The New Geometry of Cross-Border Enforcement: Why Financial Crime Cases Are Getting Bigger and More Coordinated

Financial crime enforcement used to be a national story. In 2026, it is almost always a coordinated one. The most significant recent AML, fraud, and sanctions cases have involved multiple jurisdictions, overlapping agencies, and simultaneous public announcements choreographed for maximum impact. What used to be an exchange of letters between regulators has become, in practice, a real-time operating model in which investigators from multiple agencies work side by side for months at a time.

For institutions that operate across borders, this new geometry fundamentally changes the stakes. A single investigation can now escalate into parallel actions by the DOJ, FCA, ECB, MAS, and AUSTRAC — each with its own procedural quirks, but moving in lockstep. That operating model has been made possible by better technology, clearer legal frameworks, and — most importantly — a generation of enforcement officials who have built personal working relationships across borders.

Understanding the mechanics of modern cross-border enforcement is no longer a purely legal concern. It is operational, strategic, and directly relevant to how banks design their financial crime programmes. For financial institutions, the net effect is that an incident in one market can become an enforcement event in several, with very little warning.

Regulatory, Enforcement, and Market Context

The Egmont Group remains the backbone of FIU-to-FIU cooperation, while the FATF and Wolfsberg Group have continued to drive alignment of standards. The J5 (Joint Chiefs of Global Tax Enforcement) has extended collaboration into tax-linked financial crime. The Financial Stability Board and IMF have both reinforced the direction of travel, noting that the gap between supervisory sophistication across jurisdictions is narrowing more quickly than many banks expected.

Multilateral agreements and joint task forces — from the EU's AMLA to targeted operations such as Operation Trojan Shield — have normalised the sharing of intelligence, evidence, and sometimes enforcement action. In practice, this means that a response strategy designed for one regulator is rarely adequate for a coordinated action across three or four — and institutions that discover this mid-investigation find themselves at a significant disadvantage.

OFAC, UK OFSI, and EU sanctions authorities increasingly coordinate their designations, further underscoring the trend toward joint enforcement as the default rather than the exception. Boards should insist on a clear, rehearsed playbook for multi-agency events, because the response window is almost always measured in hours and days, not weeks.

What the Data Is Showing

Recent Reuters and ACAMS analyses show that the majority of the largest AML and sanctions enforcement actions over the past three years have involved more than one jurisdiction. Aggregate fine values continue their long-term upward trend. The headline fine values often mask a larger story: coordinated actions usually involve multiple regulators levying individually substantial penalties, and the aggregate outcome can exceed the sum of the parts.

Chainalysis and Sumsub data on cross-border illicit flows reinforce why coordinated enforcement matters: without it, criminal networks exploit the gaps between regulatory regimes faster than any single agency can respond. At the same time, reputational and commercial consequences now routinely exceed the direct financial penalties, particularly when multiple jurisdictions amplify the same message through coordinated press activity.

Implications for Financial Institutions

Institutions need centralised investigation capabilities that can respond to multi-jurisdictional requests without triggering inconsistent responses. Fragmented local answers are a recipe for compounding regulatory risk. Institutions should also anticipate that information obtained by one authority may quickly become available to others, which has significant implications for how internal investigations are scoped and documented.

Information-sharing frameworks — within the legal limits of each jurisdiction — are increasingly a competitive advantage, not just a compliance obligation. The firms that participate are better informed and face fewer surprises. Cross-border enforcement readiness should sit alongside cyber and operational resilience in the institution's crisis-management framework, not in a separate compliance silo.

Finally, board reporting should make cross-border enforcement trends visible. The cases to worry about are not the ones that look like last year's cases; they are the ones that cross borders in ways boards have not yet seen. Finally, participation in industry-level information sharing and early engagement with supervisors has become a material differentiator in how institutions are treated when a joint action begins to take shape.

Conclusion

Cross-border enforcement is becoming the normal operating mode for regulators and law enforcement alike. Institutions that treat it as an integrated risk — rather than a series of isolated cases — will be materially better prepared for the next wave of enforcement activity. The firms that handle the next wave of coordinated enforcement well will be those that treated preparation as a strategic investment rather than a contingency line item.

Suggested Next Steps

• Establish a centralised investigation and response function for cross-border matters.

• Formalise participation in information-sharing networks where legally permitted.

• Track multi-jurisdictional enforcement trends in board-level risk reporting.

• Stress-test incident response playbooks against coordinated multi-agency scenarios.

Sources: FATF, Egmont Group, Wolfsberg Group, J5, OFAC, UK OFSI, EU sanctions authorities, Reuters, ACAMS, Chainalysis, Sumsub.

TrustSphere helps financial institutions design and deploy intelligent fraud and financial crime detection solutions. Visit www.trustsphere.ai