Episode 265

6th July – 9th July 2026

Sanctions

EU Sanctions Six Russian Scientists Linked to Chemical Weapons and Alexei Navalny’s Death

The Council of the European Union has imposed restrictive measures on six Russian military scientists and researchers for their involvement in developing chemical weapons, specifically the toxin epibatidine. This toxin was found in samples taken from Alexei Navalny’s body after his death in a Russian penal colony, leading to the conclusion that poisoning with the substance was highly likely the cause of death. The sanctioned individuals include Igor Babkin, the head of a laboratory at the Signal Scientific Centre where researchers published articles on the synthesis of epibatidine. Also listed are Irina Derevyagina, a chemical research analyst at Russia's State Research Institute of Organic Chemistry and Technology, and Mikhail Gutsalyuk of the Military Academy of Radiological, Chemical and Biological Defence. These penalties, which subject the designated individuals to EU travel bans and asset freezes, bring the total number of sanctioned parties under the EU's chemical weapons framework to 31 individuals and six entities.

UK Imposes New Chemical Weapons Sanctions on Russian Entities and Individuals

The UK's Foreign, Commonwealth and Development Office has updated the UK Sanctions List under the Chemical Weapons (Sanctions) (EU Exit) Regulations 2019 to add nine new entries. These additions consist of two entities, namely the State Research Institute of Military Medicine (GNIII VM) and SC Signal, along with seven individuals who hold leadership or scientific roles within these organisations or associated research bodies. According to the official statements of reasons, the UK government has reasonable grounds to suspect that these parties are involved in, or associated with entities responsible for, prohibited activities related to chemical weapons. The designations impose asset freezes and director disqualifications on all nine entries, with the seven individuals additionally subjected to travel bans. As a result of these measures, individuals and firms subject to UK jurisdiction must freeze any funds or economic resources belonging to the designated parties and report their findings to the Office of Financial Sanctions Implementation.

UK FCDO Amends Russia Sanctions List, Correcting Huobi and Popov Entries While Revoking Sanctions on Oil Tanker Zangazur

The UK's Foreign, Commonwealth and Development Office has updated the UK Sanctions List under the Russia regime, implementing two administrative corrections and one revocation. The corrections amended details for Panama-registered crypto entity Huobi Global S.A. (also operating as HTX) and Russian military intelligence (GRU) officer Stanislav Sergeyevich Popov. Huobi Global S.A. remains subject to measures including asset freezes, internet services sanctions, and correspondent banking restrictions due to suspicions that it supported the Russian government by providing financial services to strategic entities, namely A7 Limited Liability Company and Garantex Europe OU. Popov remains sanctioned under travel bans and asset freezes for his role in supporting a GRU front company, LLC Neptune Co Ltd, to procure goods and technology for the Russian defence and electronics sectors. Concurrently, the FCDO revoked all shipping sanctions against the Azerbaijani-flagged oil tanker Zangazur, which had originally been designated in May 2025 for transporting Russian oil or oil products to a third country.

UK HM Treasury Extends Maritime Mutual Wind-Down Licence Under Russia Sanctions

The UK's Office of Financial Sanctions Implementation (OFSI) has amended General Licence INT/2026/8893924 under the Russia (Sanctions) (EU Exit) Regulations 2019, extending its expiration date to 7th October 2026. Originally scheduled expired on 8th July 2026, the wind-down licence allows UK insurers, insurance brokers, and financial institutions to process, receive, or transmit funds and economic resources with Maritime Mutual Association Limited ("Maritime Mutual Gibraltar"), Maritime Mutual Insurance Association (NZ) Limited, and their subsidiaries. These authorised activities are strictly limited to those necessary to fulfil, cancel, or terminate insurance and reinsurance contracts agreed in writing prior to 24th February 2026. Under the terms of the licence, participating entities must retain detailed records of all transactions for a minimum of six years, and the designated maritime mutual entities are required to file monthly compliance reports with HM Treasury within 14 days of each calendar month's end.

Money Laundering

AUSTRAC Secures Compliance Overhaul from bet365 and Reports Improved Reporting Trends in Non-Bank Lending

Australia’s anti-money laundering and counter-terrorism financing regulator, AUSTRAC, announced that online bookmaker bet365 has entered into a legally binding enforceable undertaking to overhaul its risk assessment and suspicious transaction reporting systems. The enforcement action, which followed an investigation triggered by an independent audit, establishes mandatory compliance standards for the operator under threat of civil penalties. The agency also published the address to the AFIA Risk Summit delivered by AUSTRAC Chief Executive Officer, Brendan Thomas, highlighting measurable progress within the non-bank lending sector, where suspicious matter reporting increased by nearly 12 per cent to almost 9,500 reports this year. While noting these positive compliance trends, Thomas warned that the broader financial sector continues to face highly sophisticated, evolving threats, including transnational laundering networks, insider-enabled fraud, and synthetic identities generated by artificial intelligence.

