UK Independent Review of Disclosure and Fraud | 10 AML Insights

UK’s Independent Review of Disclosure and Fraud: 10 Key Takeaways for AML Compliance Leaders

Fraud has become one of the fastest-growing financial crimes worldwide, driven by digital technologies, artificial intelligence (AI), social media, and increasingly sophisticated organised criminal networks. Yet many legal and regulatory frameworks continue to rely on investigative and enforcement models designed for an earlier era.

Recognising this growing gap, the UK Government commissioned the Independent Review of Disclosure and Fraud, led by Jonathan Fisher KC. The review examines whether the UK’s criminal justice system, fraud legislation, disclosure obligations, investigative powers, and enforcement capabilities remain fit for purpose in tackling modern economic crime. Across four volumes, the report proposes 47 recommendations covering fraud prevention, corporate accountability, AI, whistleblower protection, digital investigations, sentencing, asset recovery, and victim compensation.

Although the recommendations are directed at the UK, the report reflects broader trends already influencing financial crime regulation globally. Banks, fintechs, payment service providers (PSPs), insurers, virtual asset service providers (VASPs), and other regulated organisations face many of the same challenges—AI-powered scams, digital identity fraud, authorised push payment (APP) fraud, cryptocurrency-enabled laundering, and cross-border criminal networks.

For AML compliance leaders, the review offers valuable insight into where regulatory expectations are heading. It highlights the growing convergence between fraud prevention and anti-money laundering (AML), emphasising stronger governance, intelligence sharing, technology adoption, and enterprise-wide accountability.

UK Fraud at a Glance

The review paints a stark picture of the UK’s fraud landscape.

These figures demonstrate why fraud is no longer viewed as a niche financial crime. It has become a systemic risk affecting consumers, businesses, financial institutions, regulators, and national economies alike.

Why Should AML Compliance Leaders Care?

Many organisations still manage fraud and AML as separate functions. The review suggests that this distinction is becoming increasingly outdated.

Modern fraud generates illicit proceeds that eventually enter the financial system through money laundering techniques such as layering, mule accounts, shell companies, cryptocurrencies, or cross-border transfers.

Examples include:

• Authorised Push Payment (APP) fraud

• Investment scams

• Business Email Compromise (BEC)

• Romance scams

• Identity theft

• Cryptocurrency investment fraud

• Online marketplace scams

For financial institutions, fraud is often the predicate offence, while money laundering is the mechanism used to hide or move criminal proceeds.

Key takeaway: Effective fraud prevention strengthens AML compliance, and strong AML controls improve fraud detection. The two disciplines are becoming increasingly interconnected.

1. Fraud Has Become the UK’s Largest Crime Category

One of the report’s strongest messages is that fraud is no longer a peripheral economic crime—it is now the UK’s most prevalent offence.

Key findings

• Fraud accounts for 44% of all crime experienced by individuals.

• Around 4.1 million fraud offences occur annually.

• Nearly 80% of fraud is digitally enabled.

• Approximately one in every 14 adults becomes a victim each year.

• Around one in four businesses experiences fraud annually.

Despite its scale, enforcement outcomes remain extremely limited.

Only around 1% of reported fraud cases ultimately result in a criminal justice outcome, highlighting a significant gap between the volume of offending and successful prosecution.

Why this matters for AML

Fraud is no longer simply a consumer protection issue.

Every successful fraud generates illicit proceeds that regulated institutions may later encounter through customer onboarding, payments, account activity, or cross-border transactions.

As fraud volumes continue to grow, AML programmes will increasingly serve as a critical line of defence against organised financial crime.

2. Fraud and Money Laundering Are Becoming One Compliance Challenge

The review repeatedly demonstrates that fraud rarely ends once victims lose money.

Instead, criminal proceeds move through complex financial networks designed to disguise their origin before they are eventually integrated into the legitimate economy.

Common laundering methods include:

• Mule accounts

• Cryptocurrency transfers

• Shell companies

• Layered bank transfers

• International payment networks

• Money mules recruited through social media

These laundering techniques closely resemble traditional AML typologies already monitored by regulated institutions.

Compliance takeaway

Instead of treating fraud alerts separately from AML investigations, organisations should consider integrating fraud intelligence into:

• Transaction monitoring

• Customer risk assessments

• Enhanced Due Diligence (EDD)

• Suspicious Activity Reports (SARs)

• Ongoing customer monitoring

The report reinforces that fraud prevention and AML compliance should increasingly operate as complementary financial crime functions rather than isolated programmes.

