Episode 262

26th June – 28th June 2026

Sanctions

UK Government Modifies Sanctions Entry for Russian Businessman Mikhail Fridman

On 24th June 2026, the UK Foreign, Commonwealth and Development Office updated its sanctions list, introducing a formal variation to the entry for Russian-Israeli businessman Mikhail Maratovich Fridman. He has been sanctioned since March 2022. Currently, Fridman remains subject to severe restrictions such as an asset freeze and a travel ban. The government’s justification rests on allegations that Fridman supported or obtained benefits from the Russian state through high-level roles in prominent financial entities like Alfa-Bank and Alfa Group.

UK Amends General Licences for Lukoil and Prince Group Entities

The Office of Financial Sanctions Implementation (OFSI) modified its FAQs following amendments to two general licences to facilitate corporate restructuring and insolvency processes. The new FAQ is 196.

UK Government Publishes Updated Open General Export Licence for Dual-Use Items

On 25th June 2026, the UK's Export Control Joint Unit (ECJU) and the Department for Business and Trade (DBT) published a new Open General Export Licence (OGEL) for the export of dual-use items, updating the regulatory framework for shipping-controlled technologies. Granted under the Export Control Order 2008, the licence operates on a dual legal basis which utilises assimilated EU regulations for Great Britain and Union regulations for Northern Ireland under the Windsor Framework. The authorisation permits the export of specified Annex I dual-use items from Great Britain to EU member states and 13 wider destinations, including the United States, Australia, and Japan. To utilise the licence, exporters must register through the online SPIRE system prior to their first shipment and maintain detailed transaction records for at least four years. However, the licence explicitly excludes items destined for prohibited end-uses, such as chemical, biological, or nuclear weapons, and mandates that permanent exports of highly sensitive items to non-Wassenaar Arrangement destinations, which include Chile, Cyprus, Iceland, Singapore, and Uruguay, be reported directly to the government.

US Imposes Sanctions on Rwandan Gold Refinery and Associated Mining Network

On 25th June 2026, the US Department of the Treasury's Office of Foreign Assets Control (OFAC) announced sanctions against a mineral smuggling and refining network operating in Rwanda and the Democratic Republic of the Congo (DRC). The targeted network, which includes the Kigali-based Gasabo Gold Refinery Ltd, is accused by US authorities of collaborating with the March 23 Movement (M23) armed group to illegally move conflict gold out of the eastern DRC. According to Treasury allegations, Rwandan military forces and M23 rebels oversaw the secure transport of at least 60 kilograms of gold from occupied mining sites in South Kivu to the Gasabo refinery in early 2026. Alongside the refinery itself, OFAC designated its chairperson, Jean Malic Kalima, general manager Bosco Kayobotsi, and three mining firms controlled by Kalima: Bugambira Mines LTD, Wolfram Mining and Processing LTD, and Rwinkwavu Mining Corporation LTD. This enforcement action, which freezes all US-based assets of the designated parties, appears intended to reinforce the US-brokered Washington Accords for Peace and Prosperity signed in late 2025. While these measures are likely to disrupt the financial networks supporting local armed groups, the deep-seated instability and complex geography of the region may continue to complicate international enforcement efforts.

Fraud

Prosecutors Charge Four in Healthcare Fraud Claims Amid Nationwide Sweep

On 23rd June 2026, the US Attorney's Office for the District of Arizona filed criminal charges against four defendants in connection with alleged schemes to defraud federal healthcare programmes of over $1.2 billion. These charges represent a regional arm of the Department of Justice's broader 2026 National Health Care Fraud Takedown, a coordinated sweep which has resulted in charges against 455 defendants nationwide over roughly $6.5 billion in false claims. The local cases highlight substantial billing irregularities, including allegations that sales executive Brian Rowan conspired to submit $1.2 billion in fraudulent claims for expensive amniotic wound allografts, alongside separate accusations that operator Jimmy Muyumbu billed Arizona's Medicaid agency more than $44 million for substandard or non-existent substance abuse treatments. In response to the broader investigations, the Centres for Medicare and Medicaid Services has suspended or revoked billing privileges for over two thousand providers. While the scale of these federal actions indicates a major crackdown on systemic billing exploitation, all charges remain allegations, and the defendants are presumed innocent unless proven guilty in a court of law.