MONEYVAL Report Notes Progress in Romania’s Counter-Terrorist Financing and Sanctions Compliance

The Council of Europe’s anti-money laundering body, MONEYVAL, released a follow-up report detailing Romania's ongoing efforts to align with international standards. The report highlights that Romania has improved its technical compliance with two key Financial Action Task Force (FATF) recommendations regarding targeted financial sanctions related to terrorism and the proliferation of weapons of mass destruction, which are now upgraded to a "largely compliant" rating. While the country also demonstrated limited progress in areas such as national cooperation, politically exposed persons, and beneficial ownership transparency, some technical shortcomings persist. Currently, out of the 40 FATF recommendations, Romania is rated compliant with seven, largely compliant with 20, and partially compliant with 13, with none assessed as non-compliant. Due to the remaining regulatory gaps, MONEYVAL has decided that Romania will remain under its enhanced follow-up process, with the country expected to report back on its corrective measures in one year.

MONEYVAL Assessment Urges Slovenia to Strengthen Money Laundering Prosecutions and Non-Financial Controls

The Council of Europe’s anti-money laundering body, MONEYVAL, has published an evaluation report indicating that while Slovenia has made significant efforts to understand its financial crime risks, its money laundering investigations and prosecutions require reinforcement. The assessment praised Slovenia's constructive international cooperation and the robust controls preventing criminals from owning or controlling financial institutions. However, the watchdog identified critical structural gaps, including underdeveloped policy-level coordination, the lack of an integrated national strategy, and deficient supervision over designated non-financial professions such as lawyers and real estate agents. Additionally, while Slovenia's Financial Intelligence Unit operates with full independence, MONEYVAL noted that recent legislative limits on law enforcement's access to banking data and high judicial evidentiary thresholds continue to hamper prosecution and timely intelligence sharing. Consequently, Slovenia has been placed under MONEYVAL's enhanced follow-up process and issued a three-year roadmap of recommended actions to address these regulatory gaps and improve asset confiscation outcomes.

Market Abuse

Securities Filing Agent Employee Sentenced to 27 Months for $2.3 Million Insider Trading Scheme

Former securities filing agent employee Justin Chen has been sentenced in federal court in Brooklyn to 27 months in prison for conspiracy to commit insider trading. United States District Judge Orelia E. Merchant also ordered Chen, who worked as an assistant manager at an EDGAR filing company, to forfeit $1,828,442.00 and pay $115,437.19 in restitution. According to court records, Chen used his employment to obtain advance access to material non-public draft disclosures, including upcoming mergers, partnerships, and earnings reports, before they were officially filed on the Securities and Exchange Commission's EDGAR system. Chen and his co-defendant Jun Zhen, who pleaded guilty in October 2025 and is awaiting sentencing, used this non-public information to trade in the securities of 13 publicly traded companies, generating at least $2.38 million in profits.

Bribery and Corruption

OECD Phase 4 Report Commends Latvia’s Anti-Bribery Progress While Warning of Remaining Enforcement Gaps

The OECD Working Group on Bribery has released its Phase 4 evaluation on Latvia, commending the nation's substantial progress in foreign bribery enforcement while identifying areas requiring further domestic reform. The report highlights that Latvia has successfully imposed sanctions on two companies for foreign bribery and initiated trial proceedings against two others. Since its 2019 Phase 3 review, Latvia has also enhanced economic crime specialisation in its prosecution and judiciary, increased monetary sanctions, expanded whistleblower protections, and upgraded its anti-money laundering framework. Despite these advancements, the Working Group recommended that Latvia adopt a comprehensive detection strategy, establish clearer policies for corporate self-reporting, ensure effective whistleblower enforcement, and sufficiently resource its justice system. Additionally, the watchdog urged authorities to ensure that foreign bribery laws are not interpreted too narrowly, which might allow corrupt actors to evade liability when providing indirect benefits, and to prioritise the confiscation of illicit proceeds, with Latvia scheduled to submit a progress report in June 2028.

Other Financial Crime

Spotlight on Corruption Analyses Highlight UK Legal Hurdles in High-Profile Bribery and Asset Recovery Cases

Two newly published analyses from Spotlight on Corruption offer reflections on the procedural and legal hurdles facing the UK's anti-corruption frameworks in complex international cases. The first report examines the 17th June 2026, London jury acquittal of former Nigerian oil minister Diezani Alison-Madueke, detailing how a narrow prosecution strategy, a 13-year investigation, and fragile cross-border cooperation with Nigerian authorities culminated in a major setback for global anti-corruption enforcement. The second analysis explores an ongoing High Court petition by Dubai-based investment firm Enspire Investments LLC, which is seeking to join civil recovery proceedings as an interested party to protect €45 million in siphoned assets frozen under an Unexplained Wealth Order against two British businessmen. Together, these detailed studies illustrate the severe resource constraints within the UK's International Corruption Unit and the evolving judicial debates over the rights of alleged fraud victims during active, state-led asset recovery actions, making them essential reading for compliance and legal professionals.

