Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

Asia-Pacific APAC

Domains covered
8 of 8
Sources
188
Role actions
8
Horizon <90d
0
Jurisdiction profile
FATF status: Grey-List Tier: A Risk direction: Increasing Enablement vs enforcement: Mixed

APAC coordinates AML/CFT/CPF policy through the Asia/Pacific Group on Money Laundering (APG), FATF's regional body spanning mature regulators (Australia, Singapore, Hong Kong) through grey-listed and blacklisted low-capacity states (Myanmar, Lao PDR, Nepal, Papua New Guinea, Vietnam).

MoreFrameworks range from Singapore/Hong Kong's sophisticated VASP licensing and MAS/HKMA supervision to jurisdictions lacking basic virtual-asset regulation, functioning beneficial-ownership disclosure, or effective DNFBP oversight — a bifurcated region exporting AML/CFT best practice while hosting industrial-scale scam-compound and crypto-laundering infrastructure.

Key deficiencies
  • Virtual asset/VASP regulation absent or nascent in Vietnam, Lao PDR and other APG grey-listed states
  • State tolerance of, and in Myanmar's case alleged complicity in, Cambodia/Myanmar scam-compound economies despite repeated sanctions
  • Historic DNFBP coverage gaps (lawyers, accountants, real estate agents, TCSPs) excluded from Australia's AML/CTF Act, only now being closed via Tranche 2 reform
  • Weak beneficial-ownership transparency and nominee/passport-of-convenience structuring (Vanuatu, Palau) exploited by transnational scam networks
  • Fragmented crypto regulatory maturity creating arbitrage within the bloc between Hong Kong/Singapore and Cambodia/Myanmar/Vietnam
Recent developments (18m)
  • FATF/APG mutual evaluation of Singapore published 6 May 2026 — competent regime but inconsistent risk-based results
  • FATF/APG mutual evaluation of Malaysia published 11 December 2025 — significant strengthening since 2015 but weak ML prosecution conversion
  • Papua New Guinea added to FATF grey list at February 2026 Plenary
  • Coordinated US/UK/EU sanctions campaign against Cambodia-Myanmar scam-compound networks (Prince Group/Chen Zhi Oct 2025, DKBA Nov 2025, Senator Kok An April 2026)
  • Bybit exchange hit by $1.46-1.5bn DPRK-attributed crypto theft, February 2025 — largest crypto heist on record
  • Huione Group (Cambodia) designated by FinCEN under Section 311 as a primary money-laundering concern
  • Singapore MAS fined nine banks incl. UBS and Citi S$27.5m for lapses tied to the S$3bn 2023 money-laundering case (July 2025)
  • Hong Kong SFC virtual-asset trading platform (VATP) regime matures — 2 full licences (OSL, HashKey), 11 deemed-licensed
  • Australia's AUSTRAC AML/CTF VASP transitional rules and Travel Rule take effect through 2026; FATF mutual evaluation of Australia begins late 2026
Brief

Lead signal

Lead Signal

The dominant signal reaching Asia-Pacific this cycle originates outside the region entirely. The Financial Action Task Forces Plenary of 30 October 2026 removed four jurisdictions from its list of countries under increased monitoring, Bulgaria, Cote dIvoire, the Democratic Republic of the Congo, and Monaco, while the register of countries subject to a call for action kept its three names unchanged. No jurisdiction within Asia-Pacific moved on either list this cycle. That absence is itself worth stating plainly: Asia-Pacific is a geographic bloc with no binding region-wide sanctions or anti-money-laundering instrument of its own. The only architecture that operates across the region is the Asia/Pacific Group on Money Laundering, a mutual-evaluation body rather than a legislature, and its schedule shows no near-term rule change. The practical reading for firms with Asia-Pacific exposure is that the grey-list and call-for-action lists set by Paris remain the operative external reference point, and this cycle that reference point moved elsewhere, not here.

Read full brief

Lead Signal

The dominant signal reaching Asia-Pacific this cycle originates outside the region entirely. The Financial Action Task Forces Plenary of 30 October 2026 removed four jurisdictions from its list of countries under increased monitoring, Bulgaria, Cote dIvoire, the Democratic Republic of the Congo, and Monaco, while the register of countries subject to a call for action kept its three names unchanged. No jurisdiction within Asia-Pacific moved on either list this cycle. That absence is itself worth stating plainly: Asia-Pacific is a geographic bloc with no binding region-wide sanctions or anti-money-laundering instrument of its own. The only architecture that operates across the region is the Asia/Pacific Group on Money Laundering, a mutual-evaluation body rather than a legislature, and its schedule shows no near-term rule change. The practical reading for firms with Asia-Pacific exposure is that the grey-list and call-for-action lists set by Paris remain the operative external reference point, and this cycle that reference point moved elsewhere, not here.

A second, narrower signal did originate from within the regions own architecture. The Asia/Pacific Group on Money Laundering's 2025 Yearly Typologies Report, still marked for adoption rather than finalised, documents virtual asset service providers as a material secondary channel for laundering activity across the region, accounting for thirteen case studies, or eleven percent of the compilation, including a cross-border scam-compound pattern spanning China, Hong Kong, and Chinese Taipei. This is typology-level evidence rather than a new obligation, but it confirms that the channel the region's own supervisors are watching most closely outside core banking is the virtual-asset sector.

Other Developments

The global grey list contracted, not expanded. The October Plenary's removal of four countries, none of them Asia-Pacific members, leaves the call-for-action list, the strongest designation tier, unchanged at three names, and leaves the increased-monitoring list shorter than it was. For firms whose due-diligence programmes reference these lists as inputs to enhanced scrutiny, the immediate consequence is a narrowing of the external trigger set this cycle, not a widening of it.

Hong Kong and Macao sit inside a mutual-evaluation cycle measured in years, not weeks. The Asia/Pacific Group's Global Fifth Round schedule tracks Macao's next technical-compliance submission for 2029 and a possible onsite assessment period for Hong Kong around the same horizon. This is baseline architecture, the standing mechanism by which the region's two major financial centres are periodically re-assessed against the Financial Action Task Force's recommendations, and it carries no near-term action item. It is noted here because it is the closest thing Asia-Pacific has to a scheduled regulatory event, and its distance is itself the finding.

The region's own typology work remains provisional. The 2025 Yearly Typologies Report carries an Asia/Pacific Group yearly-typologies document identifier and a research-and-supporting-quote base now on record, but its status as a document still subject to adoption means the virtual-asset-channel finding it carries should be read as the regions supervisors flagging a pattern, not as a rule already in force. The distinction matters for how firms calibrate internal controls against it: it is signal for risk assessment, not yet a citable compliance standard.

Cross-Monitor Connections

The virtual-asset typology finding sits at the boundary between anti-money-laundering architecture and digital-asset market structure, and the cross-border scam-compound pattern identified across China, Hong Kong, and Chinese Taipei in particular connects to work tracked elsewhere on commodity and conflict-finance flows, insofar as scam-compound operations are frequently sited in jurisdictions with weaker enforcement capacity and can intersect with forced-labour and trafficking patterns that sit outside this monitors own typology library but are tracked by counterpart monitors focused on state capture and extractive-industry integrity. The global grey-list movement, while not touching Asia-Pacific directly, remains the reference point against which enabler-jurisdiction and correspondent-banking risk assessments elsewhere in the fleet are calibrated, and a contraction of that list changes the universe of jurisdictions those assessments must weight.

Outlook

Through the remainder of 2026, the most likely source of near-term movement affecting Asia-Pacific remains external to the bloc: further grey-list or call-for-action changes at the Financial Action Task Forces next plenary, and the pending publication, expected in December 2026, of the Mexico and United States mutual evaluation outcomes adopted this cycle but not yet released. Within the region itself, the most consequential open item is formal adoption of the 2025 Yearly Typologies Report; once adopted, its virtual-asset-channel finding converts from a provisional supervisory observation into the regions most current typology-level reference for that sector, and firms with virtual-asset exposure in China, Hong Kong, or Chinese Taipei should treat the scam-compound pattern it documents as the clearest indicator of where regional supervisory attention is presently directed. No mutual-evaluation action is due from Macao or Hong Kong before 2029, so the regions structural architecture is expected to remain stable on that axis through this horizon.

Earlier periodic briefs (8)
3 Nov 2026 · fim-2026-11-03

Lead Signal

The dominant signal reaching Asia-Pacific originates outside the region entirely. The Financial Action Task Forces Plenary of 30 October 2026 removed four jurisdictions from its list of countries under increased monitoring, Bulgaria, Cote dIvoire, the Democratic Republic of the Congo, and Monaco, while the register of countries subject to a call for action kept its three names unchanged. No jurisdiction within Asia-Pacific moved on either list. That absence is itself worth stating plainly: Asia-Pacific is a geographic bloc with no binding region-wide sanctions or anti-money-laundering instrument of its own. The only architecture that operates across the region is the Asia/Pacific Group on Money Laundering, a mutual-evaluation body rather than a legislature, and its schedule shows no near-term rule change. The practical reading for firms with Asia-Pacific exposure is that the grey-list and call-for-action lists set by Paris remain the operative external reference point, and this cycle that reference point moved elsewhere, not here.

A second, narrower signal did originate from within the regions own architecture. The Asia/Pacific Group on Money Laundering's 2025 Yearly Typologies Report, still marked for adoption rather than finalised, documents virtual asset service providers as a material secondary channel for laundering activity across the region, accounting for thirteen case studies, or eleven percent of the compilation, including a cross-border scam-compound pattern spanning China, Hong Kong, and Chinese Taipei. This is typology-level evidence rather than a new obligation, but it confirms that the channel the region's own supervisors are watching most closely outside core banking is the virtual-asset sector.

Other Developments

The global grey list contracted, not expanded. The October Plenary's removal of four countries, none of them Asia-Pacific members, leaves the call-for-action list, the strongest designation tier, unchanged at three names, and leaves the increased-monitoring list shorter than it was. For firms whose due-diligence programmes reference these lists as inputs to enhanced scrutiny, the immediate consequence is a narrowing of the external trigger set, not a widening of it.

Hong Kong and Macao sit inside a mutual-evaluation cycle measured in years, not weeks. The Asia/Pacific Group's Global Fifth Round schedule tracks Macao's next technical-compliance submission for 2029 and a possible onsite assessment period for Hong Kong around the same horizon. This is baseline architecture, the standing mechanism by which the region's two major financial centres are periodically re-assessed against the Financial Action Task Force's recommendations, and it carries no near-term action item. It is noted here because it is the closest thing Asia-Pacific has to a scheduled regulatory event, and its distance is itself the finding.

The region's own typology work remains provisional. The 2025 Yearly Typologies Report carries an Asia/Pacific Group yearly-typologies document identifier and a research-and-supporting-quote base now on record, but its status as a document still subject to adoption means the virtual-asset-channel finding it carries should be read as the regions supervisors flagging a pattern, not as a rule already in force. The distinction matters for how firms calibrate internal controls against it: it is signal for risk assessment, not yet a citable compliance standard.

Cross-Monitor Connections

The virtual-asset typology finding sits at the boundary between anti-money-laundering architecture and digital-asset market structure, and the cross-border scam-compound pattern identified across China, Hong Kong, and Chinese Taipei in particular connects to work tracked elsewhere on commodity and conflict-finance flows, insofar as scam-compound operations are frequently sited in jurisdictions with weaker enforcement capacity and can intersect with forced-labour and trafficking patterns that sit outside this monitors own typology library but are tracked by counterpart monitors focused on state capture and extractive-industry integrity. The global grey-list movement, while not touching Asia-Pacific directly, remains the reference point against which enabler-jurisdiction and correspondent-banking risk assessments elsewhere in the fleet are calibrated, and a contraction of that list changes the universe of jurisdictions those assessments must weight.

Outlook

Through the remainder of 2026, the most likely source of near-term movement affecting Asia-Pacific remains external to the bloc: further grey-list or call-for-action changes at the Financial Action Task Forces next plenary, and the pending publication, expected in December 2026, of the Mexico and United States mutual evaluation outcomes adopted but not yet released. Within the region itself, the most consequential open item is formal adoption of the 2025 Yearly Typologies Report; once adopted, its virtual-asset-channel finding converts from a provisional supervisory observation into the regions most current typology-level reference for that sector, and firms with virtual-asset exposure in China, Hong Kong, or Chinese Taipei should treat the scam-compound pattern it documents as the clearest indicator of where regional supervisory attention is presently directed. No mutual-evaluation action is due from Macao or Hong Kong before 2029, so the regions structural architecture is expected to remain stable on that axis through this horizon.

18 Oct 2026 · fim-2026-10-18

Lead Signal

The Asia-Pacific cycle this period is defined by a widening gap between enforcement volume and legal clarity in Macau, set against a sharper enforcement turn in Cambodia and continuing standing coverage of conflict-linked finance reaching into the region through US action. Macau's Public Prosecutions Office and Court of Final Appeal leadership used the 2026/2027 judicial-year opening to press publicly for legal reform of the unlicensed currency-exchange-for-gambling offence, proposing objective criteria or legal presumptions for the business element of the offence and floating single-judge adjudication. The proposal arrives against a backdrop of rising suspicious transaction reports: gaming operators filed 2,968 STRs in the January to September 2026 window, up 7.9 percent year on year and representing 71.7 percent of the city's total STRs, while gaming-related crime rose 12.3 percent year on year to 1,951 cases. No bill has been tabled and no gazette text exists yet; the signal is a structural one about the evidentiary burden prosecutors say they cannot currently meet, not a change in the law itself.

Cambodia's casino sector moved in the opposite direction, from announcement toward enforcement. The nationwide suspension of online and proxy betting took effect from October 2026, and inspection of 195 casino licences has produced 20 revocations and 29 suspensions, alongside dismantlement of 86 scam compounds. Read together with Macau, the two jurisdictions illustrate the same regional pressure point, the exploitation of gaming and money-exchange infrastructure for laundering, met with markedly different instruments: Macau is still arguing about how to prove the offence, while Cambodia has moved to licence-level enforcement at scale.

Other Developments

OFAC's Cartel del Noreste designation reached into Nuevo León's legitimate economy, naming four individuals and eleven entities tied to the cartel for laundering proceeds through quarter-horse racing and construction and fuel front companies. The designation under EO 14059 and 13224 is a further illustration of sanctions architecture extending into ostensibly legitimate commercial sectors as a laundering vector, a pattern with resonance for how enabler jurisdictions and front-company structures are assessed regionally even though the designation itself sits outside Asia-Pacific.

The Department of Justice's charging action against Alvaro Pulido Vargas continues standing coverage of conflict and kleptocracy finance connected to Venezuela. The Colombian national was charged and has appeared in connection with laundering more than two billion dollars tied to Venezuelan government bribery schemes, a matter stated directly in the DOJ's own release and carrying the highest confidence tier available this cycle.

Laos remains on the FATF grey list per the Financial Action Task Force's 19 June 2026 statement, with the October 2026 plenary outcome not yet published at the time of this cycle's research. The grey-list status, restated in the US State Department's Investment Climate Statement, continues to sit alongside standing concerns about state equity positions in the Golden Triangle Special Economic Zone, an enabler-jurisdiction finding that remains structural rather than episodic.

Hong Kong's Significant Controllers Register regime remains unchanged, with the closed-register structure established under the Companies (Amendment) Ordinance 2018 continuing in force since 1 March 2018. No reform instrument was identified in the window.

Cross-Monitor Connections

The Macau and Cambodia gaming-sector findings carry direct relevance for monitors tracking state capture and conflict finance in Southeast Asia, given the well-documented overlap between scam-compound operations, proxy betting, and cross-border laundering networks that straddle gaming licensing regimes. The OFAC designation's use of quarter-horse racing and construction fronts is a pattern with parallels in commodity and extractive-industry integrity work, where ostensibly legitimate sectoral activity is used to launder proceeds; monitors tracking commodity flows may find the front-company typology instructive even though the designation itself is outside the Asia-Pacific bloc. The Pulido Vargas matter continues to intersect with conflict-finance tracking of Venezuela-linked networks more broadly.

Outlook

Macau's reform proposal has not yet reached bill or gazette stage, and whether the legal presumption approach survives legislative drafting remains to be seen; the STR and crime-trend data will be a relevant backdrop against which any eventual instrument is assessed. Cambodia's enforcement campaign, having moved from suspension to licence revocation at scale, bears watching for whether the pace of inspection and revocation continues against the remaining licensed base. The October 2026 FATF plenary outcome for Laos was not published within this cycle's window and remains an open item for the next cycle. No new primary-instrument text was retrieved for Macau or Hong Kong this cycle, a gap recorded in the gaps register rather than inferred into a finding.

11 Oct 2026 · fim-2026-10-11

Lead Signal

Macau's government has opened a consultation on its first comprehensive AML framework overhaul since the current regime took effect in 2006. The proposal would create a central register of beneficial ownership for companies and legal entities operating in Macau, responding to a corporate-opacity gap identified in the territory's 2017 APG mutual evaluation. The same consultation proposes classifying virtual assets connected to criminal conduct as goods or advantages derived from unlawful acts, enabling freezing powers that do not currently exist in Macau's statute book -- the territory's first dedicated crypto-AML provision. Both elements remain at consultation stage, corroborated so far only by secondary Tier 3 reporting rather than the primary consultation-paper text itself.

Other Developments

Hong Kong reaffirmed on 6 October 2026 that it will submit amendments to virtual-asset licensing legislation by year-end, extending licensing from trading platforms alone to cover custody, advisory and asset-management VASP services, with AML/CFT requirements built into the licensing framework from the point of authorisation. This would widen the perimeter of the existing Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615) regime, which today reaches trading platforms via the Securities and Futures Commission. Cambodia continues to intensify AML and anti-scam-compound enforcement ahead of a fresh FATF/APG evaluation cycle, seeking to avoid a third grey-listing after prior listings tied to casino-sector money-laundering vulnerabilities and the persistent reputational exposure of cyber-scam compounds operating out of converted casino properties. The FATF grey list was updated at its June 2026 plenary: Bosnia and Herzegovina and Iraq were added, Algeria and Namibia were removed, and the black list remained unchanged at Iran, North Korea and Myanmar. Neither Hong Kong nor Macau appears on either list, though several APAC members -- Laos, Nepal, Papua New Guinea and Vietnam -- remain under increased monitoring as of the most recent snapshot available.

Cross-Monitor Connections

The Hong Kong crypto-licensing extension and Macau's virtual-asset proceeds-of-crime classification both carry direct crypto-monitor relevance, since each measure would reshape the AML/CFT obligations attaching to virtual-asset activity in its respective jurisdiction. The same two developments also carry world-payments relevance where custody, advisory and asset-management crypto services intersect with payment-services licensing categories. Cambodia's casino-sector AML exposure connects to the broader conflict-finance and enabler-jurisdiction literature on converted-casino cyber-scam compounds, a vulnerability pattern APG has tracked in the region since its 2017 mutual evaluation cycle.

Outlook

The principal item to watch for Macau is whether its AML consultation progresses to an enacted instrument, and whether the primary consultation-paper text becomes available to corroborate the central beneficial-ownership register and virtual-asset freezing proposals beyond current secondary reporting. For Hong Kong, the item to watch is whether the reaffirmed custody/advisory/asset-management licensing amendment is actually gazetted by year-end as stated. For Cambodia, the outcome of its next FATF/APG evaluation cycle will determine whether its intensified enforcement effort succeeds in avoiding a third grey-listing.

4 Oct 2026 · fim-2026-10-04

Lead Signal

Hong Kong moved its digital-asset Anti-Money Laundering architecture from an issuance-only perimeter toward a wider structural footprint this cycle, with the Hong Kong Monetary Authority granting the first two licences under the Stablecoins Ordinance (Cap. 656) to Anchorpoint Financial and HSBC, effective 10 April 2026. Confirmed reporting places the stablecoin issuer-licensing regime in operational status, carrying Financial Action Task Force-aligned Anti-Money Laundering and Counter-Terrorist Financing, reserve and redemption duties on the two named licensees. Running alongside this, Hong Kong Financial Services and the Treasury Bureau and the Securities and Futures Commission completed consultation conclusions aimed at extending Anti-Money Laundering Ordinance (Cap. 615) Part 5B licensing to virtual-asset dealing, custody, advisory and asset-management services, with a bill targeted for introduction to the Legislative Council in 2026. The architecture read is consistent: Hong Kong is widening the Anti-Money Laundering and Counter-Terrorist Financing gateway around digital assets from issuance alone to a fuller value chain of circulation and service activity, while remaining, per the Financial Action Task Force and Asia/Pacific Group on Money Laundering joint calendar, off the grey list with its next mutual-evaluation on-site not scheduled until November 2029.

Separately, Cambodia revoked 91 casino licences in April 2026 in a scam-centre crackdown, an enforcement-adjacent architecture move judged probable to reflect a sustained effort to avoid a third Financial Action Task Force grey-list placement ahead of its 2026 evaluation, rather than a change to any sanctions regime as such.

Other Developments

Macau's casino Anti-Money Laundering enforcement architecture shows continuity rather than escalation. Suspicious Transaction Reports filed by Macau casino concessionaires totalled 3,603 in 2025, down 6.1 percent year on year, while the Gaming Inspection and Coordination Bureau has opened 22 administrative infraction cases since the 2022 revised Gaming Law took effect, of which five have been sanctioned, ten archived and seven remain pending. This pattern is read as continuity of the post-2022 enforcement structure rather than a material shift in trend.

