Follow the Money: Why AML and CFT Compliance Has Never Been More Complex
A charitable association collecting donations for displaced families. A casino processing high-volume transactions. A bank handling trillions in routine transfers.
Each looks legitimate on its own. Each, in recent cases, was found to be moving funds that financed terrorism, organized crime, or both.
Following the money has always been the cornerstone of financial crime investigation. But the regulatory environment surrounding that task has never been more demanding – or more consequential to get wrong.
Three Cases That Defined the Past Year
Italian police arrest nine and seize €8 million in Hamas financing probe
Italian authorities arrested nine individuals linked to three charitable organizations operating out of Genoa and Milan. Prosecutors alleged that more than 71% of the funds collected, approximately €7 million, were channeled to Hamas-affiliated associations through triangulated bank transfers and foreign intermediaries. The investigation relied on phone intercepts, financial monitoring, and cross-border cooperation with the Netherlands and other EU partners. What looked like humanitarian fundraising was, investigators argued, a coordinated terrorist financing cell.
For the full article click here.
Five people in France indicted for funding Hamas under guise of humanitarian aid
Five individuals were formally indicted in Paris after a multi-year investigation into two French NGOs, Humani’Terre and Soutien Humani’Terre, suspected of channeling funds to Hamas under the cover of aid for Palestinian refugee camps. The French National Anti-Terrorism Prosecutor’s Office (PNAT), working alongside the DGSI and the Central Office for Combating Major Financial Crime, seized nearly €40 million along with properties and servers containing financial records. The case illustrated how long-running networks can survive under the radar, and how critical intelligence fusion is to eventually surfacing them.
For the full article click here.
Wynn Las Vegas forfeits $130 million for illegally conspiring with unlicensed money transmitting businesses
Wynn Las Vegas agreed to a $130 million forfeiture following a federal investigation into Chinese Money Laundering Networks (CMLNs) using the casino’s operations for proxy gambling, mirror transfers, and layering through shell companies. The case highlighted how professional laundering organizations exploit legitimate financial infrastructure, and how transaction monitoring gaps, even at regulated institutions, can be weaponized.
For the full article click here.
The Regulatory Framework Is Tightening
These cases did not occur in a vacuum. In 2025 and into 2026, the global compliance landscape is demanding more of agencies and institutions alike.
The EU’s new Anti-Money Laundering Authority (AMLA), operational since 2025, is driving unprecedented cross-border coordination between financial intelligence units. The AML package it enforces imposes stricter due diligence requirements and broader obligations on entities previously outside the scope of AML regulation.
Layered on top: GDPR continues to create genuine friction for investigators. Every cross-reference of personal data – every retained dataset, every algorithmic flag – must be lawful, necessary, and proportionate. Fail to document the legal basis for processing, and evidence may not only be challenged, but thrown out entirely.
Then there is the EU AI Act, now in phased enforcement. AI systems used to score risk, surface anomalies, or profile financial behavior in law enforcement contexts are classified as high-risk. That designation brings obligations: transparency, human oversight, audit trails, and demonstrable data governance. Agencies that rely on algorithmic tools to detect suspicious patterns cannot simply deploy them – they must be able to account for every output.
The irony is pointed: the very tools agencies need to fight financial crime are now themselves subject to regulation.
Where Investigations Break Down
Most AML and CFT failures are not failures of will. They are failures of connection.
The information needed to build a complete picture is often already out there – corporate registries, social media activity, travel records, financial transactions, telecom data. The Italian Hamas case was cracked through intercepted communications and financial cross-referencing. The French case hinged on seized servers and accounting records linking European donors to proscribed associations. In both instances, the intelligence existed. The challenge was assembling it legally, quickly, and in a form that would hold up in court.
This is where the gap between data and actionable intelligence matters most.
Intelligence That Works Within the Rules
Open Source Intelligence (OSINT), properly structured, offers one of the most legally defensible paths through this challenge. Because the underlying data is already public, investigators sidestep some of the most sensitive GDPR processing questions – the challenge shifts from access to analysis.
Platforms like TA9 – Rayzone Group’s advanced data fusion and analytics solution, are built for precisely this environment. They integrate data streams from multiple sources, correlate identities across networks, and surface patterns that no single analyst or database could detect alone. AI-assisted analytics flag anomalies and prioritize leads, but always within a documented, human-reviewed workflow – the kind of auditable process the EU AI Act requires of high-risk systems.
Combined with OSINT-Data Intelligence capabilities, investigators gain a complete operational picture: financial flows mapped against identity data, corporate structures visualized across jurisdictions, behavioral patterns surfaced from open sources. The result is intelligence that is not just actionable, but legally defensible – built for the courtroom as much as the operations room.
The Cost of Standing Still
AMLA is now coordinating cross-border investigations at a scale the EU has not seen before. Agencies that arrive at that table with siloed tools, undocumented AI processes, and weak data governance will be at a disadvantage – legally and operationally.
Financial criminals adapt continuously. The networks behind the Italian and French cases had operated for years, precisely because their methods were layered, patient, and designed to evade standard detection. Speed, legal grounding, and analytical depth are no longer optional capabilities. They are the baseline.
We’re here to answer your questions and provide you with the information you need! Contact us at info@rayzoneg.com and let us know how we can help.