Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the Daily Compliance News. All, from the Compliance Podcast Network. Each day, we consider four stories from the business world, compliance, ethics, risk management, leadership, or general interest for the compliance professional.
In the initial spotlight segment of this episode, we speak with returning guest and regulatory compliance expert Oonagh van den Berg of Raw Compliance about an article she recently penned on LinkedIn titled “Rethinking AI Regulation: Why Current Approaches Are Falling Short” (check the links below).
Following that, we chat with anti-money laundering (AML) and financial crime scholars Dr. Mirko Nazzari and Prof. Peter Reuter about their new article in the Journal of Crime & Justice, published by the University of Chicago Press, entitled “How Well Does the Money Laundering Control System Work?”
Oonagh van den Berg is the founder of Raw Compliance, a compliance consultancy and training firm. Having grown up in Northern Ireland during the tumultuous 1980s, she is a compliance veteran.
A lawyer by training and an entrepreneur by vocation, she grew up during the dark chapter of her country – better known as “The Troubles”- and went on to achieve success after success: first as a lawyer, then as a compliance officer, a recruiter, and later, a consultant and educator. Having previously taken up roles in Asian financial hubs such as Singapore and Hong Kong, she is currently based in Braga, Portugal.
Dr. Mirko Nazzari is a postdoctoral research fellow in Political Science at Università degli Studi di Sassari, Italy. He holds a PhD in Criminology from Università Cattolica del Sacro Cuore (Italy), where he also served as a Research Fellow at Transcrime – Joint Research Centre on Innovation and Crime.
His research focuses on assessing and enhancing public policies for crime prevention and control, with particular emphasis on money laundering, cybercrime, and the policy challenges posed by emerging technologies. He has published extensively in these areas and contributed to applied policy research at both national and international levels.
Dr. Peter Reuter is Distinguished University Professor in the School of Public Policy and Department of Criminology at the University of Maryland. In 2019, he was awarded the Stockholm Prize in Criminology, the most prestigious award in the field. He founded the International Society for the Study of Drug Policy and RAND’s Drug Policy Research Center.
Discussion:
The podcast begins with a brief conversation between Oonagh and Regulatory Ramblings host Ajay Shamdasani about her September 8, 2025, article on LinkedIn, entitled “Rethinking AI Regulation: Why Current Approaches Are Falling Short.”
Her key takeaway for listeners and her readers is that: “AI isn’t just a technology—it’s an ecosystem. Regulating it requires cooperation, adaptability, and vision. Anything less will fail.”
Oonagh goes on to say: “Artificial Intelligence is evolving faster than regulators can keep up. Around the world, governments are racing to design frameworks to govern AI use, but the struggle is evident: how do you regulate something so pervasive, adaptive, and borderless without stifling innovation or missing critical risks?”
She assesses Hong Kong’s present dilemma – highlighted in a recent South China Morning Post article – thatillustrates such challenges. The city faces obstacles in enforcing rules that would necessitate AI-created content to be labelled. Experts, she says, warn that the city’s market is “too small” for supporting “bespoke legislation, and without robust enforcement mechanisms, rules around watermarking and labelling may simply be ignored.”
“This isn’t just a Hong Kong problem. It’s a global one. And it’s a sign that we need to rethink how AI regulation is designed and enforced,” she writes.
As the former British colony crafts its own AI rules regime, she highlights the challenges the city faces:
1. Fragmented and reactive regulation: Hong Kong currently relies on piecemeal laws—privacy, IP, finance—to govern AI. The lack of a unified statute leaves gaps and inconsistencies. This mirrors the situation in many jurisdictions where regulators patch AI onto existing frameworks rather than building something purpose-built.
2. Enforcement complexity
Even when rules exist, implementation is shaky. For example, China mandates labelling and watermarking of AI content. But technical evasion is easy, watermarking can be stripped, and compliance varies across platforms. Enforcement lags behind innovation.
3. Scale and coordination problems
Small markets like Hong Kong can’t realistically create standalone AI regimes that diverge too far from global standards. With multiple regulators (PCPD, HKMA, SFC) touching AI issues, coordination becomes another hurdle.
