPL financing reached IDR 31.50 trillion, representing 26.68% year-on-year growth. The expansion increases exposure to identity fraud, multiple borrowing, account takeover and credit-quality risks.

Brazil | Securities Tokenization Enters Pilot Testing

Brazil's CVM received 11 proposals for its DLT securities-market pilot program, covering issuance, trading, custody, registration and settlement.

Malaysia | Policy Rate Remains at 2.75%

Bank Negara Malaysia maintained its Overnight Policy Rate at 2.75%, while highlighting external economic uncertainty and inflationary pressures.

‍

04 | Fraud & Risk

Singapore | WhatsApp Malware Targets Corporate Computer Environments

Attackers compromised legitimate WhatsApp accounts and distributed malicious files disguised as normal work documents, potentially exposing personal information and computer systems.

Malaysia | NFC Relay Enables Remote Card Fraud

A fake Android application impersonating Bank Negara Malaysia's security services was used to capture card information and PINs through NFC interactions, enabling fraudulent payment attempts.

Vietnam | LB-Pro Investment Scam Exceeds VND 100 Billion

A fraudulent investment platform used shell companies and corporate bank accounts to collect funds before transferring them through multiple accounts and converting them into USDT for overseas movement.

Brazil | Insider Access Becomes a Fraud Risk

An investigation into suspected banking fraud revealed potential abuse of employee privileges to modify customer information, manipulate card access and execute unauthorized transactions.

Europe | Investment Fraud Infrastructure Is Disrupted

A Europol-supported international operation seized more than 100 servers and identified potential victims in over 50 countries, exposing the professionalized infrastructure behind investment scams.

‍

05 | Technology & Innovation

Singapore | Blockchain Analytics Enables Proactive Scam Prevention

Singapore Police and Digital Payment Token service providers identified more than 383 potential scam victims and prevented over S$17.4 million in potential losses through blockchain analytics.

Agentic AI | Financial Governance Moves Toward Authorization Control

MAS launched the Future of Finance Institute, focusing on practical AI deployment, Agentic AI governance, risk assessment and industry collaboration.

Quantum-Safe | Financial Infrastructure Prepares for Cryptographic Transition

MAS initiated consultation on quantum-safe migration, highlighting the importance of long-term data security and cryptographic resilience.

‍

06 | Priority Markets

United States: Digital Asset AML and platform-level enforcement.
Europe: Cross-border investment fraud and Crime-as-a-Service.
Singapore: Blockchain analytics, proactive anti-scam intervention and Agentic AI governance.
Malaysia: NFC fraud, device security and financial authorization.
Indonesia: BNPL expansion and centralized anti-scam infrastructure.
Vietnam: Investment fraud and USDT-related money laundering.
Brazil: Insider fraud and securities tokenization.

‍

07 | Regional Data

US$16 Billion | United States

MEXC Global's Minimum Identified Illicit Transaction Volume

FinCEN stated that MEXC Global had facilitated at least US$16 billion in illicit transactions, involving activities related to sanctions evasion and cybercrime, including exposure to high-risk jurisdictions.

The scale of the transactions highlights the potential role of digital-asset platforms in facilitating cross-border illicit financial flows.

What it signals: Digital-asset AML is moving beyond individual transaction monitoring toward platform-level risk assessment, financial-system access controls and interconnected fund-flow analysis.

50+ Countries / 100+ Servers | Europe

Cross-Border Investment Fraud Infrastructure

A Europol-supported international operation seized more than 100 servers and arrested seven suspects linked to fraudulent investment platforms. Potential victims were identified in more than 50 countries, with confirmed losses exceeding EUR 4 million.

The operation targeted infrastructure providers supporting multiple criminal groups through fake investment websites, call centers, advertising channels and personal-data services.

What it signals: Investment fraud is becoming a professionalized Crime-as-a-Service ecosystem. Disrupting individual accounts is no longer sufficient; effective enforcement requires identifying and dismantling the infrastructure behind the entire fraud chain.

