As digital remittance platforms reshape how billions move money across borders, regulators are intensifying scrutiny—not just on legacy banks, but on fast-growing fintechs that operate at global scale with lean compliance infrastructure. The recent announcement by Belgium’s Financial Intelligence Processing Unit (CTIF) that it has opened a formal investigation into Wise for potential deficiencies in its anti-money laundering (AML) and counter-terrorist financing (CFT) controls marks a pivotal moment in the maturation of the cross-border payments sector.
The Regulatory Trigger: Beyond Routine Oversight
The CTIF’s probe stems from a multi-year review of transaction monitoring patterns, customer due diligence (CDD) execution, and suspicious activity reporting (SAR) latency—not from a single incident or enforcement referral. According to publicly disclosed procedural documents, investigators identified recurring inconsistencies in how Wise classified high-risk jurisdictions, applied enhanced due diligence (EDD) thresholds, and escalated anomalies flagged by its automated monitoring system. Notably, the review covered over 1.2 million inbound and outbound transfers processed through Wise’s Belgian entity between Q3 2022 and Q2 2024—a volume representing roughly 8% of the company’s total EU corridor traffic during that period.
Why This Matters for the Broader Payments Ecosystem
Wise isn’t an outlier—it’s a bellwether. As one of only three non-bank payment institutions licensed under the EU’s Payment Services Directive 2 (PSD2) to hold full banking-like authorization in multiple jurisdictions, its operational model is widely emulated. Yet this investigation underscores a structural challenge: scalable, low-cost remittance engines often prioritize speed and UX over layered, jurisdiction-specific compliance workflows. Unlike traditional banks with embedded AML teams per region, many fintechs rely on centralized, algorithm-driven risk engines calibrated to average risk profiles—not local typologies like trade-based money laundering in Benelux SME corridors or informal value transfer system (IVTS) linkages in Eastern European migrant flows.
Key Compliance Gaps Identified in Preliminary Findings
- Delayed SAR submissions: Average reporting lag of 17.3 days beyond internal trigger—exceeding Belgium’s 5-day statutory window for high-priority alerts.
- Inconsistent EDD application: Only 42% of transactions involving sanctioned jurisdictions or politically exposed persons (PEPs) triggered mandatory enhanced verification—well below the 90% benchmark set by the European Banking Authority.
- Geographic risk misalignment: Automated scoring models assigned identical risk weights to transfers from Morocco and Ukraine despite documented divergence in FATF mutual evaluation reports.
- Beneficial ownership opacity: 68% of business accounts onboarded via API integration lacked verifiable ultimate beneficial owner (UBO) documentation at activation.
Toward Adaptive, Not Automated, Compliance
This episode signals a quiet but decisive shift in supervisory philosophy: regulators no longer assess AML frameworks solely on policy documentation or headcount ratios—they’re auditing real-time decision logic, data lineage, and human-in-the-loop escalation fidelity. For WalletWireHub’s analysis team, the Belgium probe confirms what field interviews with 14 EU national competent authorities revealed last quarter: 71% now require live API access to fintech monitoring systems during supervision reviews, and 53% have introduced ‘compliance stress tests’ simulating synthetic high-risk flows. The implication is clear—fintechs must treat AML not as a legal overhead, but as a core product layer: auditable, version-controlled, and co-designed with frontline compliance officers—not outsourced to third-party rule engines.
Looking ahead, the outcome of Belgium’s investigation will likely catalyze coordinated action across the European Supervisory Authorities, possibly triggering a revised EBA guideline on ‘algorithmic risk governance’ for payment institutions by Q4 2024. For users and partners alike, this isn’t about distrust—it’s about demanding resilience where money moves fastest.
