The Weekly Alpha - Canadian AML & Financial Crime Briefing - Week Ending July 17, 2026
The Weekly Alpha

The Weekly Alpha - Canadian AML & Financial Crime Briefing
July 17, 2026

The Alpha Brief

This week’s developments span enforcement actions, sanctions policy shifts, regulatory advisories, and technology-related cyber risk concerns in financial crime and AML.

Significant Enforcement Actions in Financial Crime

Toronto Police, with multiple international partners including FINTRAC and the RCMP, arrested Stephen Tolys for livestreaming and facilitating child sexual abuse, resulting in 136 charges and the rescue of four children. Separately, two former TD Bank employees in New York were sentenced to prison for financial crimes involving money laundering and bribery, highlighting personal criminal liability for employees who misuse access or bypass AML controls. Meanwhile, the Ninth Circuit upheld a block on FinCEN’s cash reporting rule targeting US-Mexico border transactions, citing procedural and cost concerns, leaving the reporting requirement suspended amid ongoing legal challenges.

Shifts in Sanctions and International Policy

The U.S. Department of State initiated the rescission process to remove Syria from the State Sponsor of Terrorism list following assurances on counterterrorism commitments, aiming to lift sanctions and support Syria’s economic rebuilding. Concurrently, FINTRAC issued an advisory reflecting FATF’s June statements, confirming that North Korea and Iran remain subject to countermeasures and Myanmar to enhanced due diligence, while Algeria and Namibia were removed from the FATF grey list. The advisory reiterates Canada’s Ministerial Directive requirements for transactions involving North Korea and Iran, including enhanced due diligence and reporting obligations.

Regulatory Focus on AI and Cybersecurity Risks

OSFI warned Canada’s largest banks and insurers that advanced AI models like Anthropic’s Claude Mythos could accelerate the identification and exploitation of cyber vulnerabilities, reducing response times. This communication to senior executives preceded a broader OSFI bulletin outlining risks to cybersecurity and operational resilience posed by generative and agentic AI technologies, signalling heightened regulatory attention on AI-driven cyber threats within financial institutions.

This Week in AML
Toronto Police Lay Over 100 Additional Charges in Joint Child Sexual Abuse and Exploitation Investigation
Toronto Police, in collaboration with the RCMP National Child Exploitation Crime Centre, FINTRAC, Homeland Security Investigations, and international partners, arrested Stephen Tolys of Hamilton for livestreaming and facilitating child sexual abuse involving victims in the Philippines. The investigation began in April 2025 and led to the rescue of four children and the laying of 136 charges against Tolys, including possession and access to child sexual abuse material.
Toronto Police Service
Ex-TD bankers land in jail
Two former TD Bank employees in New York were sentenced to prison for separate financial crime offences involving misuse of their positions at the bank. Former assistant branch manager Wilfredo Aquino received 46 months after admitting he helped facilitate a money laundering network that moved hundreds of millions of dollars through TD accounts, while Edward Low was sentenced to 24 months after accepting bribes to obtain confidential customer information and falsifying records to open an account used in a fraud scheme. The cases are a reminder that AML, confidentiality, recordkeeping, and escalation obligations apply to employees across regulated entities—not only compliance teams—and that deliberately bypassing controls or misusing access can result in personal criminal liability.
Investment Executive
Initiating Rescission Process of Syria’s Designation as a State Sponsor of Terrorism
The U.S. Department of State announced the initiation of the rescission process to remove Syria from the State Sponsor of Terrorism list, following President Trump's directive and assurances from Syrian President Ahmed al-Sharaa regarding counterterrorism commitments. This move aims to lift sanctions, facilitate Syria's economic rebuilding, and improve regional stability. The decision marks a significant shift in U.S.-Syria relations with implications for international trade and security.
state.gov
Ninth Circuit upholds block on FinCEN US-Mexico border cash reporting rule
The Ninth Circuit upheld a preliminary injunction blocking FinCEN’s Southwest border Geographic Targeting Order, which would have required money services businesses in 30 California and Texas ZIP codes to report cash transactions between US$200 and US$10,000. The divided panel found the measure likely operated as a rule rather than an order and therefore should have undergone federal notice-and-comment procedures, while also concluding that FinCEN failed to adequately consider the compliance costs imposed on affected businesses. The reporting requirement remains blocked while the legal challenge continues.
Courthouse News Service
Canada regulator cited Anthropic's Claude Mythos in warning to banks on cyber risks, email shows
Reuters reports that OSFI warned Canada’s largest banks and insurers in an April email that advanced AI models such as Anthropic’s Claude Mythos could significantly reduce the time available to identify, mitigate, and respond to cyber vulnerabilities. The communication, sent to senior technology, security, and risk executives, highlighted concerns that highly capable AI could accelerate the discovery and exploitation of weaknesses in financial institutions’ systems. OSFI subsequently published a broader bulletin on generative and agentic AI, outlining risks to cybersecurity and operational resilience.
reuters.com
FINTRAC advisory: Financial transactions related to countries identified by the Financial Action Task Force
FINTRAC issued its July 15 advisory following FATF’s June 19 statements, confirming that the Democratic People’s Republic of Korea and Iran remain subject to calls for countermeasures, while Myanmar remains subject to enhanced due diligence measures. The advisory lists 23 jurisdictions under increased monitoring and notes that Algeria and Namibia have been removed from the FATF grey list. It also reiterates Canada’s existing Ministerial Directive requirements for transactions involving the DPRK and Iran, including prescribed high-risk treatment, identity verification, due diligence and recordkeeping measures, with additional reporting obligations for Iran-related transactions.
Financial Transactions and Reports Analysis Centre of Canada
Independent AML Effectiveness Reviews

AlphaDelta helps Canadian reporting entities complete required two-year AML effectiveness reviews that are practical, defensible, and aligned to FINTRAC expectations.

Every review includes a 90-day findings clarification session and our 12-month FINTRAC examination support commitment.

Don’t miss the daily developments shaping AML, sanctions, fraud, and financial crime compliance. Add the Daily Delta to your email subscription →
Important Disclosure

The Weekly Alpha is a curated news briefing produced by AlphaDelta Advisory Group for informational purposes only. It is designed to help readers identify relevant regulatory, enforcement, financial crime, and compliance developments from the prior week and to direct readers to the original source materials.

Article titles, publisher names, and source links are provided for attribution and reference. Summaries are prepared in AlphaDelta’s own wording, including through the use of automated tools, to provide brief, non-comprehensive descriptions of selected developments. They are not intended to reproduce, replace, or serve as a substitute for the original articles, publications, regulatory guidance, or source materials.

Summaries may omit context, nuance, limitations, author views, subsequent updates, or other information contained in the original source. Readers should review the linked source materials directly before making compliance, legal, operational, policy, or business decisions.

AlphaDelta does not verify, endorse, or guarantee the accuracy, completeness, availability, or timeliness of third-party content referenced in this briefing. All third-party content, trademarks, article titles, publisher names, and related rights remain the property of their respective owners. Reference to third-party materials does not imply endorsement, affiliation, sponsorship, or approval by the original publisher or issuing authority.

If a rights holder believes any reference, summary, or link should be modified or removed, they may contact AlphaDelta Advisory Group at info@alphadeltaadvisory.com for review.
© 2026 AlphaDelta Enterprises Inc. All rights reserved.

When was your last AML effectiveness review?

FINTRAC requires reporting entities to carry out and document an effectiveness review at least every two years.

If your next review is due or approaching, contact AlphaDelta today.
BOOK A REVIEW
© 2026 AlphaDelta Enterprises Inc., operating as AlphaDelta Advisory Group. All rights reserved. Canada.