Fiscal Year 2026 Emerging Compliance Frontiers: AI and Cryptocurrency in Fiscal Year 2026

AI and Cryptocurrency in Compliance:

2026 has marked a pivotal year for compliance professionals navigating the evolving domains of artificial intelligence and cryptocurrency. Both technologies offer operational benefits: AI in automating detection, reducing costs, and streamlining decision-making, and cryptocurrency in enabling faster settlements, programmable financial instruments, and broader market access. However, both carry risks that demand proactive institutional responses. This paper provides an overview of how AI and cryptocurrency are being used today, how they are being regulated, and what steps organizations should take to stay ahead.

Artificial Intelligence in Compliance and Financial Services

Financial service firms are using AI across nearly every business and compliance function. For example, anti-money laundering (AML) compliance is undergoing an AI-driven transformation. Traditional AML systems are under mounting pressure from high alert volumes, rigid thresholds, and fragmented data. As a result, AI is increasingly viewed as an operational necessity.

While transaction monitoring remains the foundation of AML compliance, AI is redefining how it operates. Instead of relying on fixed thresholds, AI-driven monitoring evaluates behavioral patterns, transaction history, and contextual risk indicators, enabling institutions to identify suspicious activity more accurately while reducing unnecessary alerts that slow investigations.

Anomaly detection and pattern recognition also represent a critical use case. This allows AI systems to learn what "normal" behavior looks like across customers, products, and geographies. By identifying deviations and coordinated activity across accounts or extended timeframes, AI can uncover laundering schemes that may have historically evaded rule-based controls.

In addition, FINRA's 2026 Annual Regulatory Oversight Report section entitled "GenAI: Continuing and Emerging Trends" notes the unique risks of generative AI. Across financial services, institutions are deploying AI in customer-facing roles, including in chatbots, virtual assistants, and automated service channels. This has been lauded for reducing overhead while improving response times and customer experience. However, the Report notes that biases, hallucinations, the unintentional use and disclosure of confidential customer or proprietary information, and generative AI being used beyond its intended scope and authority pose a serious risk to integrating AI into financial systems. Although they are enabling firms to serve a broader client base with tailored strategies, these capabilities can introduce concerns over suitability, disclosure, and explainability.

Risks of Artificial Intelligence in Compliance and Financial Services

The same capabilities that make AI valuable also introduce categories of risk that compliance programs must actively manage. These risks fall into two categories: threats that AI enables and threats directed at AI systems. Threats enabled by generative AI: Generative AI tools lower the barrier for sophisticated fraud. Deepfake audio and video, AI-generated documents, and synthetic identities are now within reach of bad actors. The same Know-Your-Client tools that AI strengthens can also be targeted by AI fraud attempts. AI can also be used to create more convincing phishing communications and produce customer communications that are designed to mislead compliance professionals.

Threats targeting AI systems: AI models are vulnerable to attack. Adversarial inputs can cause models to miss suspicious transactions or flag benign ones, while data corruption during the training phase can introduce blind spots into deployed models. AI models must therefore be trained using a pool of trusted information, as the integrity of training data is foundational to the integrity of the model. Further, data used in AI systems must be secured against unauthorized access, both to protect customer information and to preserve model reliability.

Cryptocurrency in Compliance and Financial Services

The regulatory environment for cryptocurrency has evolved substantially and continues to develop rapidly. The SEC, FINRA, and global regulatory authorities have each taken meaningful steps to clarify their frameworks. In March 2026, the SEC issued an interpretation clarifying how federal securities laws apply to crypto assets and transactions. The interpretation provides a coherent taxonomy for digital commodities, digital collectibles, digital tools, stablecoins, and digital securities. It also addresses how a non-security crypto asset may become subject to, and how it may cease to be subject to, an investment contract. SEC Chairman Paul Atkins characterized the guidance as recognizing that most crypto assets are not themselves securities. The CFTC joined the interpretation, committing to administer the Commodity Exchange Act consistent with the SEC's framework.

