Field notes on KYC, AML, and financial-crime risk — fundamentals, emerging typologies, and investigation playbooks.https://thetypologyfiles.com/en-ushttps://thetypologyfiles.com/archive/sri-lanka-2025-floods-aml-weaknesses/https://thetypologyfiles.com/archive/sri-lanka-2025-floods-aml-weaknesses/Cyclone Ditwah displaced over two million people and triggered a multi-billion-dollar relief effort. Large-scale disasters don't just test emergency response — they test every assumption a KYC/AML program makes about identity, cash, and oversight.Wed, 22 Jul 2026 00:00:00 GMTCase StudyDisaster RiskSri LankaHumanitarian FinanceNPO RiskEmerging Riskhttps://thetypologyfiles.com/archive/ai-fraud-investigation-playbook/https://thetypologyfiles.com/archive/ai-fraud-investigation-playbook/Deepfake selfies, GAN-forged IDs, and synthetic identities are already inside the funnel. Here's a repeatable method for catching them before they clear KYC — and building a defensible case file when they don't.Sat, 18 Jul 2026 00:00:00 GMTPlaybookAI FraudSynthetic IdentityDeepfakesDocument ForensicsInvestigationshttps://thetypologyfiles.com/archive/synthetic-identity-fraud/https://thetypologyfiles.com/archive/synthetic-identity-fraud/It's not stolen identity and it's not fully fake identity — it's both, blended, and aged like a real customer. Here's why that combination breaks conventional fraud detection.Tue, 30 Jun 2026 00:00:00 GMTEmerging RiskSynthetic IdentityFraud TypologiesCredit RiskOnboardinghttps://thetypologyfiles.com/archive/kyc-cdd-edd-differences/https://thetypologyfiles.com/archive/kyc-cdd-edd-differences/The three terms get used interchangeably in job postings and casually in conversation. In practice they're a hierarchy, and knowing where one ends and the next begins is what separates a checklist analyst from a risk-based one.Fri, 12 Jun 2026 00:00:00 GMTFundamentalsKYCCDDEDDRisk-Based ApproachFundamentalshttps://thetypologyfiles.com/archive/defensible-sar-narratives/https://thetypologyfiles.com/archive/defensible-sar-narratives/A suspicious activity report that reads as a summary of a gut feeling doesn't hold up to regulatory review. One that reads as a chain of specific, dated observations does. The difference is almost entirely structural.Fri, 22 May 2026 00:00:00 GMTFundamentalsSARPOCA 2002NCACase DocumentationFundamentalshttps://thetypologyfiles.com/archive/shell-companies-beneficial-ownership/https://thetypologyfiles.com/archive/shell-companies-beneficial-ownership/Placement, layering, and integration is the model everyone memorizes for the exam. Shell company structures are where 'layering' stops being an abstraction and becomes a genuinely hard research problem.Wed, 15 Apr 2026 00:00:00 GMTEmerging RiskBeneficial OwnershipShell CompaniesMoney LaunderingUBO