In June 2026, the Financial Intelligence Analysis Unit (“FIAU“) published an extensive strategic analysis examining the relationship between organised crime and the Maltese financial system. The report reviewed 540 suspicious transaction reports submitted between 2021 and 2024 that were linked to organised criminal activity and provides one of the clearest pictures to date of how illicit funds continue to move through legitimate financial channels.
For compliance officers, financial institutions and regulated entities, the report offers more than statistics. It provides insight into how organised criminal groups actually interact with banks, gaming operators, electronic money institutions and virtual asset service providers.
The findings reveal an important reality: organised crime rarely looks like organised crime.
The vast majority of money laundering activity does not begin with suitcases of cash or dramatic criminal enterprises. Instead, it often appears as an ordinary customer, a seemingly legitimate business, a routine gaming account, or a series of transactions that individually appear unremarkable but collectively tell a different story.
The Modern Face of Organised Crime
When most people think about organised crime, they picture drug cartels, mafia-style organisations or large-scale smuggling operations. While these activities remain highly relevant, the FIAU’s findings demonstrate that financial crime has evolved considerably.
Fraud emerged as the most commonly identified predicate offence in reports linked to organised crime, appearing in approximately 22% of cases. Drug trafficking followed closely, while tax crimes also featured prominently.
In practice, this means that an organised criminal group is increasingly likely to be operating fraudulent investment schemes, identity theft networks, online payment fraud operations or tax evasion structures rather than relying solely on traditional criminal activities.
Consider a typical online investment scam. Victims across several European jurisdictions are persuaded to transfer funds to what appears to be a legitimate investment platform. The funds are then routed through multiple payment accounts, converted into virtual assets, transferred internationally and ultimately withdrawn through seemingly legitimate businesses. To the victim, it appears to be a failed investment. To investigators, it may be part of a wider organised criminal network operating across multiple jurisdictions.
Why Gaming Operators Are on the Front Line
One of the most striking findings from the FIAU analysis is that remote gaming operators accounted for 31% of all organised crime-related reports, making them the largest reporting sector.
At first glance, this may seem surprising. However, the explanation lies in the international nature of both organised crime and online gaming.
Imagine an individual depositing significant sums into a gaming platform, placing a limited number of low-risk bets and subsequently withdrawing the funds. While the activity may superficially resemble normal gaming behaviour, it can also be used as a method to create a seemingly legitimate explanation for funds originating from criminal activity.
The FIAU found that gaming operators were particularly effective at identifying international organised crime activity, with approximately half of international organised crime reports originating from the sector.
This does not necessarily mean gaming operators are more exposed to crime. Rather, it reflects their position as a gateway for customers from multiple jurisdictions, often interacting with individuals who have little or no physical connection to Malta.
The Role of Banks: Following the Money Trail
While gaming operators submitted the highest number of reports, credit institutions demonstrated the highest rate of intelligence value.
The FIAU found that 65% of organised crime-related reports submitted by credit institutions resulted in dissemination to the Malta Police Force, significantly higher than any other reporting sector.
The reason is straightforward.
Banks see the complete financial picture.
A gaming operator may see deposits and withdrawals. A virtual asset provider may see blockchain transactions. A payment institution may see transfers between accounts.
A bank often sees all of these activities coming together.
For example, a customer may operate what appears to be a legitimate trading business. However, transaction monitoring identifies incoming payments from multiple unrelated jurisdictions, immediate onward transfers to cryptocurrency exchanges, cash withdrawals and payments that appear inconsistent with the customer’s declared business activity.
Individually, each transaction may have a plausible explanation. Together, they may indicate the layering stage of money laundering.
This explains why concerns surrounding unusual transactional activity were among the most common triggers identified by financial institutions.
The Importance of Source of Wealth and Source of Funds
Perhaps the most practical lesson from the FIAU’s analysis relates to source of wealth and source of funds verification.
Unknown or unexplained source of wealth and source of funds featured consistently among the leading reasons for suspicion across multiple sectors.
In reality, this often looks remarkably simple.
A customer claims to have accumulated significant wealth through cryptocurrency investments but cannot provide evidence of the original investment. A shareholder claims to have earned millions through consulting services yet cannot substantiate the source of those earnings. A gaming customer deposits substantial sums while providing only vague explanations about their financial background.
