The AML Paradox · Data Brief

    The system costs more than the crime it stops.

    The UK spends more fighting money laundering than it loses to it. Fraud, identity theft and laundering keep rising anyway. Here is where the numbers actually come from.

    £38.3bn spent
    ·
    <1% intercepted
    ·
    3.9m incidents
    01

    The Cost of AML Compliance

    Financial & time burden on UK institutions

    £38.3bn
    Annual UK sector compliance spend
    6+ wks
    UK corporate onboarding average
    $3,500
    Max cost per KYC review
    95%
    AML alerts that are false positives
    70%
    Firms losing clients via slow onboarding
    The Core Paradox

    The UK spends £38.3bn annually on compliance - exceeding the NCA's conservative estimate of £36bn laundered per year. Yet under 1% of illicit flows are intercepted and recovered. The system costs more than the crime it stops.

    Time cost: onboarding burden

    UK corporate banks report the slowest onboarding times globally - averaging 6+ weeks per client. Each manual KYC review costs $1,500-$3,500. For a bank onboarding 10,000 clients/year, that alone reaches $35 million before any other compliance cost.

    Almost two in three customers who tried to open a bank account remotely in 2020 abandoned the process due to friction.

    Fenergo 2025 · Signicat 2020

    The £21,000-per-hour figure

    UK financial institutions collectively spend the equivalent of £21,000 every single hour on FinCrime prevention during onboarding and compliance screening alone.

    UK firms are the most expensive globally to operate, at $78.4m per firm annually vs. $72.2m in the US and $68.2m in Singapore.

    Lucinity / Fenergo 2025
    02

    Fraud Levels: Year-over-Year

    Reported losses, case volumes & enforcement

    Total Cost of Fraud · 2023-24

    Total cost of fraud to the UK economy: £14.4bn - £9.2bn affecting individuals, £5.2bn businesses. True costs are acknowledged to be higher.

    Banking fraud (UK Finance)

    2021
    APP surge
    £1.30bn
    2022
    Record APP year
    £1.56bn
    2023
    Shift to card fraud
    £1.17bn
    2024
    3.13m cases (+14%)
    £1.17bn
    H1 25
    APP +12%
    £629m
    3.9m
    Fraud incidents (Crime Survey, year to Sep 2024)
    +417%
    Rise in global AML fines H1 2025 vs H1 2024
    £870m
    Fraud prevented by UK banking industry H1 2025
    The Effectiveness Gap

    28% effectiveness. 1% recovery.

    The Basel Institute on Governance estimates that less than 1% of all illicit financial flows globally are intercepted and recovered. FATF's own effectiveness rating sits at just 28% - falling from 30% in 2021.

    In UK courts: 3,756 money laundering convictions in 2024 (up 7%), but a 53% conviction rate on principal offences means nearly half of cases brought still fail.

    03

    Identity Theft: Types, Scale & the Hidden Problem

    What the compliance process inadvertently enables

    The Identity Paradox

    KYC requires people to submit passports, utility bills, date of birth, and address history to dozens of institutions over a lifetime. Each database is a breach target. When stolen, that data passes KYC checks - because the documents are genuine.

    UK National Fraud Database - 2025 filings

    Identity fraud
    242,003
    54% of all filings
    Misuse of facility
    106,497
    ↑ 44%
    Account takeover
    78,387
    ↑ 6%
    SIM swap fraud
    ~3,000
    ↑ 1,055%

    Total NFD filings 2025: 444,993 - a record high, up 6% on 2024.CIFAS Fraudscape 2026.

    £1.8bn
    Annual cost of identity fraud to the UK
    69k+
    Reported identity theft cases in the UK annually
    £255
    Cost of money laundering per UK household per year
    04

    The Invisible Layer: Underreporting

    Why the true figures are structurally unknowable

    The Small Business Blind Spot

    The Home Office acknowledges its fraud cost figures are a baseline estimate - "true societal costs are likely higher" - because there are no official estimates for business fraud at all in the Crime Survey for England & Wales.

