Who Owns the Warning? Three Documents, One Unanswered Question

Fifteen days in the summer of 2026 produced three documents that circle the same problem. On 24 June the Financial Action Task Force (FATF) issued draft guidance on implementing the revised Recommendation 16 (R16), opening a consultation that closed on 21 August. On 6 July the Financial Conduct Authority (FCA) published the Mills Review, its assessment of what artificial intelligence will do to retail financial services by 2030. On 8 July the FATF published a global survey of how information about financial crime actually moves between institutions and authorities. Each concludes that warnings must reach whoever can act on them before harm spreads. Only one of the three says what a warning is, and it does not say who should write the definition.

That omission is not a technicality. Payment transparency has spent a quarter of a century standardising the identity of the parties to a transfer, field by field, until an originator's name and account number can cross a dozen systems and mean the same thing at each one. No comparable work has been done on the observation that something about the transfer looks wrong. Identity is expressed in schemas; suspicion is still expressed in sentences. A regime that has industrialised the noun and left the warning in prose will circulate signals that cannot be compared or acted upon at speed.

The Review names the task

The Mills Review is a report about artificial intelligence, and its fourth system shift concerns what AI does to financial crime. Cloned voices, synthetic identities and convincing fabricated content make deception cheaper to produce and harder to detect; the Review's judgement is that AI will accelerate existing fraud typologies rather than invent a new category of crime. Respondents identified the same frictions repeatedly: intelligence sharing that is slow and inconsistent, difficulty detecting genuinely novel typologies, and system responses that arrive after the loss.

Then the Review does something unusual for a document of its kind. It states that a credible system will need a minimum set of signals, and defines that as identifying "the core warning signs that firms, regulators and partners should all collect and share" consistently, so that emerging harm can be spotted and disrupted earlier. It adds that sharing data, stronger identity attributes and risk indicators would reduce the risk of false legitimacy accumulating around a customer over time. That is a specification of a problem usually described in generalities.

The Review is candid about the obstacles, citing the government's call for evidence of March 2026, which describes the UK's arrangements for sharing economic crime information as a patchwork, and naming inconsistent data standards, uneven identifiers and uncertainty over lawful sharing routes as the causes of delay. It observes that the Financial Data Transparency Act in the US has been finalising standards to move regulators towards machine-readable, interoperable data.

No recommendation carries it

Yet none of the seven priority recommendations delivers it. The closest is the second, which asks the FCA to strengthen system-wide coordination and oversight, and within it a category dealing with fraud, financial crime and cyber risk. There the Review states that coordination should support earlier intelligence sharing, the identification of common warning signals and faster escalation. The action attached to that category is that the FCA should build an appropriate relationship with the AI Security Institute.

That is a sensible step and it is not the same step. Recommendation 2, read in full, is largely about coordination between authorities on concentration risk, shared model dependencies and cross-border incidents. Nothing in it, and nothing in the other six, tasks anybody with defining the core warning signs, agreeing their thresholds or specifying how they should be represented. The Review identifies the deliverable and leaves it unassigned, which is a familiar pattern: the diagnosis is adopted, the remedy becomes a forum, and the artefact is never built.

R16 standardises identity, not risk

Meanwhile the detailed specification work is being done on the other side of the question. The FATF describes the June 2025 revisions to R16 as increasing the transparency of information accompanying cross-border payments and as "requiring the introduction of tools to protect against fraud and error". The draft guidance devotes its fifth chapter to what originator and beneficiary information must accompany a payment and when, including the risk that virtual account numbers disguise where an account is held. Countries are expected to be ready by the end of 2030.

Read the information requirements and the omission becomes plain. Name, account, address, identifier: every element answers who, and none answers whether anyone is worried. A payment message under the revised standard can carry an address verified against reliable and independent sources, and it carries nothing to record that the ordering institution has seen this beneficiary three times in a week from unconnected customers. The first fact is a matter of record. The second is the one that predicts loss.

The alignment check has no addressee

One provision comes close to generating a warning, and its treatment is instructive. Chapter 10 of the draft guidance covers alignment check obligations, sets out the three options available to meet the requirement, clarifies what alignment means and explains, in the FATF explanatory memorandum's summary, "what actions FIs [financial institutions] should take when misalignment is identified".

This is a detection mechanism in everything but name. A beneficiary institution compares the name accompanying a payment against the name on the account, finds they do not correspond, and holds a fact no other party to the chain possesses. It can decline to credit and return the funds, which protects that payment. What it cannot do is tell the institution at the other end. The obligation is drafted as a decision about a transaction, not as an observation owed to anyone else, and the consultation asked whether the options were clear without asking what becomes of the finding. The deception that produced the payment remains available for the next one.

