FATF Calls for Global Action to Disrupt Scam Compounds and Follow the Money

November 7, 2026 • FinTech News
FATF Calls for Global Action to Disrupt Scam Compounds and Follow the Money

A landmark report warns that organised scam networks are exploiting instant payments, virtual assets, and artificial intelligence. It urges governments, banks, and technology companies to disrupt criminal activity before and after victims lose money.

Scam compounds are becoming a global financial crime threat. Their operations extend far beyond the buildings where online fraud takes place. They depend on networks of payment services, money mules, virtual asset channels, telecommunications providers, and digital platforms.

The Financial Action Task Force (FATF) is calling for a coordinated international response. In a report published on 5 November 2026, the global anti-money laundering watchdog examines how criminal networks generate, move, and launder proceeds from scam operations.

The report, Combating End-to-End Illicit Financial Flows Linked to Scam Compounds, identifies practical ways to disrupt these networks. It also urges authorities to target the wider criminal infrastructure rather than focusing only on physical scam centers.

The scale is significant. Scam compounds are estimated to cause tens of billions of dollars in losses every year. The FATF draws on almost 120 case studies and examples of good practice across more than 60 jurisdictions.

Scam compounds create victims on two fronts.

The report highlights two groups affected by these operations: people forced to work inside scam compounds and individuals targeted by online fraud.

In Southeast Asia, people from at least 80 jurisdictions have been identified in scam compounds. The FATF cites estimates that around 120,000 people in Myanmar alone have been forced to carry out online scams.

Many are recruited through fraudulent job advertisements. Criminal networks promise legitimate employment, then transport recruits across borders and force them into scam operations.

Those trapped inside can face debt bondage, confinement, violence, sexual exploitation, torture, and threats. They are victims of trafficking and coercion, even as criminals force them to target others.

Meanwhile, people in more than 100 jurisdictions have been targeted by cyber scam hubs. Their losses can become difficult to recover once criminals move funds offshore, convert them into virtual assets, or withdraw them through cash-out networks.

The FATF also describes a case in which blockchain analysis traced more than $100 million in victim inflows to a virtual asset wallet cluster attributed to a scam compound. Investigators followed the funds through laundering networks towards cash-out points.

This illustrates why authorities need to investigate both the human trafficking and financial dimensions of scam compounds.

Instant payments and virtual assets accelerate money laundering.

Scam networks exploit several channels to collect and move criminal proceeds. These include cash, money mule accounts, informal transfer services, and virtual assets.

The report identifies virtual assets as a central laundering channel. In some cases, dedicated over-the-counter exchange desks operate inside scam compounds. These services help criminals exchange virtual assets and move funds through domestic financial networks.

Instant payment systems create another challenge. Criminals can move scam proceeds from a victim’s account in as little as two minutes. That leaves banks and authorities with a narrow window to identify suspicious activity and stop further transfers.

Technology is also helping these networks operate at greater scale.

Criminals use social media, messaging platforms, mobile devices, and online services to reach potential victims. AI-generated content, deepfakes, and automated tools can make fraudulent messages and interactions more convincing.

These technologies can lower operating costs and increase the volume of scams. They also make it harder for individuals to distinguish genuine communications from manipulated content.

Enforcement pressure is changing the way these groups operate. The FATF reports that some networks are moving away from large, fixed compounds towards smaller and more mobile locations. These can include rented apartments, casinos, coffee shops, and even moving vehicles.

As a result, shutting down one physical site may not dismantle the wider criminal operation. Networks can relocate, change names, and replace the infrastructure they lose.

FATF wants authorities to intervene before payments happen.

The report identifies an important gap in current responses. Countries have become more effective at taking action after a scam has occurred. These measures include tracing victim payments, freezing proceeds, and pursuing assets.

However, the FATF says authorities also need to intervene earlier.

Potential warning signs can appear before a victim transfers money. These include fraudulent job advertisements, suspicious recruitment activity, malicious websites, unusual phone numbers, and telecommunications indicators.

By connecting these signals, authorities and private companies may identify criminal activity before a financial transaction takes place.

This requires cooperation beyond traditional financial institutions. Banks and payment providers need to work with technology companies, social media platforms, telecommunications operators, and law enforcement agencies.

The FATF’s position is that disrupting the wider ecosystem can make scam operations harder to establish and maintain.

Six principles for disrupting scam compounds

The FATF has introduced six principles to guide international action against illicit financial flows linked to scam compounds.

1. Target the wider criminal ecosystem.

Authorities should investigate criminal leaders, controllers, recruitment networks, and facilitators. Focusing only on the physical location can leave the wider organization intact.

2. Disrupt illicit financial flows end-to-end.

Governments and financial institutions should target the services that enable scams. They should also stop, trace, freeze, and recover proceeds before criminals can hide or move them.

3. Connect the networks

Financial institutions, technology companies, telecommunications providers, and public authorities need to share relevant information. Better coordination can help identify suspicious activity across different channels.

4. Act at speed across borders

The FATF highlights the first 24 to 72 hours after a scam is detected or reported as critical. Fast communication and intervention can improve the chances of freezing funds and recovering assets.

5. Put victims at the center.

Investigations must protect both people who lose money and those trafficked or coerced into scam operations. Authorities should provide appropriate safeguards, support, and reporting channels.

6. Adapt and focus on lasting impact.

Criminal networks change their methods when authorities disrupt them. Responses must therefore adapt to new technologies, payment channels, domains, and decentralized operations.

Together, these principles shift the focus from isolated fraud cases towards the financial and operational systems that sustain organized scam networks.

Case studies show how coordinated action can work.

The FATF report includes examples of cooperation between authorities and private-sector organizations.

In the United States, the interagency Scam Center Strike Force conducted a disruption operation that affected approximately 1.4 million social media and email accounts, as well as malicious network infrastructure. The operation also supported arrests in Thailand and led to the voluntary freezing of more than $3.8 million in virtual assets.

Indonesia’s Anti-Scam Centre blocked more than 515,000 accounts and returned approximately $10.9 million to victims between November 2024 and May 2026.

The UK provides another example through its Scam Signals initiative. The system covers 85% of the country’s mobile users and allows banks to receive privacy-preserving mobile network risk indicators when customers authorize payments.

The FATF reports that use of these signals has been associated with a 41% reduction in people being scammed and a 44% decrease in fraud losses. These figures demonstrate the potential value of combining telecommunications data with financial-sector controls.

What the FATF’s next phase means for financial institutions

The report is an important step in the FATF’s broader anti-fraud roadmap. It places greater emphasis on identifying criminal networks and disrupting the financial channels that allow them to operate.

For banks and payment providers, this reinforces the importance of rapid fraud detection, suspicious transaction monitoring, and effective cooperation with authorities. Payment providers may also need to improve their ability to identify unusual account activity and respond quickly to reports of fraud.

Technology and telecommunications companies have a role as well. Fraudulent advertisements, malicious domains, and suspicious communications can provide early indicators before criminals receive payments.

The FATF says it will work with public- and private-sector partners through February 2027 to identify scalable solutions against cyber-enabled fraud.

The central message is clear: stopping scam compounds requires more than closing buildings or blocking individual accounts. Authorities must identify the people, services, and financial infrastructure behind the operations. They must also act quickly enough to prevent stolen funds from disappearing across borders.

For the global financial sector, the challenge is to make cooperation and early intervention as fast and connected as the criminal networks they are designed to disrupt.

Source note: Based on the FATF report Combating End-to-End Illicit Financial Flows Linked to Scam Compounds, published on 5 November 2026, and the organisation’s accompanying announcement and principles.