Blog

Success Tale: Setting a New Benchmark for AI-based AML Compliance

Site Logo
Tookitaki
10 December 2020
read
7 min

Tookitaki achieved a rare and historic milestone as our Anti-Money Laundering Suite (AMLS) solution went live within the premises of United Overseas Bank (UOB), one of the top 3 banks in Singapore. We became the first in the APAC region to deploy a complete AI-powered anti-money laundering (AML) solution in production concurrently to two AML risk dimensions, namely transaction monitoring (TM) and name screening (NS). By deploying Tookitaki’s AI-enabled AMLS, UOB could effectively create workflows for prioritizing TM and NS alerts based on their risk levels to help the compliance team focus on those alerts that matter the most. Vindicating the efficacy, robustness and sustainability of the machine learning models involved, AMLS underwent multiple rounds of rigorous testing, validation and evaluation, involving third-party consultants, before going live in full scale.

Compliance Challenges That Prompted us to be Innovators

Combating money laundering has become an enormous task for financial institutions, and it comes with substantial costs and risks, including but not limited to regulatory, reputational and financial crime risks. During the first half of 2020, APAC regulators imposed almost USD 4 billion in fines for AML violations, according to a report. Ineffective risk-based frameworks, deficient monitoring systems, inadequate review of suspicious activity, and unoptimized resources allocation are some of the widely cited AML compliance problems for financial institutions.

A leading bank in Southeast Asia with a global network of more than 500 offices in 19 countries and territories in Asia Pacific, Europe and North America, UOB wanted to have a holistic view of money laundering risks and the threat-scape across various banking segments such as corporate, retail and private. Existing static and granular rules-based approaches, which are oblivious of the holistic trend with a narrow and uni-dimensional focus, were not capable of doing the same. For UOB, which is handling about 30 million transactions and more than 5,700 TM alerts per month, existing rules-based systems produced a significant volume of false positives. The situation was not different in the case of the NS process, where the bank screened about 60,000 account names on a monthly basis. These false leads are a drain on productivity as they take significant time and resources to be disposed of. In the AML compliance space, banks are wasting more USD 3.5 billion per year chasing false leads because of outdated AML systems that rely on stale rules and scenarios and generate millions of false positives, according to research.

Undoubtedly, using limited resources to close off non-material and unimportant alerts is manual and onerous, resulting in huge backlogs for both processes and missed/delayed Suspicious Activity Report (SAR) filings. Furthermore, the ballooning costs of AML compliance coupled with the high volume of backlog alerts swamp compliance teams and potentially distract them from ‘true’ high-risk events and customer circumstances. Alert investigation was a time-consuming and labour-intensive affair as the compliance team spent significant time in gathering data and analysing it to differentiate illegitimate activities from legitimate ones. Disparate data sources and highly complex business processes added to the difficulty of the investigation team in analysing the links between parties and transactions.

These issues prompted the bank to leverage innovation and next-generation technology to enhance existing AML compliance processes, surveillance systems, and alert handling practices. In specific, UOB wanted a next-gen solution that can do the following:

  • Identification of non-material false positives for both TM and NS using data from disparate sources.
  • Accurate grouping of high-risk alerts for increased focus by compliance personnel.
  • Advanced analytics combining data from existing financial crime systems and numerous disparate data sources.
  • Faster investigation and resolution of all alerts by connecting the dots within the data, and constructing a more holistic global view of accounts, counterparties and transactions, effectively reducing the high volume of alert backlogs.

AMLS: An Innovation Proven for Robustness, Agility and Sustainability

As part of its ‘AML/CFT Technology Roadmap’ to harness next-generation AI and machine learning-driven technologies to combat money laundering, UOB teamed up with Tookitaki. The bank’s aspiration was to shift beyond rules-based systems to achieve higher performance with machine learning models and other disciplines of AI. Tookitaki’s ability to seamlessly connect with existing AML systems at UOB for data ingestion hastened the bank’s decision to onboard us.