3. Online Platforms Face Growing Regulatory Responsibility

Modern fraud increasingly begins long before money reaches the banking system.

The review highlights that criminals exploit social media, messaging applications, online marketplaces, and telecommunications networks to identify victims, build trust, and execute scams.

Some of the report’s findings include:

• Around 78% of Authorised Push Payment (APP) fraud originates online.

• Approximately three-quarters of online APP fraud starts through social media platforms.

• Around 82% of UK adults report receiving suspicious calls or messages.

• Telecom-enabled fraud represents 16% of APP fraud cases but accounts for 43% of associated financial losses.

To address this growing threat, the review recommends introducing stronger accountability for online platforms, including a proposed Failure to Prevent Fraud by Online Platforms offence.

Why this matters

Fraud prevention is expanding beyond financial institutions.

Future regulatory expectations are likely to involve closer collaboration between banks, digital platforms, telecommunications providers, regulators, and law enforcement agencies.

4. AI Is Changing the Fraud Landscape

Artificial intelligence appears throughout the review as both a major threat and a valuable investigative tool.

How criminals are using AI

The report identifies several emerging risks:

• Deepfake videos

• Voice cloning

• AI-generated phishing emails

• Synthetic identities

• AI-assisted romance scams

• Automated social engineering

These technologies make fraud significantly more convincing and scalable than traditional scams.

How investigators are using AI

The review also recognises AI’s potential to strengthen fraud investigations.

Current applications include:

• Evidence classification

• Intelligent document search

• Automated disclosure

• Pattern identification

• Predictive analytics

• Sensitive information redaction

According to the report, automated redaction technologies could reduce disclosure preparation time by up to 80%, allowing investigators to focus on higher-value analytical work.

Compliance takeaway

Financial institutions should embrace AI—but responsibly.

Successful AI adoption requires:

• Human oversight

• Model validation

• Explainability

• Governance controls

• Ongoing monitoring

The review repeatedly cautions against relying entirely on AI-generated outputs without appropriate expert review.

5. Identity Fraud Is Becoming a Major Financial Crime Risk

Identity fraud is no longer limited to stolen passports or forged documents. Criminals are increasingly exploiting digital identities, synthetic identities, deepfakes, and AI-generated documents to bypass traditional verification controls.

The review identifies identity fraud as one of the fastest-growing enablers of organised financial crime.

Key findings

• More than 249,000 identity fraud cases were recorded in 2024.

• Identity fraud accounted for around 59% of all fraud filings reported to Cifas.

• Criminals increasingly combine identity theft with phishing, social engineering, and AI-generated impersonation to target victims.

To strengthen enforcement, the review recommends creating a new standalone criminal offence for identity fraud, recognising that existing legislation does not adequately address modern forms of digital impersonation.

Why this matters for AML

Digital identity is becoming a cornerstone of financial crime compliance.

AML teams should assess whether their existing KYC and Customer Due Diligence (CDD) processes can effectively detect:

• Synthetic identities

• AI-generated identity documents

• Identity takeover attempts

• Biometric spoofing

• Deepfake-enabled impersonation

As fraud techniques evolve, identity verification must move beyond one-time onboarding checks towards continuous customer monitoring.

6. Whistleblowers Could Become One of the Best Sources of Fraud Intelligence

The review argues that whistleblowers remain one of the most underutilised tools for detecting serious fraud.

After examining international models—particularly those used in the United States—it concludes that rewarding whistleblowers can significantly improve fraud detection while encouraging individuals to report wrongdoing earlier.

What the review recommends

The report proposes:

• A financial reward programme for eligible whistleblowers.

• Administration of the scheme by the Serious Fraud Office (SFO).

• Clear eligibility criteria and governance arrangements.

• Criminal penalties for knowingly making false whistleblower reports.

• Stronger legal protection against retaliation and intimidation.

• An independent appeals process for whistleblower disputes.

Public support

According to Ipsos research commissioned for the review:

• 70% of respondents support rewarding whistleblowers.

• 28% strongly support introducing financial incentives.

Compliance takeaway

Financial institutions should treat whistleblowing as more than a regulatory requirement.

Strong internal reporting channels can help identify:

• Internal fraud

• Money laundering

• Sanctions evasion

• Procurement fraud

• Insider misconduct

• Accounting irregularities

A healthy speak-up culture often enables organisations to detect financial crime long before regulators or law enforcement become involved.

7. Corporate Accountability Is Expanding

One of the report’s most important discussions centres on corporate liability.

The review examines the UK’s new Failure to Prevent Fraud offence introduced under the Economic Crime and Corporate Transparency Act 2023 (ECCTA) and considers whether it goes far enough.