Hong Kong's Anti-Money Laundering Ordinance perimeter continues to widen toward virtual-asset dealing, custody, advisory and management licensing. The Financial Services and the Treasury Bureau and Securities and Futures Commission consultation conclusions target a 2026 Legislative Council bill extending the existing centralised-trading-platform gateway under Part 5B to these four further licensable categories, with capital and fit-and-proper tests expected to mirror the existing virtual-asset trading platform regime.

Cambodia's casino-licence revocation sits in the Sanctions domain as an enforcement-adjacent structural signal rather than a sanctions-regime change. The 91 licence revocations are judged, at probable confidence, to be part of a sustained effort to avoid a third Financial Action Task Force grey-list placement ahead of Cambodia's 2026 evaluation.

Cross-Monitor Connections

Hong Kong's stablecoin issuer-licensing operationalisation and the parallel Anti-Money Laundering Ordinance virtual-asset-service expansion connect directly to the World Payments Monitor, where the same Hong Kong Monetary Authority policy direction is driving product-innovation signal around licensed-stablecoin trading and settlement use. The Financial Integrity read is the compliance-perimeter side of that same structural move: as Hong Kong widens permitted commercial use of regulated stablecoins, the Anti-Money Laundering and Counter-Terrorist Financing gateway around virtual-asset dealing, custody, advisory and management is being widened in step, rather than left behind the product expansion.

Outlook

The Hong Kong Anti-Money Laundering Ordinance amendment extending licensing to virtual-asset dealing, custody, advisory and asset-management services is expected to reach the Legislative Council in the second half of 2026, as scheduled, with the current estimate carrying a half-year uncertainty band. Whether the bill is introduced on that timeline, and whether its capital and fit-and-proper tests track the existing virtual-asset trading platform regime, will determine whether Hong Kong's Anti-Money Laundering and Counter-Terrorist Financing perimeter for digital assets closes the gap between issuance and circulation activity within this calendar year or slips into 2027. Macau's casino-sector enforcement architecture is expected to continue on its current administrative-infraction cadence absent a new legislative trigger. Cambodia's grey-list avoidance effort remains a structural watch item ahead of its 2026 Financial Action Task Force evaluation outcome.

28 Sep 2026 · fim-2026-09-28

Lead Signal

Hong Kong Monetary Authority has moved from framework design to market gatekeeping in its stablecoin regime. Under the Stablecoins Ordinance (Cap. 656), HKMA on 10 April 2026 granted the first two fiat-referenced-stablecoin issuer licences, to Anchorpoint Financial Limited and to HSBC, selected from a field of thirty-six applicants. The ratio itself is the finding: HKMA had thirty-six firms seeking entry and cleared two, one of them a globally systemic bank. That is not a permissive on-ramp; it is a curated perimeter, and the curation is doing the compliance work that an open licensing regime would otherwise have to do through post-hoc supervision.

HKMA followed the initial licensing with guidance on 27 May 2026 that relaxed certain requirements for licensed intermediaries dealing in what the regime designates as Relevant Stablecoins. Read together, the two dates describe a sequence rather than a single event: tight entry, then measured loosening of downstream distribution rules once the issuer population was small and known. For Hong Kong as the subject jurisdiction, this is the digital-asset story that matters this cycle, independent of the broader structural conversation occurring elsewhere in the region around casino- and scam-linked laundering typologies.

Other Developments

A tightly bounded first cohort defines the near-term exposure surface. With only two authorised issuers in a market of thirty-six applicants, Hong Kong's stablecoin-linked money-laundering exposure this cycle is concentrated rather than diffuse. A bank-anchored issuer (HSBC) inside the perimeter changes the risk profile from what a purely non-bank fintech cohort would present, because it inherits an existing correspondent-banking AML/CFT control stack rather than building one from a licensing baseline.

The regulator has signalled iteration, not finality. The 27 May 2026 guidance relaxing requirements for intermediaries dealing in Relevant Stablecoins indicates HKMA is treating the licensing decision as a starting configuration subject to adjustment as the first cohort's operational performance becomes observable, rather than as a settled endpoint.

Cross-Monitor Connections

A bank-anchored stablecoin issuer inside a curated licensing perimeter is a technology and market-structure signal as much as a financial-integrity one: the same architecture that narrows AML/CFT exposure this cycle also concentrates operational and settlement dependency on two entities, a pattern of interest to monitors tracking compliance-technology infrastructure and platform concentration risk more broadly. The scam-compound and casino-linked laundering pressure building elsewhere in the region operates on a materially different rail-set than fiat-referenced stablecoins, and this cycle's substrate does not support drawing a direct flow between the two; any connection would be architectural analogy, not observed linkage.

Outlook

The near-term question for Hong Kong's digital-asset perimeter is whether HKMA expands the issuer cohort once operational performance data from Anchorpoint Financial and HSBC accumulates, or holds the line at two issuers pending a longer observation window. As scheduled, HKMA has not committed to a fixed timetable for further approvals, so the trajectory remains a curated-expansion posture rather than an open one for now.

21 Sep 2026 · fim-2026-09-14

Lead Signal

A US Treasury and Department of Justice Scam Center Strike Force action sanctioning a sitting Cambodian senator alongside 28 other people and companies marks the sharpest escalation yet in the international response to Cambodias scam-compound economy. The designation builds directly on the 2025 action against the Prince Group conglomerate, which US authorities have already treated as a transnational criminal organisation. The elevation from a corporate-network designation to sanctions against a serving national legislator signals that enforcement now reads the scam-compound infrastructure as reaching into, rather than merely tolerated by, elements of the Cambodian state. Confidence in the underlying facts is assessed as Probable: the reporting is currently anchored to a single T3 press account, with the formal OFAC designation notice not yet retrieved as a Tier 1 primary anchor this cycle.

Other Developments

A parallel crypto-laundering nexus has surfaced in the same jurisdiction. Cambodian and US anti-narcotics authorities have uncovered a cryptocurrency-based laundering network moving proceeds for Mexicos Sinaloa Cartel through Cambodia, extending the countrys scam-compound financial architecture beyond regional cyberfraud into narco-finance for a non-regional cartel. This is assessed as Probable on the strength of two-country official quotes carried by a single press outlet; a Tier 1 anchor has not yet been retrieved. The regions typology base is moving toward a refresh. The Asia/Pacific Group on Money Laundering 2025 Yearly Typologies Report is progressing toward formal adoption, updating the case-study material APG member jurisdictions and financial institutions draw on for virtual-asset and VASP risk assessment. This is a Tier 1 primary development, though the instruments status remains pre-adoption and is tracked on the regulatory horizon rather than as a completed change. The FATF grey list moved this cycle, though not on an APAC axis. The June 2026 FATF Plenary added Bosnia and Herzegovina and Iraq to the grey list and removed Algeria and Namibia; Myanmar remains on the black list, the one APAC-relevant fixture in this outcome, confirmed at Tier 1.

Cross-Monitor Connections

The Cambodian sanctions action and the crypto-laundering nexus both touch enabler-jurisdiction dynamics that WDM (state-capture) analysis would read as a legitimate-economy cover mechanism, and both intersect with SCEM territory insofar as narco-finance proceeds are conflict-adjacent revenue for a foreign criminal organisation now routed through Southeast Asian infrastructure. The crypto-laundering finding also has direct relevance to any WPM assessment of Cambodia-linked payment corridors, though that reading belongs to WPM, not to this brief.

Outlook

The near-term signal to watch is whether the OFAC designation notice becomes available as a primary anchor, which would move the senator-sanctions finding from Probable to a higher-confidence tier and would likely carry granular detail on the sanctioned entities beneficial-ownership structures. The crypto-narco nexus bears watching for whether US or Cambodian authorities disclose further counterparties, which would test whether Cambodias scam-compound infrastructure is becoming a durable service line for non-regional organised crime rather than an incidental crossover. The APG typologies report is worth tracking toward its Q4 2026 adoption date, as it will refresh the evidentiary base APAC supervisors use to assess VASP risk across a bloc that otherwise has no unified AML/CTF instrument.

2 Sep 2026 · fim-2026-09-02

Lead Signal

The Asia-Pacific financial-integrity picture this cycle is defined by a widening gap between formal FATF standing and underlying illicit-finance architecture. Papua New Guinea was added to the FATF grey list at the 13 February 2026 plenary, a decade after its 2016 removal, following the 2024 Asia-Pacific Group mutual evaluation that found effectiveness failures despite prior technical-compliance progress. Lao PDR was retained on the grey list through the 19 June 2026 plenary statement, with FATF naming inadequate risk-based supervision of casinos, banks and reporting entities operating in special economic zones, alongside weak financial-intelligence dissemination, as the unresolved core deficiency. Both cases point to the same structural weakness across mainland Southeast Asia and the Pacific: supervisory capacity has not kept pace with the sectors, casinos, SEZ-based banking, and cross-border gaming, that generate the greatest laundering exposure.

That gap is most visible in Cambodia, which exited the grey list in 2023 but is now producing its own internal warning signs. The National Bank of Cambodia's Governor Chea Serey publicly warned in January 2026 that continued scam-centre and illegal-gambling activity risks a re-listing, an unusually candid admission from a sitting central-bank head. Weeks later, in April 2026, OFAC designated sitting senator Kok An and associated companies, alleging that his casino and hospitality properties housed scam compounds generating rental income tied to human-trafficking and cyber-fraud operations. Taken together, a formally FATF-clean jurisdiction is now generating a sanctions designation against a sitting parliamentarian and a public relapse warning from its own regulator within the same reporting window.

Other Developments

Macau's junket architecture remains structurally unchanged. The Gaming Inspection and Coordination Bureau has held the licensed-junket ceiling at 50 for 2026, with only 29 currently active, continuing the post-2022 gaming-law restructure that capped junket commission at 1.25% of rolling turnover since January 2023 and reserved credit issuance to concessionaires since August 2024. These restrictions have narrowed junkets' historic role as an opaque intermediary layer between VIP gaming revenue and beneficial owners, but junket beneficial-ownership opacity itself persists as a standing structural condition rather than a resolved one.

Myanmar's extractive economy continues to fund the junta despite sanctions. Independent analysis places Myanmar forest-product exports at over US$1.45 billion since the 2021 coup, rerouted through China, India and Thailand despite Western sanctions targeting the state timber enterprise. Jade and rare-earth concessions concentrated in Kachin State function as a parallel financial lifeline for the junta. This financing architecture now sits alongside a newly signed five-year Myanmar-Russia military-cooperation agreement, reinforcing the read that conflict-resource revenue and deepening state-to-state military ties are mutually reinforcing rather than separate developments.

Hong Kong's stablecoin market opened narrowly. The Hong Kong Monetary Authority granted the first two issuer licences under the Stablecoins Ordinance on 10 April 2026, to Anchorpoint Financial Limited, a joint venture of Standard Chartered Hong Kong, HKT and Animoca Brands, and to HSBC. Only two licences were granted out of 36 formal applications, confirming a curated approach that concentrates initial issuance capacity among bank-affiliated incumbents rather than opening the market broadly.

Cross-Monitor Connections

The Hong Kong stablecoin licensing decision is a shared data point with both the World Payments Monitor and the Crypto monitor, each of which tracks the same HKMA action from a market-structure and licensing-regime lens respectively; this brief treats it strictly as a financial-integrity signal about firm-type concentration and AML exposure among the newly licensed bank-affiliated issuers. Myanmar's conflict-resource financing connects to state-capture and extractive-industry integrity concerns that a conflict-finance-focused monitor would track from a commodity-flow angle, while the Cambodia and Macau signals both intersect with enabler-jurisdiction dynamics that a state-capture-focused monitor would read as evidence of institutional capture by casino and SEZ interests rather than pure financial-crime opportunism.

Outlook

The near-term trajectory across the bloc is one of formal-status divergence from substantive risk. PNG's grey-listing and Lao PDR's retention are unlikely to reverse quickly given the structural nature of the supervisory deficiencies named by FATF, particularly casino and SEZ oversight. Cambodia's position is the one to watch most closely: a second FATF grey-listing following an OFAC designation against a sitting senator would be a materially different signal than the country's current formally-clean status suggests, and the central bank governor's own public warning lowers the bar for that outcome. Macau's junket cap and commission restrictions look likely to hold through 2026 as durable structural constraints rather than temporary measures, though the persistent opacity around junket beneficial ownership remains an unresolved gap. Hong Kong's curated stablecoin licensing approach is likely to extend under the pending AMLO amendment covering VA dealing, custody, advisory and asset-management services, expected before the Legislative Council in 2026 with no grandfathering proposed.

2 Sep 2026 · fim-2026-08-05

Lead Signal

On 23 April 2026, the United States Treasury Office of Foreign Assets Control designated sitting Cambodian Senator Kok An, 28 associated individuals and entities, and a Cambodian bank, cutting the network off from the United States financial system over its role housing trafficking-enabled cyber-fraud compounds. The designation reaches beyond the individual-operator takedowns that characterised prior Southeast Asian scam-compound enforcement, toward the political economy - a sitting legislator, a domestic bank, a casino-hospitality conglomerate - that allows the compound economy to function at scale. Confidence is assessed: the designation is corroborated by tier-2 investigative reporting from Chainalysis, but no direct treasury.gov primary citation was retrieved this cycle, a gap the interpreter flagged explicitly.

The escalation is sharpened by a parallel, also-assessed finding that the Cambodian gaming regulator, the Commercial Gambling Management Commission, reviewed and approved business plans for casino properties documented as trafficking-linked - Crown Poipet, Crown Bavet, Crown Chrey Thum, and Majestic Sihanoukville - between December 2025 and January 2026, during the same window in which Phnom Penh publicised a nationwide crackdown. Read together, the two developments do not describe a single enforcement event; they describe a live divergence between an escalating foreign sanctioning posture and continued domestic approval practice - the structural signature of a capacity-versus-choice enabler gap rather than a simple enforcement lag.

Other Developments

A beneficial-ownership penalty regime tightened in Singapore with the 6 May 2026 commencement of the Companies and LLP (Amendment) Act 2025, which raises penalties for failures to maintain or update the Register of Registrable Controllers and the nominee-director and nominee-shareholder registers, while expanding enforcement powers held by the Accounting and Corporate Regulatory Authority. The underlying Register of Registrable Controllers remains non-public, so the reform raises the cost of non-compliance without extending third-party verification capacity.

Jade and rare-earth extraction in Kachin State, Myanmar, continued to fund both sides of the conflict, with revenue supporting both the military junta and the Kachin Independence Organisation, transiting informally into China outside formal banking channels. This is a standing pattern rather than a new instrument this cycle, corroborated across two tier-3 and tier-4 sources.

DPRK-linked Lazarus Group sustained a record 2026 crypto-theft pace, responsible for an assessed 76 percent of global cryptocurrency hack value through April 2026, with cumulative DPRK crypto theft now exceeding an estimated 6.75 billion dollars funding the proliferation programme. Existing OFAC SDN designations targeting DPRK cyber actors have not visibly slowed theft velocity.

The Monetary Authority of Singapore revoked the Major Payment Institution Licence held by Bsquared Technology Pte Ltd, effective 14 May 2026, over false statements and governance, outsourcing, and conflict-of-interest breaches - a high-confidence tier-1 primary enforcement action.

FATF grey-list composition shifted twice this half-year: the February 2026 plenary added Kuwait and Papua New Guinea, and the June 2026 plenary added Iraq and Bosnia and Herzegovina while removing Namibia. Laos and Vietnam remain listed with no de-listing milestone, and the blacklist has been unchanged since Myanmar was added in October 2022.

FinCEN extended its cartel trade-based money-laundering advisory coverage on 30 June 2026, adding fiscal fuel-theft and tax-evasion schemes run by Cartel Jalisco Nueva Generacion and other transnational criminal organisations across the southern border, corroborated by two tier-1 FinCEN primary documents.

The Federal Court of Australia ordered civil penalties against Castra Licensee Pty Ltd (AUD 50,000 plus AUD 15,000 costs) and Princeton Securities (NSW) Pty Ltd (AUD 45,000 plus AUD 5,000 costs) on 26 May 2026 for AML/CTF Act contraventions, a tier-1 primary enforcement record.

The Hong Kong Monetary Authority granted the first two stablecoin issuer licences in the territory - to HSBC and to the Anchorpoint joint venture - on 10 April 2026 under the Stablecoins Ordinance, a tier-1 regulatory action expanding the AML/CFT-supervised perimeter for Hong Kong dollar referenced stablecoins.

Cross-Monitor Connections

The Cambodia finding carries a direct WDM state-capture dimension: a sitting senator included in a sanctions designation, set against continued domestic licensing of trafficking-linked properties by the same jurisdiction, describes financial-architecture capture rather than a mere enforcement gap, and should route to WDM for institutional-capture assessment alongside FIM enabler-jurisdiction tracking. Jade and rare-earth extraction in Myanmar is simultaneously an SCEM conflict-finance signal, with revenue funding both junta and Kachin Independence Organisation operations, and an ERM extractive-industry signal, with informal cross-border trade evading formal banking channels; both readings trace to the same underlying finding and should be read jointly rather than as separate developments. Sustained DPRK crypto-theft intersects FCW territory insofar as laundered proceeds and the infrastructure that moves them can also obscure information-operations funding channels, though this cycle evidence speaks only to the financial-crime dimension. Finally, the absence of any European Union or United Kingdom mirroring of the OFAC Cambodia designation is itself a GMM-relevant sanctions-divergence signal - unilateral United States action, unmatched to date by Brussels or London, that bears on how sanctions propagate as a macro variable across allied jurisdictions.

Outlook

Four items carry into the next cycle as explicit watch items: whether the European Union or United Kingdom moves to mirror the OFAC designation of the Kok An network; whether the Hong Kong Monetary Authority grants further stablecoin issuer licences from its pending application pool; how the October 2026 FATF plenary treats grey-list composition, the next scheduled review point; and whether any international response follows the Amnesty International documentation of continued CGMC casino approvals during the Cambodian crackdown window. None of these is a prediction; each is a specific juncture at which this cycle assessed findings would either harden into confirmed structural shifts or resolve as isolated events. The recurring pattern across the cycle - unilateral escalation unmatched by allied action, and announced enforcement posture diverging from regulatory practice on the ground - is itself the structural finding most likely to persist into subsequent cycles regardless of how any single watch item resolves.

Domain intelligence (D1–D8)

D1 Sanctions

no_changestanding position

Sanctions

The sanctions architecture this cycle is dominated by a single large unilateral action: the US Treasury's Office of Foreign Assets Control designated 56 individuals and entities tied to the Sinaloa Cartel and Tren de Aragua, with reported links extending to former Mexican officials. The scale of the wave, 56 names in one action, signals an escalating US posture toward cartel-linked financial networks and their alleged political connections inside Mexico, and it arrives against the backdrop of Mexico's ongoing Financial Action Task Force mutual evaluation process. What is analytically notable is the absence, at least as far as this cycle's research reached, of a matching autonomous listing by the European Union or United Kingdom. A unilateral US designation of this size, unmatched elsewhere, is itself a data point about where enforcement appetite and evidentiary thresholds currently diverge across the major sanctions-issuing jurisdictions, and it is the kind of divergence that firms operating across US and EU/UK compliance perimeters need to track rather than assume is uniform.

Continue reading

A second, structurally distinct sanctions-adjacent signal comes from Macau, where gaming-related crime rose 12.3 percent year-on-year in the first nine months of 2026, and unlicensed currency exchange for gambling under Law 20/2024 rose 11.9 percent to 404 cases, the second-largest gaming-crime category recorded. This is not a sanctions designation in the conventional sense, but it sits inside the same broad sanctions-and-enforcement architecture lens because it documents a persistent, structural enforcement gap around informal currency conversion serving a specific, geographically concentrated gambling sector. The trend line, rising for a second consecutive measurement period according to the data available, suggests the current enforcement posture against unlicensed exchange activity is not yet closing the gap, which is itself a form of signal about the durability of the underlying typology rather than a one-off incident.

Financial institutions and payment intermediaries with exposure to Mexican correspondent relationships, Macau-linked gambling-sector payment flows, or cartel-adjacent trade corridors should treat both developments as reinforcing rather than independent signals: a large formal sanctions action on one side of the ledger, and a stubborn informal-exchange enforcement gap on the other, both pointing toward the same broader theme of cross-border illicit finance proving resistant to single-jurisdiction measures.

Outlook

The most immediate marker to watch is whether the European Union or United Kingdom move toward an autonomous listing that aligns with the OFAC designation wave against Sinaloa Cartel-linked actors; absent that, the unilateral-US-only pattern looks likely to persist into the next reporting period. On the Macau side, the trajectory of unlicensed currency-exchange cases through the remainder of 2026 will indicate whether recently strengthened enforcement measures under Law 20/2024 are beginning to bite, or whether the rising caseload reflects base-rate growth in detection and reporting rather than in the underlying activity itself. Either reading should be treated as provisional until a further reporting period's data becomes available.

Cumulative analysis

Sanctions

The most significant sanctions development available to this cycle sanctions-architecture read is the designation, in late April 2026, of Cambodian senator Kok An together with 28 associated individuals and entities and a Cambodian bank by the United States Office of Foreign Assets Control, for housing trafficking-enabled cyber-fraud compounds (fim-2026-W32-001). The scale of the action, both in the number of named targets and in the seniority of the lead designee, marks an escalation beyond the individual-operator and single-compound takedowns that have characterised much of the prior enforcement record against Southeast Asian scam centres. Where earlier actions targeted operators and facilities, this designation reaches into the political economy that appears, on the evidence available, to have hosted and protected that activity, cutting the named targets off from the US financial system rather than simply naming individual fraud operations.