As such, Tookitaki developed AMLS, an end-to-end AML compliance solution that combines supervised and unsupervised machine learning techniques to detect suspicious activities and identify high-risk clients quicker and more accurately. We use a combination of machine learning algorithms to build highly accurate and stable models and techniques such as dynamic clustering which does behavioural segmentation based on composite features. AMLS TM module can prioritise known alerts based on their risk scores and detect new, unknown suspicious patterns. The NS module has three core components – enhanced name matching through a wider range of complex name permutations, reduction of undetermined hits through inference features and accurate alert detection through primary and secondary information. These capabilities help accurately distinguish between false hits and true hits. The major innovative features of the solution are:

  • Smart Alert Triage: The solution offers a smart way to triage TM and NS alerts by segregating them into three risk buckets – L1, L2 and L3 – where L3 is the highest-risk bucket. The highly accurate alert classification helps UOB’s compliance team to allocate time and experience judiciously and effectively address alert backlogs. Compliance analysts can now focus on those high-risk cases (L3 and L2) that require more time to investigate and close. Meanwhile, they can close low-risk alerts (L1) with minimal investigation. AMLS generates a probability score for all alerts, along with an explanation to guide the investigator make the right decision faster.
  • Champion–Challenger Approach: A core component of our data science platform, this approach enables machine learning models to continuously learn from data shifts and data additions. It helps ensure that the model remains effective and unbiased amid incremental changes in data.
  • Explainable AI (XAI) Framework: Our patent-pending XAI framework provides transparent machine learning models, and explainable and documentable predictions to ensure thorough understanding and to conduct quality investigations along with aligning users with the compliance model transparency requirements of regulators.
  • Scalability: AMLS uses a combination of distributed data-parallel architecture and machine learning to ensure scalability across the bank’s multiple business lines and complex layers of existing technologies and systems.

Unique Implementation Approach Resulting in Sustained Model Performance

UOB had tested the effectiveness of AMLS in terms of alert prioritization in a six-month pilot started in early 2018. After receiving successful results, which Deloitte validated, the bank tested the solution again with a unique data set and performed another round of model validation. The subsequent machine-learning models outperformed the results we achieved during the pilot. The successful results gave UOB the confidence to move the machine learning models to production and build a tailored solution. Based on the bank’s feedback, Tookitaki introduced various enhancements and additional features into its solution.

While deploying AMLS on UOB premises, we took a unique approach of augmenting existing systems with AI-based smart alert management where our solution would sit on top of existing TM and NS solutions and accurately group alerts for faster closure. In the model training phase, our solution’s powerful integration layer extracted data from existing product systems and primary TM and NS systems, transformed them and then loaded them to our platform. This used to be a process that requires considerable effort and time, however, Tookitaki solution’s pre-packed connectors made it easier for us to adapt to the bank’s various enterprise architectures and up-stream systems.

For TM execution, we integrated historical data for three years (customer, accounts, transactions, primary system alerts, etc.) in the learning phase. In NS, which is used to identify individuals and entities that are involved in AML activities, our advanced name matching algorithms compared individual names and business names with the bank’s internal and external watch lists. Our solution could effectively handle multiple attributes such as typos, transliteration limitations, cultural differences for accurate hits detection.

After validating the accuracy and stability of the training models, we moved to the execution mode where we integrated additional data from source systems. The final models used in TM and NS processes helped execute alert prioritization accurately and investigate alerts in a faster manner. AMLS consolidated all source data to provide a holistic view of customers, accounts and transactions and brought in enhanced network analysis and intelligent cluster analysis to aid investigative functions across various business units within the bank.

The business interface of AMLS provides easy-to-use and highly customizable dashboards for both TM and NS processes, enabling efficient work allocation, exploratory analysis, link analysis, prediction interpretation and management reporting.

The following are the quantitative business benefits we received from the project.

  • Name Screening: 70% reduction in false positives for individual names and 60% reduction in false positives for corporate names.
  • Transaction Monitoring: 50% reduction in false positives with less than 1% misclassification, 5% increase in true positives (file-able SARs) and an overall true positive prediction rate of 96% in the high-priority category.

