Inside Neobanks: Speed, Risk, And A Detour To “Compliance Land”

Your money moves in seconds—until it doesn’t. We unpack the paradox at the heart of neobanking: the very speed and elegance that win customers can also create cover for illicit flows, trigger frozen transfers, and draw record fines when compliance trails growth. With real examples from Revolut, bunq, Starling, Monzo, N26, and Block’s Cash App, we trace how aggressive scaling, thin compliance teams, and brittle tooling converge into a trust problem users feel the moment a large transfer stalls.

We break down the numbers and the stakes. Estimates suggest up to $750 billion in illicit funds wash through the EU financial system each year, around 2.3% of GDP. Regulators see firms prioritizing growth over controls, which leads to late suspicious activity reports and missed red flags. The result? Costly penalties and a scramble to retrofit scalable anti-money laundering systems. We highlight four recurring leadership failures—underinvestment in people and tech, weak risk systems, cultures that sideline financial crime prevention, and poor management information—that turn hypergrowth into a liability.

This is also an AI story. Criminals now use machine learning and deepfakes to pass remote KYC and automate money laundering at speed, forcing banks into an AI-versus-AI defense. We discuss RegTech that can continuously monitor transactions, build dynamic risk profiles, and surface anomalies in real time—freeing human analysts to pursue complex cases. On the policy front, we examine the EU’s new anti-money laundering authority and the reality of its 2028 enforcement start date, a gap that sustains regulatory fragmentation and arbitrage. We close by challenging a broader blind spot: while digital banks absorb enforcement heat, vast sums still move through lightly supervised sectors like real estate and shell companies.

If you care about trust, transparency, and the future of digital finance, this conversation offers a clear roadmap: treat compliance as core infrastructure, publish measurable results, and push for true cross-border harmonization. Enjoy the episode and, if it resonates, follow the show, share it with a friend, and leave a review telling us where you think the biggest blind spot remains.

Leave your thoughts in the comments and subscribe for more tech updates and reviews.

Transcript

The Promise And The Paradox

Allan 0:05

Welcome back to the deep dive. We are starting today, uh, not with a promise, but with a piece of digital irony. Oh. You use your Neobank, you know, the bank that fits perfectly in your pocket because it offers instant global transfers, high yield savings. But what happens when that speed, the core selling point, becomes the perfect mask for, well, illicit cash flow?

Ida 0:27

And that is the tension we are deep diving into. I mean, for all the sleek interfaces and the easy onboarding, the digital finance sector is really struggling under the weight of financial crime.

Allan 0:37

Aaron Powell And the cost is huge, right?

Ida 0:39

Oh, it's staggering. If you look at the historical precedent, past misconduct by major local banks has cost them over$350 billion in the last decade.

Allan 0:49

$350 billion.

Ida 0:51

That's a staggering 15% of their total equity. Just, you know, wiped out.

Allan 0:56

Aaron Powell, so this isn't just about a few bugs in an app. This is this is about systemic risk being introduced by the very thing designed to make our finances faster.

Ida 1:04

Aaron Powell It's the high-speed chase innovation versus regulation. Precisely. So our mission today is to unpack that collision. We've got sources showing how FinTech's uh aggressive growth strategy is running head on into regulatory reality. And that's leading to massive fines, serious user anxiety, and you know, a relentless global fight against organized crime.

Allan 1:25

So for you, the listener, the fundamental question we're exploring is critical. When is too fast too risky? And what is all that convenience actually costing consumer trust?

Ida 1:36

Okay, so let's start with why we love these platforms in the first place. I mean, the core value proposition is just irresistible. Totally. You look at Revolute, for instance, it's offering compelling features, generous travel coverage, and the ultimate plan. It even includes unlimited airport lounge access, it's banking for the global citizen.

Allan 1:53

And beyond the perks, they deliver genuine financial control. Take Bunk, the Neobank, based in the Netherlands. They let users create up to 25 separate sub-accounts.

