AI Governance

FinCEN issued Alert FIN-2026-Alert005 on September 3, 2026, urging financial institutions to detect and report suspicious activity tied to Southeast Asian scam centers and the laundering of their proceeds. The Alert supplements FinCEN's September 2023 "pig butchering" Alert, adds a specific SAR key term, and highlights the role of guarantee marketplaces, Chinese money laundering networks, and Huione Group. Compliance teams should update monitoring, typologies, and SAR procedures now.

FINRA has filed a proposed rule change (SR-FINRA-2026-018) that would extend the maximum Rule 2165 temporary hold from 55 to 145 business days. It would also create new Rule 2166, a safe harbor allowing delays of up to 10 business days on suspected fraud for customers of any age, and would make Rule 4512 trusted contact flexibility changes. Compliance teams should begin assessing procedure, training, and system impacts now, because the SEC is soliciting comments and the final text and effective date are not yet set.

The Danish Financial Supervisory Authority (DFSA) issued a public warning on September 3, 2026 against Corpholding Inc., which is suspected of running a boiler room operation and soliciting Danish consumers without authorization. Compliance teams should treat this as a fraud typology and sanctions-adjacent intelligence item, and update monitoring, screening, and customer-protection controls accordingly.

FINRA has filed a proposed amendment to Rule 4522(b)(1) that would except uncertificated investments in unregistered investment funds from the monthly position statement and reconciliation requirement, replacing it with a quarterly cadence. The change codifies and broadens the relief in a January 2026 SEC staff no-action letter that covered only capital balance funds. Carrying and clearing firms that custody private fund interests should assess how the exception affects their reconciliation procedures, while remembering that SEA Rule 17a-13 quarterly counts and the "prudent business practice" standard still apply.

The Norway Financial Supervisory Authority (Finanstilsynet) has listed "9M AI" in its warnings, citing a UK Financial Conduct Authority (FCA) warning as the source. Compliance teams should treat the entity and its associated names and domains as a potential unauthorized or fraudulent actor and screen for any exposure.

The Norway Financial Supervisory Authority (Finanstilsynet) has republished a warning originating from the UK Financial Conduct Authority (FCA) about "PSP-Claimback," a clone of an FCA-authorized firm. Compliance teams should treat this as a fraud and impersonation alert, and take steps to prevent customers and the institution from being exposed to the scam.

BaFin has issued a warning about rollincapital(.)com, whose unknown operators are suspected of offering financial and securities services in Germany without authorization. FINMA, the Swiss regulator, has already issued a corresponding warning. Compliance teams should treat the site as a high-risk counterparty and update screening and fraud controls accordingly.