Other benefits we achieved are:

  • Increased effectiveness in identifying suspicious activities
  • A sharper focus on data anomalies rather than depending on threshold triggering
  • Easier customisation of data features to target specific risks accurately
  • Ability to enable longer look-back periods to detect complex scenarios

Protecting against model biases, our platform’s Champion-Challenger module automatically and continuously incorporates data shifts and data additions and informs users of the availability of any ‘Challenger’ model. Users may validate the vitals of the newly created ‘Challenger’ and replace it with the existing ‘Champion’ effortlessly. This unique feature helps financial institutions avoid time-consuming and costly model upgrades, ensuring faster ROI realization and sustained and effective performance of AML compliance programs.

The deployment of AMLS at UOB with stellar results marks the end of the AI experimentation phase in AML compliance. It is another example of how Tookitaki, as a fast-growing AI startup, sets new standards for the regulatory compliance industry’s fight against money laundering. Our success is noteworthy given that many enterprise AI projects are dying within laboratories. AMLS went through multiple rounds of testing and validation and our machine learning models have been proven to provide stable results and remain agile to the cause in dynamic situations. At the same time, it could effectively explain the decision-making process of machine learning models in a comprehensive yet simple manner through our patent-pending Explainable AI framework. Through this project, we also validated that our AI processes are effective, efficient and set to be applied in a responsible and ethical manner.

A complete revamp of existing AML compliance processes is imperative for financial institutions, given that money laundering strategies are becoming more and more sophisticated. It is time to embrace modern-era intelligent technology to enhance efficiency and effectiveness in AML compliance programs, establish next-gen financial crime surveillance and ensure robust risk management practices.

For more details about our partnerships with UOB and many other big banks across the globe, please contact us.

By submitting the form, you agree that your personal data will be processed to provide the requested content (and for the purposes you agreed to above) in accordance with the Privacy Notice

success icon

We’ve received your details and our team will be in touch shortly.

In the meantime, explore how Tookitaki is transforming financial crime prevention.
Learn More About Us
Oops! Something went wrong while submitting the form.

Ready to Streamline Your Anti-Financial Crime Compliance?

Our Thought Leadership Guides

Blogs
15 Sep 2025
6 min
read

Fake Bonds, Real Losses: Unpacking the ANZ Premier Wealth Investment Scam

Introduction: A Promise Too Good to Be True

An email lands in an inbox. The sender looks familiar, the branding is flawless, and the offer seems almost irresistible: exclusive Kiwi bonds through ANZ Premier Wealth, safe and guaranteed at market-beating returns.

For many Australians and New Zealanders in June 2025, this was no hypothetical. The emails were real, the branding was convincing, and the investment opportunity appeared to come from one of the region’s most trusted banks.

But it was all a scam.

ANZ was forced to issue a public warning after fraudsters impersonated its Premier Wealth division, sending out fake offers for bond investments. Customers who wired money were not buying bonds — they were handing their savings directly to criminals.

This case is more than a cautionary tale. It represents a growing wave of investment scams across ASEAN and ANZ, where fraudsters weaponise trust, impersonate brands, and launder stolen funds with alarming speed.

Talk to an Expert

The Anatomy of the Scam

According to ANZ’s official notice, fraudsters:

  • Impersonated ANZ Premier Wealth staff. Scam emails carried forged ANZ branding, professional signatures, and contact details that closely mirrored legitimate channels.
  • Promoted fake bonds. Victims were promised access to Kiwi and corporate bonds, products usually seen as safe, government-linked investments.
  • Offered exclusivity. Positioning the deal as a Premier Wealth opportunity added credibility, making the offer seem both exclusive and limited.
  • Spoofed domains. Emails originated from look-alike addresses, making it difficult for the average customer to distinguish real from fake.

The scam’s elegance lay in its simplicity. There was no need for fake apps, complex phishing kits, or deepfakes. Just a trusted brand, professional language, and the lure of safety with superior returns.

Why Victims Fell for It: The Psychology at Play

Fraudsters know that logic bends under the weight of trust and urgency. This scam exploited four psychological levers:

  1. Brand Authority. ANZ is a household name. If “ANZ” says a bond is safe, who questions it?
  2. Exclusivity. By labelling it a Premier Wealth offer, the scam hinted at privileged access — only for the chosen few.
  3. Fear of Missing Out. “Limited time only” messaging pressured quick action. The less time victims had to think, the less likely they were to spot inconsistencies.
  4. Professional Presentation. Logos, formatting, even fake signatures gave the appearance of authenticity, reducing natural scepticism.