383+ Potential Victims / S$17.4 Million | Singapore

Blockchain Analytics Enables Proactive Scam Prevention

Singapore Police and Digital Payment Token service providers identified more than 383 potential scam victims through blockchain analytics, preventing over S$17.4 million in potential losses.

Rather than focusing exclusively on tracing funds after a scam has occurred, the operation used blockchain intelligence to identify individuals potentially exposed to fraudulent transactions and enable earlier intervention.

What it signals: Blockchain analytics is evolving from a post-incident investigation tool into a proactive fraud-prevention capability, shifting the focus from fund recovery toward identifying and protecting potential victims before losses occur.

737,686 Reports | Indonesia

The Scale of Reported Scam Activity

Indonesia's Anti-Scam Centre (IASC) had received 737,686 scam-related reports, reflecting the extensive reach of fraud across digital financial services, online platforms and payment channels.

The scale of reporting highlights the importance of transforming complaint records, suspicious-account information and transaction patterns into structured, reusable risk intelligence.

What it signals: Anti-scam capabilities are increasingly moving from institution-specific defense toward coordinated intelligence sharing among regulators, banks, payment providers and digital platforms.

743,589 Accounts | Indonesia

Scam-Related Accounts Blocked by IASC

IASC had blocked 743,589 accounts associated with suspected scam activity.

The number of blocked accounts exceeding the number of reported cases highlights an important characteristic of organized fraud: a single scam operation may involve multiple collection accounts, intermediary accounts and money-mule accounts.

These accounts can be used to split incoming funds, move money across institutions and obscure the ultimate beneficiaries.

What it signals: Account relationships are becoming a critical dimension of fraud detection. Single-account risk scoring needs to evolve toward network-based identification of connected accounts and suspicious fund movements.

IDR 967.5 Billion | Indonesia

Victim Funds Blocked Through Anti-Scam Intervention

IASC had blocked approximately IDR 967.5 billion in scam-related funds.

Combined with the number of blocked accounts, this figure demonstrates the importance of rapid fund intervention in limiting the financial impact of scams.

The critical challenge is not simply identifying whether a transaction is suspicious, but determining whether funds can be intercepted before they are split, transferred or converted into other assets.

What it signals: Anti-fraud systems need to evolve from risk identification into integrated real-time execution capabilities combining detection, decisioning, account intervention and fund blocking.

VND 100 Billion+ | Vietnam

LB-Pro Investment Fraud and Cross-Border USDT Laundering

The LB-Pro fraudulent investment platform case involved losses exceeding VND 100 billion.

Investigators identified a fund-flow pattern involving corporate bank accounts, multiple transfers and conversion into USDT before funds were moved to overseas-controlled wallets. More than VND 80 billion was reportedly used for USDT purchases during a specific period.

The case illustrates how corporate accounts can act as intermediaries between traditional banking infrastructure and digital-asset networks.

What it signals: Fraud and AML risks are increasingly interconnected across banking accounts, corporate entities, payment channels and blockchain wallets. Effective monitoring requires a unified view of the complete fund-flow chain.

26.68% | Indonesia

Year-on-Year Growth in BNPL Financing

As of September 2026, Indonesia's BNPL financing grew 26.68% year on year, reaching IDR 31.50 trillion, with approximately 34.5 million related accounts.

The rapid expansion of digital credit increases exposure to identity misuse, multiple borrowing, account takeover, fraudulent applications and potential repayment deterioration.

What it signals: Credit Risk and Fraud Risk need to be integrated earlier in the lending lifecycle. Financial institutions must assess not only whether applicants can repay, but also whether their identities, applications and borrowing behaviors are genuine.

11 Projects | Brazil

DLT Securities-Market Pilot Applications

Brazil's Securities and Exchange Commission (CVM) received 11 proposals for its Distributed Ledger Technology (DLT) Pilot Program.

