TrustSphere
 

If mule herders price the friction of your onboarding journey, as today's companion theme post argues, then identity verification at account opening...

Every scam typology that ends with money moving out of a victim's account also has a beginning, the moment a mule, a shell beneficiary or a...

For most of its life, the UK's digital identity certification scheme has been something banks watched rather than acted on: a well-intentioned...

A great deal of vendor commentary over the past year has told financial crime teams that their AML and fraud detection systems will become "high-risk...

Authorised Push Payment fraud has evolved beyond the consumer and SME playbook into institutional payment flows, where the economics of attack are...

Financial crime teams spend as much time moving data between systems and managing workflow as they do on analysis and decision-making. Regulatory...

Refinitiv (the LSEG successor to Thomson Reuters financial data operations) occupies an unusual position in sanctions compliance: it is neither a...

Transaction monitoring is broken in operational model, not technology. Institutions managing 50,000 monthly alerts from transaction monitoring...

Digital Operational Resilience Act reveals true architecture. Ratified December 2024, coming force tier 1 firms December 2025, commonly read as...

Cross-border money laundering has always been a graph problem dressed up as a transaction problem. The illicit value moves through layered correspondent relationships, shell entities, money mules and nested accounts — but the typical transaction-monitoring system still scores each payment more or less in isolation. In 2026, that gap is finally closing, and the institutions closing it first are getting a step-change in detection quality at materially lower false-positive rates

Cryptographically relevant quantum computers are no longer a theoretical concern. NIST has finalised the first post-quantum standards, regulators are issuing migration timelines, and threat actors are already harvesting encrypted traffic for later decryption. For tier-1 banks and payments providers, the question is no longer whether to migrate, but how quickly and how safely.

Cyber security has graduated from a technology discipline to a board-level operational resilience requirement. The European Union's Digital Operational Resilience Act became fully applicable in January 2025, and is now in its first full year of supervisory enforcement; the UK's Operational Resilience framework is approaching its 2025 transition deadline; and the United States is finalising rules under the SEC, OCC, and FFIEC that align increasingly closely with the European m

Chargeback volumes have entered a structural growth phase. Card-not-present commerce now accounts for the majority of card payment value in most developed markets, and the share of chargebacks classified as first-party misuse — where the genuine cardholder disputes a transaction they themselves authorised — has risen to a level that materially distorts the economics of e-commerce, subscription, and digital-services merchants.

The cyber posture of a Tier 1 bank is increasingly only as strong as the weakest third-party SaaS vendor in its delivery chain. Concentration risk in cloud, identity, and observability tooling has turned into one of the most material — and least managed — operational risks in financial services.

The agentic-commerce conversation through 2025 and into 2026 has focused almost entirely on what happens when an AI agent transacts honestly on a u...

The quantum-computing community has stopped arguing about whether a cryptographically relevant quantum computer is possible and has moved on to arguing about when. Conservative estimates put cryptanalytically useful quantum capability at the early 2030s. Less conservative ones put it sooner. Either way, the half-life of payment messages, card cryptograms and TLS-protected session keys means the harvest-now-decrypt-later attack model already applies to any sensitive material m

The 2024–2025 wave of relationship-led investment scams — the so-called "pig-butchering" typology — was built on a labour-intensive playbook: a lon...

The Scattered Spider playbook — confidently calling a help desk, impersonating an internal employee or a high-value customer, and talking the agent...

Synthetic voice fraud has crossed the threshold from research curiosity to industrialised attack vector. Cloning a convincing replica of a real person's voice now requires only seconds of source audio and consumer-grade tools, and threat actors are deploying these capabilities against corporate treasuries, contact centres, and retail customers in volumes that traditional voice biometrics were never designed to withstand.

Anti-money-laundering programmes have spent two decades filing suspicious activity reports about transactions that have already moved. The next generation of AML platforms is being designed around a fundamentally different premise — predicting the typology before the payment leaves the bank, and intervening with the same evidentiary rigour required for a SAR.