UK Expands Enforcement Window in Race to Claw Back £10.9 Billion in Pandemic Fraud

The UK government has launched an expanded enforcement campaign to recover an estimated £10.9 billion lost to fraud and error during its £380 billion Covid-19 response. Progress so far is modest. Only £1.8 billion has been recovered to date, leaving a massive deficit which taxpayers are still paying off through national borrowing.

A central element of the state's recovery effort is the Public Authorities (Fraud, Error and Recovery) Act 2025, which took effect in late 2025. Crucially, the legislation doubles the time limit for bringing civil claims from six to twelve years. This statutory extension buys vital time for investigators. Under these expanded powers, a newly operational agency, the Public Authorities Fraud Investigation and Enforcement Service, is preparing to launch a wave of civil penalties and direct debt-recovery actions starting in autumn 2026.

Yet, this legislative push is likely to face stiff practical headwinds. Considerable time has elapsed since the funds were distributed. Many of the suspect entities have already been dissolved, meaning a substantial portion of the outstanding cash may prove entirely irrecoverable. Critics might also suggest that the state's intervention comes late in the day. When the current government took office in mid-2024, many active recovery programmes were already winding down, and legal windows were closing rapidly.

The scale of the challenge is clearest within the Bounce Back Loan Scheme. Lenders have flagged nearly £1.9 billion in loans as suspected fraud. Because of the original terms of the programme, the taxpayer has already had to reimburse banks £1.6 billion under state-backed guarantees. To retrieve these funds, the Insolvency Service is scaling up the use of compulsory liquidations and testing faster routes to disqualify directors. This represents a shift from previous, voluntary repayment windows, which closed at the end of 2025.

Meanwhile, some of the government's broader anti-fraud measures show signs of compromise. The Department for Business and Trade has delayed planned Companies House accounts reforms by a year, pushing the implementation date to April 2028. Under pressure from the business community over commercial privacy, small companies and micro-entities will be allowed to opt out of publishing their profit and loss accounts on the public register. While law enforcement and tax officials will still have access to the filed data, this concession reflects a delicate balancing act between corporate convenience and financial transparency.

To ensure these efforts do not stall, HM Treasury is establishing a Covid Fraud Scrutiny Panel to monitor recovery progress over the next two years. Whether this oversight can overcome years of delay remains an open question, but the state's message is clear: the chase for the missing billions is far from over.

Money Laundering

FATF Opens Consultation on Tightening Global 'Travel Rule' for Digital Payments

The Financial Action Task Force (FATF) has launched a global consultation on new draft guidance which seeks to reshape how international money transfers are monitored. Released on 24th June 2026, the document is meant to prepare the financial sector for revised Recommendation 16 standards, which are scheduled for full implementation by the end of 2030. These updated rules aim to bring transparency to an increasingly fragmented payment ecosystem, where newer methods like digital wallets and mobile money often bypass traditional banking visibility.

The watchdog’s focus reflects a growing alarm over the scale of digital financial crime, particularly fraud, which has become the dominant proceeds-generating offence globally. Under the updated standards, ordering institutions will be required to transmit highly structured, verified details, including the originator's address and date of birth, for cross-border transactions which exceed a de minimis threshold of USD/EUR 1,000. For smaller payments, the rules are somewhat more lenient. This regulatory push, however, may suggest a delicate balancing act for the industry. Some analysts argue that enforcing such strict collection mandates could increase transaction fees and slow down payments, which is likely to disproportionately affect migrant workers sending remittances back home or families relying on small-scale mobile money systems.