Ida 2:03

25.

Perks, Power Features, And Friction

Allan 2:03

Yeah. Each with its own unique I-band, that's the international bank account number. It allows for this hyper-segregated money management that, you know, legacy banks simply can't implement that quickly. That is the promise. But now we hit the friction point, that moment of real anxiety when that instant transfer just stops.

Ida 2:21

It just vanishes into the ether.

Allan 2:22

Exactly. The Trade Republic case study is a chilling example here. We've seen reports of users having these huge transfers. We're talking blocks of 10,000 or even 30,000 euros, just being delayed or outright rejected.

Ida 2:37

And here's the digital irony we mentioned. Industry insiders suspect these large amounts are triggering automated internal checks for uh additional know your customer or KYC verification.

Allan 2:49

Right, the security checks.

Ida 2:50

But because these teams are so often understaffed, they just get overwhelmed and the whole system freezes. And the common fixed users report is completely counterintuitive.

Allan 2:58

What is it?

Ida 2:59

They're forced to send money in multiple smaller transfers just to sneak past their own bank's automated gatekeepers.

Allan 3:06

Wait, I mean, how often does a modern company tell you to physically break their system, send 10 small transfers instead of one big one just to make it work?

Ida 3:14

Aaron Powell The user experience is terrible. And the outcome just compounds the anxiety. Reports show waiting periods stretching one month, two months, with users having to, and this is a quote, bombard them with complaints just to get their own money back. So that's more than just a bad customer service experience. That liquidity anxiety is a structural signal. It's telling us that many fintech providers prioritize that fast, easy onboarding at the expense of robust uh anti-money laundering controls.

Allan 3:45

Aaron Powell So they scale the front end, the pretty app.

Ida 3:47

Exactly. But they forgot to scale the compliance engine behind the scenes. And regulators are no longer treating this as some kind of oversight. The European Banking Authority, the EBA, which is the EU-level oversight body, has observed this exact thing.

Allan 4:00

Aaron Powell Okay, so what are they seeing?

Ida 4:02

They report that 70% of competent authorities see high or rising money laundering and terrorist financing risks explicitly because firms are choosing to prioritize growth over compliance.

Allan 4:13

Aaron Powell We actually said that. Prioritize growth over compliance.

Ida 4:16

Word for word. And the regulatory reckoning is now raining down. We're seeing massive fines that confirm this choice has very real consequences. Starling Bank in the UK was hit with a 28.9 million pound fine by the FCA.

Allan 4:30

Aaron Powell That's the Financial Conduct Authority.

Frozen Transfers And KYC Bottlenecks

Ida 4:31

Trevor Burrus, Right. And it was for significant AML control failures. And the reason while it's structural, their customer base just exploded. It went from 43,000 to 3.6 million in a very short time.

Allan 4:43

Aaron Powell So it's not just the speed, it's something else.

Ida 4:46

Aaron Powell It's the technical debt. Their foundational AML system just wasn't modular or scalable enough to handle that 80 times growth. It created massive blind spots for criminal activity. Aaron Powell Hold on.

Allan 4:57

Isn't that just unfair regulatory heavy-handedness? I mean they were doing exactly what governments wanted them to do, driving innovation, driving growth. It feels like they were punished for succeeding too fast.

Ida 5:08

Aaron Powell That's the common counter-argument, but the regulators point to leadership failure. The fines aren't for being fast, they're for failing to invest adequately. Monzo, for example, got a 21 million pound fine for AML lapses. And Germany's regulator Baffin fined N26 9.2 million euros in May 2024 because they, and I quote, systematically reported suspicious activities late.

Allan 5:34

That late reporting is crucial, isn't it? If you report a suspicious transfer three months too late.

Ida 5:39

That money is long gone, exactly. And N26 acknowledged it. They allocated 80 million euros afterwards just to strengthen compliance. And then this problem is global too. Block Inc., which runs Cash App, was fined 40 million dollars in the US for significant failures in its AML programs.