Ownership data records status only

Company registers show the same shape. Under the Economic Crime and Corporate Transparency Act 2023, identity verification at Companies House became a legal requirement on 18 November 2025. New directors and people with significant control have verified from that date, and existing ones fall within a twelve-month transition running to November 2026; members of limited liability partnerships are also in scope. The obligation reaches, in the words of the government guidance, "anyone setting up, running, owning or controlling a company", and failure to comply is an offence carrying financial penalties and a block on filings. Verification for those who file at Companies House is not expected before November 2027.

This is a substantial improvement on a register that once accepted whatever it was given. But what it produces is a status, not an assessment. The register will record that a person is verified or that they are not, and the binary admits no gradation. It does not capture that verification was routed through an authorised corporate service provider instead of performed directly, that several otherwise unconnected companies were verified through the same agent in the same week, or that a director verified cleanly six days before the entity received its first inbound payment from a high-risk corridor. Each of those is a warning sign. None of them is a field.

Singapore built the exception

At least one jurisdiction has built something close to it, which suggests the obstacle is not a technical one. The Monetary Authority of Singapore launched its collaborative sharing platform on 1 April 2024, permitting participant banks to share customer information where behaviour displays what it calls "objectively-defined indicators of suspicion". In a parliamentary reply of 5 August 2026 the authority reported that shared information had led banks to file further suspicious transaction reports and close accounts, that the FATF had affirmed the platform's effectiveness in Singapore's mutual evaluation, and that its scope would widen beyond the original three risk areas to further banks within two years.

The design is instructive because of its limits. A defined indicator set exists in one country, for a closed group, inside one legal gateway, and it operates on customer records rather than on anything travelling with a payment. That is a proof of concept, not a standard.

The FATF survey of 8 July measured how far the rest of the world sits from it. Across the jurisdictions reporting, more than 75 per cent use partnerships to share strategic material such as typologies, red flags and risk trends, while between 55 and 66 per cent use them for operational material including case intelligence, suspicious transaction report indicators and customer due diligence data. FATF President Giles Thomson, whose UK Presidency began on 1 July 2026 with fraud and information sharing among its priorities, described financial crime information as sitting "in fragmented siloes across public and private sectors".

The FATF attributes the gap between those figures to partnerships being at different stages of development, which is fair as far as it goes, though maturity is not the whole explanation. Strategic material moves easily because prose imposes no schema on the recipient; it imposes no discipline either. When institutions receive the same red flag as a paragraph of narrative, each converts it into detection logic separately, choosing its own thresholds, lookback windows and definitions of what counts as related. The signal is shared and the meaning is not.

A minimum set of signals is therefore not a longer list. It is a short list expressed identically: a small number of warning signs with agreed definitions, agreed evidence thresholds and an agreed representation, such that one institution's flag means in another institution's system exactly what its author intended.

Firms must build the translation layer

Two consequences follow, and neither requires waiting for a standard-setter. Firms should establish which detection rules originate in externally supplied typologies and whether the translation from narrative into logic was recorded; a rule whose provenance cannot be reconstructed cannot be defended when the underlying typology is revised. They should also decide, before the R16 deadline forces the question, whether a misalignment finding is held as a structured attribute against the account or closed as free text in a case note. The first can be counted, aggregated and eventually shared; the second cannot.

Ownership data deserves the same treatment. Verification status invites use as an onboarding gate, checked once and recorded as satisfied, when it is more valuable as a monitoring input; the interesting fact is rarely that a director is verified, but the pattern in how, when and through whom verification occurred. Firms that capture that pattern will hold indicators their competitors discarded.

The signal must be engineered

The payment transparency regime has succeeded, at considerable cost and over two decades, in making identity travel. Names cross borders intact, accounts resolve to jurisdictions, and if implementation holds to its timetable the data accompanying a cross-border payment should by 2030 be more complete than ever. That achievement answers one of the two questions. The regime has standardised what is known about a payment and left unstandardised what is suspected about it.

Warnings do not become shareable by being encouraged to move. They become shareable by being given a form. The Mills Review has named the deliverable and attached it to no owner, no timetable and no forum with a mandate to produce it. Until somebody is asked to write the definition, the calls for earlier intervention issued this summer will keep producing partnerships and memoranda, while the observation that would have stopped the payment stays inside the institution that made it.

Does your firm know which of its detection rules came from somebody else's warning sign, and could it prove how that warning was translated?

If the answer lives in the memory of individuals rather than in the record, we can help you establish the position, document the lineage and make the signals defensible; contact us.

At OpusDatum, we examine whether the risk signals a firm generates can be located, evidenced and used by anyone other than the analyst who created them. Our wire transfer regulation work tests the path a finding takes from detection to decision, and whether a firm could show a supervisor how an external typology became an internal rule.