FATF Maps Virtual Asset Flows Behind Scam Compounds

The Financial Action Task Force has mapped the financial infrastructure behind industrial-scale scam compounds, placing virtual assets alongside banking, payment and underground transfer channels used to collect and launder criminal proceeds. In its official announcement, published November 5, FATF describes scam compounds as one of the fastest-growing forms of organized crime, with estimated annual losses reaching tens of billions of dollars.

The report, approved during FATF’s October 28-30 plenary, draws on almost 120 case studies and good-practice examples spanning more than 60 jurisdictions. Its focus extends beyond individual scam sites to the interconnected financial, technological and telecommunications infrastructure that allows criminal networks to recruit workers, acquire victims, move proceeds and reinvest profits. FATF estimates fraud more broadly costs approximately $500 billion globally each year.

Virtual Assets Connect Multiple Laundering Stages

Virtual assets appear throughout the financial lifecycle mapped by FATF. Victim payments may enter through bank accounts, digital wallets or crypto wallets before moving through VASPs, peer-to-peer markets, OTC brokers and professional laundering networks. FATF treats virtual-asset channels as especially important during the movement, laundering and eventual cash-out of criminal proceeds, rather than as the only financial infrastructure supporting scam compounds.

One case illustrates the scale that blockchain tracing can uncover. Chainalysis mapped more than $100 million in victim inflows to a wallet cluster attributed to the KK Park scam compound after offchain information was used to establish the initial link. FATF explicitly cautions that blockchain activity should not be analyzed in isolation, recommending that wallet attribution be corroborated with information such as VASP due diligence, devices, communications, corporate records and fiat on- and off-ramp data.

The findings fit a broader enforcement environment in which authorities increasingly connect blockchain activity with conventional financial investigations. U.S. sanctions have already extended to Ethereum addresses allegedly used in Sinaloa-linked laundering networks, while FATF has separately identified virtual-asset risks across gaming and gambling businesses. In each case, crypto exposure is treated as one component of a wider risk picture rather than automatic evidence of criminal activity.

FATF Pushes Earlier Cross-Border Intervention

FATF’s accompanying principles shift emphasis toward disrupting the entire criminal ecosystem. Authorities are encouraged to target leadership, trafficking networks, fraudulent advertising, telecommunications infrastructure, mule accounts, wallets and specialized service providers before proceeds disappear through successive layers. The first 24 to 72 hours after a scam is detected or reported are particularly important for tracing, freezing and recovering assets, with FATF warning that preservation opportunities can fall sharply afterward.

That strategy also reflects how scam operations are adapting. FATF says enforcement pressure has pushed some networks away from large physical compounds toward smaller, mobile and decentralized operations, while AI-generated content, deepfakes and automation lower operating costs and expand the reach of social engineering. The report therefore treats technology platforms, telecommunications providers, financial institutions and VASPs as interconnected points where fraud can potentially be detected or disrupted.

FATF will now work with public- and private-sector participants through February 2027 to identify scalable approaches to cyber-enabled fraud. The report is the first output under the organization’s broader anti-fraud roadmap, with additional work expected to examine how its AML framework can be applied more broadly. The policy direction is moving from tracing stolen money after the fact toward disrupting the infrastructure that makes industrial-scale fraud economically viable in the first place.