Canada Operation Reports 10,987 Actions Against Fraud Enablers
Canadian authorities report that a weeklong operation coordinated 10,987 actions against tools used in fraud and cybercrime.
Your compliance hub.
Explore jurisdiction briefings
Search covers all 68 published developments in this archive.
Canadian authorities report that a weeklong operation coordinated 10,987 actions against tools used in fraud and cybercrime.
FINMA has published the final partial revision of its Anti-Money Laundering Ordinance, with the changes due to take effect on 1 January 2027.
Elliptic says about 117,000 NEAR linked to the Binance theft passed through six homemade memecoins, a route intended to disguise the movement of stolen cryptocurrency.
OFAC designated eight Canada-based money services businesses on November 6, alleging they facilitated financial transactions on behalf of Iran’s regime.
FinCEN issued an order cutting MEXC Global off from the U.S. financial system, barring U.S. financial institutions from processing funds transfers involving the exchange.
Ukraine’s Cyber Police said an international operation uncovered a network of fraudulent call centers accused of defrauding 135 German citizens of more than €4.3 million.
Ukrainian law enforcement arrested four suspects in a cryptocurrency investment scam investigation involving reported losses of more than €4.3 million.
U.S. prosecutors unsealed an indictment alleging an AI-enabled impersonation scheme stole approximately $2.68 million from a Rhode Island bank.
Switzerland adopted measures from the EU’s 21st sanctions package against Russia and Belarus, with sanctions-list changes taking effect on 4 November 2026.
The Federal Court ordered Sunshine Loans Pty Ltd to pay $5.5 million in civil penalties for charging fees prohibited under Australia’s National Credit Code.
A Mexican judge was arrested in Colombia on a U.S. indictment alleging a $2 million bribe tied to the release of a Canadian drug trafficker.
Crédit Mutuel Arkéa said attackers reached the bank through a service provider’s platform and used the group’s own account to make fraudulent transfers.
The European Public Prosecutor’s Office said searches and arrests targeted an alleged cross-border VAT fraud network linked to luxury-car sales. Estimated losses are €100 million.
Iraq’s anti-corruption court sentenced a former oil distribution chief to eight years in prison and ordered repayment of 55 billion dinars. OCCRP reported that the Federal Integrity Commission linked 40 contracts and 29 purchase orders worth 181 billion dinars to affiliated firms at the North Refineries Company.
A federal grand jury in California returned an indictment alleging an $18 million scheme involving PPP and EIDL funds. The Department of Justice reports three wire-fraud counts and one money-laundering count; the charges are allegations, not findings of guilt.
A Venezuelan national received a 12-year prison sentence for conspiracy to launder money and agreed to a $1 billion money judgment, the U.S. Department of Justice said. Court documents describe a network using cryptocurrency wallets, exchanges, bank accounts, liquidity providers, and shell companies.
Nepal’s anti-corruption agency filed charges against 97 defendants over an alleged land swap involving property held by a company granted a land-ceiling exemption. Investigators estimate roughly US$4.8 million in government losses. The case was pending court proceedings, and no defendants had been detained when OCCRP reported it.
An international operation supported by Europol and Eurojust seized more than 100 servers and searched 17 locations in an investment-fraud investigation. Seven suspects were arrested with a view to extradition to Germany. Investigators estimate losses exceed EUR 4 million and report potential victims in more than 50 countries.
The UK Serious Fraud Office updated corporate self-reporting guidance on 13 October 2026. Company legal representatives can discuss a potential report with the SFO’s Director of Legal Services before submitting it, and the guidance clarifies investigative expectations and when the DPA negotiation period begins.
A defendant extradited from Germany appeared in Miami federal court on conspiracy, mail-fraud and wire-fraud charges. The Justice Department says an indictment alleges a psychic-themed mailing scheme collected more than $4 million from thousands of U.S. victims between 2016 and 2020.
ILC Dover and ILC Astrospace agreed to pay $13 million to resolve False Claims Act allegations over cybersecurity requirements in contracts with the Army, Missile Defense Agency and NASA. The Justice Department said the allegations concerned claims submitted between 2018 and 2024.