The confidence assigned to this finding is Assessed rather than High, and that distinction matters architecturally as well as evidentially. The finding was sourced through Chainalysis reporting rather than a direct Treasury or OFAC primary publication, and no treasury.gov press release was retrieved this cycle to corroborate the scale or composition of the designation list directly. This is a sourcing gap rather than a substantive doubt about the underlying action, but it caps the confidence tier appropriately until a primary-source anchor is available. A separate, single tier-four report of a possible Treasury delisting action affecting Myanmar or North Korea-linked parties could not be confirmed against any primary OFAC or Treasury document this cycle and is flagged here only as an unconfirmed item requiring verification, not as a finding.

The designation also named a Cambodian bank alongside the individual and corporate targets, a detail that carries architecture-level weight beyond the trafficking-compound story itself. Designating a bank rather than only individual operators and shell entities signals that the sanctioning authority assessed the banking relationship itself, not merely downstream shell structures, as material to the network ability to move proceeds through formal channels. For any correspondent-banking relationship that touches the designated bank, the practical effect is immediate: US correspondent access is cut regardless of whether the counterparty institution is separately investigated. This is the architecture-over-incident distinction that matters for this reading: the significance of the April 2026 action lies less in the trafficking-compound narrative itself, which has been reported for several cycles, and more in the structural choice to reach a licensed financial institution directly.

A further architectural question this cycle is whether the sanctions instrument used against Cambodia will be mirrored elsewhere. As of this cycle, no European Union Council action or United Kingdom Office of Financial Sanctions Implementation designation has followed the US action, consistent with a standing pattern of US-led sanctions divergence rather than coordinated multilateral designation. Where a designation of this scale and seniority is not mirrored, the practical effect on the designated network is narrower than a fully coordinated multilateral action would produce, since non-US financial channels and counterparties outside US jurisdiction remain, in principle, less directly constrained. This divergence is itself a standing structural feature of the current sanctions environment rather than a one-off gap, and it is the primary variable to track into the next cycle. This finding sits predominantly in the anti-money-laundering and human-trafficking financial-crime space rather than the counter-terrorist-financing or counter-proliferation-financing pillars; no CTF-specific sanctions signal surfaced in the material reaching this cycle report, a concentration noted deliberately rather than assumed.

Outlook

The Cambodia designation will be tested over coming cycles by two separate questions: whether the European Union or the United Kingdom move to mirror it, and whether a direct primary-source OFAC or Treasury document becomes available to raise the confidence tier on the underlying finding from Assessed toward High. Absent either development, the sanctions-architecture read for this cycle is that the United States has escalated unilaterally against a political economy enabling trafficking-linked cyber-fraud compounds, while the broader multilateral sanctions net around that political economy remains, for now, unchanged.

domain_sub_briefs · D1 · Cumulative analysis
Standing baseline position

OFAC designated 4 individuals and 11 entities tied to Cartel del Noreste on 13 Oct 2026 for laundering proceeds via quarter-horse racing and construction/fuel front companies in Nuevo León, Mexico.

Periodic updates (6)
25 Oct 2026 · fim-2026-10-25

Sanctions

The sanctions architecture is dominated by a single large unilateral action: the US Treasury's Office of Foreign Assets Control designated 56 individuals and entities tied to the Sinaloa Cartel and Tren de Aragua, with reported links extending to former Mexican officials. The scale of the wave, 56 names in one action, signals an escalating US posture toward cartel-linked financial networks and their alleged political connections inside Mexico, and it arrives against the backdrop of Mexico's ongoing Financial Action Task Force mutual evaluation process. What is analytically notable is the absence, at least as far as the research reached, of a matching autonomous listing by the European Union or United Kingdom. A unilateral US designation of this size, unmatched elsewhere, is itself a data point about where enforcement appetite and evidentiary thresholds currently diverge across the major sanctions-issuing jurisdictions, and it is the kind of divergence that firms operating across US and EU/UK compliance perimeters need to track rather than assume is uniform.

A second, structurally distinct sanctions-adjacent signal comes from Macau, where gaming-related crime rose 12.3 percent year-on-year in the first nine months of 2026, and unlicensed currency exchange for gambling under Law 20/2024 rose 11.9 percent to 404 cases, the second-largest gaming-crime category recorded. This is not a sanctions designation in the conventional sense, but it sits inside the same broad sanctions-and-enforcement architecture lens because it documents a persistent, structural enforcement gap around informal currency conversion serving a specific, geographically concentrated gambling sector. The trend line, rising for a second consecutive measurement period according to the data available, suggests the current enforcement posture against unlicensed exchange activity is not yet closing the gap, which is itself a form of signal about the durability of the underlying typology rather than a one-off incident.

Financial institutions and payment intermediaries with exposure to Mexican correspondent relationships, Macau-linked gambling-sector payment flows, or cartel-adjacent trade corridors should treat both developments as reinforcing rather than independent signals: a large formal sanctions action on one side of the ledger, and a stubborn informal-exchange enforcement gap on the other, both pointing toward the same broader theme of cross-border illicit finance proving resistant to single-jurisdiction measures.

Outlook

The most immediate marker to watch is whether the European Union or United Kingdom move toward an autonomous listing that aligns with the OFAC designation wave against Sinaloa Cartel-linked actors; absent that, the unilateral-US-only pattern looks likely to persist into the next reporting period. On the Macau side, the trajectory of unlicensed currency-exchange cases through the remainder of 2026 will indicate whether recently strengthened enforcement measures under Law 20/2024 are beginning to bite, or whether the rising caseload reflects base-rate growth in detection and reporting rather than in the underlying activity itself. Either reading should be treated as provisional until a further reporting period's data becomes available.

18 Oct 2026 · fim-2026-10-18

Sanctions

The designation of a Cartel del Noreste-linked network by OFAC illustrates sanctions architecture reaching into ostensibly legitimate sectors used as laundering fronts. Four individuals and eleven entities tied to the cartel were designated under EO 14059 and EO 13224 for laundering proceeds through quarter-horse racing and construction and fuel front companies based in Nuevo León. The designation does not reach Asia-Pacific jurisdictions directly, but the mechanism it targets, legitimate-sector commercial fronts absorbing illicit proceeds, is a pattern regional enabler jurisdictions and gaming-adjacent sectors have repeatedly demonstrated, and is read here as a sanctions-architecture reference point for the bound scope rather than a regional finding in itself. No EU or UK parallel designation was observed alongside the OFAC action within this cycle.

The regional sanctions picture otherwise shows no new designation activity directly touching the bound Asia-Pacific scope this cycle. Laos's continued FATF grey-list status, addressed more fully under enabler-jurisdiction coverage, functions as a standing due-diligence trigger rather than a sanctions measure in the FATF-call-for-action sense, and should not be conflated with the comprehensive-sanctions or sectoral-sanctions categories reserved for UN, EU, UK or US embargo action.

Outlook

Whether the Cartel del Noreste designation prompts parallel measures from other jurisdictions, or surfaces further front-company typologies with regional analogues, remains to be seen. No sanctions-specific developments are pending within the bound Asia-Pacific scope at this time.

4 Oct 2026 · fim-2026-10-04

Sanctions

Cambodia's revocation of 91 casino licences in April 2026, carried out in the course of a scam-centre crackdown, is read in the Sanctions domain as an enforcement-adjacent architecture move rather than a change to any designated-entity or embargo regime. The assessment, held at probable confidence, is that the action forms part of a sustained effort by Cambodian authorities to avoid a third Financial Action Task Force grey-list placement ahead of the country's 2026 mutual evaluation. This framing matters for the Sanctions lens because mass licence revocation in a cash- and gambling-intensive sector functions as a structural signal of regulatory intent distinct from a sanctions designation: it withdraws operating authority from a broad swathe of the sector rather than naming specific persons or entities, and it does so pre-emptively, ahead of an external assessment outcome rather than in response to one. No Hong Kong or Macau sanctions-architecture development was identified this cycle; the gazetted calendar from the Financial Action Task Force and the Asia/Pacific Group on Money Laundering confirms Hong Kong's current standing, with the next mutual-evaluation on-site not due until November 2029 and no re-rating expected in the interim, at confirmed confidence.

The absence of enforcement action in Hong Kong this cycle, set against a stable confirmed re-evaluation horizon five years out, is itself a data point: a jurisdiction already inside the mutual-evaluation cycle and not facing an imminent reassessment has less structural incentive to generate visible sanctions-adjacent enforcement activity in the near term, in contrast to Cambodia's position ahead of a 2026 evaluation where the incentive to demonstrate action is immediate. The two postures sit at opposite points of the same Financial Action Task Force assessment calendar and illustrate how enforcement volume can track evaluation proximity as much as underlying risk.

Outlook

The near-term signal to watch in the Sanctions domain is whether Cambodia's 2026 Financial Action Task Force evaluation outcome validates the licence-revocation strategy or results in grey-list placement regardless. Hong Kong's sanctions-architecture posture is not expected to see material movement before its 2029 on-site evaluation absent an unscheduled development; the current calendar, confirmed by the Financial Action Task Force and the Asia/Pacific Group on Money Laundering jointly, gives no indication of an earlier re-rating.

21 Sep 2026 · fim-2026-09-14

Sanctions Architecture and Evasion

The most consequential sanctions-architecture development touching APAC this cycle is the US Treasury/DOJ Scam Center Strike Forces action against a sitting Cambodian senator, together with 28 other people and companies, for operating scam-compound finance infrastructure. This action builds on the 2025 designation of the Prince Group conglomerate as a transnational criminal organisation, and its structural significance lies less in the volume of entities newly designated than in the identity of one of them. Sanctioning a serving national legislator moves the enforcement narrative from state tolerance of scam-compound activity toward an assessment of plausible state-adjacent capture of the underlying illicit-finance infrastructure. That is an architectural claim, not an incident: it implies the scam-compound economy has developed channels into formal political power in Cambodia, rather than operating purely at arms length from it.

The evidentiary basis for this finding is currently thin by sourcing standard even where the underlying facts are directionally clear. The reporting rests on a single Tier 3 press account, and the formal OFAC designation notice, which would normally serve as the Tier 1 anchor for a sanctions action of this kind, has not yet been retrieved this cycle. Confidence is accordingly held at Probable rather than Confirmed. This is a reporting-lag question rather than a substantive doubt about whether the action occurred; the expectation is that the primary designation notice will surface within the next research cycle and should carry granular detail on beneficial-ownership structures behind the sanctioned companies, which would sharpen the enabler-jurisdiction reading of this development considerably.

The Prince Group network illustrates a pattern increasingly familiar in Southeast Asian financial-crime architecture: legitimate-economy sectors, in this case Cambodian real estate, banking and aviation, providing cover for proceeds generated by scam-compound operations. That dimension of the finding is filed separately as an enabler-jurisdiction question, but it is worth noting here that the sanctions action and the enabler pattern are two readings of the same underlying evidence, not two separate developments. Sanctions architecture in this instance is doing double duty: it is both a punitive instrument against named individuals and companies, and a diagnostic revealing how deeply scam-compound proceeds have been absorbed into ordinary Cambodian commercial life.

Separately, the FATF grey list moved this cycle at the June 2026 Plenary, with Bosnia and Herzegovina and Iraq added and Algeria and Namibia removed. Myanmar remains on the black list. Neither addition nor removal is APAC-specific, but Myanmars continued black-list status is the one FATF-list fixture with direct bearing on this jurisdiction, and it sits alongside persistent reporting of scam-compound activity there despite periodic crackdown announcements by the military government. This is confirmed at Tier 1 via the FATF plenary outcomes publication itself, in contrast to the Probable-confidence Cambodian material.

Taken together, these two threads point toward a sanctions-architecture picture in mainland Southeast Asia that is deepening rather than static: enforcement is reaching further up the chain of formal authority in Cambodia, while Myanmar remains structurally unaddressed on the black list despite the passage of time since its original listing.

Outlook

The single most useful confirming signal to watch for is the OFAC designation notice itself, which would upgrade this finding from Probable to a firmer confidence tier and likely reveal additional entities or beneficial-ownership detail not yet visible in press reporting. Whether the Cambodian government responds to the senator sanctions with any formal action of its own, rather than the pattern of periodic crackdown announcements seen around Myanmar and prior Cambodian scam-compound enforcement, would be a further signal worth tracking, as would any indication of whether other regional legislators face similar scrutiny. Illustratively, and only as an orientation exercise rather than a forecast, a jurisdiction facing sanctions against a sitting legislator over scam-compound finance might see a period of muted public response followed by narrowly targeted domestic enforcement against lower-tier operators while senior political exposure remains unaddressed; this pattern, if it emerged, would itself be a further data point on the state-capture question rather than evidence that the underlying issue has been resolved.

2 Sep 2026 · fim-2026-09-02

Sanctions Architecture and Evasion

Cambodia furnishes this cycle's clearest sanctions-architecture signal in the APAC bloc. OFAC's April 2026 designation of sitting senator Kok An and associated companies alleges that casino and hospitality properties under his control housed scam compounds generating rental income tied to human-trafficking and cyber-fraud networks. This is a US-only autonomous designation; no parallel EU or UK listing was identified this cycle, underscoring the continuing divergence in how Western sanctions regimes treat Southeast Asian scam-compound financiers. The designation lands against a backdrop of formal FATF cleanliness: Cambodia exited the grey list in 2023, and the disjunction between that formal status and a sanctions action against a sitting legislator is itself the analytically significant finding, more so than the designation in isolation. The National Bank of Cambodia's own governor, Chea Serey, publicly flagged in January 2026 that continued scam-centre and illegal-gambling activity risks a return to grey-list status, which is a notable instance of a regulator's leadership acknowledging relapse risk ahead of any formal FATF action.

Myanmar presents the bloc's other significant sanctions-architecture case, though of a different character: state-level rather than individual. The junta's continuing access to conflict-resource revenue, more than US$1.45 billion in forest-product exports since the 2021 coup rerouted through China, India and Thailand despite sanctions on the state timber enterprise, demonstrates the limits of Western sanctions architecture when a designated regime retains regional trade partners willing to absorb rerouted commodity flows. The newly signed five-year Myanmar-Russia military-cooperation pact compounds this: a sanctioned regime is deepening bilateral state-to-state ties precisely because its sanctions-evasion revenue base remains functional. Architecturally, this is a case where the absence of enforcement leverage over transit jurisdictions, rather than any weakness in the sanctions instrument itself, is the binding constraint.

The pattern across both cases is one of resilient evasion architecture outpacing the reach of the sanctioning authority. In Cambodia, that resilience is enabled by weak domestic institutional will notwithstanding formal FATF compliance; in Myanmar, it is enabled by regional trade partners uninterested in enforcing a sanctions regime they did not impose. Both cases illustrate that a single designation, however well-evidenced, does not by itself dismantle the underlying financial architecture it targets, particularly where that architecture is embedded in politically protected domestic actors or sustained by third-country commercial relationships.

Outlook

The Cambodia case bears close monitoring for a possible second grey-listing; a re-listing following a sitting senator's OFAC designation would materially change how the jurisdiction's overall risk profile is read relative to its current formally-clean status. Confidence in the underlying Kok An designation claim is capped this cycle at Assessed pending retrieval of the primary OFAC notice, a gap that should close as more primary-source material becomes available. Myanmar's trajectory is unlikely to shift materially in the near term absent a change in regional transit-jurisdiction posture; the Russia cooperation pact suggests the junta's financing architecture is, if anything, becoming more entrenched rather than less.

2 Sep 2026 · fim-2026-08-05

Sanctions Architecture and Evasion

The most consequential sanctions-architecture development this cycle is the 23 April 2026 designation by the United States Treasury Office of Foreign Assets Control of sitting Cambodian Senator Kok An, 28 associated individuals and entities, and a Cambodian bank, severing the network from the United States financial system for its role housing trafficking-enabled cyber-fraud compounds. Read as sanctions architecture rather than as an isolated designation, the action moves beyond the individual-operator takedowns that characterised prior enforcement against the Southeast Asian scam-compound economy, toward the political economy - a sitting legislator and a domestic bank - that permits the compounds to operate at scale. Confidence is assessed: the designation is corroborated by tier-2 investigative reporting from Chainalysis, but no direct treasury.gov primary citation was retrieved this cycle, a gap that caps confidence below high pending confirmation.

The architecture significance of the designation is amplified, not diminished, by the absence of matching action from the European Union or the United Kingdom to date, a pattern consistent with the standing sanctions-regime-divergence tracker, which records the Cambodia action as unilateral United States action unmatched by an EU Council or OFSI step this cycle. Divergence of this kind is itself an evasion-relevant structural fact: intermediaries operating across jurisdictions can exploit gaps between differently triggered sanctions regimes, and the absence of allied mirroring, whatever its cause, widens rather than narrows the operating space available to the remaining, non-designated components of the network.

The interpreter jurisdiction-risk assessment for Cambodia records this cycle combined signal, the senator-level designation alongside continued CGMC casino approvals, as an increasing risk direction with a mixed enforcement-versus-enablement characterisation and a structural rather than episodic classification: the pattern reflects an entrenched dynamic in Cambodian political economy rather than a one-off event. Under an architecture-over-incident lens, this structural classification means the Kok An designation should be read as one data point in an ongoing structural condition, not as a single resolved enforcement action. The lead signal this cycle explicitly frames the finding as cross-domain between sanctions architecture and enabler-jurisdiction dynamics; the corresponding D3 sub-brief in this series addresses the enabler-jurisdiction reading of the same underlying finding in full, and the two readings should be treated as complementary rather than duplicative.

Elsewhere in the sanctions architecture this cycle, FATF list-composition activity continued at its normal half-yearly cadence rather than through any Cambodia-specific channel: the February 2026 plenary added Kuwait and Papua New Guinea to the grey list, and the June 2026 plenary added Iraq and Bosnia and Herzegovina while removing Namibia. Laos and Vietnam remain listed with no de-listing milestone, and the blacklist has been unchanged since the addition of Myanmar in October 2022. This is high-confidence, tier-1-sourced status-quo information rather than a new instrument, but it forms the backdrop against which any future Cambodia-specific FATF action, a live watch item for the October 2026 plenary, would be read.

The gaps register for this cycle records two additional items relevant to sanctions architecture: an unconfirmed tier-4 report of a United States Treasury delisting action affecting Myanmar and North Korea linked parties could not be corroborated against a primary OFAC or Treasury document, and the United Arab Emirates over- and under-invoicing trade-based money-laundering corridor received no dedicated search this cycle, leaving a structural coverage gap relative to the depth applied to the Latin American corridor. A further mapping gap is noted in the obligation-reference fields attached to several of this cycle sanctions-adjacent claims, which remain unpopulated pending confirmation or backfill in a subsequent cycle. Neither gap changes this cycle assessed findings, but both bound the confidence with which the standing sanctions-architecture picture can be read as complete.

Outlook

The principal watch item for sanctions architecture is whether the European Union or United Kingdom moves to mirror the OFAC designation of the Kok An network in the coming cycle; continued absence of mirroring beyond the current cycle would harden the divergence finding from an assessed, single-cycle observation into a more structural pattern. The October 2026 FATF plenary is the next scheduled point at which grey-list composition, and potentially Cambodian listing status, could move. This is illustrative orientation on what to monitor, not a prediction of outcome; whether the Cambodian political economy draws further multilateral sanctions attention, or whether the current unilateral posture persists, depends on developments outside this cycle evidence base.

D2 Beneficial Ownership

no_changestanding position

Beneficial Ownership

Singapore carries the only concrete beneficial-ownership development reaching this cycle report: the Companies and LLP (Amendment) Act 2025 commenced on 6 May 2026, raising penalties for failures to maintain or update three registers held by the Accounting and Corporate Regulatory Authority, namely the Register of Registrable Controllers, the Register of Nominee Directors and the Register of Nominee Shareholders, and expanding the Authority enforcement powers more broadly (fim-2026-W32-003). Two independent tier-four vendor sources corroborate the commencement date and the substance of the penalty increase, which supports Assessed rather than High confidence pending a direct government or legislative primary-source anchor. The amendment applies across the cross-sector population of Singapore-incorporated entities, with particular relevance for corporate and fund structures that rely on nominee arrangements, the customer typologies most directly implicated by the three registers now carrying materially higher penalties.

Continue reading

The limitation that qualifies this tightening is structural rather than procedural: the Register of Registrable Controllers itself remains non-public. Raising the penalty for failing to maintain a register that outside parties, including counterparties conducting their own due diligence and, in principle, foreign authorities and financial institutions relying on Singapore corporate information, cannot themselves inspect, closes one gap while leaving another in place. Higher penalties increase the incentive for a Singapore entity to keep its own register accurate, but they do not create a mechanism by which a bank, a foreign regulator or a journalist can verify that accuracy independently. The synthesis judgment for this cycle is accordingly that Singapore enforcement tightening is undercut by the continued non-public status of the register, which limits the third-party verification value of the reform despite the higher penalties now in force.

