Elevate your Compliance and Security with Intelect.
Our monthly round up of news items which are of particular relevance to those businesses regulated for the purposes of Anti-Money Laundering.
‘We help you keep criminals and their money out of your business PLUS keep you on the right side of the regulators.
Cyber Security
Anticipation of state sponsored cyber attacks amid worldwide tensions
Following recent US airstrikes on Iranian nuclear sites, the Department of Homeland Security (DHS) has issued a terrorism advisory warning of a “heightened threat environment” with increased risks of cyberattacks from Iranian government-backed groups and pro-Iran hacktivists.
These attacks have included distributed denial-of-service (DDoS) campaigns, attempts to disrupt critical infrastructure, and disinformation operations aimed at sowing confusion and fear among the US public. While Iran’s cyberattacks have so far been limited in sophistication, experts expect more destructive malware and wiper attacks targeting government websites, financial services, and critical infrastructure such as water and power systems.
Iranian cyber groups, including those linked to the Islamic Revolutionary Guard Corps (IRGC), have a history of exploiting poorly secured US networks, using tactics ranging from ransomware to espionage and social engineering. Recent attacks have included intrusions into US water systems and coordinated misinformation campaigns on social media platforms. The DHS and cybersecurity experts emphasize the need for vigilance, as these cyber operations often accompany physical threats and could escalate if Iranian leadership calls for retaliatory violence. The ongoing conflict between Iran and Israel, with US involvement, has intensified these cyber threats, with hacktivist groups like Team 313 openly claiming responsibility for attacks such as the DDoS assault on former President Trump’s social media platform.
The US cyber defence posture faces challenges, including talent shortages and leadership gaps at key agencies like the Cybersecurity and Infrastructure Security Agency (CISA). Despite these issues, authorities urge critical infrastructure operators and private sector organizations to strengthen their cybersecurity measures to mitigate the impact of potential Iranian cyber retaliation. Analysts predict Iran will continue leveraging cyber warfare as a deniable and cost-effective tool to retaliate against US and allied actions while advancing its geopolitical objectives in the region.
Comment – Whilst the advice emanates from the U.S anyone affiliated with NATO can expect to be a target Your business can be wiped out without protection, take basic steps, such as a cyber security risk assessment to understand and mitigate the threats.
Organised Crime
Operation Machinize – Exposing Money Laundering on our high streets
In March and April 2025, a major multi-agency crackdown targeted over 265 high street businesses across England and Wales suspected of laundering criminal proceeds.
But what does it mean for AML Compliance?
These cash-intensive premises, including barbershops, vape stores, sweet shops, and nail salons, are increasingly exploited by organised crime groups (OCGs) to legitimise illicit funds from drug trafficking, human trafficking, and other serious offences.
The operation resulted in 35 arrests, over £1 million in bank accounts frozen, £40,000 in cash seized, and the closure of ten businesses. Importantly, nearly 100 potential victims of exploitation were safeguarded during these enforcement actions.
Regional police forces uncovered extensive links between these fronts and wider organised crime networks, including fraud, firearms offences, and illicit tobacco sales. The scale of the problem underscores the need for robust due diligence, enhanced transaction monitoring, and vigilance in identifying suspicious activity even in seemingly low-risk sectors.
Comment – For compliance professionals, this operation highlights the growing sophistication and local presence of money laundering risks. Such businesses often operate with minimal oversight and high volumes of cash transactions, making them attractive vehicles for criminal finance. Don’t ignore them when conducting AML Due Diligence, understand the ownership and network. Need help? Check out Investigation Engine.
Regulatory
HMRC cracking down on estate agents
HM Revenue & Customs (HMRC) has imposed fines exceeding £1 million on 194 estate agents for breaches of anti-money laundering (AML) regulations, highlighting a significant crackdown on the property sector’s compliance failures.
The largest fine of £215,000 was handed to Countrywide for systemic failures including inadequate due diligence, poor timing of verification, and deficient record-keeping. Alongside this, other agents such as Tepilo and Settled also received substantial penalties, with HMRC warning that further fines are imminent following recent inspections across multiple UK regions.
This enforcement surge reflects a broader pattern of non-compliance revealed in government data for 2024-2025, which shows many businesses failing to meet AML obligations such as registration, risk assessments, and customer due diligence. HMRC’s intensified supervisory activities have prompted over 1,600 estate agency branches to complete AML registrations in the past year, signalling that the regulator’s “carrot and stick” approach is driving improved adherence.
However, a significant minority of agents remain unaware or indifferent to their legal duties, risking heavy fines or even criminal prosecution, with penalties ranging from thousands of pounds to potential prison sentences.
The ongoing enforcement underscores the critical importance of robust AML policies, regular staff training, and comprehensive risk management within the property sector. Industry bodies like Propertymark have responded by offering compliance training and audit support to help agents meet their obligations and restore consumer confidence. HMRC’s message is clear, a failure to comply with AML regulations will result in severe financial and legal consequences, reinforcing the need for vigilance in combating money laundering risks in property transactions.
Comment – Do you want an effective tool to help manage you due diligence and risk assessment responsibilities? Look no further than Investigation Engine.
