Treasury's 2026 Risk Assessments Expose TBML and Sanctions Evasion as Escalating Threats

Three National Risk Assessments Sound the Alarm

The US Department of the Treasury's release of its 2026 National Money Laundering Risk Assessment, National Terrorist Financing Risk Assessment, and National Proliferation Financing Risk Assessment provides the most comprehensive picture of illicit finance threats facing the United States. Trade-based money laundering and sanctions evasion feature prominently across all three documents, reflecting the growing sophistication and scale of these interconnected threats.

FATF estimates that TBML accounts for approximately $1.6 trillion annually, representing up to 80 percent of illicit flows in developing countries. FinCEN's August 2025 advisory specifically highlighted Chinese networks and Mexican cartels laundering more than $312 billion through TBML schemes — figures that underscore the industrial scale of the problem.

Geopolitical Drivers Are Accelerating TBML

The Russia-Ukraine conflict has pushed trade-based money laundering to the centre of global sanctions evasion strategies. As western sanctions constrain direct financial flows, sanctioned entities are increasingly turning to trade-based mechanisms — invoice manipulation, over-and under-invoicing, phantom shipments, and intermediary country routing — to circumvent restrictions and access the global financial system.

Simultaneously, rising tariffs and trade restrictions are creating additional incentives for TBML. Businesses seeking to avoid tariff costs are exploiting weak jurisdictions, shell companies, and digital platforms to misrepresent the origin, destination, or value of traded goods. The convergence of sanctions evasion and tariff avoidance is creating a more complex and harder-to-detect TBML landscape.

Emerging Typologies and Red Flags

FATF's 2025 updates emphasise several evolving TBML typologies that compliance teams must understand. Crypto-trade hybrid schemes combine traditional trade-based laundering with cryptocurrency conversion, exploiting the intersection of physical trade flows and digital asset transfers. Shadow fleet operations use vessels with manipulated AIS transponders to move sanctioned commodities, while front companies in permissive jurisdictions provide the documentary cover.

While traditional invoice misrepresentation still constitutes approximately 60 percent of TBML, newer techniques including AIS spoofing for maritime sanctions evasion, use of free trade zones as laundering intermediaries, and exploitation of complex multi-party trade finance structures are growing rapidly. Financial institutions processing trade finance transactions must update their typology libraries and red flag indicators accordingly.

Technology Responses to TBML Detection

Detecting TBML requires capabilities that go beyond traditional transaction monitoring. Effective approaches include trade data analytics that compare declared invoice values against market benchmarks, vessel tracking and AIS monitoring to identify anomalous shipping patterns, network analysis that reveals connections between ostensibly unrelated counterparties, and sanctions screening that extends beyond direct matches to include beneficial ownership and complex corporate structures.

Several specialist technology providers are advancing TBML detection capabilities. Traydstream applies AI to trade document analysis, while platforms like Quantexa and Palantir provide the graph analytics and entity resolution capabilities needed to uncover hidden relationships in complex trade networks. The integration of customs data, shipping intelligence, and financial transaction data is emerging as a critical capability for institutions with significant trade finance exposure.

Institutional Priorities for 2026

The Treasury's risk assessments send a clear message to financial institutions: TBML and sanctions evasion are priority enforcement areas. Institutions should ensure their sanctions compliance programmes extend beyond list screening to include trade finance-specific controls, beneficial ownership transparency, and correspondent banking due diligence that specifically addresses TBML risk.

Cross-border cooperation between financial intelligence units, customs agencies, and law enforcement is improving but remains insufficient. Financial institutions can contribute by investing in analytics capabilities that generate higher-quality suspicious activity reports, providing regulators and law enforcement with actionable intelligence rather than compliance-driven filings that lack investigative value.

TrustSphere helps financial institutions design and deploy intelligent fraud and financial crime detection solutions. Visit www.trustsphere.ai