Allan 5:57

What kind of failures?

Ida 5:58

A lax treatment of high-risk transactions like Bitcoin, which were just allowed to go through with insufficient scrutiny.

Allan 6:04

The root cause analysis from compliance experts seems to connect all these dots back to the executive suite. What were the consistent shortcomings they found?

Ida 6:11

Aaron Powell There were four main points. First, clear underinvestment in both compliance people and the technology. Second, poor systems that fail to identify risk, sometimes accepting clients that were previously flagged in what are called suspicious activity reports or SARS.

Allan 6:25

Aaron Powell So they were basically ignoring a previous red flag from law enforcement.

Fines, Failures, And Leadership Gaps

Ida 6:29

Aaron Powell Essentially, yes. Third, a leadership culture that just didn't prioritize financial crime prevention. And finally, a pervasive lack of uh management information. They were collecting data, sure, but they weren't effectively analyzing or using it to manage risk.

Allan 6:47

Aaron Powell These individual fines, they tell the story of failed compliance inside single companies. But to really get the stakes, we need to zoom out. We need to look at the systemic problem the regulators are actually trying to solve.

Ida 6:59

Sheer scale of dirty money.

Allan 7:01

Right. Flowing through the single market.

Ida 7:03

The scale is staggering. Estimates suggest the flow of illicit funds through the EU financial system annually, it ranges up to$750 billion.

Allan 7:11

$750 billion. What is that as a percentage?

Ida 7:14

It's equivalent to 2.3% of Europe's entire GDP.

Allan 7:18

That's unbelievable. And the neobanks operating cross-border are caught right in the middle of a fragmented regulatory structure that makes fighting that so much harder.

Ida 7:28

Absolutely. The problem is fundamentally exacerbated by this fragmentation. Supervisory authorities in different countries sometimes take diverging approaches just to attract innovative companies.

Allan 7:38

Which creates what's called regulatory arbitrage.

Ida 7:40

Exactly. Criminals can literally shop around for the easiest country to set up shop.

Allan 7:44

Aaron Powell Can you give us a concrete example of that? Because you could argue that some divergence is necessary for local innovation. Is consistency always the answer?

Ida 7:53

Aaron Powell Well, consistency is essential when you're combating global crime. Take remote identification. It's a critical step in KYC. IDNow's video conferencing solution, which N26 used, was approved by Buffin in Germany, a secure tool. Okay. Yet that exact same solution was not accepted by authorities in other EU countries. This directly creates an unlevel playing field. It slows down legitimate companies while criminals just benefit from the confusion.

Allan 8:20

And that fragmentation hits the user directly, too. This is where the trust we talked about just it dissolves. We've seen reports of so-called I-BAN discrimination, where neo banks, like Revolute in the Netherlands, get flagged as being associated with fraud.

The Scale Of Illicit Funds

Ida 8:34

Aaron Powell And this isn't just an inconvenience. This makes the user feel like a second-class banking citizen. They struggle to get their salary or interact with the government because their non-native IBAN is getting flagged by national systems. It just destroys the trust the neobank worked so hard to build.

Allan 8:49

Aaron Powell And on top of that, the criminals are getting smarter. This isn't just about human analysts reviewing forms anymore. This is an AI arms race.

Ida 8:58

Aaron Powell It is. The European Banking Authority explicitly warns that criminals are using AI to automate money laundering, forge documents with deepfakes, and just evade all the due diligence measures. We're not talking about bots spamming phishing links. We're talking about custom AI models producing perfect deepfakes of utility bills and passports to pass KYC checks over and over.

Allan 9:19

Faster than any human can track.

Ida 9:21

Exactly. Financial institutions are struggling to keep pace.

Allan 9:24

So what's the regulatory fix for all this cross-border chaos?

Ida 9:28

The EU has introduced MLA, the Authority for Anti-Money Laundering. It formally came into being in July, which is a major step. It aims for same services, same risks, same rules.