The result: even financially literate individuals were vulnerable.

ChatGPT Image Sep 13, 2025, 11_02_17 AM

The Laundering Playbook Behind the Scam

Once funds left victims’ accounts, the fraud didn’t end — it evolved into laundering. While details of this specific case remain under investigation, patterns from similar scams offer a likely playbook:

  1. Placement. Victims wired money into accounts controlled by money mules, often locals recruited under false pretences.
  2. Layering. Funds were split and moved quickly:
    • From mule accounts into shell companies posing as “investment firms.”
    • Through remittance channels across ASEAN.
    • Into cryptocurrency exchanges to break traceability.
  3. Integration. Once disguised, the money resurfaced as seemingly legitimate — in real estate, vehicles, or layered back into financial markets.

This lifecycle illustrates why investment scams are not just consumer fraud. They are also money laundering pipelines that demand the attention of compliance teams and regulators.

A Regional Epidemic

The ANZ Premier Wealth scam is part of a broader pattern sweeping ASEAN and ANZ:

  • New Zealand: The Financial Markets Authority recently warned of deepfake investment schemes featuring fake political endorsements. Victims were shown fabricated “news” videos before being directed to fraudulent platforms.
  • Australia: In Western Australia alone, more than A$10 million was lost in 2025 to celebrity-endorsement scams, many using doctored images and fabricated interviews.
  • Philippines and Cambodia: Scam centres linked to investment fraud continue to proliferate, with US sanctions targeting companies enabling their operations.

These cases underscore a single truth: investment scams are industrialising. They no longer rely on lone actors but on networks, infrastructure, and sophisticated social engineering.

Red Flags for Banks and E-Money Issuers

Financial institutions sit at the intersection of prevention. To stay ahead, they must look for red flags across transactions, customer behaviour, and KYC/CDD profiles.

1. Transaction-Level Indicators

  • Transfers to new beneficiaries described as “bond” or “investment” payments.
  • Repeated mid-value international transfers inconsistent with customer history.
  • Rapid pass-through of funds through personal or SME accounts.
  • Small initial transfers followed by large lump sums after “trust” is established.

2. KYC/CDD Risk Indicators

  • Beneficiary companies lacking investment licenses or regulator registrations.
  • Accounts controlled by individuals with no financial background receiving large investment-related flows.
  • Overlapping ownership across multiple “investment firms” with similar addresses or directors.

3. Customer Behaviour Red Flags

  • Elderly or affluent customers suddenly wiring large sums under urgency.
  • Customers unable to clearly explain the investment’s mechanics.
  • Reports of unsolicited investment opportunities delivered via email or social media.

Together, these signals create the scenarios compliance teams must be trained to detect.

Regulatory and Industry Response

ANZ’s quick warning reflects growing industry awareness, but the response must be collective.

  • ASIC and FMA: Both regulators maintain registers of licensed investments and regularly issue alerts. They stress that legitimate offers will always appear on official websites.
  • Global Coordination: Investment scams often cross borders. Victims in Australia and New Zealand may be wiring money to accounts in Southeast Asia. This makes regulatory cooperation across ASEAN and ANZ critical.
  • Consumer Education: Banks and regulators are doubling down on campaigns warning customers that if an investment looks too good to be true, it usually is.

Still, fraudsters adapt faster than awareness campaigns. Which is why technology-driven detection is essential.

How Tookitaki Strengthens Defences

Tookitaki’s solutions are designed for exactly these challenges — scams that evolve, spread, and cross borders.

1. AFC Ecosystem: Shared Intelligence

The AFC Ecosystem aggregates scenarios from global compliance experts, including typologies for investment scams, impersonation fraud, and mule networks. By sharing knowledge, institutions in Australia and New Zealand can learn from cases in the Philippines, Singapore, or beyond.