4. Ethical and societal risks remain unaddressed
Labelling helps promote transparency, but it doesn’t address deeper concerns, such as misinformation, deepfakes, privacy breaches, biased algorithms, or liability for harm.
Ultimately, Oonagh notes the Special Administrative Region (SAR) needs to learn from other models.
For example, the EU AI Act is a superb piece of legislation. “The European Union has introduced the world’s most ambitious attempt at AI regulation,” she says. “Its risk-based approach divides AI systems into categories:
• Unacceptable risk (e.g., social scoring) – outright bans.
• High risk (e.g., biometrics, healthcare AI, financial services AI) – strict compliance, human oversight, mandatory audits.
• Low/minimal risk – lighter obligations.
“This is a principle-driven and comprehensive framework, but critics warn that its heavy compliance burden may stifle innovation in smaller companies. Enforcement capacity will also be tested—many national regulators are underfunded compared to the scope of responsibility,” she wrote.
Then there is the Singaporean model, which she acknowledges is “a more agile, industry-friendly approach with its Model AI Governance Framework.” Instead of rigid laws, it provides:
• Voluntary best practices (transparency, explainability, fairness).
• Industry sandboxes to experiment safely.
• A strong focus on multi-stakeholder collaboration between regulators, academia, and industry.
“This approach supports innovation while nudging companies toward responsible AI. But without legal force, it risks leaving gaps where bad actors can exploit weaknesses,” she says.
For Hong Kong to have a more workable approach, therefore, she recommends borrowing what works and is relevant to the local context. Namely:
Unified AI Regulation: Move beyond fragmented laws and adopt a dedicated AI framework, grounded in core principles: accountability, transparency, fairness, privacy, and safety.
Risk-Based Oversight: Like the EU Act, differentiate between high-risk and low-risk AI use, applying strict oversight only where harms could be severe.
Practical Enforcement Tools: Invest in watermarking and labelling standards that are technically robust, enforceable, and difficult to evade—while recognizing that labelling alone isn’t a silver bullet.
Dedicated Oversight Body: Create a central AI regulator to coordinate across sectors, avoid duplication, and respond quickly to emerging risks.
Public Engagement & Education: Foster societal trust by educating citizens on the risks, rights, and safeguards associated with AI, ensuring transparency in the decision-making process surrounding AI.
Global Alignment: For small markets like Hong Kong, aligning with global regimes—whether the EU Act’s structure or Singapore’s collaborative model—is key to avoiding regulatory isolation and easing compliance for international companies.
As Oonagh concludes, AI regulation cannot be built on ad hoc legal fixes or unenforceable guidelines. “Hong Kong’s struggles highlight the real-world limitations of trying to bolt rules onto outdated systems. The EU shows the power of principle-based, risk-tiered regulation, while Singapore demonstrates the agility of a collaborative, innovation-friendly approach,” she writes.
“The answer lies in combining these lessons: a unified, principle-driven law; proportionate, risk-based oversight; enforceable standards; and international harmonisation. Regulation must evolve as quickly as AI itself—not to slow it down, but to ensure that innovation happens safely, transparently, and for the benefit of society,” she says.
Moving into the lengthier discussion portion of the episode, Mirko and Peter discuss their article, published earlier this summer, entitled “How Well Does the Money Laundering Control System Work?”
The article takes a critical look at the global AML system and poses a simple yet fundamental question: Has it actually made money laundering more challenging or risky for criminals? The answer is more complicated— and less encouraging—than many might hope. And it’s a question for which there may be different answers at local, national, transnational, and global levels.
Mirko & Peter’s essay offers a critical and data-driven analysis of the global AML regime, highlighting:
▪️ The lack of empirical evidence that ML has become more difficult or less prevalent
▪️ The often symbolic nature of international evaluations, such as the Financial Action Task Force Mutual Evaluations
▪️ The high costs and unintended consequences of AML measures, including derisking, and
▪️ The central role of private entities in detecting suspicious activity, with significant operational implications. Although lengthy, it is highly recommended reading for anyone working in or interested in AML, financial crime, and public policy evaluation.
