Anti-Money Laundering compliance programs
Anti-money laundering compliance in the Technology, AI and Competition sector is no longer a peripheral concern for payments-adjacent firms. The Financial Crimes Enforcement Network has expanded its interpretation of "financial institution" under 31 C.F.R. § 1010.100 in ways that pull certain technology platforms and digital asset infrastructure providers into mandatory AML program requirements, and the European Banking Authority has issued guidance pressing member-state supervisors to scrutinize crypto-adjacent tech firms with the same rigor applied to traditional payment processors. Compliance teams at technology companies are actively auditing whether their customer onboarding flows, transaction monitoring tools, and third-party data processors meet program adequacy standards before examination cycles begin.
Watch
- FinCEN's proposed rulemaking on digital asset intermediaries and AML program obligations
- EBA's 2024 AML/CFT supervisory convergence priorities for non-bank payment technology firms
- Whether your firm's AI-driven transaction screening tools satisfy Financial Crimes Enforcement Network's "reasonable procedures" standard
- Competition regulators cross-referencing AML compliance gaps during merger clearance reviews of fintech acquisitions
Recent material activity in Technology, AI & Competition
FTC settles with payment processor Nuvei for $4.85 million over facilitated merchant fraud and tech support scams
The FTC filed a complaint and proposed settlement order against Nuvei Corporation and four subsidiaries on September 4, 2026, for opening payment processing accounts for merchants engaged in deception. The $4.85 million …
Read a full sample brief →CISA adds Google Chromium V8 type confusion vulnerability to Known Exploited Vulnerabilities catalog with federal remediation deadline of September 18 2026
CISA added CVE-2026-85046, a type confusion vulnerability in Google Chromium V8, to its Known Exploited Vulnerabilities catalog on September 4, 2026. Federal agencies face a mandatory remediation deadline of September 18…
Read a full sample brief →DOJ files proposed final judgment against KKR in antitrust consent decree proceeding
The Department of Justice filed a proposed final judgment and competitive impact statement in United States v. KKR & Co. Inc., et al., published in the Federal Register on September 4, 2026. This filing opens the Tunney …
Read a full sample brief →European Commission adopts final guidelines on exclusionary abuses of dominance, replacing 2009 enforcement priorities
The European Commission's Directorate-General for Competition published final guidelines on exclusionary abuses of dominance on September 3, 2026. The guidelines replace the 2009 enforcement priorities paper and establis…
Read a full sample brief →China's SAMR publishes second batch of administrative monopoly enforcement cases targeting local protectionism in pharmaceuticals, internet services, and coal
China's State Administration for Market Regulation (SAMR) released the second batch of cases under its national campaign to eliminate barriers to unified market competition, published September 4, 2026. All three cases i…
Read a full sample brief →FTC extends personalized pricing policy comment period by seven days to September 25, 2026
The FTC extended the public comment deadline on its proposed enforcement policy statement on personalized pricing from September 18 to September 25, 2026. The proposed statement addresses the use of personal data to set …
Read a full sample brief →FCC issues technical correction to broadband data collection final rule effective July 24, 2026
On September 3, 2026, the FCC published a correcting amendment to its final rule on the Digital Opportunity Data Collection and modernized Form 477 broadband data program. The correction restores a defined term that was …
Read a full sample brief →CMA finalizes revised merger efficiencies guidance, replacing existing assessment framework under its 4Ps reform programme
The Competition and Markets Authority published final revised guidance on rivalry-enhancing efficiencies in mergers on September 3, 2026. The guidance replaces the existing text in the Merger Assessment Guidelines and co…
Read a full sample brief →CNIL fines Hôpital Privé de la Loire €500,000 for inadequate patient data security under GDPR
The CNIL sanctioned Hôpital Privé de la Loire €500,000 on September 3, 2026, for failing to implement adequate security measures protecting patient and related-party health data. The decision sets an enforcement benchmar…
Read a full sample brief →CISA adds SonicWall SMA1000 OS command injection flaw to Known Exploited Vulnerabilities catalog with September 5 federal remediation deadline
CISA added CVE-2026-83549, an OS command injection vulnerability in SonicWall SMA1000 Appliances, to its Known Exploited Vulnerabilities catalog on September 2, 2026. The addition imposes a federal remediation deadline o…
Read a full sample brief →