The proposed projects cover securities issuance, trading, registration, custody and settlement, reflecting growing regulatory interest in testing distributed-ledger technology within traditional financial-market infrastructure.

What it signals: Tokenization is moving from conceptual exploration toward practical financial-market applications, increasing the importance of identity verification, asset authenticity, transaction traceability and AML controls.

Key Regional Data Takeaways

1. Fraud is becoming increasingly industrialized.

Europol's operation across more than 50 countries and Indonesia's hundreds of thousands of blocked accounts demonstrate that fraud is increasingly organized around scalable infrastructure and interconnected account networks rather than isolated criminal incidents.

2. Financial crime is becoming increasingly networked.

Funds can move across personal accounts, corporate entities, intermediary accounts, digital-asset platforms and overseas wallets. Individual transactions provide only a partial view of the underlying risk.

3. Risk management is becoming more proactive.

Singapore's blockchain-based operation demonstrates how identifying potential victims before funds are lost can reduce financial damage. The focus of anti-fraud operations is shifting from post-incident recovery toward early identification, real-time intervention and loss prevention.

Overall Implication: The next generation of financial risk management will increasingly depend on Real-Time Risk Intelligence + Account Network Analysis + Cross-Channel Data Integration + Automated Decisioning and Intervention.

‍

08 | TrustDecision Insights

Insight 1 | Fraud Prevention Is Evolving from Transaction Detection to Network Intelligence

Individual transactions provide only a limited view of increasingly complex fraud networks. Effective risk detection requires connecting accounts, devices, identities, businesses, transactions, digital wallets and cross-border fund flows.

Insight 2 | Account Security Is Expanding Beyond Credentials to Control Integrity

NFC relay attacks, compromised social accounts and insider abuse demonstrate that account security must continuously assess user authenticity, device integrity, account control and behavioral consistency.

Insight 3 | Digital Assets Are Becoming a Shared Risk Layer for Fraud and AML

Traditional bank accounts, corporate entities, payment systems, cryptocurrency exchanges and overseas wallets are increasingly connected through complex fund flows. Fraud and AML intelligence must therefore operate within a unified risk framework.

Insight 4 | Agentic AI Governance Is Shifting from Intelligence to Authorization

As AI agents gain the ability to access data, call tools and execute financial operations, institutions must establish clear agent identities, authorization scopes, transaction limits, human oversight and audit mechanisms.

‍

Four Actions for Financial Institutions

01 | Strengthen Network-Based AML and Digital-Asset Monitoring

Connect customer identities, business entities, accounts, counterparties, digital wallets and cross-border fund flows to identify interconnected risks.

02 | Move Anti-Scam Intervention Further Upstream

Identify fraudulent platforms, advertising channels, intermediary accounts and suspicious fund flows before money is split, converted or transferred overseas.

03 | Integrate Identity, Device and Application Fraud into Credit Decisioning

Combine identity consistency, device linkage, multiple-application detection, document authenticity and abnormal application behavior with credit assessment.

04 | Establish AI Agent Identity and Authorization Governance

Define agent identity, delegated authority, data access, tool permissions, transaction limits, approval requirements and audit mechanisms.

‍

Weekly Summary

Network-Level Trust

Last week's developments demonstrate that financial risk management is moving beyond isolated transactions toward connected networks and proactive intervention.

Regulatory enforcement is targeting high-risk digital-asset platforms and organized scam infrastructure. Blockchain analytics is enabling earlier identification of potential victims. Meanwhile, digital lending, tokenized financial infrastructure and Agentic AI are introducing new dimensions of identity, credit, payment and authorization risk.

The next generation of financial risk infrastructure will increasingly combine:

Identity Intelligence + Fraud Detection + Credit Decisioning + AML Investigation + Digital Asset Risk + Real-Time Payment Risk + AI Agent Governance.

The key question is no longer simply whether a transaction is suspicious, but whether financial institutions can understand the network behind it, identify risks early and intervene before losses occur.

‍