Simply put, Money laundering remains a significant concern worldwide, with substantial resources dedicated to preventing illicit funds from entering the financial system. Yet, despite decades of legislative and regulatory development, the effectiveness of AML frameworks remains dubious.
Again, the article is a sharp, data-informed critique of the current state of the international AML apparatus. The authors highlight seven key findings that challenge conventional wisdom:
Major banks regularly face hefty fines, but executives very rarely face criminal convictions
Money laundering is often no more complex or expensive today than it was in the late 1980s
Most laundering methods remain surprisingly basic
The system disproportionately benefits wealthy jurisdictions
AML measures yield valuable intelligence for law enforcement
But they also carry risks, including de-risking and data misuse
The real costs of AML compliance are never part of public debate. Only occasionally is there mention of the costs borne by banks.
The abstract to their piece states: “The continued globalization of finances has generated an ever-larger array of methods for making criminal earnings appear legitimate. The global regime to control money laundering has become more sophisticated and comprehensive (i.e., expensive and intrusive). There is no evidence that money laundering is declining or becoming more difficult or expensive. The system’s failure has many sources. Nations that pushed for its creation and development have been unwilling to implement critical elements. Major banks have repeatedly failed to meet their obligations, suggesting either insufficient commitment or a lack of the necessary skills and systems to comply. Regulatory oversight has been inadequate. There is, however, evidence that the system aids enforcement of laws against criminal enterprises. Despite the consensus that the system works poorly, there is almost no discussion of substantial reforms.”
Their key observations or conclusions are that simple laundering strategies remain pervasive, there has been, relatively speaking, limited adoption of sophisticated methods like crypto, and most launderers tend to launder their own funds rather than avail themselves of the “professional services” of more experienced financial criminals.
The challenges they cite include the limited policy debate over AML and financial crime compliance in general, a tendency for policymakers and regulators to focus on incremental improvements rather than comprehensive reforms, and whether the current system of ever-growing suspicious activity report (SAR) filings is sustainable in the long term.
As Mirko says, “SARs are contributing to investigations,” but it is unclear whether such a system is sustainable over time. He highlights a common practice among money laundering reporting officers (MLROs) of reporting everything to avoid fines, sanctions, or personal reprimands—a phenomenon known as “defensive filing.”
However, the example of the U.S. Treasury Department’s FinCEN shows that four million SARs are filed annually, which cannot be effectively managed. This places a significant strain on Financial Intelligence Units and law enforcement agencies, whose limited resources make it challenging to keep pace with the volume of reports.
Mirko added that not all money launderers are the same: the typologies of how a drug dealer, a kleptocrat, and a cryptocriminal launder funds may be very different.
When asked what policy choices they would advocate for regulators and law enforcement to adopt, both Mirko and Peter stressed the need to set realistic goals, develop alternative effectiveness metrics, and strike a balance between the competing yet compelling goals of AML controls and financial inclusion.
As the conversation concluded, Peter acknowledged that the White House’s statement earlier this year, indicating it would scale back AML enforcement, could lead to selective enforcement of such rules under the current Trump administration.
Regulatory Ramblings podcasts is brought to you by The University of Hong Kong – Reg/Tech Lab, HKU-SCF Fintech Academy, Asia Global Institute, and HKU-edX Professional Certificate in Fintech, with support from the HKU Faculty of Law.
Dr. Mariola Marzoukis isan anti-money laundering (AML) professional with extensive experience in regulatory software and consulting across the public and private sectors. Her career has involved working with global banks on how to use technologies to address regulatory compliance demands.
In 2023, after completing her doctorate in criminal justice focused on trade-based money laundering (TBML) and technology, she co-founded Vortex Risk Ltd. with her colleague Dr Nicholas Gilmour (himself a guest on episode #18 of Regulatory Ramblings). The firm provides insights into money laundering practices to individuals and organizations worldwide. Vortex Risk’s approach empowers clients by offering perspectives akin to rational-thinking criminals operating discreetly to evade regulatory suspicion.