FINRA's 2026 Annual Regulatory Oversight Report section entitled "Member Firms' Nexus to Crypto" emphasized that federal securities laws and FINRA rules generally apply to member firm activities involving crypto assets that are securities, including those offered and sold as investment contracts. Certain FINRA rules apply to the activities of firms and their associated persons irrespective of whether the activity involves a security. Among the findings in the section were failures in AML programs, noting instances where firms did not establish programs reasonably designed to detect and report suspicious crypto transactions. FINRA also noted that bad actors are taking advantage of interest in crypto assets and blockchain technology by engaging in manipulative schemes similar to those in the equities market, including pump-and-dump schemes. These manipulative schemes may be amplified by social media promotions, including those that suddenly appear and contain unverifiable information.

Risks of Cryptocurrencies in Compliance and Financial Services

Despite the promise of digital assets, compliance professionals must approach cryptocurrency with clear awareness of its risk profile.

Fraud, Money Laundering, and Scam Tactics: The borderline-anonymous nature of cryptocurrency has made digital assets attractive to bad actors seeking to evade sanctions or perpetrate financial fraud. Pump-and-dump schemes and fraudulent coin offerings have cost investors billions and created significant supervisory challenges for regulatory bodies.

Regulatory Gray Areas: For years, the absence of clear regulatory frameworks created uncertainty for firms seeking to engage with cryptocurrency compliantly. While significant progress has been made, particularly with the SEC's March 2026 interpretive guidance and the passage of the GENIUS Act, gray areas remain, particularly around certain platforms and cross-border transactions.

Market Volatility: The constantly evolving nature of cryptocurrency markets is a feature in terms of accessibility and efficiency, but it is also a significant risk factor. Cryptocurrency markets move dramatically in short timeframes, and the continuous trading environment means that volatility events compound without the market hours that moderate traditional securities markets. Compliance professionals at institutions holding or facilitating crypto must understand that market risk management in this context requires continuous monitoring rather than periodic review.

Suggestions: AI and Cryptocurrency in Compliance

The convergence of AI and cryptocurrency with mainstream financial services and compliance practice is the present reality of 2026. Compliance professionals who understand the benefits and the risks of these technologies are better positioned to protect their institutions, serve their clients, and satisfy their regulatory obligations. The following recommendations are offered for compliance programs engaging with either: Invest in Education First: Neither AI nor cryptocurrency can be responsibly navigated by professionals who have not developed a working understanding of how they function. Firms should invest in education programs for compliance staff covering AI model governance, cryptocurrency fundamentals, and the evolving regulatory landscape, using published guidance from FINRA, the SEC, and the CFTC.

Develop AI Governance Frameworks: Institutions deploying AI in compliance functions should develop clear policies governing model selection, training data standards, ongoing monitoring, and incident response. These frameworks should address both the risks of AI systems and AI-enabled threats. Engage With Cryptocurrency Compliance Proactively: Firms with crypto assets, including through affiliated entities, customer offerings, or ETF products, should assess their AML programs, customer disclosures, and supervision policies in light of the SEC's March 2026 interpretation and FINRA's guidance.

Monitor the Regulatory Environment Continuously: Both AI and cryptocurrency are areas where the regulatory landscape is changing on a rolling basis. Compliance professionals should establish mechanisms for monitoring SEC, FINRA, and CFTC guidance as it is issued.

Conclusion: AI and Cryptocurrency in Compliance

Artificial intelligence and cryptocurrency in compliance are now operational realities. The institutions best positioned for the years ahead are those that build the governance structures, staff expertise, and monitoring capabilities needed to engage with both thoughtfully. Regulators have made clear, through the SEC's March 2026 crypto taxonomy and FINRA's AML findings, that the expectations surrounding both AI and digital assets are hardening. Simultaneously, the data is clear that institutions leveraging AI-driven AML tools are detecting more, and those with crypto compliance frameworks are better positioned to capture institutional opportunities.

Softek Compliance Services can support firms looking to develop robust AI and cryptocurrency compliance practices. We proudly offer risk assessment and a full suite of compliance solutions, including AML support, independent testing and assessments, policies and procedures development, outsourcing, and registrations. As AI and cryptocurrency continue to reshape the compliance landscape, Softek stands ready to help firms move forward with confidence by building programs that are sustainable, scalable, and aligned with where regulation is heading.

Contributing Authors: Catherine Valencia, Christian Romeo, Virginia Harnisch