While the legislation introduces greater accountability for large organisations, the report argues that additional reforms may be needed—particularly for digital platforms whose services are frequently exploited by fraudsters.

Proposed reforms

The review recommends introducing a Failure to Prevent Fraud by Online Platforms offence.

The objective is to encourage platforms to take stronger preventive measures rather than relying solely on law enforcement after fraud has occurred.

Why this matters

Corporate accountability is shifting from responding to fraud after the event to demonstrating that reasonable preventive measures were already in place.

For compliance leaders, this means boards should regularly review the following:

• Fraud risk assessments

• Internal controls

• Employee awareness programmes

• Customer protection measures

• Fraud governance frameworks

• Technology investments

Fraud prevention is increasingly becoming a board-level governance responsibility rather than solely an operational issue.

8. Fraud Investigators Need Better Resources and Technology

The review acknowledges that investigators face an increasingly complex fraud landscape but often lack sufficient resources to respond effectively.

Multiple agencies—including the Serious Fraud Office, National Crime Agency, National Economic Crime Centre, City of London Police, Financial Conduct Authority, HMRC, and Regional Organised Crime Units—share responsibility for tackling fraud. However, this fragmented structure can slow investigations and dilute accountability.

The capability gap

The report highlights several concerning statistics:

• Fraud represents the UK’s largest crime category.

• Yet only around 1% of policing resources are dedicated to fraud investigations.

• One Metropolitan Police unit reportedly required 50 accredited financial investigators but had only eight in post.

Recommended improvements

The review supports greater investment in:

• AI-assisted investigations

• Digital evidence management

• Automated disclosure

• Specialist investigator training

• Modern forensic technology

• Cross-agency collaboration

Compliance takeaway

As enforcement agencies continue to face resource constraints, financial institutions will play an increasingly important role in identifying suspicious activity early.

Higher-quality investigations, stronger evidence preservation, and more meaningful Suspicious Activity Reports (SARs) can significantly improve enforcement outcomes.

9. Tougher Penalties Could Change the Fraud Risk Landscape

The review concludes that sentencing frameworks have not kept pace with the scale of modern fraud.

Large-scale fraud schemes now affect thousands of victims, generate billions in losses, and often involve organised international criminal networks. Yet existing maximum penalties remain comparatively limited.

What the review recommends

Among its proposals are:

• Increase the maximum sentence for serious fraud to 20 years.

• Increase the maximum sentence for serious money laundering to 20 years.

• Reform early guilty plea incentives.

• Improve confiscation and asset recovery mechanisms.

• Strengthen incentives for offenders to repay criminal proceeds quickly.

Why this matters

The recommendations recognise that fraud is no longer viewed as a lower-level economic offence.

Instead, regulators increasingly treat major fraud as organised financial crime with consequences comparable to other serious criminal offences.

For compliance leaders, this reinforces the importance of maintaining robust fraud prevention frameworks that can withstand increasing regulatory scrutiny.

10. Fraud Prevention Must Become an Enterprise-Wide Strategy

Perhaps the review’s biggest message is that fraud prevention cannot sit within one department.

Banks, fintechs, payment providers, online platforms, telecommunications companies, regulators, law enforcement agencies, and technology providers all have a role to play.

The report consistently advocates a collaborative approach built on intelligence sharing, technology, governance, and proactive prevention.

The future of financial crime compliance

The review points towards a future where organisations integrate:

• Fraud prevention

• AML compliance

• Digital identity verification

• AI governance

• Cybersecurity

• Customer protection

• Intelligence sharing

• Risk management

Rather than treating these as separate programmes, organisations should build a unified financial crime framework capable of addressing increasingly sophisticated threats.

Key takeaway

The organisations best prepared for tomorrow’s regulatory landscape will be those that stop viewing fraud and money laundering as separate risks—and instead recognise them as two parts of the same financial crime ecosystem.

What Financial Institutions Should Do Now

The Independent Review of Disclosure and Fraud is more than a policy document—it offers practical lessons for every organisation responsible for managing financial crime risk.

While many of the recommendations are directed at the UK Government and law enforcement agencies, compliance leaders do not need to wait for legislative changes. Several actions can be implemented today to strengthen fraud resilience and prepare for evolving regulatory expectations.

1. Integrate Fraud and AML Risk Management

Many organisations still investigate fraud and money laundering separately. However, the review demonstrates that organised fraud almost always generates proceeds that eventually enter the financial system.

What you should do

• Align fraud and AML teams under a unified financial crime strategy.