None of these scenarios automatically indicate criminal activity.
However, organised criminal groups frequently rely on precisely this ambiguity.
Money laundering often succeeds not because criminals create perfect explanations, but because institutions fail to challenge incomplete ones.
Why Adverse Media Still Matters
Another recurring theme throughout the FIAU analysis is the importance of adverse media screening. The report identifies adverse media as one of the most common triggers leading to suspicion.
Some organisations continue to view adverse media checks as a compliance exercise rather than a risk management tool.
The FIAU’s findings suggest otherwise.
Consider a customer who passes sanctions screening, is not politically exposed, and presents seemingly acceptable identification documents. On the surface, the customer may appear low risk.
However, media reports reveal previous arrests linked to organised crime networks, allegations of fraud, or connections to known criminal associates.
While media reports alone do not prove wrongdoing, they can provide crucial context when assessed alongside transactional behaviour, customer conduct and source of wealth information.
Virtual Assets: A Growing Theme
The report also highlights the increasing use of virtual assets within organised crime typologies.
Reports disseminated to the United Kingdom frequently involved cryptocurrency products, with virtual asset service providers accounting for a significant proportion of relevant reports.
This mirrors broader international trends.
Criminal organisations are increasingly attracted to virtual assets not because they are inherently anonymous, but because they allow rapid cross-border movement of value without relying on traditional banking infrastructure.
A common example involves proceeds generated through fraud being converted into stablecoins, transferred across multiple wallets and ultimately withdrawn through different jurisdictions. The blockchain records every movement, but identifying the individuals controlling those wallets remains a significant challenge.
This demonstrates why blockchain analytics, wallet screening and transaction monitoring have become essential components of modern AML frameworks.
Domestic Versus International Organised Crime
One particularly interesting observation is the distinction between domestic and international organised crime.
The FIAU found that international organised crime reports were most commonly linked to drug trafficking and fraud, whereas domestic organised crime reports were predominantly linked to tax crimes.
This distinction reflects the different economic realities of criminal enterprises.
International organised crime groups frequently generate proceeds through activities such as drug trafficking, online fraud and cross-border criminal schemes. Domestic organised crime, on the other hand, often intersects with tax evasion, undeclared economic activity and abuse of legitimate business structures.
For regulated entities, this means that money laundering risk is not limited to obviously criminal customers. It can also arise from otherwise legitimate businesses attempting to conceal income, evade taxation or disguise beneficial ownership.
The Hidden Importance of Beneficial Ownership
Among the key red flags identified by the FIAU was suspected beneficial ownership concealment.
This is particularly relevant in an environment where complex corporate structures can be established across multiple jurisdictions.
A company may appear legitimate on paper. Directors may be professional nominees. Shareholders may be legal entities incorporated in different countries.
The critical question remains the same:
Who ultimately controls the structure and benefits from its activities?
Organised criminal groups frequently attempt to distance themselves from assets through layered ownership arrangements, nominee relationships and opaque corporate structures.
This reinforces the importance of robust beneficial ownership verification and ongoing due diligence.
Key Takeaways for Malta’s Regulated Sectors
The FIAU’s analysis paints a picture of organised crime that is sophisticated, adaptive and increasingly international.
The most important lesson is that organised crime does not operate outside the financial system. It depends upon it.
Whether through gaming platforms, payment institutions, cryptocurrency services, casinos or traditional banks, criminal organisations ultimately need access to legitimate financial infrastructure to move and disguise illicit proceeds.
The strongest indicators remain surprisingly consistent:
- Unexplained source of wealth or source of funds;
- Transactional activity that does not align with a customer’s profile;
- Adverse media and criminal associations;
- Uncooperative behaviour during due diligence processes;
- Attempts to conceal beneficial ownership; and
- Complex transaction patterns with no clear commercial rationale.
For Malta’s regulated community, the challenge is not merely identifying criminal activity after it occurs. It is recognising the subtle indicators before illicit funds become embedded within the financial system.
As organised crime continues to evolve, effective AML/CFT controls, intelligent transaction monitoring and risk-based customer due diligence remain the most effective tools available to protect both institutions and the integrity of Malta’s financial sector.