Over the course of her career, Mariola has held strategic product management positions at internationally recognized companies such as British Aerospace and Engineering (BAE) Applied Intelligence, EY, NICE Actimize, and Napier AI.
She specializes in financial crime prevention and has demonstrated expertise in detecting money laundering schemes using advanced technologies. Over time, her focus extended to the ever-growing specter of TBML, and her research in this area has garnered recognition within the industry. Mariola’s pilot study on Brexit’s impact on TBML has been published in the Journal of Money Laundering Control, featured on GTR News, and cited by the Institute of Export and International Trade UK.
In this episode of Regulatory Ramblings, she chats with host Ajay Shamdasani, describing her path from Poland to the UK, first as a student and now as a much sought-after financial crime professional in London.
The conversation underscores Mariola’s philosophy: defeating money laundering requires rational thinking and not merely compliance red flags. She eschews the notion of compliance as an exercise in perfunctory box-ticking and form-filing – a perennial lament in the profession.
She shares that her approach towards AML more generally is to precisely deploy RegTech to aid regulated entities in detecting criminality. While acknowledging that data analytics and artificial intelligence (AI) are essential tools in the battle against financial crime, she stresses that technology is not a panacea and works best when used in tandem with the skills, temperament, wisdom, and judgment that experienced professional researchers and investigators have developed over time. AI is no substitute for analysis by a human and good old common sense.
Mariola admits that while she does not have a background in science, technology, engineering, or math (STEM), her experience as a product manager and corporate strategist has afforded her insight into what customers need from technical solutions and a sense of discernment about when to apply which technologies, if at all. While not a techie per se, she has developed an understanding of technological development and how and when it should be deployed to solve specific problems. Ultimately, tools should meet the objectives of problem-solving, she says.
She recounts the various learning curves she experienced from the business side while coping with the more technical aspects of roles throughout her career.
The discussion concludes with Mariola stating her views on the prevailing hypocrisy in AML and sanctions enforcement. The financial world is all too often regulated from Washington, New York, London, and Brussels. Yet, while the US and UK are some of the most aggressive jurisdictions regarding financial crime enforcement actions, their regulatory apparatus is often used to further their geopolitical goals. It is a view outside of the West that Mariola says is not without merit.
Podcast Discussion
3:09 Mariola Marzouk’s Journey into Financial Crime
9:58 Combating Trade-Based Money Laundering: A Personal Pursuit of Restorative Justice
15:25 Disrupting the Norm: Money Laundering and Regulatory Realities
Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee, and listen in to the Daily Compliance News. all from the Compliance Podcast Network. Each day we consider four stories from the business world: compliance, ethics, risk management, leadership, or general interest for the compliance professional.
Stories we are following in today’s edition:
Massive money-laundering case in Singapore (Bloomberg)
What employers expect employees to know about OpenAI. (BBC)
Welcome to the Daily Compliance News. Each day, Tom Fox, the Voice of Compliance, brings you compliance-related stories to start your day. Sit back, enjoy a cup of morning coffee and listen to the Daily Compliance News. All from the Compliance Podcast Network. Each day we consider four stories from the business world, compliance, ethics, risk management, leadership, or general interest for the compliance professional.
Stories we are following in today’s edition of Daily Compliance News:
Simon Winchester is the Vice President of Advanced Technologies at Jumio Corporation. His responsibilities entail building the go-to-market strategies for newly acquired technologies within Jumio and then driving the adoption on a global scale. One of the company’s most recent additions is its AML (anti-money laundering) solutions. Tom Fox welcomes him to this week’s show to talk about current world events and the company’s AML solution.