Another major point of discussion is the introduction of mandatory 'alignment checks' for beneficiary financial institutions. These checks require banks and other payment providers to verify that the beneficiary's name listed in a transfer message aligns with the name on the destination account, helping to prevent unauthorised push-payment frauds. Even so, the logistical realities of matching names across different languages, scripts, and naming conventions are expected to create compliance headaches. FATF has proposed alternative verification methods and fallback options to ease these transitions, but technical service providers and national regulators face a tight timeline to align their legacy infrastructures before the 2030 deadline. Interested parties have until 21st August 2026, to submit their formal feedback to the watchdog.

FATF Set to Launch 2026–2028 Anti-Fraud Roadmap Under Incoming UK Presidency

On 1st July 2026, the Financial Action Task Force (FATF) will host a virtual event to launch its 2026–2028 Roadmap on Combatting Fraud, marking the first day of the incoming UK Presidency under Giles Thomson. The initiative designates the tackling of global fraud as a primary strategic priority, building on an April ministerial declaration to deploy the full anti-money laundering and counter-terrorist financing toolkit to disrupt organised fraud centres and fraud-related crimes. The virtual launch event aims to gather public and private sector stakeholders to address emerging risks in virtual assets and artificial intelligence, while fostering cross-sector collaboration and improving international asset recovery for victims.

International Organisations to Launch Collaborative Global Hub for Beneficial Ownership Transparency

On 8th July 2026, a coalition of major international organisations will virtually launch the Global Hub for Beneficial Ownership Transparency (gloBOT) to address uneven progress and coordination gaps in tracing corporate ownership. Established in response to rising country demand, the initiative brings together the World Bank, which serves as the secretariat, alongside the International Monetary Fund, the Financial Action Task Force, the United Nations Office on Drugs and Crime, and Open Ownership. Beneficial ownership transparency has become a central pillar of the global development agenda over the last decade, but implementation remains slow and international technical support is frequently duplicative. The new hub is designed to foster collaboration, reduce redundancies, and generate shared public goods to assist national registries and legal frameworks. The virtual launch event will feature high-level remarks from global financial integrity directors and a technical panel discussing the future of coordination and reform in the beneficial ownership sector.

Market Abuse

Federal Authorities Target Corporate Insider Trading in Separate Biopharma and Energy Cases

On 24th June 2026, federal regulators announced major enforcement actions in two separate insider trading cases involving corporate insiders who allegedly exploited material non-public information for financial gain. In Delaware, the Securities and Exchange Commission charged Casey Muggleston, a former engineering manager at Constellation Energy Corporation, with generating approximately $1.4 million in illegal profits by trading ahead of a September 2024 announcement regarding a Microsoft partnership and a nuclear power plant restart. Simultaneously, the Department of Justice announced prison sentences for four individuals involved in a separate biopharmaceutical merger scheme, including a 40-month sentence for former board director Rouzbeh Ross Haghighat, who tipped off associates about a $3.2 billion acquisition which resulted in more than $600,000 in illicit profits. These parallel actions highlight a persistent, data-driven regulatory focus on protecting market integrity by pursuing individuals who abuse their executive and technical access to confidential corporate plans.

Other Financial Crime

UK Financial Regulator to Deploy Agentic AI to Combat Wholesale Market Abuse

The UK’s Financial Conduct Authority (FCA) is preparing to integrate agentic artificial intelligence as a "first responder" to monitor wholesale financial markets and accelerate its detection of market abuse. Speaking at the techUK Agents of Change event on 24th June 2026, FCA Chief Executive Nikhil Rathi highlighted that the regulator intends to pair advanced technology with its massive datasets, which ingest approximately one billion rows of data daily, alongside professional supervisory judgment. This strategic shift comes as the rapid pace of AI adoption, currently utilised by over 80% of financial services firms, challenges traditional, slower legislative frameworks. While faster AI models present opportunities for firms to strengthen their defences, they also introduce systemic risks and cyber threats. The regulator appears to be transitioning towards more active market stewardship and system-wide competition powers, which may suggest a shift toward proactive, technology-driven oversight.