As Fraud Goes Autonomous, Regulators Warn of a Growing Arms Race in AI-Driven Financial Crime

The Financial Conduct Authority's newly released review of artificial intelligence in retail finance warns that a major shift in financial crime is underway. Criminals are increasingly exploiting advanced technologies to execute highly persuasive scams at an unprecedented scale. Historically, launching a complex fraud campaign required significant technical skill and manual coordination. Now, readily available generative tools are lowering these barriers, enabling bad actors to clone voices or fabricate synthetic identities for pennies. The barrier to entry has collapsed. This sudden ease of execution is likely to place immense pressure on traditional defensive barriers.

While financial institutions have deployed machine learning for years to flag suspicious transactions, these legacy defences are showing signs of strain against more adaptive threats. The report suggests that criminals are iterating their tactics much faster than compliance departments can update their static rules. Some compliance analysts point out that simply throwing more automation at the problem is not a cure-all. Relying too heavily on automated triage may actually backfire. It risks burying human reviewers under a mountain of non-actionable alerts. Consequently, the human element remains irreplaceable in validating outcomes, even as the scale of data grows.

A deeper issue appears to be the systemic fragmentation of defence networks. In the UK, sharing critical threat intelligence between the private sector and public authorities has long been criticised as a complex patchwork of inconsistent data standards. Without a unified mechanism to pool real-time signals, sophisticated networks can easily slip through the cracks of separate institutions. The results can be severe. For instance, a recent test by the AI Security Institute showed that Anthropic’s Mythos Preview model could autonomously locate and exploit software vulnerabilities in real-world applications. This shows how rapidly the window of response is shrinking.

To counter these fast-moving threats, the report advocates for what it calls an Agentic Supervisory Model. This framework would allow regulators to use AI-enabled systems to monitor market-wide patterns in near real time. However, some industry sceptics suggest that implementing outcomes-based oversight in dynamic journeys remains a significant challenge. Minor errors in the underlying models could inadvertently disrupt legitimate commerce or create unexpected compliance gaps. Ultimately, the emerging consensus is that the future of financial safety is likely to depend on whether banks and public authorities can overcome legal and technical barriers to share threat intelligence before harm escalates. The press release is here.

Cybercrime

Security Researchers Identify First Fully Autonomous AI-Driven Ransomware Attack

Cloud security firm Sysdig has documented what researchers identify as the first instance of an artificial intelligence agent executing a ransomware attack end-to-end without human assistance. The large language model agent, named Jadepuffer, gained access to Langflow, an open-source tool for building AI applications, and searched for credentials associated with Chinese cloud providers like Alibaba and Tencent. Once inside, the autonomous agent identified passwords, breached a server, and encrypted a production database before issuing a demand for a bitcoin ransom. According to Sysdig's threat research director, Michael Clark, while ransomware historically has required a human operator or a human-written script, Jadepuffer demonstrated the ability to adapt its tactics in real time, correcting a failed login attempt and finding a working fix in 31 seconds.

UK Launches National Cyber Resilience Pledge to Strengthen Corporate Defences

The UK government formally launched the Cyber Resilience Pledge, a voluntary initiative aimed at strengthening cybersecurity standards across the British economy. More than 60 founding signatories, including major organisations such as Marks & Spencer, Nationwide, and Microsoft UK, have committed to the framework, which serves as a central pillar of the government's forthcoming National Cyber Action Plan. Under the agreement, participating firms commit to three core actions: establishing cybersecurity as a board-level responsibility, registering for the National Cyber Security Centre's (NCSC) free Early Warning network alert service, and adopting a risk-based requirement for Cyber Essentials certification across their supply chains. This coordinated campaign addresses an increasingly active threat landscape, with independent research estimating that cyberattacks cost the UK economy £14.7 billion annually, while NCSC experts warn that rapid advancements in artificial intelligence are lowering technical barriers for hostile digital actors.

European Supervisory Authorities Endorse Warning on Systemic Cyber Risks from Frontier AI Models

The European Supervisory Authorities (ESAs), comprising the European Banking Authority, the European Insurance and Occupational Pensions Authority, and the European Securities and Markets Authority, formally endorsed a warning issued by the European Systemic Risk Board (ESRB) regarding the systemic cyber risks posed by frontier artificial intelligence models. The ESAs noted that rapid technological advancements have significantly increased the capacity of frontier AI models to identify and exploit high-severity vulnerabilities in IT systems within short timeframes. While the European Union's existing regulatory frameworks, such as the Digital Operational Resilience Act (DORA) and the AI Act, provide a regulatory foundation, the authorities warned that the unprecedented speed and scale of these AI tools could still threaten the operational resilience of financial entities. Concurring with the ESRB, the ESAs urged financial institutions proactively to strengthen their cybersecurity capabilities, called on national competent authorities to incorporate these risks into their supervisory oversight, and emphasised the need for the European Union to scale up its capacity, expertise, and strategic autonomy in this domain.