2. FinCense: Scenario-Driven Monitoring

FinCense transforms these scenarios into live detection. It can flag:

  • Victim-to-mule account flows tied to investment scams.
  • Patterns of layering through multiple personal accounts.
  • Transactions inconsistent with KYC profiles, such as pensioners wiring large “bond” payments.

3. AI Agents: Faster Investigations

Smart Disposition reduces noise by auto-summarising alerts, while FinMate acts as an AI copilot to link entities and uncover hidden relationships. Together, they help compliance teams act before scam proceeds vanish offshore.

4. The Trust Layer

Ultimately, Tookitaki provides the trust layer between institutions, customers, and regulators. By embedding collective intelligence into detection, banks and EMIs not only comply with AML rules but actively safeguard their reputations and customer trust.

Conclusion: Protecting Trust in the Age of Impersonation

The ANZ Premier Wealth impersonation scam shows that in today’s landscape, trust itself is under attack. Fraudsters no longer just exploit technical loopholes; they weaponise the credibility of established institutions to lure victims.

For banks and fintechs, this means vigilance cannot stop at transaction monitoring. It must extend to understanding scenarios, recognising behavioural red flags, and preparing for scams that look indistinguishable from legitimate offers.

For regulators, the challenge is to build stronger cross-border cooperation and accelerate detection frameworks that can keep pace with the industrialisation of fraud.

And for technology providers like Tookitaki, the mission is clear: to stay ahead of deception with intelligence that learns, adapts, and scales.

Because fake bonds may look convincing, but with the right defences, the real losses they cause can be prevented.

Fake Bonds, Real Losses: Unpacking the ANZ Premier Wealth Investment Scam
Blogs
12 Sep 2025
6 min
read

Flooded with Fraud: Unmasking the Money Trails in Philippine Infrastructure Projects

The Philippines has always lived with the threat of floods. Each typhoon season brings destruction, and the government has poured billions into flood control projects meant to shield vulnerable communities. But while citizens braced for rising waters, another kind of flood was quietly at work: a flood of fraud.

Investigations now reveal that massive chunks of the flood control budget never translated into levees, drainage systems, or protection for communities. Instead, they flowed into the hands of a handful of contractors, politicians, and middlemen.

Since 2012, just 15 contractors cornered nearly ₱100 billion in projects, roughly 20 percent of the total budget. Many projects were “ghosts,” existing only on paper. Meanwhile, luxury cars filled garages, mansions rose in gated villages, and political war chests swelled ahead of elections.

This is not simply corruption. It is a textbook case of money laundering, with ghost projects and inflated contracts acting as conduits for illicit enrichment. For banks, fintechs, and regulators, it is a flashing red signal that the financial system remains a key artery for laundering public funds.

The Anatomy of the Scandal

The Department of Public Works and Highways (DPWH) is tasked with executing infrastructure that keeps cities safe from rising waters. Yet over the past decade, its flood control program has morphed into a honey pot for collusion and fraud.

  • Ghost projects: Entire budgets released for dams, dikes, and drainage systems that were never completed or never built at all.
  • Overpriced contracts: Inflated project costs created buffers for skimming and fund diversion.
  • Kickbacks for campaigns: Portions of project budgets allegedly redirected to finance electoral campaigns, locking in loyalty between politicians and contractors.
  • Cartel behaviour: Fifteen contractors cornering nearly a fifth of the flood control budget, year after year, with suspiciously repeat awards.
  • Lavish lifestyles: Contractors flaunting their wealth through luxury cars, sprawling mansions, and overseas spending.

The human cost is chilling. While typhoon-prone communities remain flooded each year, taxpayer money meant for their protection bankrolls supercars instead of sandbags.

ChatGPT Image Sep 11, 2025, 01_08_50 PM

The Laundering Playbook Behind Ghost Projects

This scandal mirrors the familiar placement-layering-integration framework of money laundering, but applied to public funds.