Allan 9:38

Aaron Powell That sounds great in theory, but when does this centralized authority actually get teeth?

Ida 9:43

And that's the catch. You should note that it will not begin direct supervision until January 1st, 2028.

Allan 9:49

Aaron Powell 2028. That's that's the four-year gap.

Ida 9:52

A critical one. It means for the next 48 months, criminals know they can still exploit the seams, the fragmentation between countries before MLA has any real centralized power to step in. That long interim period allows vast amounts of dirty cash to keep flowing.

Allan 10:07

So the key change has to be reframing compliance. It can't be seen as this painful mandatory cost center. It has to be core infrastructure, a critical investment in trust. Right. We can use the Robin Hood case as a baseline to understand the math. Their crypto division was fined$30 million for compliance failures.

Fragmented Rules And Arbitrage

Ida 10:24

Aaron Powell And that$30 million becomes the cost of doing nothing. When compliance officers analyze that, they compare it to the cost of actually creating a robust automated program. And experts estimate building that system, the tech, the people, would cost around$4 to$5 million.

Allan 10:41

Aaron Powell Wait, that seems way too cheap. Doesn't that figure ignore the cost of integration, staff training, and maybe the competitive slowdown that comes with pausing hypergrowth for a bit?

Ida 10:51

Well, it accounts for the core systems, yes, but you've uh hit the nail on the head regarding the initial mindset. The calculation proves that the fine is exponentially larger than the investment.

Allan 11:01

So the money is there.

Ida 11:02

The money's there. The fine is incurred because leaders choose the competitive advantage of hyperspeed over the slower, more deliberate process of building secure infrastructure. Look at Starling, Monzo, and 26. They all invested heavily after the fines hit.

Allan 11:16

So the solution to the AI criminal problem is an AI compliance solution. It's the only way to win this AI versus AI arms race.

Ida 11:24

It has to be. This is where RegTech innovation comes in. AI and machine learning can continuously monitor transactions, identify anomalies in real time far faster and more reliably than any manual review. Right. This automation is crucial. It reduces the burden on compliance teams, freeing up human analysts to focus on high-value, complex investigations like tracking those deep fakes, rather than just routine screening.

Allan 11:49

And for the neobanks, compliance then becomes a brand advantage. Transparency builds trust. You can publish reports detailing the suspicious activity reports you've filed, the fraud you've prevented.

AI Versus AI In Financial Crime

Ida 11:59

Absolutely. The goal is to make compliance part of the core infrastructure. That means ensuring identity data, sanctioned status, transaction behavior. It all converges into a single dynamic customer risk profile. This gives you continuous monitoring, which not only catches criminals, but also vastly improves your audit readiness for when the regulators come knocking. The Neobank story is, I think, ultimately a lesson in the high stakes of hypergrowth. Their future success depends entirely on whether they're willing to invest in regulatory depth as much as they invest in technological speed.

Allan 12:30

So the goal is harmonization.

Ida 12:32

The regulatory goal across Europe is now crystallized. Achieve the principle of same services, same risks, same rules, and same supervision across what is right now a very fragmented continent.

Allan 12:45

And that ongoing challenge leads to our final provocative thought for you to consider. Evidence suggests that around 70% of criminal networks use the single market's financial system to launder money.

Ida 12:56

70%. And a shocking 80% use legal business structures like shell companies to move that cash.

Allan 13:03

So the fintech sector is under this intense public scrutiny. It's bearing the brunt of the enforcement.

Ida 13:09

So if digital banks are the focus, what knowledge gap remains? I mean, consider that vast, less supervised sectors like real estate, which is a classic vehicle for cleaning money, often remain outside the direct purview of the new centralized AML authority, AMLA.

Allan 13:23

How long can these vast pools of dirty money hide in less supervised sectors while digital banks bear the brunt of the enforcement and these massive fines? Something to think about the next time your instant transfer takes two days. The friction you feel might actually be the system attempting blatedly to stop a$750 billion problem.