This cycle beneficial-ownership signal in Singapore should be read against the durable structural backdrop that governs beneficial-ownership and corporate-transparency architecture globally, even though Singapore itself sits outside that architecture direct legal perimeter. The European Union AML Package is now built from three distinct instruments rather than one: the AML Regulation, directly applicable across the European Economic Area without national transposition; the sixth AML Directive, which each Member State transposes into its own domestic law on its own timetable; and the AMLA Regulation, which establishes the Anti-Money Laundering Authority as a new EU-level supervisory body. Taken together, these three instruments are shifting supervision of beneficial-ownership and broader AML obligations away from a purely national model and toward a hybrid regime in which the Authority holds direct supervisory responsibility for a defined set of higher-risk cross-border obliged entities while national authorities retain responsibility for the remainder, under indirect Authority oversight. No development in this transition surfaced in the material reaching this cycle report, and no AMLA horizon anchor was carried into this cycle regulatory-horizon set; this paragraph accordingly states the architecture as standing context rather than as a cycle-specific finding, consistent with the honesty-over-coverage principle that governs this section.

Framed against that backdrop, the Singapore transparency trajectory this cycle is a jurisdiction-level, enforcement-focused adjustment inside a national register system that predates and sits outside the European Union model entirely, rather than a step toward or away from the European hybrid-supervision direction. The two tracks are not comparable in kind: Singapore is raising the cost of non-compliance with its own long-standing nominee and controller registers, while the European Union is restructuring who supervises compliance with a newly harmonised set of registers across an entire bloc. The value of holding both in view together is comparative rather than causal, illustrating two different national and supranational responses to the same underlying policy problem of making beneficial ownership verifiable.

Outlook

Singapore beneficial-ownership enforcement is likely to be tested next by whether the Accounting and Corporate Regulatory Authority uses its expanded powers in a visible enforcement action, which would be the first real signal of how much the CALA 2025 penalty increase changes practical compliance behaviour rather than only formal exposure. The open structural question, the non-public status of the Register of Registrable Controllers, is not addressed by anything in the current legislative package and is not expected to change within the current reporting horizon absent a separate policy decision to publish register data. On the European side, the durable AMLA transition continues in the background as a multi-year structural shift; no near-term APAC-relevant intersection with that transition is expected, and none is asserted here.

Standing baseline position

Macau has opened consultation on its first AML/CFT overhaul since 2006, proposing a central beneficial-ownership register for companies and legal entities.

Periodic updates (1)
2 Sep 2026 · fim-2026-08-05

Beneficial Ownership and Corporate Transparency

This cycle directly relevant beneficial-ownership development sits in the APAC bloc under review, not in the European Union: the Companies and LLP (Amendment) Act 2025 in Singapore commenced on 6 May 2026, raising penalties for failures to maintain or update the Register of Registrable Controllers, the Register of Nominee Directors, and the Register of Nominee Shareholders, and expanding enforcement powers held by the Accounting and Corporate Regulatory Authority. Two independent tier-4 vendor sources corroborate the commencement date and substance, though at a lower source tier than a direct statutory or ACRA primary citation would provide, and confidence is assessed rather than high on that basis. The reform is a genuine tightening of the enforcement side of the Singapore beneficial-ownership regime; it raises the cost of non-compliance for nominee-structure holders and corporate-service providers operating in or through Singapore. It does not, however, extend third-party verification capacity: the underlying Register of Registrable Controllers remains non-public, so external parties, including counterparty banks, correspondent institutions, and investigative researchers, gain no new visibility into who actually controls a Singapore-incorporated entity even as the penalty for the entity own non-disclosure rises. The interpreter key judgment on this point is explicit: enforcement tightening under the 2025 Act is undercut by continued register opacity, limiting the reform third-party verification value despite higher penalties.

The interpreter jurisdiction-risk assessment for Singapore records this cycle combined signal, the beneficial-ownership reform alongside the licence revocation issued to Bsquared Technology, as a decreasing overall risk direction driven by structural enforcement activity rather than an episodic one-off action. That improving enforcement trend, however, runs on a separate track from the beneficial-ownership opacity gap: register non-publicity persists independent of how vigorously ACRA enforces the underlying maintenance obligations, and the two should not be conflated when assessing Singapore transparency posture going forward.

Globally, the European Union AML Package sets the structural direction against which beneficial-ownership reform elsewhere is increasingly read, even though it is not the primary subject matter for a non-EEA bloc such as APAC. The Package comprises three distinct instruments operating on different legal footings: the AML Regulation, Regulation (EU) 2024/1624, which is directly applicable across Member States without national transposition; the sixth AML Directive, transposed by each Member State into domestic law on its own timetable; and the AMLA Regulation, Regulation (EU) 2024/1620, which establishes the Anti-Money Laundering Authority and shifts supervision of the highest-risk obliged entities from a purely national model toward a hybrid EU-level regime, combining AMLA direct supervision of a limited set of cross-border groups with continued indirect oversight of the remainder through national authorities working to AMLA-set standards. This is durable structural background, not a new development: the standing tracker for this instrument set recorded no APAC-relevant AMLR, sixth-directive, or AMLA transposition movement this cycle, and no AMLA-specific regulatory-horizon anchor was carried into this cycle research. It is presented here as backdrop against which the Singapore reform, and any future APAC beneficial-ownership development, should be read, rather than as this cycle finding.

Read together, the two threads describe a familiar asymmetry in beneficial-ownership reform generally: penalty and enforcement-power increases are comparatively straightforward for a regulator to legislate and announce, while register publicity, the feature that gives beneficial-ownership transparency its external verification value, lags behind. The Singapore reform this cycle sits on the enforcement side of that asymmetry. A further gap noted this cycle is the absence of a specific statutory-section citation for the 2025 Act within the obligation-reference field, a mapping gap flagged for confirmation or backfill in a subsequent cycle rather than a substantive finding in itself.

Outlook

The specific watch item for beneficial-ownership and corporate transparency in the APAC bloc is whether the expanded ACRA enforcement powers under the 2025 Act translate into visible enforcement activity against nominee-structure non-compliance in coming cycles, which would test whether the penalty increase functions as a genuine deterrent or remains largely on the statute book without register publicity to match it. Separately, and at the structural level, the European Union AML Package supervisory perimeter continues to build out toward the AMLA 2027 direct-supervision start date; APAC-domiciled obliged entities with European Union cross-border exposure are a plausible future touchpoint for that perimeter, though no such connection was evidenced this cycle. This is illustrative orientation on where beneficial-ownership signal might next emerge, not a prediction of either outcome.

D3 Enabler Jurisdictions

no_changestanding position

Enabler Jurisdictions

The clearest enabler-jurisdiction signal this cycle is Amnesty International documented finding that the Cambodia Commercial Gambling Management Commission reviewed and formally recognised business plans for casino properties with documented links to trafficking and torture, specifically Crown Poipet, Crown Bavet, Crown Chrey Thum and Majestic Sihanoukville, during December 2025 and January 2026 (fim-2026-W32-002). The significance of this finding is not that Cambodia lacks enforcement capacity against scam-compound activity; it is that the same government apparatus that has publicised a nationwide crackdown continued, in parallel and inside the crackdown window itself, to grant regulatory recognition to properties with documented links to the underlying abuse. That combination distinguishes a capacity deficit from a choice, and the distinction matters for how this jurisdiction should be assessed going forward: additional enforcement announcements from Cambodia should be read against a demonstrated willingness to approve the same category of enterprise administratively, not assumed to represent a uniform shift in institutional posture.

Continue reading

Read alongside the sanctions designation of a sitting senator and 28 associated targets covered elsewhere in this report, the Commercial Gambling Management Commission approvals complete a picture of Cambodia enforcement and regulatory practice diverging materially within the same reporting period: an external, unilateral US sanctions action escalating against the political economy of scam-compound enablement, and a domestic regulatory body continuing to approve the underlying enterprise category. Enablement, in the analytical framing this report applies throughout, is as significant a signal as enforcement, and the absence of a corresponding domestic regulatory tightening in Cambodia during the same window is itself informative about where responsibility for addressing this typology currently sits.

A second, independent enabler-jurisdiction signal this cycle is the continued FATF grey-list status of Laos. The FATF June 2026 plenary added Iraq and Bosnia and Herzegovina and removed Namibia, following the addition of Kuwait and Papua New Guinea at the February plenary, but Laos and Vietnam status was unchanged across both sessions (fim-2026-W32-007, fim-2026-W32-011). Laos position astride the Golden Triangle corridor makes its unchanged grey-list status a structural rather than episodic signal: the absence of a new milestone or de-listing action over two consecutive plenaries indicates that whatever remediation steps are in progress have not yet produced a change in FATF assessment, and the corridor risk that grey-list status is intended to flag remains live. Where Cambodia this cycle illustrates active regulatory choice diverging from enforcement rhetoric, Laos illustrates a longer-running capacity-constrained status quo; both patterns belong in an enabler-jurisdiction frame, but they are analytically distinct and should not be collapsed into a single narrative about the region.

Both signals in this cycle sub-brief sit predominantly within the anti-money-laundering pillar rather than the counter-terrorist-financing or counter-proliferation-financing pillars; the trafficking and torture allegations linked to the Cambodian casino properties are financial-crime and human-rights findings rather than terrorist-financing findings, and no CTF or CPF-specific enabler-jurisdiction signal surfaced in the material reaching this cycle report. That concentration is noted here deliberately, consistent with the standing instruction to correct for the structural tendency of anti-money-laundering enforcement volume to crowd out counter-terrorist-financing and counter-proliferation-financing signal in prose; it reflects the substrate available this cycle rather than an editorial judgment about relative importance.

Outlook

Cambodia is the jurisdiction most likely to generate further material this cycle in either direction: a visible move by the Commercial Gambling Management Commission to reverse or review its own approvals would be the strongest available signal that the divergence between enforcement and regulatory practice is closing, while continued silence or further approvals would confirm the current reading. Laos, by contrast, is unlikely to move quickly; grey-list status changes at the pace of FATF plenary cycles, and the next scheduled plenary is the earliest point at which a change in Laos status could register. Both jurisdictions warrant continued tracking on the same enabler-jurisdiction basis applied this cycle, distinguishing capacity constraints from demonstrated regulatory choice wherever the evidence allows that distinction to be drawn.

Standing baseline position

Cambodia ordered a nationwide suspension of casino-based online/proxy betting effective October 2026, revoked 20 casino licences and suspended 29 of 195 inspected, and dismantled 86 scam compounds, citing money-laundering and scam-centre risk.

Periodic updates (3)
18 Oct 2026 · fim-2026-10-18

Enabler Jurisdictions

Cambodia and Laos present two distinct enabler-jurisdiction postures this cycle, one moving toward enforcement at scale, the other holding at a standing grey-list position. Cambodia's casino sector saw a nationwide suspension of online and proxy betting take effect from October 2026, with inspection of 195 licensed casinos producing 20 licence revocations and 29 suspensions, and 86 scam compounds dismantled as part of the continuing campaign. This is a structural enforcement shift rather than an episodic action: it reaches the licensing architecture itself rather than a single operator or transaction chain, and it follows a pattern of gaming-sector exploitation for laundering that has made Cambodia a recurring enabler-jurisdiction concern.

Laos remains on the FATF grey list per the Task Force's 19 June 2026 statement, a status restated in the US State Department's Investment Climate Statement for the jurisdiction. The October 2026 plenary outcome had not been published within this cycle's research window, leaving the status unresolved rather than confirmed as unchanged going forward. The grey-list designation functions under FIM's language as Increased Monitoring rather than a UK EDD trigger or a comprehensive-sanctions measure; readers assessing Laos exposure under the amended UK Money Laundering Regulations should note that mandatory enhanced due diligence under regulation 33(1)(b) as amended applies only where a jurisdiction is subject to a FATF call for action, a category distinct from the grey list Laos currently sits on. Standing concerns about state equity positions in the Golden Triangle Special Economic Zone continue to be read as a structural conflict-of-interest finding alongside the grey-list status.

Macau's position is more ambiguous and is treated separately for its AML/CTF-regime dimension, but its enforcement-proof-burden gap, where prosecutors say they cannot currently meet the evidentiary bar for the unlicensed currency-exchange offence, is itself an enabler-adjacent structural finding: a jurisdiction can carry extensive STR infrastructure and still face a gap between detection and successful prosecution.

Outlook

Cambodia's enforcement pace, having moved from suspension to licence revocation at scale, bears watching for whether further revocations follow against the remaining licensed base. The FATF October 2026 plenary outcome for Laos remains unpublished within this cycle and is the key open item for the jurisdiction going forward; until it publishes, Laos's enabler-jurisdiction status is best read as held rather than resolved.

2 Sep 2026 · fim-2026-09-02

Enabler Jurisdictions and Professional Facilitators

Macau remains the bloc's clearest standing case study in enabler-jurisdiction structural reform without full resolution. The Gaming Inspection and Coordination Bureau has held the licensed-junket ceiling at 50 for 2026, with only 29 currently active, a continuation of the post-2022 gaming-law restructure that has materially narrowed the junket sector's traditional role as an opaque intermediary between VIP gaming revenue and its ultimate beneficial owners. Two structural restrictions imposed during that restructure remain in force: a cap on junket commission at 1.25% of rolling turnover, in place since January 2023, and the reservation of credit issuance exclusively to concessionaires, in force since August 2024. Both measures directly target the mechanisms junkets historically used to launder value through informal credit and revenue-sharing arrangements with VIP gaming patrons.

What these reforms have not resolved is the underlying beneficial-ownership opacity of the junket promoters themselves. Even as their commercial functions have been constrained, the identity and ownership structure behind the 29 currently active junket operators remains a standing structural gap rather than a closed one. This is a case where regulatory architecture has successfully narrowed the channel through which illicit value could move, without addressing who ultimately controls that narrowed channel. No primary DICJ announcement specific to the 2026 cap confirmation was independently retrieved this cycle, so this finding rests on secondary trade-press corroboration.

The Macau case is instructive as an enabler-jurisdiction template more broadly: structural reform of commercial mechanics (commission caps, credit restrictions) can proceed considerably faster than resolution of beneficial-ownership transparency, and the two should not be conflated when assessing whether an enabler jurisdiction's risk profile has genuinely improved. A jurisdiction can tighten the mechanics of a laundering channel while leaving its beneficial-ownership architecture, arguably the more consequential vulnerability, structurally untouched.

Outlook

Expect the junket cap and associated commission/credit restrictions to hold through 2026 as durable features of Macau's post-restructure gaming architecture rather than temporary measures subject to near-term reversal. The persistent beneficial-ownership opacity around junket promoters is unlikely to be resolved without a distinct regulatory intervention targeting ownership disclosure specifically, separate from the commercial restrictions already in force. This gap should be monitored as the standing structural vulnerability in an otherwise measurably tightened sector.

2 Sep 2026 · fim-2026-08-05

Enabler Jurisdictions and Professional Facilitators

The clearest enabler-jurisdiction finding this cycle is the documented divergence between the enforcement posture announced by the Cambodian government and continued licensing practice by its own gaming regulator. Amnesty International documented that the Commercial Gambling Management Commission reviewed and approved business plans for casino properties with documented links to trafficking and torture, including Crown Poipet, Crown Bavet, Crown Chrey Thum, and Majestic Sihanoukville, between December 2025 and January 2026, during the same window in which the government publicised a nationwide crackdown on scam-compound activity. This is a textbook capacity-versus-choice finding under the enabler-jurisdiction filter: the question is not whether Cambodia has the legal framework to deny these approvals, but whether the underlying incentive structure permits the choice to deny them, and this cycle evidence indicates the choice was not made even as the designation of Senator Kok An by the United States Treasury raised the external cost of continued facilitation. Confidence on the CGMC finding is assessed, resting on Amnesty International reporting corroborated by the broader Chainalysis account of the designated network.

The interpreter jurisdiction-risk assessment for Cambodia classifies this pattern as structural rather than episodic, meaning the finding describes an entrenched feature of the political economy rather than a single lapse, and records an increasing overall risk direction with a mixed enforcement-versus-enablement characterisation, since foreign enforcement escalation and domestic facilitation are both simultaneously true and both intensifying. This is the same underlying finding addressed from a sanctions-architecture lens in the corresponding D1 sub-brief in this series; the two readings are complementary, not duplicative, and should be read together for a complete picture of the enabler dynamic.

A second, longer-standing enabler-jurisdiction signal concerns Laos, which remains on the FATF grey list through both the February 2026 and June 2026 plenaries with no de-listing milestone reached. The interpreter records this as a stable, structural, capacity-deficit classification, distinct from Cambodia mixed enforcement-versus-enablement pattern: the Golden Triangle corridor remains a structural monitoring gap rather than a site of active new facilitation this cycle, and this status-quo continuation, while unremarkable in isolation, is itself the kind of standing condition that architecture-over-incident framing requires be reported rather than allowed to fade from view simply because no new instrument attached to it this cycle.

A related professional-facilitation signal, though centred outside the Southeast Asian casino economy, is the extension by FinCEN of its cartel trade-based money-laundering advisory coverage on 30 June 2026 to include fiscal fuel-theft and tax-evasion schemes run by Cartel Jalisco Nueva Generacion and other transnational criminal organisations across the southern border of the United States, corroborated by two tier-1 FinCEN primary documents. While the FinCEN advisory speaks primarily to a Latin American corridor rather than to the APAC bloc under primary review this cycle, it is included here because it demonstrates the same underlying enabler-jurisdiction mechanism, professional and quasi-professional intermediary networks moving illicit value across a formal-informal banking boundary, that characterises the Cambodian and Laotian findings, and the gaps register notes that the equivalent United Arab Emirates trade-based money-laundering corridor received no dedicated search this cycle, leaving a coverage asymmetry between the two corridors that should be corrected in a subsequent cycle.

Myanmar informal cross-border jade and rare-earth trade into China, addressed in full under the D4 conflict-finance lens in this series, also carries an enabler-jurisdiction dimension: informal trade channels that evade formal banking oversight function as a facilitation infrastructure in their own right, structurally similar in kind, though different in political character, to the guarantee-style facilitation infrastructure documented in the Cambodian casino economy. The two are treated separately in this series only because their primary policy lever differs, sanctions and gaming-regulatory levers for Cambodia, extractive-industry and conflict-finance levers for Myanmar, not because the underlying enabler mechanics are unrelated.

Outlook

Whether any international response follows the Amnesty International documentation of continued CGMC casino approvals during the Cambodian crackdown window is the most immediate enabler-jurisdiction watch item, since a lack of response would tend to confirm the structural rather than episodic reading of the underlying divergence. The October 2026 FATF plenary is also relevant here insofar as Laotian grey-list status could move at that review point, though no indication of an imminent change was present in this cycle evidence. This is illustrative orientation on where enabler-jurisdiction attention might next be warranted, not a prediction of either outcome.

D4 Conflict Finance

no_changestanding position

Conflict Finance and Extractive-Industry Integrity

Jade and rare-earth extraction in Kachin State, Myanmar, continued this cycle to fund both sides of an ongoing conflict: revenue from extraction supports both the military junta and the Kachin Independence Organisation, and transits informally into China outside formal banking channels rather than through traceable financial-sector routes. This finding is assessed confidence, corroborated across two tier-3 and tier-4 sources, and the interpreter classifies it as a standing pattern rather than a new instrument this cycle: the domain baseline is recorded as stable, with a watch rather than material-change status, and the trajectory is described as watch rather than escalating or improving. This sub-brief is accordingly flagged for limited signal this cycle in the honesty-over-coverage sense: the underlying conflict-finance mechanism is real and structurally significant, but nothing in this cycle evidence base represents a new development against that standing baseline, and no new instrument, designation, or regulatory action attached to the Myanmar extraction economy this cycle.

Continue reading

The conflict-finance chain traces cleanly under the applicable filter: the source is extraction of jade and rare earths, the channel is informal cross-border trade outside formal banking oversight, and the deployment is financing of both junta and opposition military operations. This structure is worth stating explicitly precisely because it does not depend on any single transaction or entity being newly identified this cycle; it is the durable architecture, not an incident, and the enabler-jurisdiction dimension of the same informal-trade channel is addressed further in the corresponding D3 sub-brief in this series.

Outlook

No new regulatory, sanctions, or enforcement development attached to the Myanmar extraction-finance chain this cycle, and the FATF blacklist status for Myanmar itself remains unchanged since October 2022. The watch item for coming cycles is whether any new designation, advisory, or enforcement action specifically targets the jade or rare-earth extraction economy, which would represent a genuine escalation against the current stable baseline; absent such a development, this remains a standing structural condition rather than an active cycle finding. This is illustrative orientation on what would constitute a material change, not a prediction that one is imminent.

Standing baseline position

US DOJ announced (11-13 Oct 2026) the arrest and initial appearance of Alvaro Pulido Vargas, a Colombian national charged over laundering more than $2bn tied to Venezuelan government bribery schemes.

Periodic updates (2)
18 Oct 2026 · fim-2026-10-18

Conflict Finance

The US Department of Justice's charging action against Alvaro Pulido Vargas continues standing coverage of conflict and kleptocracy finance tied to Venezuela. The Colombian national was charged and has appeared in connection with laundering more than two billion dollars linked to Venezuelan government bribery schemes, a matter stated directly in the DOJ's own press release, which is the strongest sourcing tier available this cycle and supports a confirmed characterisation of the charging action itself. The matter sits within a broader pattern of US enforcement activity targeting networks that launder proceeds connected to Venezuelan state actors and intermediaries, a pattern this monitor has tracked on a standing basis.

The matter does not directly touch Asia-Pacific jurisdictions, but is carried here as a conflict-finance development with cross-regional relevance given the continuing use of complex corporate and banking structures, some routed through intermediary jurisdictions, to move proceeds associated with state-linked bribery schemes. No Asia-Pacific-specific conflict-finance development was identified within the bound scope this cycle.

Outlook

Further developments in the Pulido Vargas matter, including any plea or trial scheduling, would be the next material marker for this line of coverage. No Asia-Pacific-specific conflict-finance signal is pending at this time.

