Anti-money laundering compliance has always been a discipline defined by its adversary. As financial crime methodologies evolve, compliance frameworks must evolve with them. The challenge in 2026 is that the pace of change has accelerated significantly — driven by technological innovation, geopolitical shifts, and the increasing sophistication of criminal networks operating across multiple jurisdictions.

For compliance teams in the UK and GCC, staying ahead of emerging typologies is not merely a regulatory obligation. It is a fundamental component of effective financial crime risk management.

The FATF Typologies Landscape

The Financial Action Task Force remains the primary source of international guidance on money laundering and terrorist financing typologies. Its mutual evaluation programme, which assesses jurisdictions against the FATF Recommendations, has driven significant regulatory reform across the GCC in recent years — most visibly in the UAE's successful exit from the FATF grey list in 2024.

FATF's most recent typologies reports identify several areas of heightened concern that are directly relevant to firms operating in UK and GCC markets.

Trade-Based Money Laundering

Trade-based money laundering remains one of the most significant and underappreciated financial crime risks facing firms with exposure to international trade finance. TBML exploits the complexity of cross-border trade transactions — invoicing manipulation, misrepresentation of goods, and multiple-invoicing schemes — to move value across jurisdictions while obscuring its origin.

The GCC's position as a major trade hub makes TBML a particularly acute risk for firms in the region. The UAE, in particular, has been identified by FATF and the Egmont Group as a jurisdiction where TBML risk is elevated, given the volume and diversity of trade flows passing through its ports and free zones.

Effective TBML controls require a different approach from standard transaction monitoring. Compliance teams need access to trade documentation, the ability to assess the plausibility of declared values against market benchmarks, and strong correspondent banking due diligence processes. Many firms have significant gaps in this area.

Virtual Asset Exploitation

The intersection of virtual assets and money laundering has moved from a niche concern to a mainstream compliance priority. FATF's Recommendation 15, which extends AML/CFT obligations to virtual asset service providers, has been implemented — with varying degrees of rigour — across most major jurisdictions.

For traditional financial institutions, the primary risk is not direct exposure to virtual assets but indirect exposure through customers who use virtual asset platforms. The challenge is identifying when fiat currency flows are connected to virtual asset activity — particularly where customers are using decentralised exchanges or privacy-enhancing technologies that reduce transaction transparency.

The FCA's registration regime for cryptoasset businesses has created a clearer regulatory perimeter in the UK, but the pace of innovation in the virtual asset space continues to outrun regulatory frameworks. Compliance teams should ensure that their transaction monitoring systems are calibrated to detect patterns associated with virtual asset activity, and that their customer risk assessment processes explicitly address virtual asset exposure.

Professional Enablers

One of the most significant themes in recent FATF and National Crime Agency reporting is the role of professional enablers — lawyers, accountants, company formation agents, and other professional service providers — in facilitating money laundering. The UK's Economic Crime and Corporate Transparency Act 2023 has strengthened the legal framework for addressing enabler risk, and the FCA has signalled that it expects regulated firms to consider enabler risk in their customer due diligence processes.

For firms providing services to professional intermediaries, this creates a specific due diligence challenge. Understanding the nature of the intermediary's client base, their own AML controls, and the source of funds flowing through their accounts requires a more sophisticated approach than standard CDD processes typically provide.

Sanctions Evasion as an AML Typology

The expansion of international sanctions regimes — particularly following Russia's invasion of Ukraine — has created a new category of financial crime risk that sits at the intersection of sanctions compliance and AML. Sanctions evasion schemes frequently involve the same techniques used in money laundering: layering through multiple jurisdictions, use of shell companies, and exploitation of trade finance structures.

For firms with GCC operations, the complexity is heightened by the region's position as a significant trade and financial hub with connections to sanctioned jurisdictions. The UAE has made substantial progress in strengthening its sanctions compliance framework, but the risk of inadvertent exposure to sanctions evasion activity remains material.

Compliance teams should ensure that their AML and sanctions programmes are genuinely integrated — not operating as parallel silos — and that transaction monitoring systems are calibrated to detect patterns associated with sanctions evasion as well as conventional money laundering.

Correspondent Banking and De-Risking

The withdrawal of major international banks from correspondent banking relationships in higher-risk jurisdictions — a trend known as de-risking — continues to create compliance challenges for firms in the GCC and other emerging markets. Where correspondent banking relationships are terminated, the risk is that financial flows migrate to less regulated channels, increasing overall financial crime risk.

For firms that rely on correspondent banking relationships, the practical implication is that due diligence expectations from correspondent banks have increased significantly. Firms need to be able to demonstrate robust AML controls, clear customer risk assessment processes, and effective transaction monitoring — not just to their own regulators, but to the international banks on whose correspondent services they depend.

Strengthening Your AML Framework

Against this typologies landscape, what does an effective AML framework look like in 2026?

Risk assessment. The foundation of any effective AML programme is a current, comprehensive, and genuinely risk-based assessment of the firm's exposure to money laundering. This means going beyond a generic risk matrix to understand the specific typologies that are most relevant to the firm's business model, customer base, and geographic footprint.

Transaction monitoring calibration. Many firms' transaction monitoring systems were designed to detect conventional money laundering patterns and have not been updated to reflect emerging typologies. Regular calibration reviews — assessing whether the system's rules and thresholds are generating alerts that are genuinely indicative of suspicious activity — are essential.

Customer due diligence quality. The quality of CDD information held on customers is the single most important determinant of AML programme effectiveness. Firms should regularly assess whether their CDD processes are generating the information needed to make meaningful risk assessments — not just completing a checklist. Our detailed analysis of KYC and AML framework design covers the specific components of a modern, regulator-ready programme.

Suspicious activity reporting. The quality of SARs submitted to the National Crime Agency or equivalent financial intelligence units is a direct indicator of AML programme effectiveness. Compliance teams should invest in SAR quality, ensuring that reports contain the information needed to support law enforcement action.

Training and awareness. Financial crime typologies change. Training programmes that were designed five years ago may not reflect current risks. Regular typologies-based training — tailored to the specific risks relevant to different business lines — is essential for maintaining front-line awareness.

Conclusion

The AML typologies landscape in 2026 is more complex and more dynamic than at any previous point. Firms that approach AML compliance as a static, rules-based exercise are increasingly exposed — both to regulatory action and to the reputational and financial consequences of being used as a conduit for financial crime.

Effective AML compliance requires continuous investment in understanding how the threat landscape is evolving and ensuring that compliance frameworks keep pace. Halli Whalli Global supports firms across the UK and GCC in developing and maintaining AML frameworks that are genuinely fit for purpose. Our licensed financial crime compliance frameworks provide a structured, validated foundation, and our advisory services offer hands-on support for firms navigating specific typology risks or regulatory challenges.

For GCC firms, the FATF mutual evaluation process directly shapes the supervisory environment in which these typologies are assessed — understanding the evaluation methodology is essential context for any compliance programme review. Sanctions evasion, which increasingly overlaps with conventional AML typologies, is addressed in depth in our piece on sanctions compliance in the GCC.

To discuss your firm's AML programme or explore our licensed financial crime compliance frameworks, contact us at [email protected].