    Why small businesses don't report

    No incentive to disclose. Reporting fraud rarely results in fund recovery. Reputational risk of appearing compromised outweighs slim odds of justice.

    Regulatory exposure risk. A business that reports processing fraudulent transactions may face scrutiny of its own AML compliance - creating a chilling effect on disclosure.

    Attribution is near-impossible. Identity fraud passing KYC may not surface for months. Tracing it to a specific data exposure is rarely achievable in practice.

    Home Office ECS 2024 · NCA NSA 2025

    The compliance-exposure loop

    KYC data as attack surface. Every KYC completion - for a bank, estate agent, solicitor, gambling site, or fintech - stores a full identity dossier in a new database. Thousands of such databases exist, regulated to varying standards.

    The synthesis problem. Fraudsters combine partial identity data from multiple sources to build synthetic identities with no fraud history. These pass AML checks by design - they are clean precisely because they are new.

    A 311% increase in synthetic identity document fraud was recorded between Q1 2024 and Q1 2025.

    ITRC 2025 · Sumsub 2025
    What we cannot measure

    The reported layer is only the tip.

    The Government Cyber Security Breaches Survey explicitly states it "may underestimate" the full extent of breaches - because it only captures what organisations identified and were willing to report.

    In 2025/26: only 40% of businesses that experienced a breach reported it externally. Of those identifying a breach, only 44% became crime victims - meaning most exposure never becomes a statistic.

    The NCA notes that in fraud cases, only 9% of adult victims could say anything about who targeted them.

    Why we compiled this brief

    The data above is published in fifteen separate reports. The conclusion it points to - that AML compliance has become an attack surface in its own right - isn't well-understood outside specialist circles. We compiled this brief because the picture only emerges when you look at all of it at once.

    If you'd like to know how we use this analysis to build a different kind of compliance tool - the Witness Model - the next page explains the mechanism.

    Sources

    1. Oxford Economics / LexisNexis - "True Cost of Compliance" 2024. UK compliance spend: £38.3bn. Growth 2021-2024: +33%.
    2. Fenergo Financial Crime Industry Trends 2025 - Per-firm UK spend $78.4m. Onboarding: 6+ weeks. Client loss: 70% of firms.
    3. Lucinity - £21,000/hr on FinCrime prevention during onboarding and screening.
    4. Home Office / NAC - Economic Crime Plan 2 Progress Report 2025. £100bn "realistic possibility." £12bn in cash.
    5. National Crime Agency - Conservative laundering estimate: £36bn+/yr. NSA 2025: 3.9m fraud incidents, 41% of all crime.
    6. UK Finance Annual Fraud Report 2025 - £1.17bn stolen 2024. 3.13m unauthorised cases (+14%). APP fraud £450.7m.
    7. UK Finance Half-Year Fraud Report 2025 - H1 2025: £629.3m. £870m prevented. APP fraud up 12%.
    8. Home Office Economic & Social Cost of Fraud 2023-24 - Total: £14.4bn. Individuals £9.2bn, businesses £5.2bn.
    9. CIFAS Fraudscape 2025 & 2026 - NFD filings: 444,993 (2025). Identity fraud: 242,003. Account takeover: +6%. SIM swaps: +1,055%.
    10. CIFAS / ComplyCube - Identity fraud costs UK £1.8bn/year (Dec 2024). Deepfakes largely undetectable.
    11. Basel Institute on Governance, AML Index 2024 - Under 1% of illicit flows intercepted. FATF effectiveness: 28% (↓ from 30%).
    12. DSIT / Home Office Cyber Security Breaches Survey 2025-26 - 43% of businesses experienced a breach. Only 40% reported externally.
    13. Home Office Economic Crime Plan 2 Progress Report (July 2025) - 3,756 money laundering convictions 2024. 53% conviction rate.
    14. Sumsub 2025 - 311% increase in synthetic identity document fraud, Q1 2024 to Q1 2025.
    15. Fenergo AML Fines Analysis - Global penalties H1 2025: $1.23bn (+417% vs H1 2024: $238.6m).