2 Sep 2026 · fim-2026-09-02

Conflict Finance and Extractive-Industry Integrity

Myanmar continues to demonstrate how extractive-sector revenue functions as a durable, state-captured war-financing channel notwithstanding sustained international sanctions. Independent analysis identifies over US$1.45 billion in Myanmar forest-product exports since the 2021 coup, rerouted through China, India and Thailand despite Western sanctions targeting the state timber enterprise directly. This scale of rerouted trade demonstrates that sanctions on a single state enterprise do not by themselves foreclose the underlying commodity flow when regional transit and destination markets remain willing counterparties.

Beyond timber, jade and rare-earth concessions concentrated in Kachin State function as a parallel financial lifeline for the junta, providing a second extractive revenue stream operating alongside, and to some degree independently of, the sanctioned timber trade. This dual-channel structure, timber plus jade/rare-earths, gives the junta's financing architecture a resilience that a single-commodity sanctions strategy struggles to address comprehensively.

The newly signed five-year Myanmar-Russia military-cooperation agreement is the cycle's most significant compounding development. It signals that the junta's extractive-revenue base is not merely sustaining domestic governance but actively underwriting deepened military cooperation with another sanctioned state actor. This is consistent with a state-capture pattern in which conflict-zone extractive revenue functions simultaneously as an internal war-financing mechanism and as the fiscal basis for external alliance-building. Two independent Tier 2/3 sources corroborate the extractive-financing picture this cycle, though no Tier 1 primary source specific to Myanmar was retrieved, a sourcing gap worth flagging given the materiality of the underlying judgment.

Outlook

The trajectory here is one of continued escalation rather than stabilisation. The Myanmar-Russia cooperation pact suggests the junta's extractive-finance architecture is becoming more entrenched and more externally consequential, not less, and there is no evidence this cycle of transit-jurisdiction enforcement tightening around the rerouted timber, jade or rare-earth flows. Absent a shift in regional transit-country posture, particularly from China, India or Thailand, this financing channel should be expected to persist as a structural feature of the conflict rather than an episodic vulnerability.

D5 Crypto / Digital Assets / Financial Innovation

no_change

Crypto / Digital Assets / Financial Innovation

The clearest digital-asset signal touching Asia-Pacific this cycle comes not from a regulator or an enforcement action but from the region's own typology-compilation process. The Asia/Pacific Group on Money Laundering's 2025 Yearly Typologies Report, a document still marked for adoption rather than finalised, records virtual asset service providers as a material secondary channel for laundering activity across the region: thirteen case studies, representing eleven percent of the full compilation, with a cross-border scam-compound pattern spanning China, Hong Kong, and Chinese Taipei singled out as a representative example. This is evidence of where the regions own supervisors are directing analytical attention, not a new rule or registration requirement, and that distinction should govern how the finding is used. A typology compilation tells firms what pattern recognition their monitoring systems should be tuned toward; it does not itself impose a control obligation the way a finalised recommendation or a transposed directive would.

Continue reading

The scam-compound pattern is worth dwelling on because of what it implies about the channel. Virtual-asset rails in this reading function less as a standalone laundering mechanism and more as a conversion and settlement layer sitting downstream of a physical fraud operation, with the cross-border element, spanning three distinct jurisdictions in a single documented pattern, indicating that the laundering architecture being observed is itself multi-jurisdictional by design, not an artefact of any single jurisdictions supervisory gap. For compliance functions with exposure to payment corridors touching China, Hong Kong, or Chinese Taipei, the eleven-percent figure is a useful proportionality anchor: it says the channel is material but secondary relative to whatever the majority of case studies in the same compilation describe, which this record does not detail further.

Worth stating plainly alongside the typology finding is what did not happen this cycle. No Asia-Pacific jurisdiction features in the global sanctions-list or grey-list movement recorded by the Financial Action Task Force at its October 2026 Plenary, and no digital-asset-specific regulatory instrument applicable across the region was identified as moving this cycle. The region's architecture for addressing the virtual-asset channel accordingly remains what it was: a mutual-evaluation framework operated by the Asia/Pacific Group, assessing individual member jurisdictions against the Financial Action Task Forces recommendations, including Recommendation 15 on new technologies, on a multi-year cycle rather than a standing region-wide rulebook.

Outlook

The typologies report's path to formal adoption is the item to track. Once adopted, the virtual-asset-channel finding converts from a provisional observation flagged by the regions supervisors into a citable typology-level reference, and firms operating payment or custody infrastructure touching China, Hong Kong, or Chinese Taipei should expect the scam-compound pattern it documents to inform supervisory expectations for transaction-monitoring calibration in those corridors once that adoption occurs. No further digital-asset-specific regional instrument is indicated as near-term on the available record, and the structural review cycle for the regions two major financial centres, Hong Kong and Macao, remains tracked out to 2029, so no near-term escalation in formal obligation is presently signalled beyond the typology-adoption step itself.

Cumulative analysis

Crypto / Digital Assets / Financial Innovation

Three developments define the digital-asset and financial-innovation picture in APAC this cycle, and they point in different directions even though all three represent active regulatory engagement rather than passive observation. The Hong Kong Monetary Authority granted the territory first two stablecoin issuer licences under the Stablecoins Ordinance, to HSBC and to the Anchorpoint joint venture, effective 10 April 2026 (fim-2026-W32-010). The grant extends a formally supervised, AML/CFT-relevant perimeter to Hong Kong dollar denominated stablecoin issuance for the first time, moving that instrument class from an unregulated or informally observed category into one subject to direct prudential and conduct supervision. Because only two licences were granted from the initial application pool, and further grants remain at the regulator discretion, the practical size of the newly supervised perimeter is still limited, but the architectural significance of establishing it at all is high.

In the same period, the Monetary Authority of Singapore revoked the Major Payment Institution Licence of Bsquared Technology Pte Ltd, effective 14 May 2026, citing false statements made to the regulator and breaches spanning governance, outsourcing arrangements and conflict-of-interest controls (fim-2026-W32-006). This is a corrective enforcement action against a firm operating inside an existing licensing regime rather than an expansion of the regime itself, and it demonstrates that Singapore continues to actively test and, where warranted, remove firms from its payment-institution population rather than treating licensure as a one-time gate. Read together, the Hong Kong grant and the Singapore revocation describe two different but complementary forms of perimeter management: one bringing a new instrument class under supervision, the other removing a firm found unfit from an existing supervised population.

The third and most acute signal this cycle is proliferation-financing rather than payments-regulatory in character. Reporting citing TRM Labs and Blockaid attributes approximately 76 percent of global cryptocurrency hack value in 2026 through April to North Korea state-linked actors, with cumulative theft attributed to those actors now estimated to exceed 6.75 billion dollars (fim-2026-W32-005). This is a counter-proliferation-financing finding as much as a cyber-security finding: theft operations linked to the Reconnaissance General Bureau function as a financing channel for a state weapons programme, and the pace of theft recorded this cycle continuing at a record level notwithstanding the existing OFAC Specially Designated Nationals architecture aimed at North Korean cyber actors indicates that the deterrent value of existing designations has not kept pace with the operational tempo of the theft itself. This is the clearest instance this cycle of the counter-proliferation-financing pillar carrying signal that would be missed if this report weighted only anti-money-laundering enforcement volume, and it is surfaced here deliberately to correct for that structural bias.

Confidence across these three findings varies appropriately with source strength. The Hong Kong and Singapore regulator actions are High confidence, each anchored to a direct tier-one primary source. The North Korea theft-pace finding is Assessed, reflecting reliance on a tier-three secondary report citing named blockchain-intelligence firms rather than a primary government or United Nations Panel of Experts document; the underlying attribution methodology used by those firms was not independently verified within this cycle research.

Outlook

The Hong Kong stablecoin licensing pipeline is the item most likely to generate near-term follow-on material, since additional licence grants beyond the initial two remain plausible within the current reporting horizon and would extend the supervised perimeter further. The Singapore licence revocation is a closed enforcement action; the item to watch there is whether any pattern emerges across further Monetary Authority of Singapore actions against other Major Payment Institution licensees. The North Korea theft-pace finding is the item requiring the most sustained attention: absent a shift in either the theft velocity itself or in international coordination beyond the existing designation architecture, the counter-proliferation-financing pressure this finding describes is likely to remain a standing rather than an episodic feature of the digital-asset risk environment in the region.

domain_sub_briefs · D5 · Cumulative analysis
Standing baseline position

Hong Kong reaffirmed (6 Oct 2026) it will submit a bill extending virtual-asset licensing to custody, advisory and asset-management services, with AML/CFT integrated, by end-2026.

Periodic updates (8)
3 Nov 2026 · fim-2026-11-03

Crypto / Digital Assets / Financial Innovation

The clearest digital-asset signal touching Asia-Pacific comes not from a regulator or an enforcement action but from the region's own typology-compilation process. The Asia/Pacific Group on Money Laundering's 2025 Yearly Typologies Report, a document still marked for adoption rather than finalised, records virtual asset service providers as a material secondary channel for laundering activity across the region: thirteen case studies, representing eleven percent of the full compilation, with a cross-border scam-compound pattern spanning China, Hong Kong, and Chinese Taipei singled out as a representative example. This is evidence of where the regions own supervisors are directing analytical attention, not a new rule or registration requirement, and that distinction should govern how the finding is used. A typology compilation tells firms what pattern recognition their monitoring systems should be tuned toward; it does not itself impose a control obligation the way a finalised recommendation or a transposed directive would.

The scam-compound pattern is worth dwelling on because of what it implies about the channel. Virtual-asset rails in this reading function less as a standalone laundering mechanism and more as a conversion and settlement layer sitting downstream of a physical fraud operation, with the cross-border element, spanning three distinct jurisdictions in a single documented pattern, indicating that the laundering architecture being observed is itself multi-jurisdictional by design, not an artefact of any single jurisdictions supervisory gap. For compliance functions with exposure to payment corridors touching China, Hong Kong, or Chinese Taipei, the eleven-percent figure is a useful proportionality anchor: it says the channel is material but secondary relative to whatever the majority of case studies in the same compilation describe, which this record does not detail further.

Worth stating plainly alongside the typology finding is what did not happen. No Asia-Pacific jurisdiction features in the global sanctions-list or grey-list movement recorded by the Financial Action Task Force at its October 2026 Plenary, and no digital-asset-specific regulatory instrument applicable across the region was identified as moving. The region's architecture for addressing the virtual-asset channel accordingly remains what it was: a mutual-evaluation framework operated by the Asia/Pacific Group, assessing individual member jurisdictions against the Financial Action Task Forces recommendations, including Recommendation 15 on new technologies, on a multi-year cycle rather than a standing region-wide rulebook.

Outlook

The typologies report's path to formal adoption is the item to track. Once adopted, the virtual-asset-channel finding converts from a provisional observation flagged by the regions supervisors into a citable typology-level reference, and firms operating payment or custody infrastructure touching China, Hong Kong, or Chinese Taipei should expect the scam-compound pattern it documents to inform supervisory expectations for transaction-monitoring calibration in those corridors once that adoption occurs. No further digital-asset-specific regional instrument is indicated as near-term on the available record, and the structural review cycle for the regions two major financial centres, Hong Kong and Macao, remains tracked out to 2029, so no near-term escalation in formal obligation is presently signalled beyond the typology-adoption step itself.

25 Oct 2026 · fim-2026-10-25

Crypto / Digital Assets / Financial Innovation

Hong Kong's licensed stablecoin regime has crossed a structural threshold: HSBC has launched RedCoin, a Hong Kong dollar-referenced stablecoin made available to the 3.3 million users of its PayMe service, operating under a Financial Resources Standard licence granted by the Hong Kong Monetary Authority on 10 April 2026 under the Stablecoins Ordinance (Cap. 656). The move from authorisation to live commercial issuance by a major deposit-taking institution is the kind of architectural development that matters more, in financial-integrity terms, than any single enforcement action in a well-regulated centre, because it establishes the compliance perimeter, financial-crime-control standard, and redemption obligations that will govern the next wave of stablecoin activity in the territory. The underlying regime requires licensed issuers to meet anti-bribery and corruption controls at account opening and broader financial-crime controls consistent with the Ordinance, placing fiat-referenced token issuance inside a supervised framework rather than leaving it to offshore or unregulated actors.

On the enforcement side of the same instrument class, Colombian authorities, working with United States counterparts, detained eight individuals across four cities for converting drug-cartel proceeds into cryptocurrency, with one suspect allegedly responsible for processing over 42 million dollars through the network. This is a materially large single-network figure, and it illustrates the layering risk that crypto-asset rails continue to present for cartel-linked proceeds even as supervised issuance infrastructure expands elsewhere in the region. The two developments are not in tension with one another; they describe different parts of the same asset class operating under very different degrees of oversight; one a licensed, HKMA-supervised instrument in Hong Kong, the other an apparently unlicensed conversion network serving cartel proceeds in Colombia.

For compliance functions at banks, payment companies and crypto-asset operators with cross-border exposure, the practical read is twofold: licensed stablecoin issuance under a credible supervisory perimeter, such as Hong Kong's, does not by itself reduce exposure to illicit use of the broader crypto-asset ecosystem elsewhere, and counterparty due diligence involving crypto-to-fiat conversion services should continue to treat jurisdiction and licensing status as a primary risk signal rather than an assumption of uniformity across the asset class.

Outlook

The near-term marker in Hong Kong is whether additional licensed stablecoin issuers, beyond HSBC and the one other licensee granted at the same time, move from authorisation to live commercial issuance, and whether a proposed amendment extending the territory's virtual-asset licensing regime to trading, custody, advisory and asset-management services proceeds toward the first quarter of 2027 as currently scheduled. On the enforcement side, whether the Colombian-US operation produces further designations or asset-seizure actions tied to the identified network remains to be seen, and any such follow-on action would sharpen the picture of how cartel-linked actors are adapting to crypto-based layering techniques.

11 Oct 2026 · fim-2026-10-11

Crypto, Digital Assets, and Financial Innovation

In Hong Kong, the directly relevant development this cycle is the government's reaffirmation, on 6 October 2026, that it will submit amendments to virtual-asset licensing legislation by year-end. The amendment would extend licensing from trading platforms alone -- currently the extent of Hong Kong's Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615) VASP perimeter, administered through the Securities and Futures Commission -- to cover custody, advisory and asset-management VASP services, with AML/CFT requirements integrated into the licensing framework from the point of authorisation. This remains a government statement rather than gazetted legislation, so the precise scope of the new obligations is not yet settled.

In Macau, the parallel AML consultation would classify virtual assets connected to criminal conduct as proceeds of crime, enabling freezing powers the territory's statute book does not currently provide -- Macau's first dedicated crypto-AML provision. Together, these two developments represent the APAC bloc's most significant forward movement in digital-asset financial-integrity architecture this cycle, both still at pre-enactment stages: Hong Kong's as a reaffirmed but ungazetted bill, Macau's as a consultation paper not yet corroborated by primary text. Global structural developments such as MiCA and the FATF virtual-asset standards are contextual backdrop here rather than the lead story, since neither Hong Kong nor Macau is an EU or EEA jurisdiction.

Outlook

The principal items to watch are whether Hong Kong's licensing amendment is actually gazetted by its stated year-end target, and whether Macau's consultation progresses toward enactment of its virtual-asset freezing provisions. Both developments, if enacted, would materially extend the AML/CFT perimeter around crypto activity in their respective jurisdictions.

4 Oct 2026 · fim-2026-10-04

Crypto / Digital Assets / Financial Innovation

Hong Kong's stablecoin issuer-licensing regime under the Stablecoins Ordinance (Cap. 656) became operational this cycle with the Hong Kong Monetary Authority's grant of the first two issuer licences, to Anchorpoint Financial and HSBC, effective 10 April 2026, at confirmed confidence. This is a material step in the standing compliance architecture for digital assets in Hong Kong: licensed status under Cap. 656 carries Financial Action Task Force-aligned Anti-Money Laundering and Counter-Terrorist Financing obligations together with reserve-backing and redemption duties, placing stablecoin issuance inside a supervised perimeter rather than leaving it to operate outside licensed financial activity. The grant of two licences, to a dedicated digital-asset entity and to an incumbent bank respectively, signals that the regime is being tested across both new-entrant and established-institution business models from its outset.

Running in parallel, the Financial Services and the Treasury Bureau together with the Securities and Futures Commission completed consultation conclusions targeting an extension of Anti-Money Laundering Ordinance (Cap. 615) Part 5B licensing beyond centralised virtual-asset trading platforms to cover virtual-asset dealing, custody, advisory and asset-management services, with introduction of a bill to the Legislative Council targeted for 2026, held at probable confidence. Read together, these two developments describe a single structural trajectory: Hong Kong's digital-asset compliance perimeter is widening from issuance-only coverage toward a fuller value chain encompassing circulation, custody and advisory activity. The current gap is that dealing, custody, advisory and management activity remains outside the licensed Anti-Money Laundering and Counter-Terrorist Financing gateway pending the new bill, meaning that for the balance of 2026 a portion of the digital-asset services value chain in Hong Kong continues to operate adjacent to, rather than inside, the formal licensing perimeter even as issuance-side supervision is now live.

Outlook

The Anti-Money Laundering Ordinance amendment extending licensing to virtual-asset dealing, custody, advisory and asset-management services is targeted for introduction to the Legislative Council in the second half of 2026, as scheduled, carrying a half-year uncertainty band on that estimate. Whether the four new licensable categories are brought inside the Anti-Money Laundering and Counter-Terrorist Financing gateway on the targeted timeline, with capital and fit-and-proper tests mirroring the existing virtual-asset trading platform regime, will determine whether Hong Kong closes the issuance-to-circulation compliance gap within 2026 or carries it into 2027. The operational status of the stablecoin issuer regime, now with two active licensees, provides a live base against which the pace of the further Anti-Money Laundering Ordinance extension can be measured.

28 Sep 2026 · fim-2026-09-28

Crypto, Digital Assets, and Financial Innovation

Hong Kong's own regulatory perimeter for digital assets moved from framework to enforcement of scarcity this cycle. On 10 April 2026, the Hong Kong Monetary Authority granted the first two fiat-referenced-stablecoin issuer licences under the Stablecoins Ordinance (Cap. 656): one to Anchorpoint Financial Limited, one to HSBC. Both were drawn from a pool of thirty-six applicants. That two-from-thirty-six ratio is the primary fact for Hong Kong as subject jurisdiction this cycle, and it should be read as a deliberate architectural choice rather than an administrative bottleneck. A regulator that wanted maximal market entry could have licensed a larger cohort; HKMA instead chose to anchor its first wave partly in an institution, HSBC, that already sits inside an established correspondent-banking AML/CFT control environment. That choice imports existing compliance infrastructure into the stablecoin perimeter rather than requiring it be built from a bare licensing floor, and it materially narrows the near-term money-laundering and terrorist-financing exposure surface relative to what an open, non-bank-heavy licensing cohort would have presented.

HKMA did not stop at the initial grant. On 27 May 2026, it issued further guidance relaxing certain requirements applicable to licensed intermediaries dealing in what the regime terms Relevant Stablecoins. The sequencing across the two dates, tight issuance first, followed six weeks later by loosened downstream distribution requirements, describes a regulator calibrating in stages rather than settling a fixed rulebook at the outset. For a subject-jurisdiction reading, this matters because the compliance obligations facing intermediaries distributing these instruments in Hong Kong are not static: firms operating in or serving the Hong Kong market need to track a live guidance sequence, not a single ordinance text.

The structural significance of this cohort-of-two extends beyond stablecoin issuance narrowly defined. It is also a beneficial-ownership and control-transparency question in miniature: with only two issuers, the controlling interests, governance structures and ultimate beneficial owners behind each are far easier for HKMA, and for correspondent counterparties, to scrutinise than they would be across a diffuse cohort of thirty-six. This is the kind of enablement-as-signal reading the FIM register asks for: the absence of a broader licensing wave is not an enforcement gap, it is itself a risk-reducing structural choice, and it should be read as such rather than treated as an absence of activity.

Set against this narrow, curated domestic licensing posture, the global structural backdrop, evolving FATF virtual-asset standards and jurisdictions' varying implementations of travel-rule and issuer-licensing regimes elsewhere, is context rather than the lead story for Hong Kong specifically. Hong Kong's own choice to license a small, partly bank-anchored cohort under Cap. 656 is the operative fact for firms and counterparties assessing exposure to the Hong Kong stablecoin market this cycle; the global standard-setting conversation shapes the direction of travel but has not this cycle generated a Hong Kong-specific compliance obligation beyond what HKMA has itself issued.

Outlook

The open question is whether HKMA expands the licensed-issuer cohort as the operational performance of Anchorpoint Financial and HSBC becomes observable over the coming quarters, or holds at two issuers for an extended observation period. The regulatory horizon signal available this cycle indicates HKMA has not committed to a fixed timetable for a second licensing round, and the uncertainty band around that expectation is wide, roughly a half-year window rather than a fixed date. Firms transacting with, or seeking to become, licensed intermediaries in Relevant Stablecoins should treat the 27 May 2026 guidance as an interim configuration likely to be revisited rather than a stable long-run rule, and should expect further calibration, in either direction, tied to how the first cohort performs rather than to a scheduled review date. As scheduled, no further licensing wave has yet been confirmed.

