Moody’s outlines six law enforcement intelligence shifts shaping cross-border financial crime risks
As investigators prepare for 2027, cross-border criminal networks are increasingly behaving like coordinated service businesses that share infrastructure, data and money-laundering capabilities. The shift is raising pressure on law enforcement to track the entities behind transactions, including companies, shareholders and wider networks, rather than isolated crimes alone.
Highlights
- Moody’s briefing identifies six trends—including AI-driven fraud, opaque ownership, and synthetic drug supply chains—that will shape cross-border financial crime risks through 2027.
- INTERPOL notes the industrialization of fraud as criminal groups share infrastructure, technology, and data, increasing the complexity and scale of financial crime networks.
- Shell companies and intermediaries persist as key concealment tools, while rapid cross-border linkage of people, companies, and transactions is vital for disrupting entire criminal ecosystems.
Six trends redefining intelligence-led investigations
As reported by Moody’s, the briefing identifies six developments that are expected to influence investigators heading into 2027, with financial crime schemes converging into broader criminal ecosystems, opaque ownership structures remaining central to concealment, and criminal use of AI expanding fraud and cybercrime. It also points to diversifying synthetic drug supply chains, the spread of scam-center operations through trafficking networks, and increasingly complex sanctions-evasion systems.The assessment frames these changes as a shift in the threat environment rather than a series of isolated cases. INTERPOL Secretary General Valdecy Urquiza describes the outcome as the industrialization of fraud, reflecting how criminal groups are sharing infrastructure, launderers, technology and data across borders and across crime types.
The briefing says this environment strengthens the case for intelligence-led policing built around the entity, whether a company, shareholder or network, as the core unit of investigation. That approach is intended to help authorities connect transactions, ownership and control across jurisdictions more quickly.
Ownership opacity and shared infrastructure raise disruption challenge
Opaque ownership structures remain one of the most durable tools available to criminal networks, according to the briefing. Shell companies continue to help conceal the people and entities that own, control or benefit from illicit activity, while scam centers are regularly dismantled but their leaders remain difficult to identify because they operate through intermediaries and corporate fronts.UNODC has documented the use of casinos, special economic zones, business parks and financial service providers as regulatory, legal and fiscal cover for criminal enterprises. In that setting, government crime investigation units that can rapidly link people, companies and transactions across borders are likely to be better placed to disrupt entire networks instead of targeting only individual schemes.
The briefing also says investigators should expect more polycriminality, with fraud proceeds supporting other illicit activity and apparently legitimate businesses providing services to multiple criminal markets at once. It adds that sanctions-evasion investigations are likely to focus increasingly on shared infrastructure such as third-country facilitators, shadow-banking networks, professional enablers, and shipping and trade intermediaries used to disguise the movement of funds and goods.
Our earlier article on banks’ bare metal recovery planning examined how regulators are pushing lenders to prepare for severe technology failures as AI amplifies the scale and complexity of cyber attacks. We highlighted the shift from relying mainly on perimeter defences toward end-to-end resilience, including independent fallback systems to keep critical services running if core infrastructure is compromised.