Privacy Matters: Top KYC & AML Insights of the Week
Welcome to the latest edition of Privacy Matters, your trusted source for updates on KYC, AML, fraud prevention, and privacy-enhancing technologies. Here’s what’s been happening recently:
Cambodia Accused of Enabling Brutal Scam Industry
Amnesty International warns the Cambodian government is overlooking human rights abuses in a scam industry generating over $12.5 billion annually (half of GDP), with 53 identified scam centres repurposed from casinos and hotels where victims – including children as young as 13 – are trafficked and subjected to prison-like conditions, electric shocks, and beatings. Despite a government task force, most centres remain operational, and survivors report deepfake-enabled romance and financial scams under violent quotas.
Google Fined $314 M for Passive Data Harvesting
A California court found that Google misused Android users’ cellular data by transmitting system logs, network metrics, and app lists over cellular when devices were idle rather than waiting for Wi-Fi, and ordered the company to pay $314 million in a class-action verdict. In tests, a Samsung Galaxy S7 exchanged 8.88 MB/day with Google (94 % of transfers, 389/day) compared to 900 passive transfers in 24 hours by Chrome, while an iPhone showed significantly lower idle data use. Google plans to appeal, asserting these transfers are critical to device security and performance and are disclosed in its terms of service.
Donegal Credit Union Fined €36,000 for Unauthorised Cash Acceptances
Swilly Mulroy Credit Union was fined €36,000 by the Central Bank for soliciting and accepting cash from non-members, in breach of the Criminal Justice (Money Laundering and Terrorist Financing) Act 2010 by failing to perform required AML checks. Between January 2014 and June 2021, it processed €8.75 million across 2,329 cash lodgements without first depositing funds into members’ accounts. The board, aware of the heightened risk since 2015, did not act until a new management team ceased the practice in 2021; a 2022 AML inspection triggered the 2023 enforcement investigation.
Application Fraud Surge in Digital Banking
Visa’s latest research reveals a sharp rise in application fraud and identity theft as criminals exploit digital lending with 244% more document forgeries year-over-year and 40% of biometric fraud driven by deepfakes in 2024. Financial institutions, facing undetected fraud embedded in credit losses, must deploy multi-layered defences – from enhanced client onboarding and AI-driven risk scoring to real-time biometric verification and intelligence sharing – to counter these evolving threats.
FinCEN Labels Three Mexican Institutions as Money Laundering Concerns
On June 25, 2025, FinCEN issued orders designating CIBanco S.A., Intercam Banco S.A., and Vector Casa de Bolsa S.A. de C.V. as financial institutions of primary money laundering concern under the FEND Off Fentanyl Act, targeting their role in laundering opioid trafficking proceeds and prohibiting US banks from transacting with them 21 days after Federal Register publication.
AML & KYC Spending to Soar to $2.9 Billion in 2025
Global spend on AML/KYC data & services is projected to hit $2.9 billion in 2025, up 12.3% year-on-year and marking a 22% CAGR over the past five years, with half of all investment coming from the Americas – driven by AI-powered solutions that detect new correlations to combat financial crime.
Barcelona Demands Airbnb Remove Illegal Rentals in 48 Hours
Barcelona City Council has proposed that Airbnb must remove illegal tourist rental listings within 48 hours, provide the city with unlimited access to its published listings, and establish improved communication channels – all on a non-negotiable basis. First Deputy Mayor Laia Bonet warned that this draft agreement, replacing the 2018 deal, will only be accepted if Airbnb enforces rigorous control over listings and ensures every property has a valid HUT registration number.
Stay compliant, stay secure, and have a great week!