The Justice Department announced charges involving 63 individuals in election-related cases across the country. The allegations include illegal voting, false citizenship claims connected to registration or voting, and a fraudulent voter-registration submission. The department said four of those charged were in the United States illegally; charges are not convictions.
The DOJ reported Minnesota Medicaid and SNAP fraud actions involving 13 defendants with differing procedural statuses and nearly $83 million in intended losses across the described schemes. About $29.1 million related to newly charged cases; the department also reported extensive investigative activity in the state during 2026.
Syed Murtuza Kablazada pleaded guilty to two health care fraud counts in a $227 million Medicare scheme involving claims for COVID-19 test kits beneficiaries did not request or receive. The Justice Department said Medicare paid approximately $136 million and Kablazada agreed to forfeit more than $46 million seized from ten accounts.
A former BizJet regional sales manager pleaded guilty to conspiring to violate the Foreign Corrupt Practices Act. DOJ says the scheme involved bribes to foreign officials to secure Latin American business and concealed payments through U.S. accounts, including a shell company. Sentencing is expected in 2027.
The DOJ says six people were charged over an alleged Madagascar-based NFT investment scam that used fake dating profiles to persuade victims to connect crypto wallets. Investigators identified about 74 wallets associated with approximately 800 victims who reported losses.
OFAC sanctioned 10 individuals and one entity over North Korean government-run IT worker schemes targeting U.S. businesses. Treasury said six Russia-based workers generated more than $750,000 for a DPRK-controlled entity since 2025, and explained that U.S.-linked property interests of designated persons are blocked, subject to applicable exceptions.
ESMA says MiCA-authorised crypto-asset service providers should stop services related to non-compliant stablecoins for EU clients. National authorities should require remediation of identified existing exposures within three months of the 8 October opinion, with only limited, supervised services permitted during wind-down.
A contractor pleaded guilty to conspiring to pay more than $465,000 in kickbacks related to U.S. Postal Service facilities repair work. The Justice Department said estimates and invoices were inflated to include funds for kickbacks, and the contractor agreed to pay $465,347.75 in restitution jointly and severally with co-defendants.
The Justice Department said its agreement with Extreme Networks is its first “near-miss” non-prosecution agreement under the 2026 corporate policy. The company agreed to pay $975,721.84 in criminal penalties over sanctions and export-control offenses involving sales to a Russian weapons manufacturer.
A federal jury convicted Gainesville DME company owner Sophie Dufort in a scheme that led to more than $8.6 million in fraudulent Medicare claims, the Justice Department said. The case involved orthotic-brace prescriptions prosecutors said were fake; sentencing was scheduled for January 2027.
Greek authorities charged 59 people in an investigation into alleged tax fraud centered on the Horiatiko bakery chain. The reported accusations include tax evasion, fraud against the state and money laundering. Authorities also reportedly sequestered about €6 million and seized €250,000 in cash.
Canada’s proposed stablecoin regulations would require redemption within three business days, cap redemption fees at 1%, and require eligible reserves at least equal to outstanding tokens. The draft maintains a ban on yield for holding stablecoins while allowing transaction-based rewards. Public comments are due by December 23, 2026.
South Korean police referred a suspected ringleader to prosecutors in custody after a group allegedly stole 8.2 million personal-data and internal-record items from more than 90 entities. Police said AI tools were used against 60 targets and that the group demanded 360 million won from 38 businesses.
The Justice Department says Zheng Zhao was extradited from the Netherlands and arraigned in California on a money-laundering conspiracy charge. The alleged scheme targeted 174 U.S. victims, with more than $36.9 million passing through a Bahamas bank account before conversion to USDT and transfer to a wallet controlled in Cambodia.
Justice For Myanmar says documents from a junta commerce ministry data leak show six Myanmar aviation-fuel imports were described as high-speed diesel and routed through proxy companies. The imports, recorded between December 2024 and November 2025, totalled more than 843,000 barrels valued at US$109.5 million.