Money Laundering in 2022
Tom asks Simon if money laundering schemes have become more ubiquitous since the Russian invasion of Ukraine. Simon replies that the recent events certainly had an impact. He says that money laundering is “criminals taking illicitly-gained funds and then turning them into legitimate cash or assets which are ideally free of suspicion.” At the core of this criminal process are three themes: placement, layering, and integration. Due to the digital environment we live in today, more people from all demographics are comfortable with digital banking, and criminals now find it easier to launder money, which makes it more difficult to detect. Fortunately, Jumio works hard to provide AML solutions and offer more effective compliance programs.
Key AML Regulations
Tom asks Simon what are some of the key AML regulations that Jumio advises clients on. It mostly depends on where your organization is located in the world, as local enforcement bodies drive AML regulations, Simon responds. These regulations will take a cue from international standards set by the Financial Action Task Force, which functions as a “global AML watchdog”. In the UK, the EU AML directives shape policy and provide guidance. Recently, they brought a new directive into effect which “increased the frequency of regulatory updates to the KYC and AML legislation, and brought a strict obligation to industries that were not previously subjected to severe AML protocol,” Simon tells Tom.
Playing Catch-Up With Money Launderers
Tom asks Simon what Jumio sees as the key components of a successful AML program. Ideally, a company providing AML solutions should have a well-defined plan, Simon says. However, that is not feasible given the current climate. The components of a successful AML program, Simon says, include three steps:
A dedicated compliance officer who is tasked with creating, monitoring and reviewing the compliance program, and staff training.
A written risk-based compliance program with comprehensive AML policies and procedures that are documented. This approach identifies and protects your business from financial crime and includes having the technology in place to support that framework.
An appropriate customer due diligence process, which means vetting your clients to avoid financial crimes.
The Role of a CCO in AML Solutions
Simon believes that “Chief Compliance Officers are the catalyst for the growth and innovation”. He acknowledges how CCOs often get the raw end of the deal and their role in the organization must be scrutinized and changed. With the right AML technologies, compliance team, and effective AML program, a CCO and their team can drive shareholder value through organizational growth.
Welcome to the only roundtable podcast in compliance. In 2021, Everything Compliance was honored by W3 as a top talk show in podcasting. In this episode, we have the quartet of Jay Rosen, Jonathan Marks, Tom Fox and Matt Kelly. We conclude with our fan favorite Shout Outs and Rants.
1. Jay Rosen discusses the hunt for Russian oligarch goods and funds. Rosen shouts out to gaslighters Marjorie Taylor Green and Kevin McCarthy for denying they made comments when the audio was played to them.
2. Matt Kelly takes a deep dive into the Stericycle FCPA enforcement action. Kelly gives a shout out to the Brooklyn Public Library for offering a free library cards to those from towns where the GOP has banned books.
3. Jonathan Marks looks explores the FirstEnergy corruption case and its continued fallout in Ohio. Marks rants about Comcast which marketed a product which does not exist.
4. Tom Fox looks a provocative piece by Dick Cassin which posits the DOJ has changed enforcement priorities to remediation as the key goal. Fox shouts out to shareholders of Credit Suisse who revolted against the Board when it tried to shield itself from liability over its recent financial failures.
The members of the Everything Compliance are:
• Jay Rosen– Jay is Vice President, Business Development Corporate Monitoring at Affiliated Monitors. Rosen can be reached at JRosen@affiliatedmonitors.com
• Karen Woody – One of the top academic experts on the SEC. Woody can be reached at kwoody@wlu.edu
• Matt Kelly – Founder and CEO of Radical Compliance. Kelly can be reached at mkelly@radicalcompliance.com
• Jonathan Armstrong –is our UK colleague, who is an experienced data privacy/data protection lawyer with Cordery in London. Armstrong can be reached at jonathan.armstrong@corderycompliance.com
• Jonathan Marks is Partner, Firm Practice Leader – Global Forensic, Compliance & Integrity Services at Baker Tilly. Marks can be reached at jonathan.marks@bakertilly.com
The host and producer, ranter (and sometime panelist) of Everything Compliance is Tom Fox the Voice of Compliance. He can be reached at tfox@tfoxlaw.com. Everything Compliance is a part of the Compliance Podcast Network.