21 Sep 2026 · fim-2026-09-14

Crypto / Digital Assets / Financial Innovation

The most significant digital-asset development touching APAC this cycle is the disclosure that Cambodian and US anti-narcotics authorities have uncovered a cryptocurrency-based laundering network moving proceeds on behalf of Mexicos Sinaloa Cartel through Cambodia. This is a materially different finding from the regions familiar scam-compound cyberfraud narrative: it indicates that the crypto-enabled financial infrastructure built up around Cambodias scam-compound economy is now being used, or at minimum has been accessed, by an entirely separate and non-regional organised-crime actor for an unrelated revenue stream. Confidence is assessed as Probable, resting on quoted statements from officials in both countries as reported by a single press outlet; no Tier 1 primary anchor, such as a US Department of Justice or DEA statement, has yet been retrieved for this cycle.

The analytical significance of this finding is best read as an infrastructure question rather than an incident. Cambodias scam-compound ecosystem has, over recent cycles, built substantial crypto-conversion and cross-border settlement capacity to move proceeds from cyberfraud operations. A narco-finance nexus indicates that this capacity is fungible: once a jurisdiction hosts sufficiently mature illicit crypto-laundering rails, the underlying infrastructure becomes available to any criminal actor with proceeds to move, regardless of the proceeds original source. This is the kind of infrastructure-reuse dynamic that FATF Recommendation 15 and the broader virtual-asset-service-provider regulatory architecture are designed to close off through effective travel-rule and VASP-licensing implementation; the fact that this gap remains exploitable in Cambodia is consistent with the broader APG assessment that general industry practice across APG member jurisdictions continues to lag behind FATF-targeted updates on Travel Rule and VASP-licensing requirements.

This sits alongside, and should be read together with, the APG 2025 Yearly Typologies Report, which is progressing toward formal adoption this cycle at Tier 1 confidence via APGs own primary publication. That report updates the regions recurring typology base, including virtual-asset and VASP case studies drawn from across APG member jurisdictions. The report remains in a pre-adoption stage, with its formal adoption date and the extent of substantive change against the prior 2023 edition not yet confirmed, but its trajectory is directly relevant to the Cambodian crypto-laundering finding: it is precisely the kind of case study that a refreshed typology report of this kind would be expected to capture and formalise into shared regional guidance for financial institutions and supervisors assessing VASP-mediated risk.

Taken together, the crypto/digital-asset picture in APAC this cycle is one of a bloc without a unified AML/CFT instrument relying on a Financial Action Task Force Style Regional Body layer, principally APG, to document and disseminate emerging typologies, against a backdrop of at least one jurisdiction whose crypto-laundering infrastructure has demonstrably become attractive to non-regional organised crime.

Outlook

The development most worth tracking is whether US authorities disclose further detail on the Sinaloa Cartel-Cambodia crypto nexus, including the specific mechanisms and intermediaries used, which would materially sharpen the current Probable-confidence assessment and could surface additional jurisdictions or VASPs implicated in the laundering chain. The APG Typologies Report adoption, expected in Q4 2026, is the second item to watch, since its content will indicate whether APG intends to treat cross-criminal-network reuse of scam-compound crypto infrastructure as a distinct typology category going forward. Illustratively, and strictly as an orientation exercise rather than a prediction, a regional VASP-licensing gap of this kind might over time attract further non-regional criminal actors seeking laundering capacity, absent a material tightening of licensing and travel-rule enforcement across APG member states; this is offered only to orient analytical attention, not as a forecast of what will occur.

2 Sep 2026 · fim-2026-09-02

Crypto, Digital Assets, and Financial Innovation

Hong Kong's stablecoin regime produced this cycle's most concrete digital-asset development in the bloc. The Hong Kong Monetary Authority granted the first two issuer licences under the Stablecoins Ordinance on 10 April 2026, to Anchorpoint Financial Limited, a joint venture combining Standard Chartered Hong Kong, HKT and Animoca Brands, and separately to HSBC. Critically, these two licences were granted out of 36 formal applications, a approval rate that confirms a deliberately curated licensing posture rather than a broad market opening.

From a financial-integrity perspective, this concentration pattern is the material signal: initial issuance capacity is being channelled almost exclusively toward bank-affiliated incumbents with pre-existing AML/CFT compliance infrastructure, rather than distributed across a wider pool of fintech-native applicants. This has a direct bearing on the AML risk profile of Hong Kong's nascent stablecoin market, concentrating supervisory attention and compliance capability among institutions the HKMA already regulates closely, while leaving 34 rejected or pending applicants, and the broader digital-asset ecosystem around them, outside the initially licensed perimeter.

This licensing action sits within a broader build-out of Hong Kong's virtual-asset regulatory perimeter. The Securities and Futures Commission continues to extend AMLO-based virtual-asset dealing and custodian licensing, with a further consultation on virtual-asset advisory and asset-management services having closed on 23 January 2026. Taken together, the stablecoin issuer licensing and the pending AMLO amendment point toward a comprehensive, if slow-moving and heavily bank-centric, formalisation of Hong Kong's digital-asset AML perimeter.

No primary HKMA press release for the April 2026 licence grants was independently retrieved this cycle, so the specific reserve and capital conditions attached to the two licences remain unverified pending primary-source confirmation.

Outlook

Expect the curated, bank-affiliated licensing pattern to persist as HKMA works through the remaining applicant pool, with further licence grants likely concentrated among similarly well-capitalised, already-regulated entities rather than broader fintech participants. The pending AMLO amendment extending licensing to virtual-asset dealing, custody, advisory and asset-management services is expected before the Legislative Council in 2026, with no grandfathering proposed, meaning currently operating unlicensed advisory and asset-management providers will face a hard compliance deadline once the amendment takes effect.

2 Sep 2026 · fim-2026-08-05

Crypto, Digital Assets, and Financial Innovation

The APAC bloc regulatory environment for digital assets moved on two fronts this cycle. The Hong Kong Monetary Authority granted the first two stablecoin issuer licences in the territory, to HSBC and to the Anchorpoint joint venture, on 10 April 2026 under the Stablecoins Ordinance, a high-confidence tier-1 regulatory action that expands the AML and counter-financing-of-terrorism supervised perimeter for Hong Kong dollar referenced stablecoins. Only two licences have been granted from the initial application pool as of this cycle, and further grants remain at regulator discretion; the interpreter regulatory-horizon entry for this pipeline places the next expected movement in the fourth quarter of 2026, with a half-year uncertainty band. In parallel, the Monetary Authority of Singapore revoked the Major Payment Institution Licence held by Bsquared Technology Pte Ltd, effective 14 May 2026, over false statements and governance, outsourcing, and conflict-of-interest breaches, a high-confidence tier-1 primary enforcement action. Read together, the two actions describe a regulatory perimeter in the APAC bloc that is simultaneously widening, through new licensed entrants in Hong Kong, and tightening, through removal of a non-compliant licensee in Singapore; both movements are supervisory-perimeter improvements from a compliance-technology standpoint, even though they point in superficially opposite directions.

Against that tightening regulatory perimeter, the illicit-threat side of the digital-asset picture deteriorated sharply this cycle. DPRK-linked Lazarus Group was responsible for an assessed 76 percent of global cryptocurrency hack value through April 2026, and cumulative DPRK crypto theft now exceeds an estimated 6.75 billion dollars, funding the state proliferation-financing programme. This is a CPF-pillar finding that existing OFAC Specially Designated Nationals designations targeting DPRK cyber actors have not visibly slowed: theft velocity has, if anything, accelerated relative to the deterrent effect those designations were intended to produce. The interpreter key judgment on this point is direct: the sanctions architecture is not keeping pace with state-directed crypto-theft velocity, a sanctions-effectiveness gap that sits squarely at the intersection of the D1 and D5 domains in this series, and the D1 sub-brief addresses the sanctions-architecture reading of the same underlying theft-velocity finding in full.

Across all three findings this cycle, the affected-firm-types field in the underlying claims data consistently names crypto-asset operators and payment companies as the exposed population, with correspondent-banking and VASP-counterparty customer-typology tags attached to the Hong Kong stablecoin licensing action, the Singapore licence revocation, and the DPRK theft finding alike. For firms operating VASP-counterparty relationships across the APAC bloc, this cycle combined signal indicates that counterparty due diligence should account both for the widening set of licensed, supervised stablecoin issuers and for the continued, and by this cycle evidence accelerating, threat from state-directed theft targeting the sector more broadly.

The compliance-technology and active-defence dimension of this cycle D5 picture is thin: a single, lower-confidence source describes supervisory messaging from the Monetary Authority of Singapore on artificial-intelligence-enabled autonomous vulnerability exploitation, without a directly retrieved primary guidance document, and this signal is addressed at greater length, and with the appropriate limited-signal caveat, in the corresponding D6 sub-brief in this series rather than being treated as confirmed digital-asset-sector guidance here.

Outlook

The principal digital-asset watch item in the APAC bloc is whether the Hong Kong Monetary Authority grants further stablecoin issuer licences from its pending application pool in the fourth quarter of 2026, which would indicate the regime is moving from a narrow initial cohort toward a broader supervised stablecoin market. Whether DPRK-linked theft velocity continues to outpace the deterrent effect of existing sanctions designations is the corresponding illicit-threat watch item, relevant to both this domain and to the sanctions-architecture domain in this series. This is illustrative orientation on where digital-asset signal might next move, not a prediction of either outcome.

D6 Compliance Technology & Active Defence

no_changestanding position

Compliance Technology and Active Defence

Coverage of compliance technology and active defence is thin this cycle, consistent with the honesty-over-coverage principle rather than any editorial choice to omit material. The only signal available is a single, lower-confidence reference to supervisory messaging from the Monetary Authority of Singapore concerning artificial-intelligence-enabled autonomous vulnerability exploitation, drawn from a single tier-four source without a directly retrieved primary mas.gov.sg guidance document. The interpreter records this domain baseline as stable, with a watch trajectory and status, and assigns the underlying key judgment a low confidence rating rather than the assessed or high tiers used elsewhere in this cycle findings, precisely because no corroborating tier-one or tier-two source could be located this cycle.

Continue reading

This sub-brief is flagged for limited signal accordingly. The gaps register for this cycle explicitly notes that D6 coverage remains thin overall, and that no direct primary guidance document was retrieved to substantiate the single available reference. Rather than construct a fuller narrative around a single low-confidence source, this brief records the gap honestly: compliance-technology and active-defence developments in the APAC bloc were not materially evidenced this cycle beyond this one unconfirmed reference, and no claim from this domain is carried into the structured-claims record at the confidence level required for substantive treatment elsewhere in this series.

Outlook

The watch item for compliance technology and active defence is whether a primary guidance document from the Monetary Authority of Singapore, or an equivalent regulator, surfaces in a subsequent cycle to corroborate or supersede this cycle single low-confidence reference to artificial-intelligence-enabled vulnerability exploitation messaging. Until such corroboration appears, this domain remains a coverage gap to be closed rather than a substantiated finding to be acted upon. This is illustrative orientation on what would close the gap, not a prediction of when it will close.

D7 AML/CTF Regime

no_change

AML/CTF Regime

The defining fact about the anti-money-laundering and counter-terrorist-financing regime as it applies to Asia-Pacific is architectural rather than eventful: the bloc has no binding region-wide instrument of its own. There is no regional directive, no regional regulation, and no regional authority with supervisory teeth analogous to what exists elsewhere. The only structure that operates across the region is the Asia/Pacific Group on Money Laundering, a mutual-evaluation body that assesses individual member jurisdictions against the Financial Action Task Forces recommendations on a scheduled, multi-year cycle, rather than a legislature capable of issuing a binding regional rule. That is the backdrop against which every other finding this cycle should be read, and it did not change this cycle: the Group's own schedule shows no near-term rule movement, and no member jurisdiction's compliance rating shifted.

Continue reading

Against that stable regional backdrop, the operative movement came from the global layer. The Financial Action Task Forces Plenary of 30 October 2026 removed four jurisdictions, Bulgaria, Cote dIvoire, the Democratic Republic of the Congo, and Monaco, from its list of countries subject to increased monitoring. None of the four is an Asia-Pacific member, and the list of jurisdictions subject to a call for action, the most severe designation tier, held at three names, unchanged by the Plenary. For firms whose enhanced-due-diligence triggers reference these lists directly, this cycles practical effect is a narrowing of the external trigger set rather than any widening of it, and no Asia-Pacific jurisdiction entered or exited either list.

The one scheduled item with a concrete, if distant, date attached concerns the region's two most closely scrutinised financial centres. The Asia/Pacific Group's Global Fifth Round mutual-evaluation schedule tracks Macao's next technical-compliance submission for 2029, with a possible onsite assessment period for Hong Kong tracked around the same horizon. This is the standing periodic re-assessment mechanism rather than a new development, and it carries no immediate action item for firms operating in either jurisdiction, but it is the clearest forward marker the regime currently offers for where supervisory attention in Hong Kong and Macao will next concentrate in a formal sense.

A pending item outside the region bears watching because of how it will shape the external reference lists firms use. The Financial Action Task Force adopted mutual-evaluation reports for Mexico at the same October Plenary, with substantive rating details withheld pending publication expected in December 2026. While Mexico sits outside Asia-Pacific, the publication will be read by firms worldwide, including those with Asia-Pacific operations and counterparty exposure, as part of the same global list-maintenance cycle that produced this cycles increased-monitoring-list contraction.

Outlook

Through the remainder of 2026, the anti-money-laundering and counter-terrorist-financing picture for Asia-Pacific is likely to remain structurally stable at the regional level, with the Asia/Pacific Group's mutual-evaluation schedule showing no scheduled action before 2029 for either Hong Kong or Macao. The more immediate source of change will continue to come from the global layer: the Financial Action Task Forces list-maintenance cycle, including the pending December 2026 publication of the Mexico and United States mutual-evaluation outcomes adopted this cycle, will continue to set the external reference points that Asia-Pacific-exposed firms calibrate enhanced-due-diligence triggers against, even though the region itself has no binding instrument of its own to update in parallel.

Cumulative analysis

AML/CTF Regime

The FATF grey-list picture across APAC worsened this cycle with two concurrent developments. Papua New Guinea was added to the grey list at the 13 February 2026 plenary, marking a return to increased monitoring a decade after its 2016 removal. This followed the 2024 Asia-Pacific Group mutual evaluation, which identified effectiveness failures in PNG's AML/CFT regime notwithstanding prior progress on technical compliance, a pattern consistent with jurisdictions that can satisfy formal legislative benchmarks while still failing to demonstrate that their institutions actually apply them.

Lao PDR was separately retained on the grey list following the 19 June 2026 FATF plenary statement, which named inadequate risk-based supervision of casinos, banks and reporting entities operating within special economic zones, together with weak financial-intelligence dissemination, as the unresolved core deficiencies. This is a structural rather than episodic finding: SEZ-based financial activity has proven persistently difficult for Lao authorities to bring within an effective risk-based supervisory framework, and the deficiency has now spanned multiple FATF review cycles without resolution.

Cambodia, formally outside the grey list since 2023, nonetheless produced the cycle's most striking AML/CTF regime signal: its own central bank governor, Chea Serey, publicly warned in January 2026 that continued scam-centre and illegal-gambling activity risks a return to grey-list status. A regulator's leadership publicly flagging relapse risk ahead of any formal FATF determination is a notable departure from the more typical pattern of jurisdictions downplaying such risk until a formal listing decision is made.

Across all three cases, the common thread is casino, gaming and SEZ-adjacent financial activity functioning as the structural point of AML/CTF supervisory failure. PNG, Lao PDR and Cambodia are geographically and institutionally distinct, but each surfaces supervisory capacity gaps concentrated in the same category of higher-risk, cash-and-gaming-intensive financial activity.

Outlook

None of the three cases points toward near-term resolution. PNG's grey-listing is unlikely to be reversed before demonstrable supervisory-effectiveness improvements are shown at a future mutual evaluation follow-up. Lao PDR's SEZ supervision gap has now persisted across multiple review cycles without structural correction, suggesting continued grey-list retention absent a substantive supervisory overhaul. Cambodia is the case to watch most closely given its governor's own public acknowledgment of relapse risk; a formal re-listing would represent a materially significant reversal of its 2023 exit and should be treated as a live possibility rather than a remote one.

domain_sub_briefs · D7 · Cumulative analysis
Standing baseline position

Macau Prosecutor-General and Court of Final Appeal President publicly proposed (15 Oct 2026) objective criteria/legal presumptions and single-judge adjudication to ease proof of the unlicensed currency-exchange-for-gambling offence; no bill tabled.

Periodic updates (4)
3 Nov 2026 · fim-2026-11-03

AML/CTF Regime

The defining fact about the anti-money-laundering and counter-terrorist-financing regime as it applies to Asia-Pacific is architectural rather than eventful: the bloc has no binding region-wide instrument of its own. There is no regional directive, no regional regulation, and no regional authority with supervisory teeth analogous to what exists elsewhere. The only structure that operates across the region is the Asia/Pacific Group on Money Laundering, a mutual-evaluation body that assesses individual member jurisdictions against the Financial Action Task Forces recommendations on a scheduled, multi-year cycle, rather than a legislature capable of issuing a binding regional rule. That is the backdrop against which every other finding should be read, and it did not change: the Group's own schedule shows no near-term rule movement, and no member jurisdiction's compliance rating shifted.

Against that stable regional backdrop, the operative movement came from the global layer. The Financial Action Task Forces Plenary of 30 October 2026 removed four jurisdictions, Bulgaria, Cote dIvoire, the Democratic Republic of the Congo, and Monaco, from its list of countries subject to increased monitoring. None of the four is an Asia-Pacific member, and the list of jurisdictions subject to a call for action, the most severe designation tier, held at three names, unchanged by the Plenary. For firms whose enhanced-due-diligence triggers reference these lists directly, this cycles practical effect is a narrowing of the external trigger set rather than any widening of it, and no Asia-Pacific jurisdiction entered or exited either list.

The one scheduled item with a concrete, if distant, date attached concerns the region's two most closely scrutinised financial centres. The Asia/Pacific Group's Global Fifth Round mutual-evaluation schedule tracks Macao's next technical-compliance submission for 2029, with a possible onsite assessment period for Hong Kong tracked around the same horizon. This is the standing periodic re-assessment mechanism rather than a new development, and it carries no immediate action item for firms operating in either jurisdiction, but it is the clearest forward marker the regime currently offers for where supervisory attention in Hong Kong and Macao will next concentrate in a formal sense.

A pending item outside the region bears watching because of how it will shape the external reference lists firms use. The Financial Action Task Force adopted mutual-evaluation reports for Mexico at the same October Plenary, with substantive rating details withheld pending publication expected in December 2026. While Mexico sits outside Asia-Pacific, the publication will be read by firms worldwide, including those with Asia-Pacific operations and counterparty exposure, as part of the same global list-maintenance cycle that produced this cycles increased-monitoring-list contraction.

Outlook

Through the remainder of 2026, the anti-money-laundering and counter-terrorist-financing picture for Asia-Pacific is likely to remain structurally stable at the regional level, with the Asia/Pacific Group's mutual-evaluation schedule showing no scheduled action before 2029 for either Hong Kong or Macao. The more immediate source of change will continue to come from the global layer: the Financial Action Task Forces list-maintenance cycle, including the pending December 2026 publication of the Mexico and United States mutual-evaluation outcomes adopted, will continue to set the external reference points that Asia-Pacific-exposed firms calibrate enhanced-due-diligence triggers against, even though the region itself has no binding instrument of its own to update in parallel.

18 Oct 2026 · fim-2026-10-18

AML/CTF Regime

Macau's prosecutorial and judicial leadership used the opening of the 2026/2027 judicial year to press publicly for legal reform addressing a structural gap in the AML/CTF regime: the difficulty of proving the business element of the unlicensed currency-exchange-for-gambling offence under Law 2/2006. The officials proposed objective criteria or legal presumptions to establish the business element, and floated single-judge adjudication for these cases rather than the current panel structure. No bill has been tabled and no gazette instrument exists; the proposal rests on public remarks reported consistently across Macau gaming-industry press, and the finding is recorded here as a reform proposal under discussion rather than an enacted change.

The reform discussion arrives alongside rising detection and crime statistics. Gaming operators filed 2,968 suspicious transaction reports between January and September 2026, a 7.9 percent increase year on year, and representing 71.7 percent of the city's 4,138 total STRs for the period. Gaming-related crime rose 12.3 percent year on year to 1,951 cases over the same window. Read together, the STR volume and crime-trend figures support the prosecutorial case that detection is occurring at scale while successful prosecution under the current legal framework remains difficult, which is the structural point underlying the reform proposal rather than evidence of a deteriorating overall AML/CTF posture.

No primary gazette or bill text was retrieved this cycle for the Macau proposal; the finding rests on secondary reporting of officials' public statements and government-sourced statistics, a gap recorded in the gaps register against both of the relevant claims.

Outlook

Whether the proposed legal presumptions or single-judge adjudication model advance to a bill or gazette instrument is the key marker to watch. The STR and gaming-crime trend data will remain a relevant backdrop against which any eventual legislative change is assessed, and absence of a primary instrument this cycle should be read as an evidentiary gap rather than an indication the reform has stalled or advanced.

11 Oct 2026 · fim-2026-10-11

AML/CTF Regime

Macau's AML/CFT regime, unchanged since 2006, is now the subject of a government consultation proposing a central beneficial-ownership register, a virtual-asset proceeds-of-crime classification enabling freezing powers, whistleblower protection, and tiered administrative penalties. This would be the first serious regulatory overhaul of Macau's AML/CFT architecture in two decades, though it remains at consultation stage and corroborated only by secondary reporting. Hong Kong's Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615) VASP perimeter is proposed for extension to custody, advisory and asset-management activities, integrating AML/CFT duties into licensing from authorisation, per the government's 6 October 2026 reaffirmation.

