FATF maps the services scam compounds depend on and urges faster freezing of proceeds

What happened

On 5 November 2026, the Financial Action Task Force (FATF) published a report on the illicit financial flows linked to scam compounds, together with a set of principles for disrupting them. The FATF says these operations are estimated to cause tens of billions of dollars of losses every year. It documents scam compounds or related activity in jurisdictions across Africa, Europe, the Americas, and Asia.

The report follows the money from victim to cash-out. Operators use cash, money mule accounts, informal transfer services, and virtual assets. The FATF identifies virtual assets as a central laundering channel and describes over-the-counter exchange desks operating inside compounds. In one case, blockchain analysis mapped more than USD 100 million in victim inflows to a wallet cluster attributed to a scam compound. Instant payment platforms can move scam funds out of a victim’s account in as little as two minutes.

The physical compound is only part of the picture. The FATF says enforcement has pushed operators towards smaller and more mobile operations, using casinos, rented rooms or apartments, coffee shops, and moving vehicles. It cites reports that people from at least 80 jurisdictions have been identified in scam compounds in Southeast Asia, with an estimated 120,000 forced to carry out online scams in Myanmar alone.

The new principles include targeting the wider criminal ecosystem, connecting financial institutions with technology and telecommunications firms, and protecting both scam victims and trafficked workers. On speed, the FATF says the first 24 to 72 hours after a scam is detected or reported are critical for freezing funds and recovering assets. The report is described as a first step in a broader anti-fraud roadmap, with work on scalable solutions running to February 2027.

Why it matters

The FATF finds that countries are currently more effective downstream, on victim payments, proceeds, and asset tracing. It wants that combined with upstream disruption, using early signals such as fraudulent advertising, recruitment activity, malicious domains, and suspicious phone numbers. This suggests assessors and supervisors will start asking what firms can see before a payment is made.

The report also describes scam compounds as networks of specialised service providers connected through common controllers and financial infrastructure. Some of those dependencies, it says, are difficult to replace. That framing points investigators towards the accounts, companies, and payment services that recur across cases, and away from treating each mule account as a separate event.

The time window is the most testable point for a compliance team. A firm that needs three days to route a scam report to someone with authority to act has used up the entire period the FATF describes.

Workers deserve separate thought. The FATF’s description of debt bondage and confinement means a person linked to a compound may be a trafficking victim as well as a suspect.

Practitioner angle

• Measure the hours between a customer’s first scam report and your recall or freeze request to the receiving institution, then compare the result with the 24 to 72 hour window.
• Check whether outbound instant payment limits and holds can take effect within minutes, given the two-minute movement the FATF describes.
• Review rules built around known compound locations, since the report says operators are moving to smaller and mobile sites.
• Test whether blockchain analytics and fiat monitoring can be read together when a customer pays an over-the-counter desk or exchange soon after receiving funds.
• Ask your fraud team which non-payment signals it can already see, including phone numbers, domains, and advertising data.
• Give investigators an escalation route for suspected trafficking indicators in scam and mule cases.