Cybercrime

UK Museums Face Security and Financial Strains Amid Lack of Central Guidance

Britain’s most prominent cultural institutions are navigating a precarious path between self-sufficiency and state dependence. A critical report published on Wednesday, 24th June 2026, by the House of Commons Public Accounts Committee suggests that the Department for Culture, Media and Sport (DCMS) is leaving national museums and galleries exposed to physical and digital threats due to a reactive posture.

The numbers tell a story of tightening margins. In the 2024–25 financial year, DCMS distributed £484 million in grant-in-aid to 15 sponsored institutions, including household names like the Tate Gallery Group and the Science Museum Group. While that sum represents a quarter of the department's total budget, it also reflects a 16% real-terms decline since 2021–22, a drop driven by the cessation of emergency pandemic funding. To cope, museums have aggressively pursued self-generated income. This commercial push has yielded results, with non-state income climbing to £563 million in 2024–25, which is a notable 53% real-terms jump over three years. Unconventional events like the British Museum's high-profile Pink Ball fundraiser in October 2025 highlight this shifting strategy.

Yet, this financial hustle may mask deeper structural vulnerabilities. Operating expenses have risen 18% in real terms since 2021–22, fuelled by escalating staff costs and ballooning utility bills. At the same time, attendance has not fully recovered; in 2024–25, visitor numbers remained 13% below pre-pandemic baselines. The Public Accounts Committee argues that the government's funding model, which typically relies on flat-rate annual increases topped up late in the year for struggling institutions, might discourage long-term financial discipline. To generate fresh revenue, officials are quietly exploring the possibility of charging international visitors, a concept floated by Baroness Hodge in a recent independent review. However, implementing such a policy appears to be a delicate prospect given the immense public engagement which has followed the introduction of free admission in 2001.

The friction between state control and institutional autonomy is particularly visible in how security is handled. High profile crises in 2023, such as the cyber-attack which crippled the British Library and the thefts of items from the British Museum's own collection, highlighted systemic weaknesses. According to the committee, DCMS has acted more as an observer than a leader. While the department has hosted forums to share lessons from these incidents, it was unable to provide the committee with specific examples of concrete actions taken to shore up defences across the wider sector. Lawmakers suggest that faster adoption of digital record-keeping could play a vital role in preventing future losses.

Administrative delays at the department have compounded these operational struggles. Trustee boards, which carry the legal responsibility for keeping these institutions afloat, are operating with significant gaps. In October 2025, there were 34 vacancies across the 15 sponsored boards, representing a 15% vacancy rate. Filling these unpaid roles has been a slow process; during 2024–25, the average appointment took 219 days, far exceeding the government’s own 90-day target. While the department points to disruptions from the 2024 general election and subsequent efforts to diversify the candidate pool as contributing factors, the slow pace has likely left critical gaps in board-level expertise, especially given the rapid turnover of senior financial officers at several museums.

DCMS is currently working to address some of these oversight gaps. A new "Strategic Indicator Tool" is presently in beta testing, and the department expects to roll out refined performance indicators by March 2027 to replace metrics which are widely considered out of date. Whether these central tracking systems will arrive in time to help struggling venues remains to be seen. In the meantime, individual museums must continue to balance public accessibility with the harsh realities of their balance sheets. The press release is here.

International Coalition Disrupts Major Malware Distribution Networks in Operation Endgame

An international coalition of law enforcement agencies and private tech firms has dismantled major components of the infrastructure supporting the SocGholish, Amadey, and StealC malware networks as part of "Operation Endgame". Coordinated by Europol and Eurojust, the sweep involved agencies from North America and Europe alongside private partners like Microsoft, targeting "cybercrime-as-a-service" toolkits which facilitate ransomware and data theft. The coordinated actions resulted in the disruption of 326 servers and 142 domains, alongside the recovery of approximately 27 million stolen login credentials. Additionally, authorities managed to identify and restrict over €41 million in illicit cryptocurrency assets. While the disruption appears to have significantly crippled the distribution networks for these malicious tools, cybercriminals may still attempt to adapt and rebuild their operations over time. For now, the operation represents a strategic shift toward targeting the underlying "assembly lines" of digital extortion rather than focusing solely on isolated threat actors.