Cambodia, meanwhile, continues to intensify AML and anti-scam-compound enforcement ahead of a fresh FATF/APG evaluation cycle, seeking to avoid a third grey-listing after prior listings tied to casino-sector money-laundering vulnerabilities. The casino and remittance sector has been identified as a core money-laundering vulnerability by FATF/APG since 2017, and cyber-scam-compound exposure -- scam operations running from converted casino properties -- persists as a live reputational and enforcement concern for Cambodian authorities. At the broader FATF level, the June 2026 plenary added Bosnia and Herzegovina and Iraq to the grey list and removed Algeria and Namibia, while the black list remained unchanged at Iran, North Korea and Myanmar; neither Hong Kong nor Macau appears on either list, though Laos, Nepal, Papua New Guinea and Vietnam remain under increased monitoring within the bloc.

Outlook

Cambodia's next FATF/APG evaluation outcome will be the clearest near-term test of whether its intensified enforcement effort succeeds in avoiding a third grey-listing. Macau's AML/CFT overhaul and Hong Kong's VASP perimeter extension both remain pre-enactment and merit continued tracking toward their respective enactment or gazetting milestones.

4 Oct 2026 · fim-2026-10-04

AML/CTF Regime

Hong Kong's Anti-Money Laundering Ordinance (Cap. 615) Part 5B perimeter continues to widen this cycle, with the Financial Services and the Treasury Bureau and the Securities and Futures Commission having completed consultation conclusions on extending licensing to virtual-asset dealing, custody, advisory and asset-management services, with a bill targeted for the Legislative Council in 2026, held at probable confidence. The current licensing coverage under Part 5B reaches only centralised virtual-asset trading platforms, leaving dealing, custody, advisory and management activity outside the licensed Anti-Money Laundering and Counter-Terrorist Financing perimeter pending enactment of the new bill. This sits alongside the operational stablecoin issuer-licensing regime under the Stablecoins Ordinance, where the Hong Kong Monetary Authority's grant of the first two licences, to Anchorpoint Financial and HSBC effective 10 April 2026, brings issuance activity under a supervised Anti-Money Laundering and Counter-Terrorist Financing and prudential gateway, confirmed. Together these describe a regime that is actively extending its reach across the digital-asset value chain rather than remaining static at the issuance layer alone.

In Macau, the Anti-Money Laundering and Counter-Terrorist Financing enforcement architecture under the 2022 revised Gaming Law shows continuity rather than escalation. Casino concessionaires filed 3,603 Suspicious Transaction Reports in 2025, a 6.1 percent decline year on year, while the Gaming Inspection and Coordination Bureau has opened 22 administrative infraction cases since the 2022 reform, of which five have been sanctioned, ten archived and seven remain pending, held at probable confidence. This is read as the continuation of an established administrative-enforcement cadence rather than a new structural development, and the modest decline in reporting volume does not, on the evidence available, indicate either a tightening or a loosening of the underlying regime.

At the jurisdictional level, Hong Kong's standing within the Financial Action Task Force and Asia/Pacific Group on Money Laundering mutual-evaluation calendar remains unchanged, with the next on-site evaluation not scheduled until November 2029 and plenary discussion in June 2030, confirmed; no re-rating is expected within the current cycle.

Outlook

The Anti-Money Laundering Ordinance amendment is the principal near-term regime item to track, with a targeted Legislative Council introduction in the second half of 2026, as scheduled, and a half-year uncertainty band on that estimate. Its passage would close the dealing, custody, advisory and management gap in the current licensing perimeter. Macau's administrative-enforcement cadence under the 2022 revised Gaming Law is expected to continue at its current pace absent a new legislative trigger, and Hong Kong's mutual-evaluation position is not expected to move before 2029.

D8 Commercial Activity

no_change

No D8 commercial-activity finding attaches to this bloc this cycle.

Regulatory horizon
No dated horizon items this cycle. 4 items tracked without a confirmed date.
4 pending date · baseline fim-2026-07-09
Role action cards
MLRO

A regional typology compilation pending adoption flags virtual asset service providers as a material secondary laundering channel across Asia-Pacific, including a cross-border scam-compound pattern.

The finding is pattern recognition for risk assessment and monitoring calibration, not yet a finalised standard, since the compilation remains marked for adoption. Firms with exposure in China, Hong Kong, or Chinese Taipei should treat the documented scam-compound pattern as an indicator to watch in transaction-monitoring design ahead of formal adoption.

1 evidence refs
Compliance

Asia-Pacific has no binding region-wide anti-money-laundering instrument, and the regions mutual-evaluation schedule shows no near-term change.

Compliance programmes referencing a regional rulebook for Asia-Pacific should note none exists; the applicable reference points remain the global Financial Action Task Force lists and each members own national regime as assessed under the Asia/Pacific Group's mutual-evaluation cycle.

2 evidence refs
Legal

No Asia-Pacific jurisdiction moved on the global increased-monitoring or call-for-action lists at the October 2026 Plenary.

Enhanced-due-diligence trigger lists referencing these designations are unchanged for Asia-Pacific counterparties this cycle; the four removals and the unchanged three-name call-for-action list both concern jurisdictions outside the region.

1 evidence refs
Board

The regions anti-money-laundering exposure is structurally stable, with the next scheduled formal review of Hong Kong and Macao not due before 2029.

No material near-term regulatory escalation is indicated for the regions two most closely scrutinised financial centres; the open item for board attention is the pending formal adoption of the regional typologies report covering the virtual-asset channel.

1 evidence refs
CTO

A cross-border scam-compound pattern spanning China, Hong Kong, and Chinese Taipei was documented as a virtual-asset laundering channel in a regional typology compilation pending adoption.

Platform and monitoring architecture handling payment or custody flows in these corridors should treat the documented pattern as an input to risk-scoring design, with the caveat that the underlying compilation is not yet finalised.

1 evidence refs
Risk

Virtual asset service providers are recorded as a material secondary, rather than primary, laundering channel in the regions own typology work this cycle.

The eleven-percent case-study share gives a proportionality anchor for weighting virtual-asset exposure against other channels documented in the same compilation; the regional architecture otherwise remains stable with no escalation signal.

2 evidence refs
Operations

No change to list-based screening triggers for Asia-Pacific counterparties this cycle.

The global increased-monitoring list contracted by four names and the call-for-action list held at three, none of them Asia-Pacific jurisdictions, so screening-list inputs referencing these designations require no update specific to Asia-Pacific counterparties this cycle.

1 evidence refs
Audit

The regions mutual-evaluation review cycle for Hong Kong and Macao is scheduled out to 2029, with no interim documentation obligation this cycle.

Control-testing scope tied to regional mutual-evaluation outcomes has no near-term trigger; the pending adoption of the typologies report is the item to monitor for when it next becomes a citable reference for audit purposes.

1 evidence refs
Scenario sketches

Illustrative pathway: AMLA-style supervisory consolidation as a contrast case for region-wide architecture

Illustrative scenario for analytical orientation only. Elsewhere, the move from purely national anti-money-laundering supervision toward a hybrid direct and indirect supervisory model under a dedicated regional authority, sitting alongside a directly applicable regulation and a transposed directive, illustrates one structural path a bloc can take toward binding region-wide architecture. Asia-Pacific has not taken this path and shows no indication of doing so; the Asia/Pacific Group remains a mutual-evaluation body rather than a supervisory authority. This sketch illustrates the structural contrast only, as a way of framing what the absence of such an authority in Asia-Pacific structurally means for cross-border obliged entities operating there, and should not be read as a forecast that any such authority is contemplated for the region.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architectureno_changeNo material change surfaced this cycle for this bloc.
T2 · EU AML Package / AMLAno_changeNot applicable to this geographic bloc; neither HK nor MO is an EEA member.
T3 · FATF Grey Listmaterial_changeFATF's 30 October 2026 Plenary removed Bulgaria, Cote d'Ivoire, DRC and Monaco from increased monitoring; Lao PDR remains listed; Mexico and United States mutual evaluations were adopted for December 2026 publication.
T4 · Beneficial-Ownership Register Statusno_changeNo HK or MO beneficial-ownership register development surfaced within the window.
T5 · Crypto & Digital-Asset IntegritywatchAPG's 2025 regional typologies compilation (pending adoption) continues to document VASP-channel laundering case studies region-wide.
T6 · Sanctions Regime Divergenceno_changeNo EU/US/UK autonomous-listing divergence event touching APAC members was located this cycle.
Registers

Enforcement actions

  • 23 Apr 2026
  • 14 Oct 2025
  • 4 Jul 2025
  • 1 May 2025
  • 12 Mar 2026
  • 1 Nov 2025
  • 1 Apr 2026
  • 4 Jul 2025
  • 14 May 2026
  • 26 May 2026
  • 26 May 2026
  • 1 Jan 2026
  • 28 Sep 2026
  • OFAC designated Senator Kok An and 28 associated individuals/entities for operating a casino-and-compound network across Sihanoukville and Poipet used for digital-asset investment fraud, human trafficking and money laundering. 23 Apr 2026
  • The US and UK jointly designated the Prince Group conglomerate, its chairman Chen Zhi, and subsidiary Jin Bei Group for operating Cambodia-wide scam compounds involving forced labour and extortion; a £12m London mansion was frozen. 14 Oct 2025
  • MAS imposed S$27.5m ($21.5m) in penalties on nine banks for AML control lapses connected to Singapore's largest-ever money-laundering case (the 2023 S$3bn bust). 4 Jul 2025
  • FinCEN designated Cambodia-based Huione Group under Section 311 of the USA PATRIOT Act as a primary money-laundering concern, following identification of over $4bn in laundered proceeds including DPRK cyber-heist funds. 1 May 2025
  • OFAC designated a DPRK IT-worker fraud network, including a Vietnam-based crypto facilitator, for generating revenue funding North Korea's WMD and ballistic-missile programs via crypto conversion of illicit earnings. 12 Mar 2026
  • OFAC designated the DKBA armed group and associates for operating cyber-scam compounds in Myanmar's Karen State (Tai Chang, Huanya, KK Park) that traffic and torture workers to conduct fraud against Americans. 1 Nov 2025

Sanctions changes

  • 23 Apr 2026
  • 14 Oct 2025
  • 14 Oct 2025
  • 23 Oct 2025
  • 23 Apr 2026
  • 23 Apr 2026
  • 14 Oct 2025
  • 23 Oct 2025
  • 23 Apr 2026
  • 23 Apr 2026
  • 12 Mar 2026
  • 1 Apr 2026
  • 28 Sep 2026
  • OFAC designated 29 individuals/entities in Senator Kok An's Cambodian scam-center network, including casino operators and Heng Feng Cambodia Bank. 23 Apr 2026
  • US and UK jointly designated Prince Group, Chen Zhi and Jin Bei Group Co. Ltd, coordinated to maximize impact across both sanctions regimes. 14 Oct 2025
  • EU's 19th Russia sanctions package listed two Hong Kong/UAE-based oil trading companies and eight banks/traders from Tajikistan, Kyrgyzstan, UAE and Hong Kong for circumventing EU sanctions, alongside the A7A5 Russian-linked stablecoin. 23 Oct 2025
  • EU's 20th Russia sanctions package listed Indonesia's Karimun Oil Terminal as a third-country port instrumental to shadow-fleet circumvention, alongside 46 additional vessel listings (11 delisted). 23 Apr 2026
  • HM Treasury's March 2026 amendment regulations narrowed the UK MLR Regulation 33 mandatory enhanced-due-diligence trigger so that only FATF's Call-for-Action (blacklist) jurisdictions — not the full Increased Monitoring grey list — automatically require EDD. 25 Mar 2026

Regulatory horizon (register)

  • Hong Kong AMLO amendment — VA dealing, custody, advisory, asset-management licensing
  • APG 2025 Yearly Typologies Report formal adoption
  • FATF October 2026 Plenary review of Cambodia AML/CFT trajectory
  • HKMA second-round stablecoin issuer licensing
  • Hong Kong AMLO amendment: VA dealing, custody, advisory and asset-management licensing
  • Hong Kong virtual-asset licensing amendment (custody/advisory/asset-management, AML/CFT integrated)
  • Macau AML/CFT framework overhaul (BO register, virtual-asset freezing, whistleblower protection, tiered penalties)
  • Hong Kong virtual-asset licensing bill amendment (trading, custody, advisory, asset management)
  • APG Global Fifth Round Mutual Evaluation Schedule - Macao technical-compliance submission
  • APG Global Fifth Round Mutual Evaluation Schedule - Macao, China technical-compliance submission
  • FATF October 2026 Plenary grey-list review (PNG, Lao PDR, Nepal, Vietnam)
  • Myanmar FATF countermeasure determination deadline
  • FATF mutual evaluation of Australia on-site assessment begins
  • Australia ASIC Digital Assets Framework Act full commencement
  • Hong Kong SFC virtual-asset dealer/custodian licensing regime rollout
  • Future EU maritime services ban on Russian oil transport (G7-coordinated)

