FinCEN flags about $270 million in suspicious activity tied to student aid fraud, GAFILAT publishes its first regional proliferation financing risk assessment and the Dominican Superintendency of Banks notifies a new instant payments system.
A week with three messages for compliance teams: identity fraud keeps feeding laundering networks, proliferation risk now has a regional diagnosis, and instant payments are arriving in the Dominican financial system.
1. KYC/AML: when a legitimate refund hides a fraud
On 19 October 2026 the US Treasury reported that FinCEN had identified about $270 million in suspicious financial activity potentially linked to fraud against federal student aid programs, and referred it to investigators as tip-and-lead information. The finding stems from an alert issued in July 2026: since then institutions have filed nearly one hundred suspicious activity reports, and FinCEN's review found more than 20,000 potentially suspicious transactions since February.
The schemes are familiar to any compliance officer: ghost students created with stolen or synthetic identities, and straw students who are paid for their personal data. Red flags include electronic refund transfers sent by schools or their payment contractors, with descriptions that include the word "refund" and the school's initials, and the money then moving through mule accounts, shell companies or fake accounts. The case is American, but the pattern travels.
As a follow-up to our previous edition, OFAC issued general licenses GG and HH on 21 October, authorizing the orderly wind-down of dealings with Karnakis and Karnakis and with the persons and vessels blocked that day. It also removed entries for Belarus and North Korea from the SDN List, so screening filters must be updated in both directions.
2. GAFILAT: first regional proliferation financing risk assessment
In October GAFILAT published its first Regional Proliferation Financing Risk Assessment, with a reference guide, prepared with support from the US INL program. It concludes that the region's direct exposure is low to moderate, but warns that assuming low risk creates a false sense of security, given the evasion techniques used by actors such as North Korea and Iran.
The analysis covers financial institutions, dual-use goods, the maritime sector, free trade zones, designated non-financial businesses and professions (including trust and company service providers, lawyers, notaries and accountants) and virtual asset service providers. It points to uneven implementation of mitigation measures and weaknesses in export controls. It recommends completing national risk assessments, an urgent priority ahead of the fifth round of mutual evaluations, and strengthening coordination between export control and financial authorities.
3. Dominican Republic: instant payments and sanctions through a digital channel
On 22 October the Superintendency of Banks published circular letter CCI-REG-2026000015, notifying the Central Bank's new Instant Payments Management System. The published entry does not detail obligations or deadlines, so institutions should read the full document. As a general principle, when money settles instantly there is less room to stop a transaction: real-time monitoring and list checks before the payment is executed carry more weight.
Recall also that, since circular CSB-REG-2026000018 of 30 September, sanctions notifications are handled through a digital module. The UAF has posted no new items; its calendar keeps a virtual session on money laundering risks in virtual assets on 29 October.
Practical takeaway
For regulated firms, three ideas:
- Review monitoring rules to catch refunds that come in and go out quickly, and signs of synthetic identity at account opening.
- Feed the GAFILAT assessment into your proliferation risk assessment, paying special attention to maritime clients, free trade zones and corporate service providers.
- Confirm with technology and operations how list checks will apply to instant payments before volumes grow.
Sources
- FinCEN – Treasury identifies $270 million in suspicious activity linked to federal student aid fraud (19 Oct 2026)
- US Treasury – Press release on suspicious activity and student aid fraud (19 Oct 2026)
- OFAC – Recent Actions (21 Oct 2026)
- GAFILAT – First Regional Proliferation Financing Risk Assessment (Oct 2026)
- Superintendency of Banks DR – Circular letter CCI-REG-2026000015 (22 Oct 2026)
- Superintendency of Banks DR – Circular CSB-REG-2026000018 (30 Sep 2026)
- UAF DR – Activity calendar (Oct 2026)
- UIF Argentina – News (13 Oct 2026)