Why Detection Still Mostly Fails

As of September 2026: The Europol recovery figures are the latest we found from Europol itself: 1.1% confiscated for 2010–2014 (published 2016) and below 2% in the 2023 threat assessment, which uses different data and methods, so the two are not a trend line. No newer Europol percentage was found as of September 2026. Both rest on estimates of criminal proceeds that Europol itself calls uncertain. The US filing counts (about 4.7 million suspicious activity reports in fiscal year 2024) come from FinCEN's fiscal-year totals.

How little gets recovered?

The best-known number comes from Europol. Its 2016 study of EU asset recovery from 2010 to 2014 found that 2.2% of estimated criminal proceeds were provisionally seized or frozen, and only 1.1% were finally confiscated. About half of what gets frozen is eventually kept. Europol concluded that 98.9% of estimated criminal profits stay with criminals.

Seven years later its 2023 threat assessment said the assets law enforcement takes from criminal networks remain below 2% of yearly proceeds. Europol also urged caution about such shares, because no fully reliable data exists on how much illicit money is made in the first place. Read these as an order of magnitude, not a score. Whatever the exact figure, the great majority of proceeds is never taken back. The forfeiture page covers the tools that do the taking.

Why do so many reports go unread?

The system is built on paperwork. Banks in the US filed about 4.7 million suspicious activity reports in fiscal year 2024, and the reporting page explains how few are ever acted on. The picture is starker for automatic cash reports. The US Government Accountability Office found that of about 167 million currency transaction reports filed from 2014 to 2023, about 5.4% were ever accessed by law enforcement through FinCEN’s portal. The $10,000 threshold, set in 1972, has never been adjusted; GAO estimated an inflation-adjusted version would be about $72,880 and would have cut filings by at least 90%.

GAO also found that CTR filings rose about 62% between fiscal 2002 and 2023, which it linked in part to inflation pulling ordinary transactions over a fixed line. And in its survey of law enforcement agencies, most said they could have worked without CTRs by using other sources such as suspicious activity reports. More reports do not automatically mean more insight. The same tension shows up in the thresholds table, where each country picks its own line.

None of this makes reports useless. When investigators query a name, old filings matter. But it means detection mostly happens after the fact. A launderer who moves money quickly, across borders and through several money mules or accounts, may be long gone by the time anyone reads the paper.

What is de-risking and why does it backfire?

Banks face punishing penalties for missing a criminal and almost none for turning away a customer. So many choose the safe option: exit categories of business rather than judge each case. This is called de-risking. Small money transmitters, charities working in conflict zones and banks in small countries are frequent casualties.

The FATF, which sets the global standard, has said its rules call for a case-by-case risk-based approach, not wholesale de-risking. The problem it describes is real: people and firms cut off from regulated banks do not stop needing to move money. Some are pushed toward informal channels such as hawala or other services with less oversight. A rule meant to make money easier to watch can make it harder to see.

When does compliance become box-ticking?

Regulators measure what they can count: policies written, staff trained, alerts reviewed, reports filed. Criminals are not counted, so effort drifts toward what can be audited. A bank can complete every form and still fail to notice that a customer’s cash deposits make no sense for their business.

This is a recurring pattern in the case files. Failures in bank cases tend to be ordinary: monitoring that did not cover whole transaction types, or staff who looked away. The Cullen Commission found similar behaviour in BC’s casinos, where reports were filed on huge cash buy-ins yet plainly suspicious money kept flowing for years amid revenue incentives and fragmented oversight. Filing was not the same as stopping.

What do the economics look like?

Enforcement is expensive and slow. Cases against professional networks can take years, cross many borders and depend on countries that will not cooperate. Europol notes that assets in third countries and digital assets are especially hard to trace, seize and manage.

Supervision has its own limits. FINTRAC, for example, supervised more than 38,000 regulated entities in 2024–25 and issued a record 23 notices of violation, with over $25 million in penalties. That is a lot of attention, but a small share of a very large population. The Canada page looks at what changed in 2026.

What still works?

Detection is strongest when it targets bottlenecks: the handful of banks, exchanges and professionals that criminals cannot avoid. It is also strongest when records from KYC checks and transaction monitoring are combined with real cooperation between agencies and countries, as the FATF and financial intelligence units try to arrange. The lesson is not that the system is worthless. It is that it makes laundering slower and costlier, and stops far less of it than its size suggests.

First published September 21, 2026 · Last updated September 21, 2026 · Legal statuses current as of September 2026