Active schemes

  • [CRITICAL] Southeast Asian scam-compound pig-butchering economy
  • [CRITICAL] DPRK crypto-theft-to-WMD financing pipeline
  • [HIGH] Russian dark-fleet oil/LNG transshipment via APAC transit points
  • [HIGH] Singapore private-banking / shell-company laundering ring
  • [CRITICAL] Huione Group Cambodia-based stablecoin laundering marketplace
  • Passport-of-convenience and nominee shell layering (Vanuatu/Palau)
Sources
  1. News
  2. https://www.chainalysis.com/blog/asian-scam-centers-crypto-fraud-april-2026/
  3. https://www.amnesty.org/en/latest/news/2026/04/cambodia-casinos-get-state-approval-despite-links-to-human-rights-abuse-at-scamming-compounds/
  4. https://kyckr.com/guides-and-reports/singapore-corporate-register-acra-guide
  5. https://progressivevoicemyanmar.org/2026/02/28/rare-earths-war-crimes-and-the-urgent-need-for-increased-sanctions
  6. https://www.techtimes.com/articles/321940/20260729/crypto-hacks-hit-all-time-high-north-korea-drains-over-600m-ai-agents-become-new-target.htm
  7. https://www.fatf-gafi.org/en/countries/black-and-grey-lists.html
  8. https://www.fincen.gov/news/news-releases/fincen-issues-supplemental-alert-fuel-smuggling-and-tax-evasion-schemes-southern
  9. https://www.austrac.gov.au/about-us/record-our-actions/enforcement-actions-taken
  10. https://www.mas.gov.sg/regulation/enforcement/enforcement-actions/2026/mas-revokes-the-major-payment-institution-licence-of-bsquared-technology-pte-ltd
  11. https://www.hkma.gov.hk/eng/news-and-media/press-releases/2026/04/20260410-4/
  12. Monetary Authority of Singapore
  13. Chainalysis
  14. Amnesty International
  15. Kyckr
  16. Progressive Voice Myanmar
  17. Tech Times (citing TRM Labs/Blockaid)
  18. FATF
  19. FinCEN
  20. AUSTRAC
  21. Hong Kong Monetary Authority
  22. FATF/APG
  23. FATF
  24. FATF
  25. ComplyAdvantage
  26. wearenotforsale.org
  27. casinoguardian.co.uk
  28. yogonet.com
  29. kirkland.com
  30. forest-trends.org
  31. progressivevoicemyanmar.org
  32. bti-project.org
  33. charltonslaw.com
  34. about.hsbc.com.hk
  35. Stablecoins Ordinance (Ord. No. 17 of 2025)
  36. Guideline on Anti-Money Laundering and Counter-Financing of Terrorism (For Licensed Stablecoin Issuers)
  37. Implementation of regulatory regime for stablecoin issuers
  38. FATF
  39. APG
  40. UNSC CTC
  41. PBS
  42. Fortune
  43. AGB
  44. Financial Action Task Force
  45. Business & Human Rights Resource Centre
  46. Grokipedia
  47. Companies Registry, HKSAR Government
  48. HKMA
  49. Eastern Herald
  50. InsideBitcoins
  51. APG Secretariat
  52. https://www.fatf-gafi.org/en/countries/detail/Hong-Kong-China.html
  53. https://www.fatf-gafi.org/en/calendars/assessments.html
  54. https://eservices.customs.gov.hk/MSOS/download/guideline/AMLO_Guideline_en.pdf
  55. https://news.worldcasinodirectory.com/macau-regulator-opens-22-cases-against-casino-concessionaires-122063
  56. https://gamblingmaps.org/map/regulations/cambodia/for-operators
  57. worldcasinodirectory.com
  58. casinos.org
  59. Sumsub
  60. amluae.com
  61. Asia Gaming Brief
  62. https://agbrief.com/news/macau/15/10/2026/macau-prosecutor-urges-legal-changes-over-hurdles-in-proving-illegal-money-exchange-business/
  63. https://focusgn.com/asia-pacific/macau-records-12-3-rise-in-gaming-related-crimes-in-nine-months
  64. https://www.cr.gov.hk/en/legislation/scr/overview.htm
  65. https://www.state.gov/reports/2026-investment-climate-statements/laos
  66. https://atfcp.com/2026/10/13/us-treasury-sanctions-15-cartel-linked-individuals-and-companies-over-money-laundering-illicit-trade-and-corruption/
  67. https://www.justice.gov/opa/pr/homeland-security-task-force-arrests-alvaro-pulido-vargas-face-charges-multibillion-dollar
  68. https://www.yogonet.com/international/news/2026/09/09/126293-cambodia-tightens-casino-rules-with-new-license-standards-and-october-proxy-betting-ban
  69. https://www.fatf-gafi.org/en/news/fatf-week-october-2026.html
  70. FATF
  71. FATF
  72. FATF / APG
  73. Asia/Pacific Group on Money Laundering (APG)
  74. Outcomes FATF Plenary, 17-19 June 2026
  75. Assessments
  76. "Black and grey" lists
  77. News
  78. Mutual Evaluations
  79. FATF changes its grey listing criteria to further focus on risk
  80. Jurisdictions under Increased Monitoring - 13 February 2026
  81. Publications
  82. Jurisdictions under Increased Monitoring - 13 June 2025
  83. Jurisdictions under Increased Monitoring - 19 June 2026
  84. High-risk and other monitored jurisdictions
  85. High-Risk Jurisdictions subject to a Call for Action - 19 June 2026
  86. FATF
  87. History of the FATF
  88. High-Risk Jurisdictions subject to a Call for Action - 13 February 2026
  89. U.S. Crackdown on Southeast Asian Crypto Scam Centers
  90. OFAC Sanctions Cambodian Senator and Scam Center Network Targeting Americans With Digital Asset Fraud | TRM Labs
  91. UK and US take joint action to disrupt major online fraud network - GOV.UK
  92. Transnational Criminal Organizations Designations; Burma-related Designations; Global Magnitsky Designations; Cyber-related Designations | Office of Foreign Assets Control
  93. OFAC Sanctions Tracker: How Sanctions Impact Crypto Crime - Chainalysis
  94. Sanctions Programs and Country Information | Office of Foreign Assets Control
  95. Burma-Related Sanctions | Office of Foreign Assets Control
  96. U.S. Cracks Down on Myanmar Rebel Group Behind $10 Billion Scam | OCCRP
  97. Transnational Criminal Organizations Designations; Issuance of TCO-related General License | Office of Foreign Assets Control
  98. US Sanctions Southeast Asian Scammers Who Target Americans | OCCRP
  99. Singapore Recovers Billions of Dollars in Money Laundering Case | OCCRP
  100. Australia’s First Crypto Laundering Conviction | TRM Labs
  101. Australian Casino Group to Pay AUD450 Million in Money Laundering Settlement | OCCRP
  102. Singapore's measures to counter money laundering, terrorist financing and proliferation financing
  103. As Singaporean Police Investigated Money Laundering, Two Men Bought Up London Properties — And Dinosaur Bones | OCCRP
  104. Singapore Ends Pursuit of Money Launderers At Large Who Forfeited $1.4 Billion - Bloomberg
  105. UBS, Citi Among Banks Punished in Singapore Laundering Saga - Bloomberg
  106. As Singapore Police Probe Money Laundering Ring, a Private Equity Entrepreneur Disappears | OCCRP
  107. Singapore $1.8 Billion Money Laundering Case Exposes Gaps in Defense - Bloomberg
  108. Singapore Charges Ex-Bankers with Abetting $2.2 Bn Money Laundering Ring | OCCRP
  109. The Bybit Hack: Following North Korea’s Largest Exploit | TRM Labs
  110. 2025 Crypto Theft Reaches $3.4 Billion
  111. The largest theft in history - following the money trail from the Bybit Hack
  112. Lazarus $1.5 Billion Hack on Bybit Shakes Up the Crypto World (ETH) - Bloomberg
  113. North Korea Stole $2 Billion of Crypto This Year, Report Says - Bloomberg
  114. North Korea's crypto hackers have stolen over $2 billion in 2025
  115. Bybit Hit by Crypto’s Worst Hack With Almost $1.5 Billion Stolen - Bloomberg
  116. North Korea Suspected of $30 Million Crypto Hack, Yonhap Says - Bloomberg
  117. OFAC Targets DPRK IT Workers Using Crypto
  118. What are OFAC crypto sanctions?
  119. Crypto regulatory affairs: Hong Kong regulator names 11 crypto firms progressing through licensing process
  120. Hong Kong gears up for new regulatory regime for crypto exchanges
  121. Crypto regulatory affairs: Hong Kong opens access to global liquidity pools
  122. Crypto regulatory affairs: Hong Kong regulator lays out cryptoasset roadmap
  123. Crypto regulatory affairs: Hong Kong doubles down on innovation push with new policy statement on digital assets, and launch of consultation on dealers and custodians
  124. Crypto regulatory affairs: Hong Kong plans to create panel for licensed crypto exchanges to facilitate regulatory consultation
  125. Crypto Regulatory Affairs: Hong Kong concludes digital asset consultation ahead of new regulatory framework launch
  126. What Is a VASP? Virtual Asset Service Provider - Chainalysis
  127. Hong Kong Country Guide | Elliptic
  128. HKMA finalizes stablecoin regulatory framework: What financial institutions need to know
  129. Jurisdictions under Increased Monitoring - 21 February 2025
  130. Jurisdictions under Increased Monitoring - 24 October 2025
  131. Money Laundering Advisory Notice: June 2026 - GOV.UK
  132. Syria
  133. Jurisdictions under Increased Monitoring - June 2024
  134. Australia's Crypto Crossroads - Chainalysis
  135. Anti-money laundering and counter-terrorist financing measures - Australia
  136. Anti-Money Laundering and Counter-Terrorism Financing Rules
  137. Global Crypto Policy Review Outlook 2025/26 Report | TRM Labs
  138. Anti-money laundering and counter-terrorist financing measures - Australia 7.
  139. Australia has a mature regime for combating money laundering and terrorist financing, but certain key areas remain unaddressed, says FATF
  140. Australia
  141. Anti-money laundering and counter-terrorist financing measures - Australia
  142. AUSTRALIA 1. How to find out if a natural or legal person ...
  143. Mutual Evaluation Report Australia - 2015
  144. Russia’s Airlines Skirt Sanctions to Keep Boeing, Airbus Jets Flying
  145. Complex Proliferation Financing and Sanctions Evasion Schemes FATF Report
  146. EU sanctions against Russia: questions and answers - Consilium
  147. SANCTIONS ADVISORY - Guidance for Shipping and ...
  148. EU adopts 19th package of sanctions against Russia - Finance
  149. FINANCING THE RUSSIAN WAR ECONOMY
  150. EU adopts 20th package of sanctions against Russia - Finance
  151. Russian Oil Bound for China Is Diverted as India Grabs More
  152. 19th package of sanctions against Russia: EU targets Russian energy, third-country banks and crypto providers - Consilium
  153. China and Russia’s Shadow Fleet Delivers Putin a Gas Lifeline
  154. Malaysia
  155. Consolidated assessment ratings
  156. Mutual Evaluation of Malaysia
  157. Mutual Evaluations
  158. Malaysia's measures to counter money laundering, terrorist financing and proliferation financing
  159. Documents - Financial Action Task Force (FATF)
  160. High-risk and other monitored jurisdictions
  161. Consolidated assessment ratings (2014 - 2026 assessments)
  162. FATF
  163. FATF
  164. Asia/Pacific Group on Money Laundering (APG)
  165. FATF/APG
  166. FATF/APG
  167. FATF
  168. FATF
  169. US Department of the Treasury (OFAC)
  170. US Department of the Treasury (OFAC)
  171. UK Foreign, Commonwealth & Development Office / Home Office
  172. HM Treasury
  173. Council of the European Union
  174. Council of the European Union
  175. European Commission
  176. TRM Labs
  177. Chainalysis
  178. Chainalysis
  179. OCCRP
  180. OCCRP
  181. Bloomberg
  182. Bloomberg
  183. Chainalysis
  184. Bloomberg
  185. Bloomberg
  186. Chainalysis
  187. OCCRP
  188. OCCRP
Coverage gaps
fim-int-2026-07-07-G001: Smaller Pacific APG micro-states (N…
fim-int-2026-07-07-G001: Smaller Pacific APG micro-states (Nauru, Marshall Islands, Niue, Palau, Timor-Leste) were referenced only at title level and require independent per-jurisdiction baseline research if split into their own dispatches. [resolved]
fim-int-2026-07-07-G002: The ratified typology library (sent…
fim-int-2026-07-07-G002: The ratified typology library (sentinel-typology-library-v1.0.json) was not supplied in this cycle's context, preventing typology_observations matching against active schemes with strong typology-consistent patterns (pig-butchering, stablecoin layering, passport-of-convenience structuring). [resolved]
fim-int-2026-07-07-G003: The underlying publication_gate blo…
fim-int-2026-07-07-G003: The underlying publication_gate block reports schema_valid=false and multiple unmet source-floor metrics (jurisdiction_source_floor_met=false, tier_a_b_national_primary_pct=0.0) that were not reconciled with the profile-level source_quality block reporting floor_met=true; root cause of this discrepancy was not established this cycle. [resolved]
fim-int-2026-07-07-G004: No EU/OFSI equivalent designation e…
fim-int-2026-07-07-G004: No EU/OFSI equivalent designation exists for the Hong Kong entities listed under the EU 19th/20th Russia sanctions packages; whether a matching US/UK designation is forthcoming is not established this cycle. [resolved]
fim-int-2026-07-07-G005: Cambodia's domestic prosecutorial r…
fim-int-2026-07-07-G005: Cambodia's domestic prosecutorial response (if any) to the Kok An/Prince Group designations was not documented this cycle, leaving the scale of the F1 state-capture gap only partially quantified. [resolved]
fim-int-2026-07-07-G006: Specific citation detail (CFR part …
fim-int-2026-07-07-G006: Specific citation detail (CFR part / statutory instrument number) for several OFAC enforcement actions was not supplied by Research beyond programme-title references, limiting precision of obligation_refs citation fields. [resolved]
fim-int-2026-07-07-G007: No RegTech, AI/ML transaction-monit…
fim-int-2026-07-07-G007: No RegTech, AI/ML transaction-monitoring, perpetual-KYC or agentic-compliance development for APAC regulators (MAS, HKMA, AUSTRAC) was identified this cycle; D6 posture for the region remains unprofiled. [resolved]
fim-int-2026-08-05-G001: No direct OFAC/treasury.gov press-r…
fim-int-2026-08-05-G001: No direct OFAC/treasury.gov press-release URL was retrieved for the Cambodia designation this cycle; reliance on tier-2/tier-4 secondary reporting caps confidence at Assessed. [resolved]
fim-int-2026-08-05-G002: UAE over/under-invoicing TBML corri…
fim-int-2026-08-05-G002: UAE over/under-invoicing TBML corridor received no dedicated search this cycle; structural gap persists relative to LatAm/Mexico corridor coverage. [resolved]
fim-int-2026-08-05-G003: Only a single tier-4 source describ…
fim-int-2026-08-05-G003: Only a single tier-4 source describes MAS's AI-vulnerability supervisory messaging; no direct mas.gov.sg guidance document retrieved, and D6 coverage remains thin overall this cycle. [resolved]
fim-int-2026-08-05-G004: A tier-4 report of a US Treasury de…
fim-int-2026-08-05-G004: A tier-4 report of a US Treasury delisting action affecting Myanmar/North Korea-linked parties could not be confirmed against a primary OFAC/Treasury document this cycle. [resolved]
fim-int-2026-09-02-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-02-G001 ({'scheme': 'financial_integrity', 'value': 'D2'}): No APAC-specific beneficial-ownership registry primary source was reached this cycle. [resolved]
fim-int-2026-09-02-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-02-G002 ({'scheme': 'financial_integrity', 'value': 'D1'}): UN Panel of Experts, OFAC and OFSI Houthi/Yemen-linked channel checks were not actively queried this cycle given APAC-JID scope prioritisation. [resolved]
fim-int-2026-09-02-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-02-G003 ({'scheme': 'financial_integrity', 'value': 'D1'}): No primary OFAC press release was retrieved for the Kok An designation; confidence capped at Assessed pending primary-source confirmation. [resolved]
fim-int-2026-09-02-G004 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-02-G004 ({'scheme': 'financial_integrity', 'value': 'D3'}): No DICJ primary announcement was independently retrieved for the 2026 junket cap confirmation. [resolved]
fim-int-2026-09-02-G005 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-02-G005 ({'scheme': 'financial_integrity', 'value': 'D5'}): HKMA primary press release (hkma.gov.hk) for the April 2026 stablecoin licence grants was not reached this cycle; reserve/capital conditions attached to the licences remain unverified. [resolved]
fim-int-2026-09-02-G006 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-02-G006 ({'scheme': 'financial_integrity', 'value': 'D6'}): D6 Compliance Technology had no APAC-specific development sourced this cycle beyond the standing enforcement-gap position. [resolved]
fim-int-2026-09-14-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-14-G001 ({'scheme': 'financial_integrity', 'value': 'D1'}): OFAC's own formal designation notice for the sanctioned Cambodian senator has not yet been retrieved to upgrade sourcing from T3 press to a T1 anchor. [resolved]
fim-int-2026-09-14-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-14-G002 ({'scheme': 'financial_integrity', 'value': 'D2'}): No APAC-bloc-level material surfaced this cycle for D2 (beneficial ownership), D3 (enabler jurisdictions beyond the KH sub-finding), D4 (conflict finance), or D6 (compliance technology); structural bloc-level absence given APAC's geographic (non-regulatory) nature. [resolved]
fim-int-2026-09-14-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-14-G003 ({'scheme': 'financial_integrity', 'value': 'D7'}): APG 2025 Yearly Typologies Report status is pre-adoption; formal adoption date and any content changes versus the 2023 edition are not yet confirmed. [resolved]
fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-28-G001 ({'scheme': 'financial_integrity', 'value': 'D1'}): Primary FATF February 2026 Plenary statement not directly retrieved; PNG grey-listing sourced only from T3 secondary compliance vendor. [resolved]
fim-int-2026-09-28-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-28-G002 ({'scheme': 'financial_integrity', 'value': 'D4'}): D4 conflict finance has no material APAC-specific finding this cycle; coverage thin. [resolved]
fim-int-2026-09-28-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-28-G003 ({'scheme': 'financial_integrity', 'value': 'D6'}): D6 compliance technology has no material APAC-bloc finding this cycle. [resolved]
fim-int-2026-09-28-G004 ({'scheme': 'financial_integrity', '…
fim-int-2026-09-28-G004 ({'scheme': 'financial_integrity', 'value': 'D3'}): Primary OFAC 2018 Zhao Wei designation press release not directly retrieved this cycle; relies on T2/T4 secondary sourcing. [resolved]
fim-int-2026-10-04-G001: Laos, Mexico and Colombia Tier-D wa…
fim-int-2026-10-04-G001: Laos, Mexico and Colombia Tier-D watch jurisdictions were not reached this cycle due to pooled search-budget exhaustion, not confirmed no-change. [resolved]
fim-int-2026-10-04-G002: DICJ's own primary publication on 2…
fim-int-2026-10-04-G002: DICJ's own primary publication on 2025 STR figures and infraction-case outcomes was not directly retrieved; figures sourced via T4 aggregator reporting of a legislative reply. [resolved]
fim-int-2026-10-11-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-11-G001 ({'scheme': 'financial_integrity', 'value': 'D2'}): Primary consultation-paper text for Macau's AML overhaul was not retrieved this cycle; only secondary T3 reporting corroborates it. [resolved]
fim-int-2026-10-11-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-11-G002 ({'scheme': 'financial_integrity', 'value': 'D7'}): Laos, Papua New Guinea and Mexico/Colombia were not actively searched this cycle given pooled budget constraints. [resolved]
fim-int-2026-10-18-G001: No DICJ, Macau Gazette, HKMA or FAT…
fim-int-2026-10-18-G001: No DICJ, Macau Gazette, HKMA or FATF primary-instrument text was directly retrieved this cycle; Macau and Hong Kong findings rest on T2/T3 press reporting of officials' statements and government data. [resolved]
fim-int-2026-10-18-G002: Whether the October 2026 FATF plena…
fim-int-2026-10-18-G002: Whether the October 2026 FATF plenary changed Laos's grey-list status could not be established this cycle, as the outcome had not been published. [resolved]
fim-int-2026-10-25-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-25-G001 ({'scheme': 'financial_integrity', 'value': 'D1'}): No DICJ (Macau) or HYAB (Hong Kong) bulletin dated within 18-25 Oct 2026 could be retrieved within the search budget. [resolved]
fim-int-2026-10-25-G002: Russian sanctions-evasion architect…
fim-int-2026-10-25-G002: Russian sanctions-evasion architecture (T1) and EU AML Package (T2) standing trackers not actively refreshed this cycle given pooled union search budget. [resolved]
fim-int-2026-10-25-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-10-25-G003 ({'scheme': 'financial_integrity', 'value': 'D2'}): D2 Beneficial Ownership and D3 Enabler Jurisdictions coverage for HK/MO not researched this cycle. [resolved]
fim-int-2026-11-01-G001 ({'scheme': 'financial_integrity', '…
fim-int-2026-11-01-G001 ({'scheme': 'financial_integrity', 'value': 'D7'}): No dedicated primary-source AML/CFT architecture signal was located for Cambodia (KH) or Colombia (CO) within this seven-day window. [open]
fim-int-2026-11-01-G002 ({'scheme': 'financial_integrity', '…
fim-int-2026-11-01-G002 ({'scheme': 'financial_integrity', 'value': 'D7'}): Tier D check for Colombia (CO) yielded no dedicated primary-source signal within the window. [open]
fim-int-2026-11-01-G003 ({'scheme': 'financial_integrity', '…
fim-int-2026-11-01-G003 ({'scheme': 'financial_integrity', 'value': 'D7'}): Mexico FATF-GAFILAT mutual evaluation substantive rating withheld pending December 2026 publication. [open]
FIM-GAP-001 (D3): Despite five-plus rounds of escalating OFA…
FIM-GAP-001 (D3): Despite five-plus rounds of escalating OFAC/OFSI designations since September 2024, Cambodian state actors — including a sitting senator — have continued operating scam-compound infrastructure with rental income and casino-laundering services, and domestic prosecution has not matched the scale of the US/UK sanctions campaign.
FIM-GAP-002 (D4): Research from the Australian Strategic Pol…
FIM-GAP-002 (D4): Research from the Australian Strategic Policy Institute links Myanmar's junta to permitting and facilitating scam-compound projects that enrich military-aligned allies, blurring the line between the scam economy and conflict-adjacent regime financing.
FIM-GAP-003 (D5): Vietnam remains without an operative virtu…
FIM-GAP-003 (D5): Vietnam remains without an operative virtual-asset/VASP regulatory regime, a named strategic deficiency in its FATF action plan since June 2023, with deadlines that expired in May 2025.
FIM-GAP-004 (D2): Beneficial-ownership transparency regimes …
FIM-GAP-004 (D2): Beneficial-ownership transparency regimes remain underdeveloped across several APG grey-listed members; while Lao PDR has eliminated bearer shares, competent authorities across the grey-listed cohort still lack adequate, accurate, up-to-date beneficial-ownership information as a named action-plan item.
FIM-GAP-005 (D2): Australia's AML/CTF Act has historically e…
FIM-GAP-005 (D2): Australia's AML/CTF Act has historically excluded lawyers, accountants, real estate agents and trust/company service providers from AML/CTF obligations unless they separately provide a 'designated service' — a gap FATF identified as high-risk as early as 2015 and only now being closed through Tranche 2 reform alongside the Digital Assets Framework.
FIM-GAP-006 (D3): The UK's March 2026 MLR amendment narrows …
FIM-GAP-006 (D3): The UK's March 2026 MLR amendment narrows automatic mandatory enhanced due diligence to FATF Call-for-Action (blacklist) jurisdictions only, removing the automatic EDD trigger for full grey-list jurisdictions including Lao PDR, Nepal, PNG and Vietnam, even though FATF mutual evaluations remain a required risk factor under Regulation 33(6)(c).
FIM-GAP-007 (D3): This baseline does not carve out individua…
FIM-GAP-007 (D3): This baseline does not carve out individual per-JID coverage for smaller Pacific micro-states under APG assessment (Nauru, Marshall Islands, Niue, Palau, Timor-Leste); their FATF mutual evaluations are referenced only at title level and were not independently researched in depth for this bloc-level baseline.

Evidence

Confidence-tiered claims

Colombian Fiscalía, coordinating with US authorities, detained eight individuals across four cities for converting drug-cartel proceeds into cryptocurrency, one suspect allegedly processing over $42m [Source 1]
Probable · 1 source
91 casino licences revoked in April 2026 scam-centre crackdown [Source 1]
Probable · 1 source
FSTB/SFC completed consultation conclusions to extend AMLO licensing to VA dealing, custody, advisory and asset-management services; bill targeted for LegCo introduction in 2026 [Source 1]
Probable · 1 source
3,603 STRs filed in 2025, down 6.1% year-on-year; DICJ has opened 22 administrative infraction cases since 2022 revised Gaming Law (5 sanctioned, 10 archived, 7 pending) [Source 1]
Probable · 1 source
HKMA granted first two stablecoin issuer licences (Anchorpoint Financial, HSBC) effective 10 April 2026 [Source 1]
Probable · 1 source
Next mutual-evaluation on-site scheduled November 2029, plenary discussion June 2030; no re-rating expected this cycle [Source 1]
Probable · 1 source
A central register of beneficial ownership for companies and legal entities operating in Macau would be established [Source 1]
Probable · 1 source
Virtual assets connected to criminal conduct would be classified as goods or advantages derived from unlawful acts, enabling freezing [Source 1]
Probable · 1 source
Licensing extended to trading, custody, advisory and asset-management VASP services with integrated AML/CFT requirements, to be submitted by end-2026 [Source 1]
Probable · 1 source
Cambodia steps up AML and anti-scam-compound enforcement ahead of new FATF/APG evaluation, seeking to avoid a third grey-listing [Source 1]
Probable · 1 source
Bosnia and Herzegovina and Iraq added; Algeria and Namibia removed at June 2026 plenary; black list unchanged (Iran, North Korea, Myanmar) [Source 1]
Probable · 1 source
Objective criteria or legal presumptions for the 'business' element of the unlicensed currency-exchange-for-gambling offence; single-judge adjudication proposed [Source 1]
Probable · 1 source
Gaming operators filed 2,968 STRs Jan-Sep 2026 (+7.9% y/y), 71.7% of the city's 4,138 total STRs; gaming-related crime rose 12.3% y/y to 1,951 cases [Source 1]
Probable · 1 source
4 individuals and 11 entities tied to Cartel del Noreste designated under EO 14059/13224 for laundering proceeds via quarter-horse racing and construction/fuel front companies in Nuevo León, Mexico [Source 1]
Probable · 1 source
Colombian national charged and appeared in connection with laundering more than $2bn tied to Venezuelan government bribery schemes [Source 1]
Probable · 1 source
Nationwide suspension of casino online/proxy betting from October 2026; 20 casino licences revoked and 29 suspended of 195 inspected; 86 scam compounds dismantled [Source 1]
Probable · 1 source
Remains on FATF grey list per 19 June 2026 statement; October 2026 plenary outcome not yet published [Source 1]
Probable · 1 source
Unchanged this cycle; closed-register SCR regime under Companies (Amendment) Ordinance 2018 remains in force since 1 March 2018 [Source 1]
Probable · 1 source
HSBC launched RedCoin, a HKD-referenced stablecoin for 3.3m PayMe users, under HKMA FRS02 licence (granted 10 April 2026) under the Stablecoins Ordinance (Cap. 656) [Source 1]
Probable · 1 source
Unlicensed money exchange for gambling cases rose 11.9% YoY to 404 cases in first nine months of 2026, second-largest gaming-crime category [Source 1]
Probable · 1 source
Cambodia's National Bank and CAFIU intensifying enforcement against cross-border crime and scam-compound-linked money laundering, aiming to avoid a third FATF grey-list placement [Source 1]
Probable · 1 source
Laos remains a 'Jurisdiction under Increased Monitoring' since October 2021, confirmed unchanged at the 19 June 2026 Plenary; next review at 28-30 October 2026 Plenary [Source 1]
Probable · 1 source
OFAC designated 56 individuals and entities tied to the Sinaloa Cartel and Tren de Aragua, including alleged links to former Mexican officials (28 September 2026) [Source 1]
Probable · 1 source
Bulgaria, Cote d'Ivoire, DRC, Monaco removed 30 Oct 2026 [Source 1]
Probable · 1 source
Probable · 1 source
13 case studies (11%) [Source 1]
Probable · 1 source
Bulgaria, Cote d'Ivoire, Democratic Republic of the Congo and Monaco removed from increased monitoring at the 30 October 2026 Plenary. [Source 1]
Probable · 1 source
Remains under FATF increased monitoring; progress reviewed since June 2026 but not among the four jurisdictions delisted 30 October 2026. [Source 1]
Probable · 1 source
FATF-GAFILAT mutual evaluation of Mexico adopted at 30 October 2026 Plenary; substantive report publication due December 2026. [Source 1]
Probable · 1 source
APAC is a geographic bloc with no binding regional AML/CFT instrument; APG is the only region-wide architecture, running typology research and mutual evaluations (Macao Global Fifth Round technical-compliance submission due 2029; Hong Kong next possible onsite period 2029-11-01). [Source 1]
Probable · 1 source
APG's 2025 Yearly Typologies Report (for adoption) records VASPs as the channel in 11% of the region's case studies, including a cross-border scam-compound case spanning China, Hong Kong and Chinese Taipei. [Source 1]
Probable · 1 source