Financial crime is evolving at speed, and artificial intelligence is once again the driving force. Fraudsters are using AI to build ever more convincing synthetic identities, plausible addresses and employment histories stitched together from publicly available information. Yet many firms are still fighting back with manual tools.
The 2026 SmartSearch Compliance Survey found that more than half of firms across legal and financial services continue to carry out identity checks by hand.
The pressure is mounting on several fronts. Regulatory expectations are rising, while sanctions lists, watchlists and other risk indicators are changing more often than ever. For regulated businesses, ongoing monitoring has become central to keeping an accurate picture of customer risk across the entire relationship.
Ongoing monitoring is not optional. Under Regulation 28(11) of the UK Money Laundering Regulations 2017, firms must continually scrutinise business relationships, including transactions and activity, and keep customer due diligence information current and relevant.
In practice, this covers transaction monitoring, screening against sanctions and PEP lists, refreshing due diligence, applying enhanced checks to higher-risk clients, reassessing risk when circumstances shift, and reviewing and reporting suspicious activity. A customer deemed low risk two years ago could since have become a politically exposed person, been sanctioned or changed their business model entirely.
However, monitoring more often brings a costly side effect. Detection systems are deliberately sensitive, as it is better to flag something harmless than miss genuine wrongdoing. The consequence is that legitimate behaviour frequently looks suspicious. A small business receiving regular payments from overseas suppliers might trip cross-border rules, while a customer shifting funds between their own accounts could resemble layering.
Each of these false positives carries a real operational cost. Analysts must review the details, investigate, document their reasoning and close or escalate the case. Industry analyses suggest up to 90% of alerts from traditional transaction monitoring systems turn out to be false positives, although the figure varies by institution and system.
With UK businesses spending an estimated £33.9bn a year on AML and financial crime compliance, false positives represent a major source of wasted resource, diverting attention from genuinely risky cases.
The solution is not to monitor less, but to monitor more intelligently. Daily monitoring builds on the ongoing monitoring requirement by introducing an automated, regular cycle focused on what has actually changed. Crucially, daily monitoring need not mean daily alerts. Rescreening a customer should not, on its own, trigger a review; a meaningful change should.
SmartSearch has built its approach around this principle. The RegTech firm tracks changes in customer status, including PEP and sanctions status, with watchlist data updated daily and monitored customers rescreened every night.
According to the company, this allows firms to cut unnecessary PEP, sanctions and adverse media hits to below 1%, freeing compliance teams to spend less time on unchanged information and more on changes that may signal real risk.
Read the full post here by SmartSearch.
Copyright © 2026 FinTech Global