  1. Placement: Ghost Projects as Entry Points
    Funds are injected into the system under the guise of legitimate project disbursements. With government contracts as a cover, illicit enrichment begins with official-looking payments.
  2. Layering: Overpricing, Subcontracting, and Round-Tripping
    Excess funds are disguised through inflated invoices, subcontractor arrangements, and consultancy contracts. Round-tripping, where money cycles through multiple accounts before returning to the same network, further conceals the origin.
  3. Integration: From Sandbags to Supercars
    Once disguised, the funds re-emerge in legitimate markets such as luxury cars, prime real estate, overseas tuition, or campaign expenses. At this stage, dirty money is fully cleaned and woven into political and economic life.

Globally, procurement-related laundering has been flagged repeatedly by the Financial Action Task Force (FATF). In fact, FATF’s 2023 mutual evaluation warned that the Philippines faces serious challenges in addressing public sector corruption risks. The flood control scandal is not just a local embarrassment; it risks pulling the country deeper into scrutiny by international watchdogs.

What Banks Must Watch

Banks sit at the centre of these laundering flows. Every contractor, subcontractor, or political beneficiary needs accounts to receive, move, and disguise illicit funds. This makes banks the first line of defence, and often the last checkpoint before illicit proceeds are fully integrated.

Transaction-Level Red Flags

  • Large and repeated deposits from government agencies into the same small group of contractors.
  • Transfers to shell subcontractors or consultancy firms with little to no delivery capacity.
  • Sudden spikes in cash withdrawals after receiving government disbursements.
  • Circular transactions between contractors and related parties, indicating round-tripping.
  • Luxury purchases such as cars, property, and overseas spending directly following government project inflows.
  • Campaign-linked transfers, with bursts of outgoing payments to political accounts during election seasons.

KYC/CDD Red Flags

  • Contractors with weak financial standing but billion-peso contracts.
  • Hidden ownership ties to politically exposed persons (PEPs).
  • Corporate overlap among multiple contractors, suggesting collusion.
  • Lack of verifiable track records in infrastructure delivery, yet repeated contract awards.

Cross-Border Concerns

Funds may also be siphoned abroad. Banks must scrutinise:

  • Remittances to offshore accounts labelled as “consultancy” or “procurement.”
  • Purchases of high-value overseas assets.
  • Trade-based laundering through manipulated import or export invoices for construction materials.

Banks must not only flag individual transactions but also connect the narrative across accounts, owners, and transaction patterns.

What BSP-Licensed E-Money Issuers Must Watch

The scandal also casts a spotlight on fintech players. BSP-licensed e-money issuers (EMIs) are increasingly part of laundering networks, especially when illicit funds need to be fragmented, hidden, or redirected.

Key risks include:

  • Wallet misuse for political finance, with illicit funds loaded into multiple wallets to bankroll campaigns.
  • Structuring, where large government disbursements are broken into smaller transfers to dodge reporting thresholds.
  • Proxy accounts, with employees or relatives of contractors opening multiple wallets to spread funds.
  • Layering via wallets, with e-money balances converted into bank transfers, prepaid cards, or even crypto exchanges.
  • Unusual bursts of wallet activity around elections or after government fund releases.

For EMIs, the challenge is to monitor not just high-value transactions but also suspicious transaction clusters, where multiple accounts show parallel spikes or transfers that defy normal spending behaviour.

How Tookitaki Strengthens Defences

Schemes like ghost projects thrive because they exploit systemic blind spots. Static rules cannot keep pace with evolving laundering tactics. This is where Tookitaki brings a sharper edge.

AFC Ecosystem: Collective Intelligence

With over 1,500 expert-contributed typologies, the AFC Ecosystem already covers procurement fraud, campaign finance laundering, and luxury asset misuse. These scenarios can be directly applied by Philippine institutions to detect anomalies tied to public fund diversion.

FinCense: Adaptive Detection

FinCense translates these scenarios into live detection rules. It can flag government-to-contractor payments followed by unusual subcontractor layering or sudden spikes in high-value asset spending. Its federated learning model ensures that detection improves continuously across the network.

AI Agents: Cutting Investigation Time

Smart Disposition reduces false positives with automated, contextual alert summaries, while FinMate acts as an AI copilot for investigators. Together, they help compliance teams trace suspicious flows faster, from government disbursements to the eventual luxury car purchase.