• Share fraud intelligence across compliance, investigations, and transaction monitoring teams.

• Use fraud alerts as inputs for customer risk assessments and AML investigations.

• Identify customers linked to mule accounts, account takeovers, or organised fraud networks.

Why it matters

An integrated approach helps institutions identify criminal networks earlier instead of investigating isolated incidents.

2. Modernise Customer Due Diligence (CDD)

The report highlights how criminals increasingly exploit digital identities and AI-powered impersonation to bypass traditional verification controls.

Consider strengthening your onboarding process by using:

• Multi-layer identity verification

• Biometric authentication

• Device intelligence

• Behavioural analytics

• Ongoing customer verification

• Enhanced monitoring for high-risk customers

Ask yourself

Is your current KYC programme capable of identifying synthetic identities and AI-generated identity documents?

If the answer is uncertain, it may be time to review your identity verification framework.

3. Prepare for AI-Enabled Fraud

Artificial intelligence is rapidly changing how fraud is committed—and how it is detected.

Criminals are using AI for:

• Deepfake videos

• Voice cloning

• AI-generated phishing emails

• Fake customer identities

• Automated social engineering

Compliance teams can use AI for:

• Transaction monitoring

• Customer risk scoring

• Adverse media screening

• Network analysis

• Case prioritisation

• Alert optimisation

However, the review also warns against relying solely on AI-generated outputs without adequate governance and human oversight.

Key recommendation

Adopt AI—but ensure it is supported by:

• Human review

• Model validation

• Explainability

• Regular performance testing

• Clear governance policies

4. Strengthen Internal Reporting and Whistleblower Programmes

The review identifies whistleblowers as one of the most effective yet underused sources of fraud intelligence.

Organisations should encourage employees to report concerns early by creating a culture where speaking up is safe, confidential, and supported.

Review whether your organisation has:

• Anonymous reporting channels

• Independent investigations

• Anti-retaliation policies

• Board oversight of whistleblower cases

• Regular employee awareness programmes

An effective whistleblower programme often identifies misconduct before it becomes a regulatory investigation.

5. Improve Board Oversight of Fraud Risk

Fraud is no longer just an operational issue.

The review repeatedly links fraud prevention with stronger corporate governance and accountability.

Boards should receive regular reporting on:

• Emerging fraud threats

• Fraud losses and trends

• Customer scam activity

• AI-related risks

• Internal fraud incidents

• High-risk customer segments

• Fraud control effectiveness

Good governance starts with visibility.

If boards are only informed after major fraud events occur, organisations may already be reacting too late.

6. Invest in Better Intelligence Sharing

Fraud cannot be prevented by one organisation alone.

The review consistently calls for stronger collaboration between financial institutions, regulators, online platforms, telecommunications providers, and law enforcement agencies.

Compliance teams should consider participating in the following:

• Public-private partnerships

• Industry fraud forums

• Information-sharing initiatives

• Typology exchanges

• Cross-sector financial crime working groups

Better intelligence often leads to better prevention.

AML Compliance Checklist

The review contains 47 recommendations, but compliance teams can begin preparing today by focusing on a few practical priorities.

Even if the UK’s recommendations evolve before becoming law, these questions provide a useful benchmark for strengthening financial crime compliance programmes.

Final Thoughts

The Independent Review of Disclosure and Fraud is not simply a review of the UK’s criminal justice system—it is a reflection of how financial crime itself is changing.

Fraud has become faster, more digital, more organised, and increasingly powered by emerging technologies such as artificial intelligence. Criminal groups now operate across social media platforms, encrypted messaging applications, online marketplaces, cryptocurrencies, and international payment networks, making fraud prevention significantly more complex than it was a decade ago.

The review’s 47 recommendations collectively point towards a future where fraud prevention, AML compliance, digital identity, AI governance, and corporate accountability become closely interconnected. Rather than responding to fraud after financial losses occur, regulators increasingly expect organisations to identify emerging risks earlier, strengthen governance, improve intelligence sharing, and adopt technology that enhances both prevention and investigation.

For AML compliance leaders, the message is clear: financial crime programmes must continue evolving alongside the threats they are designed to combat. Institutions that integrate fraud prevention with AML controls, modernise customer due diligence, invest in responsible AI, and strengthen enterprise-wide governance will be better positioned to navigate future regulatory expectations while protecting customers, preserving trust, and building long-term operational resilience.

As governments around the world continue modernising their response to economic crime, the UK’s Independent Review of Disclosure and Fraud provides valuable insights into the direction of travel—not only for the UK, but for financial institutions and compliance professionals globally.