FinCEN Alert Flags USD $12.7 Billion in Suspected Digital Asset Investment Scam Activity

Key Takeaways

• FinCEN issued an alert and financial trend analysis on digital asset investment scams ("pig butchering") run by Southeast Asia-based scam centers.
• The analysis covers 33,904 BSA reports filed between September 8, 2023, and December 31, 2025, totaling approximately USD $12.7 Billion in suspected activity.
• Compliance teams should update detection scenarios with the newly published red flags and strengthen SAR reporting and information sharing.

Deep Dive

This action does not create new regulatory obligations, but it sets supervisory expectations for how institutions detect and report scam-related activity. The alert is addressed broadly to depository institutions, money services businesses, securities and futures firms, casinos, insurance companies, mortgage companies and brokers, and precious metals and jewelry dealers. Examiners will likely expect institutions to show they have considered the published red flags in their monitoring and SAR decisioning. Note that the press release refers to the red flags without listing them, so teams should review the full alert and the Financial Trend Analysis directly.

The analysis describes a layered illicit ecosystem. Scammers pose as romantic partners, friends, or business partners and direct victims to spoofed investment websites and mobile applications. Scam center operators buy services such as account creation, phishing, and laundering through "guarantee marketplaces." Professional money launderers then set up accounts and shell companies, move funds through money mule networks, and use stablecoin transfers to digital asset exchanges outside the United States. Victims were targeted across all 50 states and several U.S. territories, and across all age groups. Exposure therefore extends beyond customer-victim detection to mule accounts, shell company onboarding, and virtual asset service provider (VASP) flows.

The release states no new deadlines. The data window (September 8, 2023, through December 31, 2025) is historical. FinCEN strongly encourages voluntary information sharing under Section 314(b) of the USA PATRIOT Act, which provides safe harbor protection from liability. It also highlights its Rapid Response Program, which shares intelligence with foreign FIUs to support stopping and repatriating fraudulent transactions. The action supports Executive Order 14390, so continued enforcement and policy attention on cyber-enabled fraud is likely.

Recommended actions: - Map the alert's red flags to existing transaction monitoring rules and add or tune scenarios for mule activity, rapid movement of funds to digital asset exchanges, and stablecoin transfers to offshore platforms. - Update SAR narrative guidance and filing procedures, including any key terms FinCEN specifies in the alert, so reports are easily identified by law enforcement. - Confirm 314(b) registration and use. - Strengthen customer-facing controls, including front-line and call center training, elder and vulnerable customer escalation, and payment friction or warnings for first-time digital asset purchases. - Review onboarding controls for shell companies and newly opened accounts. - Establish a fast process for victims to report to their institution so recall requests can be escalated quickly, and direct victims to the FBI IC3 and U.S. Secret Service.

Risk implications: Failure to detect and report this activity could bring BSA/AML program deficiency findings, SAR timeliness and quality criticism, and reputational harm. Institutions that bank mule accounts or facilitate offshore stablecoin flows face the highest exposure. Consumer harm and potential reimbursement or complaint pressure also add to operational and conduct risk.

Source: Financial Crimes Enforcement Network