DOJ and HHS announced a six-month pilot for healthcare companies to disclose potential federal False Claims Act violations. Participants must provide supporting details, describe corrective measures and make repayment at a 1.25-to-1.6 multiplier. The program offers a coordinated civil release under specified federal authorities.
Hong Kong’s Monetary Authority announced an Accountability, Resilience and Trust framework for responsible AI adoption in banking. Its initiatives include updated supervisory guidance, a training-data sharing platform and further testing of agentic AI, alongside plans for a governance discussion paper.
New York’s attorney general says four NovaTech promoters will pay nearly $6 million for victims and face industry bans. Separately, the office is asking a court to order NovaTech founders to pay $1.3 billion, following a 2025 default judgment.
The OCC’s final GENIUS Act rule removes a proposed presumption against certain stablecoin yield arrangements but retains the statutory prohibition. The agency says it will assess arrangements through issuer applications and ongoing supervision, applying the law to each arrangement’s facts and circumstances.
INTERPOL says Operation Serengeti III resulted in 1,462 arrests and more than US$105 million recovered across 21 countries. In Angola, authorities dismantled two illegal cryptocurrency mining centres, arrested nine suspects and seized more than 2,000 mining devices and six illegal power transformation stations.
ICIJ and Proekt report that internal records show A7 processed at least 283 metric tons of cash rubles, worth more than $14 billion, between November 2024 and July 2025. The investigation traces cash from Moscow markets through A7 and Promsvyazbank into payment routes that often led to China.
Signed on October 20, 2026, the Romance Scam Prevention Act requires online dating services to alert members who received messages from accounts banned for fraud. Notices must identify the account, warn against sending money or financial information, and provide fraud-prevention resources.
The AIFC Court barred six crypto-platform operators from offering unlicensed digital-asset services in the financial centre. After LBank was removed from the order, the injunctions applied to BingX, Bitcoin.com, Huobi Global (HTX), BitMart, Coinbase and WEEX; the decision also addressed app-store access restrictions.
The UK Home Office’s 2026–2029 Anti-Money Laundering and Asset Recovery Strategy sets out three-year priorities for tackling money laundering and recovering criminal assets. The government says it is backed by more than £550 million and will add 500 law-enforcement officers and specialists by the end of 2029.
The U.S. Department of Justice says a joint West Africa operation involving Binance and Coinbase led to 28 arrests. Private-sector partners identified more than $11 million in potentially freezable funds, while officials reported cryptocurrency seizures without disclosing their value.
The OCC said all nine of the largest national banks it supervises had policies that could influence access to services based on political or religious beliefs or lawful business activities. Its review covered the period from 2020 to September 2025 and examined nearly 100,000 complaints.
U.S. Treasury announced more than $1.21 billion in enforcement penalties against Bank of America on October 13, 2026. The actions include a $1.2 billion FinCEN assessment, a $750 million OCC penalty and an $11.6 million OFAC settlement concerning 475 apparent sanctions violations.
Vietnam’s Resolution No. 66.23/2026/NQ-CP amends AML provisions on beneficial ownership, customer due diligence and risk classification. The Government says the temporary measures support international tax-information exchange commitments and apply until February 28, 2027, or until amended legal documents take effect, whichever comes first.
A settlement announced by New York Attorney General Letitia James permanently bars former Celsius CEO Alex Mashinsky from the securities, commodities and cryptocurrency industries. It provides for up to $35 million in payments to New York, depending on specified forfeiture and prison-sentence conditions.
Oleg Korniev pleaded guilty to five federal offenses tied to Your Mule Cashout. The Justice Department said the network recruited more than 15,000 U.S.-based money mules and laundered at least $10 million stolen from over 750 U.S. bank accounts. Sentencing has not been set.
Transparency International Czech Republic says it filed a criminal complaint over suspected sanctions violations involving Czech Vanadium. It reported more than 500 shipments of vanadium pentoxide entered the country from June 2022 to March 2025, and raised concerns that a change of supplier may not have changed the material’s Russian source.