The Trust Layer for BSP Institutions

By embedding collective intelligence into everyday monitoring, Tookitaki becomes the trust layer between financial institutions and regulators. This helps BSP and the Anti-Money Laundering Council (AMLC) strengthen national defences against procurement-linked laundering.

Talk to an Expert

Conclusion: Beyond the Scandal

The flood control scandal is more than an exposé of wasted budgets. It is a stark reminder that public money, once stolen, does not vanish into thin air. It flows through the financial system, often right under the noses of compliance teams.

The typologies on display—ghost projects, contractor cartels, political kickbacks, and luxury laundering—are not unique to the Philippines. They are part of a global playbook of corruption-driven laundering. But in a country already under FATF scrutiny, the stakes are even higher.

For banks and EMIs, the call to action is urgent: strengthen detection, move beyond static rules, and collaborate across institutions. For regulators, it means demanding transparency, closing loopholes, and leveraging technology that learns and adapts in real time.

At Tookitaki, our role is to ensure institutions are not just reacting after scandals break but detecting patterns before they escalate. By unmasking money trails, enabling collaborative intelligence, and embedding AI-driven defences, we can prevent the next flood of fraud from drowning public trust.

Floods may be natural, but fraud floods are man-made. And unlike typhoons, this one is preventable.

Flooded with Fraud: Unmasking the Money Trails in Philippine Infrastructure Projects
Blogs
03 Sep 2025
7 min
read

How Initiatives Like AI Verify Make AI-Governance & Validation Protocols Integral to AI Deployment Strategy

Introduction: Why Governance-First AI is Rewriting the Financial Crime Playbook

This article is the second instalment in our series, Governance-First AI Strategy: The Future of Financial Crime Detection. The series examines how financial institutions can move beyond box-ticking compliance and embrace AI systems that are transparent, trustworthy, and genuinely effective against crime.

If you missed Part 1 — The AI Governance Crisis: How Compliance-First Thinking Undermines Both Innovation and Compliance — we recommend it as a pre-read. There, we explored how today’s compliance-heavy frameworks have created a paradox: soaring costs, mounting false positives, and declining effectiveness in tackling sophisticated financial crime.

In this second part, we shift from diagnosing the crisis to highlighting solutions. We look at how governance-first AI is being operationalised through initiatives like Singapore’s AI Verify program, which is setting global benchmarks for validation, accountability, and continuous trust in financial crime detection.

The Governance Gap: Moving Beyond Checkbox Compliance

Traditionally, many financial institutions have seen governance as a final-layer exercise: a set of boxes to tick just before launching a new AML system or onboarding a new AI solution. But today’s complex, AI-driven systems have outpaced this outdated approach. Here’s why this gap is so dangerous:

The Risks of Outdated Governance

  • Operational Failure: Financial institutions are reporting false positive alert rates reaching 90% or higher. Analysts spend valuable time on non-issues, while genuine risks can slip through unseen, creating an operational black hole.
  • Regulatory Exposure: Regulators are increasingly sceptical of black-box AI systems that cannot be explained or audited. This raises the risk of costly penalties, strict remediation orders, and reputational damage.
  • Stalled Innovation: The fear of non-compliance can make organisations hesitant to adopt even the most promising AI innovations, worried they will face issues during audits.

Towards Living Governance

True governance means embedding transparency, validation, and accountability across the entire AI lifecycle. This is not a static report, but a dynamic, ongoing protocol that evolves as threats and opportunities do.

ChatGPT Image Sep 3, 2025, 01_18_24 PM

AI Verify: Singapore’s Blueprint for Independent AI Validation

Enter AI Verify: Singapore’s response to the governance challenge, and a model now being emulated worldwide. Developed by the IMDA and AI Verify Foundation, this pioneering program aims to transform governance and validation from afterthoughts into core design principles for any AI system, especially those managing financial crime risk.

