SymphonyAI, a global leader in vertical AI product platforms, and AML Intelligence, the leading source of news and insight for the financial crime compliance community, released the FinCrime Frontier 2026–27 Report, finding that most financial institutions still rely on periodic review cycles to manage financial crime risk, even as the threats and regulations they are meant to track continue to evolve dynamically.
Based on the perspectives of more than 200 financial crime and compliance leaders, including senior leaders from major global financial institutions, the research finds that just 4.7 per cent of financial institutions continuously update their compliance monitoring and controls as risk changes, while 56.8 per cent have not adopted always-on compliance monitoring at all, are only exploring it, or remain at an early, pilot-stage level. The finding points to a structural gap: financial crime typologies, payment ecosystems and regulatory expectations are evolving continuously, while most compliance programs are still built around scheduled review cycles.
The research points to the practical cost of that gap. Without the ability to continuously recalibrate what warrants attention, investigators are left sorting through volume rather than focusing on real risk: seven in ten respondents (70.8 per cent) report that 5 per cent or fewer of the alerts they investigate result in an escalation or SAR/STR filing — meaning the vast majority of investigative effort never translates into identified risk.
The regulatory environment is intensifying the challenge. AI and model governance and the adequacy of technology and systems have jointly become the most frequently cited regulatory concern, each selected by 40.8 per cent of respondents — overtaking cross-border regulatory complexity, which topped the list a year ago. The shift suggests regulators are moving from evaluating whether firms have a policy to evaluating whether the technology behind it performs as expected and can be evidenced.
The research also finds that operating models have changed less than investment levels might suggest. AI and automation is now the leading compliance investment priority, cited by 61.9 per cent of respondents, yet 76.3 per cent of institutions still review alerts manually or with only partial automation — little change from the prior year. The result is a widening gap between how much institutions are investing in AI and how much their day-to-day operations have actually changed.
