Fraud and AML in Asia have shifted over the past year. Alongside the system-level attacks that continue, panellists point to a growing move towards human compromise, scams that target the customer’s judgement rather than the bank’s defences.
This LexisNexis Risk Ready 2026 panel, hosted by Vincent Fong of Fintech News Network, works through that shift from four angles, security, compliance, customer experience and payments, and asks what financial institutions should actually do about it.
The conversation moves from how scams have become more personalised and harder to detect, to the awkward questions underneath them: who should be liable when a customer authorises their own loss, why awareness training only goes so far, and what happens to fraud defences when an AI agent, not a person, is the one authorising the payment. It closes on the threat most banks are not yet planning for, the day post-quantum computing breaks the encryption protecting today’s data.
Speakers:
- Irfan Amer, CISO, AEON Bank
- Dr Mohanamerry Vedamanikam, Chief Compliance Officer, Boost Bank
- Lolitta Suffian, SVP, Customer Experience, Bank Simpanan Nasional (BSN)
- Edward Metzger, Vice President, Market Planning for Payments Efficiency and Platforms, LexisNexis Risk Solutions
- Vincent Fong, Chief Editor, Asia, Fintech News Network
In this episode:
- How fraud is shifting towards human compromise, and why authorised scams are harder to stop than unauthorised fraud
- The UK approach to making banks liable for scam losses, and the debate over shared responsibility across telcos and digital platforms
- Doctoral research into why university students and aware consumers still fall for money mule recruitment and scams
- A Bank Simpanan Nasional case showing the role of human intervention when a customer authorises a payment to a scam account
- What agentic commerce means for fraud, when an AI agent rather than a person is authorising the transaction
- The post-quantum risk to encryption, and the harvest now, decrypt later threat facing biometric and personal data