The OCC ordered American Express National Bank to cease and desist and assessed a $350 million penalty over BSA/AML program deficiencies. The agency cited control and monitoring failures and approximately $13 billion in suspected trade-based money-laundering activity that the bank failed to sufficiently report.
Ukraine’s anti-corruption agencies sent a case involving 54.18 million hryvnias in alleged state-funds misappropriation and laundering to court. NABU says investigators allege a former MP organized a scheme involving Golden Mandarin Oil, Kyivenergo and an ECHR claim. Defendants are presumed innocent unless convicted.
Montenegro’s Special State Prosecutor’s Office says it has asked the High Court in Podgorica to permanently confiscate at least 54,567 square metres of real estate and two armoured vehicles attributed to a person convicted of criminal-organisation and drug offences.
A Justice Department directive orders its National Fraud Enforcement Division to design whistleblower policies for credible fraud tips. The October 1 memorandum also assigns the Corporate Enforcement Section primary responsibility for assessing companies’ compliance with criminal resolutions and sets out corporate enforcement priorities and decision factors.
The FCA has asked independent non-executive director Lea Paterson to review its interactions with whistleblower Simon Andriesz. The regulator says it plans to share lessons and follow-up early in 2027. It also reported that 42% of 1,252 whistleblowing reports closed last year led to direct action.
China’s proposed Anti-Cross-Border Corruption Law received its first legislative review in August 2026. The 47-article draft covers corporate compliance duties, legal liability, case handling and international cooperation. It was open for public comment through September 26 and remains a proposal, not an enacted law.
The U.S. Treasury designated five parties over an alleged Hamas financing network involving purported charities and cryptocurrency. Treasury said the network collected more than $2 million from 2020 to 2026, with hundreds of thousands sent in crypto, and outlined blocking and reporting requirements for covered property.
The CFTC is seeking comment on a potential framework for certain retail commodity transactions involving crypto assets. Its October 5 notice also asks about a possible crypto asset market registration subcategory and says feedback may inform future agency action.
Ireland’s Data Protection Commission fined Google Ireland Limited EUR 403 million for GDPR breaches over processing of location data between May 2018 and February 2020 across Web & App Activity, Location History and Location Accuracy, ordering compliance within six months; the fine awaits Irish court confirmation.
Norway’s PST and Kripos have opened parallel investigations into Telenor ASA over its Myanmar business. Kripos alleges complicity in crimes against humanity for handing over customer traffic data from Feb 1, 2021 to March 25, 2022; PST alleges sanctions-law breaches in the sale of surveillance equipment.
On 9 September 2026 OFAC designated Xinbi Guarantee as a significant transnational criminal organization and sanctioned SafeW Technology and Anwen Technology for materially assisting Xinbi, after U.S. authorities seized infrastructure and restrained wallets tied to a marketplace said to have processed over $24 billion.
AdaptHealth told the SEC on July 2 that a social‑engineering compromise of a third‑party session led to exfiltration of PII, PHI and billing password files; a DHHS filing lists 4,115,802 affected individuals.
On 26 August 2026 the U.S. State Department designated Autistici/Inventati as a Specially Designated Global Terrorist. The move blocks U.S.-jurisdiction property and warned of sanctions risks; the collective’s domain and bank access were disrupted and it announced it would shut down services.
Malone Lam, 22, pleaded guilty on 8 September 2026 to a RICO conspiracy for organising theft and laundering of over $245 million in cryptocurrency; prosecutors say the ring used social engineering and home break‑ins and spent proceeds on luxury goods and services.
Monaco’s AMSF imposed a €1.5 million penalty on Julius Baer Wealth Management Monaco over AML/CFT organisational deficiencies and delayed suspicious-activity reports.
OFAC designated Türkiye-based Golden Global Bank and two subsidiaries under E.O. 13902, citing alleged support for Iran’s financial networks and IRGC-Qods Force-linked transactions.