Key Takeaways
- • FinCEN reviewed 33,904 suspicious activity filings covering about $12.7 billion in reported financial activity tied to digital asset investment fraud, with filings submitted between September 8, 2023 and December 31, 2025.
- • The $12.7 billion figure is a risk signal, not a confirmed loss: it can include attempted and completed transactions, transfers between accounts of the same customer, repeat filings, erroneous entries and lawful activity.
- • A suspicious activity report is a lead for investigation rather than evidence or a court finding, so neither the filing count nor the dollar total establishes fraud losses or seized amounts.
- • The article describes cross-border scam centres that combine fake contacts or phishing with layered fund movements across wallets, services and jurisdictions, and notes overlap with money laundering.
- • EU Regulation 2023/1113 requires crypto asset service providers to collect originator and beneficiary information for certain transfers and apply risk-based procedures when that data is missing.
Summary
FinCEN, the US Financial Crimes Enforcement Network, has published a financial trend analysis covering 33,904 suspicious activity filings and about $12.7 billion in reported financial activity linked to digital asset investment fraud. The analysis rests on reports filed under the Bank Secrecy Act between September 8, 2023 and December 31, 2025. Press coverage has rounded these figures to more than 33,000 filings and about $13 billion, a shorthand rather than an additional finding.
According to the article, the $12.7 billion should not be equated with actual fraud losses. The total can include attempted and completed transactions, inflows and outflows, transfers between accounts held by the same customer, repeat or supplementary filings, erroneous entries and lawful activity near a suspicious event. Because filings are sorted by filing date, underlying incidents may have started before the review window. The volume mainly indicates that financial institutions are identifying recurring risk patterns, not a precise count of perpetrators, victims or losses.
A suspicious activity report reflects an institution's knowledge, suspicion or reasonable grounds to suspect financial crime. The article stresses that such filings are leads for analysis and investigation, not verified findings or convictions. Neither the $12.7 billion nor the filing count represents an amount seized or a fraud loss established in court.
The article describes scam centres as organised, often cross-border structures that run or support digital fraud through a division of labour. Typical patterns include approaching victims through fake contacts or phishing, processing payments, and then moving and obscuring funds across accounts, wallets, service providers and jurisdictions. FinCEN also describes supporting networks for account opening, phishing and professional money laundering. The article notes that INTERPOL has linked some scam centres to human trafficking and forced online fraud work, while cautioning that this cannot be generalised to every site or worker.
On controls, the article points to transaction monitoring, identity verification, scrutiny of unusual conversion or payout routes, and escalation where risk signals are solid. It cites EU Regulation 2023/1113, which requires crypto asset service providers to obtain originator and beneficiary information for certain transfers and to apply risk-based procedures when that information is missing, with options including suspending, rejecting or returning a transfer. The article concludes that prevention can make money flows visible earlier, while criminal assessment, confiscation and prosecution remain the responsibility of competent authorities and courts.
According to the article, the $12.7 billion should not be equated with actual fraud losses. The total can include attempted and completed transactions, inflows and outflows, transfers between accounts held by the same customer, repeat or supplementary filings, erroneous entries and lawful activity near a suspicious event. Because filings are sorted by filing date, underlying incidents may have started before the review window. The volume mainly indicates that financial institutions are identifying recurring risk patterns, not a precise count of perpetrators, victims or losses.
A suspicious activity report reflects an institution's knowledge, suspicion or reasonable grounds to suspect financial crime. The article stresses that such filings are leads for analysis and investigation, not verified findings or convictions. Neither the $12.7 billion nor the filing count represents an amount seized or a fraud loss established in court.
The article describes scam centres as organised, often cross-border structures that run or support digital fraud through a division of labour. Typical patterns include approaching victims through fake contacts or phishing, processing payments, and then moving and obscuring funds across accounts, wallets, service providers and jurisdictions. FinCEN also describes supporting networks for account opening, phishing and professional money laundering. The article notes that INTERPOL has linked some scam centres to human trafficking and forced online fraud work, while cautioning that this cannot be generalised to every site or worker.
On controls, the article points to transaction monitoring, identity verification, scrutiny of unusual conversion or payout routes, and escalation where risk signals are solid. It cites EU Regulation 2023/1113, which requires crypto asset service providers to obtain originator and beneficiary information for certain transfers and to apply risk-based procedures when that information is missing, with options including suspending, rejecting or returning a transfer. The article concludes that prevention can make money flows visible earlier, while criminal assessment, confiscation and prosecution remain the responsibility of competent authorities and courts.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.