Key Features of AI Verify

  • Rigorous, Scenario-Based Testing: Every AI model is evaluated against 400+ real-world financial crime detection scenarios, ensuring that outputs perform accurately across the range of complexities institutions actually face.
  • Multi-language and Cross-Border Application: With testing in both English and Mandarin, AI Verify anticipates the needs of global financial institutions with diverse customer bases and regulatory environments.
  • Zero Tolerance for Hallucinations: The program enforces strict protocols to ensure every AI-generated output is grounded in verifiable, auditable facts. This sharply reduces the risk of hallucinations, a key regulatory concern.
  • Continuous Compliance Assurance: Validation is not a single event. Ongoing monitoring, reporting, and built-in alerts ensure the AI adapts to new criminal typologies and evolving regulatory expectations.

Validation in Action: The Tookitaki Case Study

Tookitaki became the first RegTech company to achieve independent validation under Singapore’s AI Verify program, setting a new industry benchmark for governance-first AI solutions.

  • Accuracy Across Complexity: Our AI systems were validated against an extensive suite of real-world AML scenarios, consistently delivering precise, actionable outcomes in both English and Mandarin.
  • No Hallucinations: With guardrails in place, every AI-generated narrative was rigorously checked for factual soundness and traceability. Investigators and regulators were able to audit the reasoning behind each alert, turning AI from a “black box” into a transparent partner.
  • Compliance, Built-In: Stringent regulatory, privacy, and security requirements were checked throughout the process, ensuring our systems could not only pass today’s audits but also stay ahead of tomorrow’s standards.
  • Strategic Trust: As recognised by media coverage in The Straits Times, Tookitaki’s independent validation became a source of trust for clients, regulators, and business partners, transforming governance into a strategic advantage.

Continuous Validation: Governance as Daily Operational Advantage

What sets AI Verify, and governance-first models more broadly, apart is the principle of continuous validation:

  • Pre-deployment: Before launch, every model is stress-tested for robustness, fairness, and regulatory fit in a controlled, simulated real-world setting.
  • Post-deployment: Continuous monitoring ensures that as new fraud threats and compliance rules arise, the AI adapts immediately, preventing operational surprises and keeping regulator confidence high.

This approach lets financial institutions move from a reactive, firefighting mentality to a proactive, resilient operating style.

The Strategic Payoff: Governance as a Differentiator

What is the true value of independent, embedded validation?

  • Faster, Safer Innovation: Launches of new AI models become quicker and less risky, since validation is built in, not tacked on at the end.
  • Operational Efficiency: With fewer false positives and more explainable decisions, investigative teams can focus energy where it matters most: rooting out real financial crime.
  • Market Leadership: Governance-first adopters signal to clients, partners, and regulators that they take trust, transparency, and responsibility seriously, building long-term advantages in reputation and readiness.
Talk to an Expert

Conclusion: Tomorrow’s AI, Built on Governance

As we highlighted in Part 1, compliance-first frameworks have proven costly and ineffective, leaving financial institutions trapped in a cycle of escalating spend and diminishing returns. AI Verify demonstrates what a governance-first approach looks like in practice: validation, accountability, and transparency built directly into the design of AI systems.

For Tookitaki, achieving independent validation under AI Verify was not simply a compliance milestone. It was evidence that governance-first AI can deliver measurable trust, precision, and operational advantage. By embedding continuous validation, institutions can move from reactive firefighting to proactive resilience, strengthening both regulatory confidence and market reputation.

Key Takeaways from Part 2:

  1. Governance-first AI shifts the conversation from “being compliant” to “being trustworthy by design.”
  2. Continuous validation ensures models evolve with emerging financial crime typologies and regulatory expectations.
  3. Independent validation transforms governance from a cost centre into a strategic differentiator.

What’s Next in the Series

In Part 3 of our series, Governance-First AI Strategy: The Future of Financial Crime Detection, we will explore one of the most pressing risks in deploying AI for compliance: AI hallucinations. When models generate misleading or fabricated outputs, trust breaks down, both with regulators and within institutions.

We will examine why hallucinations are such a critical challenge in financial crime detection and how governance-first safeguards, including Tookitaki’s own controls, are designed to eliminate these risks and make every AI-driven decision auditable, transparent, and actionable.

Stay tuned.

How Initiatives Like AI Verify Make AI-Governance & Validation Protocols Integral to AI Deployment Strategy