Safeguarding against digital deception requires an agile blend of predictive analytics, cross-industry collaboration, and human vigilance.
Key Insights
- Criminal syndicates now deploy AI and real-time deepfakes to manipulate victims into actively approving fraudulent transfers themselves, transforming financial fraud into an industrialised US$88 billion threat.
- To stop these coerced transfers, financial institutions must shift from reactive compliance monitoring to real-time behavioural analytics that intercept anomalies before funds ever move.
- Defeating digital deception demands cross-sector intelligence sharing paired with uncompromising public education, ensuring human vigilance remains the ultimate safeguard against technological manipulation.
Modern financial crime no longer targets systems; it operates as an industrialised machine. A July 2026 United Nations Office on Drugs and Crime report estimated scam losses across East and Southeast Asia, Australia and New Zealand at US$88–114 billion in 2025, driven by cross-border syndicates, using deepfakes generated with artificial intelligence (AI) and manipulated communications to orchestrate attacks at scale.
The true danger of this intelligent fraud lies in execution: perpetrators deceive victims so convincingly that they willingly authorise the transfers themselves. Moderating a panel of compliance leaders at the Institute of Enterprise Risk Practitioners’ (IERP®) Global Conference 2026, Reece Soukoroff, Global Threat Intelligence Strategist at NOF Consulting, challenged the industry to rethink its security posture.
Among the experts on stage, their consensus was clear: protecting trust demands moving beyond reactive compliance to early intervention, blending real-time behavioural analytics with uncompromising human safeguards.
Digital Deception: Manipulating Customer Trust
Effective prevention starts with understanding how bad actors exploit psychological vulnerabilities to orchestrate AI-driven fraud
In 2026, as syndicates deploy real-time voice cloning and deepfakes to scale their attacks, the threat model has shifted away from brute-force account takeovers. Today, criminals use sophisticated digital deception to trick targets into willingly authorising the fraudulent transactions themselves.
Yiow Inn Sann, Group Chief Compliance Officer at Maybank, highlighted this evolution: “Right now, a lot of fraud [cases] are what we call authorised fraud. And it is where the victims are willingly [executing] the transactions out of fear, or they may have been manipulated.”
Because coerced victims routinely bypass security warnings under duress, banks can no longer rely solely on legacy systems that flag anomalies after the fact. Faradina Mohammad Ghouse, Group Chief Compliance Officer at AmBank Group, stressed that compliance teams must pivot from merely tracking transaction flows to actively analysing victim behaviour.
By identifying the behavioural shifts of a compromised customer, banks can intervene, break the psychological spell, and protect the individual before the funds ever move.
Detecting AI-Driven Fraud in Real-Time
Because customers authorise these transfers themselves, traditional Anti-Money Laundering (AML) processes are insufficient for stopping modern, automated attacks. Historically, these protocols were built to trace complex money trails but they were never designed for live interception.
However, the surge of AI-driven fraud in 2026 demands a faster, more proactive response. When syndicates execute automated strikes in seconds, flagging anomalies long after a transfer clears is far too late to recover the funds.
Faradina highlighted the sharp contrast between the two disciplines. “AML transaction monitoring is easier,” she explained to the panel. “You are detecting the transactions after the fact. But here, if you talk about fraud, you’re going to have to understand the customer’s login behaviour, location, IP address. You have to understand the device.”
To prevent losses, banks must secure the environment before the money moves. This requires tracking real-time anomalies, such as a user attempting to log in from multiple locations within an hour. Integrating cybersecurity data like IP and device tracking with traditional compliance monitoring helps institutions build a holistic enterprise risk profile of the customer rather than viewing threats in isolation.
By shifting their focus from tracking money to tracking live user footprints, compliance teams can intercept threats early and break the cycle of deceit.
Integrating Enterprise Risk Management: Breaking Industry Silos
Effective enterprise risk management requires moving beyond individual behavioural tracking. Combating industrialised fraud is now a shared responsibility.
Banks hold transaction data, telecommunication companies monitor conversations, and regulators track systemic vulnerabilities. This fragmentation makes cross-sector collaboration essential.
As Inn Sann noted, “If we are all acting alone in silos, we will not be able to put all this together to combat fraud.” By sharing intelligence through platforms like Malaysia’s National Fraud Portal, cross-sector partners can finally piece together the full picture of a syndicate’s network.
Technology and data sharing among institutions, however, only solves half the problem. Public education forms the final line of defence. Collaborative awareness campaigns, such as the Jangan Kena Scam initiative, empower ordinary citizens to recognise modern deception tactics before they transfer their funds.
Crucially, this education must protect both potential victims and unwitting perpetrators. Banks must warn young adults about the severe legal consequences of renting out their bank accounts to syndicates for a small fee. Unifying these preventative efforts turns a fragmented response into a highly resilient ecosystem.
The Human Element in Combating Intelligent Fraud
Despite advanced technologies, the most effective safeguard against intelligent fraud remains human awareness. While syndicates automate deception on an industrial scale, they cannot replicate genuine human intuition.
Julia Chin, Director of Consulting Services at Friday Concepts, argued that the answer lies in what machines cannot replicate. “I believe that AI or not, there are three human social powers that AI cannot replace: compassion, creativity, and curiosity,” she said.
While technology provides the infrastructure, an effective enterprise risk management strategy relies fundamentally on a strong risk culture. Cultivating those inherent strengths empower teams to see the vulnerable individual behind the data.
However, institutions must pair this cultural shift with practical countermeasures. As AI voice cloning and real-time deepfakes become remarkably convincing, families should establish secret verification passwords to authenticate urgent calls from loved ones.
When digital payment requests or security warnings feel suspicious, customers should bypass technology entirely and physically walk into their local bank branch for verification.
In the end, technology alone cannot defeat modern social engineering. Beating intelligent fraud requires empowering the people behind the screens to pause, ask the right questions, and rely on personal judgement before they ever authorise a transfer.
The Path Forward: Protecting Human Vulnerabilities
Defending against digital deception requires an agile blend of predictive analytics, cross-industry collaboration, and human vigilance. Technology alone cannot serve as a complete shield against intelligent fraud.
When criminals bypass security protocols to manipulate customers directly, financial institutions must empower the people behind the screens to anticipate and prevent fraud. Julia captured this dynamic perfectly during the panel discussion.
“I think the reality is that there’s no silver bullet,” she observed. “Accountability and explainability still lie with the people behind those machines.”
Safeguarding the modern financial ecosystem means recognising that every data point represents a real person. By shifting focus from merely tracking money to actively protecting human vulnerabilities, banks and regulators can build a much more resilient defence.
