Wireva

Tracfin’s 278,484 alerts show how illicit-finance networks are changing

France’s financial intelligence unit saw suspicious transaction reports jump 32% in 2025, with banks and crypto firms feeding a system increasingly shaped by speed, cross-border data and asset recovery.

Tracfin’s 278,484 alerts show how illicit-finance networks are changing

Dinkum / Wikimedia Commons · Public domain · rights

This item was produced with AI assistance under the editorial responsibility of Haydamax OÜ.

The most revealing number in Tracfin’s 2025 report may not be an amount of money but a volume of signals: 278,484 suspicious transaction reports reached the French financial intelligence unit last year, 32% more than in 2024.

That figure maps the infrastructure of modern financial surveillance. Banks and other financial institutions produced 258,470 reports, or 93% of the total. Reports from banks and credit institutions rose 45%, while crypto-asset service providers filed 4,850 reports, an increase of 58%.

None of those reports is a conviction, and the growth rate should not be read as a direct measure of criminal activity. A suspicious transaction report is an input. It records a regulated professional’s concern about a transaction or relationship and gives Tracfin material to compare with other data, build networks and decide whether information should be sent to judicial or administrative partners.

The structure matters because illicit finance increasingly crosses institutional boundaries. A payment may begin in a bank, move to a fintech platform, pass through a company with opaque ownership and end in a crypto wallet or another jurisdiction. The investigative advantage no longer comes only from seeing one suspicious transfer. It comes from joining pieces that were generated by different actors at different points in the route.

France’s data show the public-finance side of that network. Tracfin says its transmissions concerning fraud against public finances involved about €3.2 billion in financial flows in 2025. Intelligence sent to URSSAF contributed to controls producing roughly €470 million in adjustments, up from €266 million a year earlier.

The service also works beyond tax and social fraud. Its mandate includes laundering criminal proceeds, protecting the state’s financial interests, terrorist financing and certain threats linked to foreign interference. That breadth reflects a broader European trend: financial intelligence is increasingly treated as a security capability because money connects organised crime, corruption, sanctions evasion, covert influence and terrorism even when the underlying offences differ.

Speed changes the network as much as technology. Tracfin reports €40 million in criminal assets seized through a rapid transmission channel to the courts, 40% more than in 2024. Asset recovery is a race against mobility. Funds that remain visible at the moment intelligence is produced can disappear through transfers, purchases or conversions if legal action arrives too late.

The crypto increase deserves the same caution as the overall total. More filings can mean more suspicious activity, but they can also mean stronger controls, new regulatory coverage and a larger legitimate market. What matters for intelligence is the quality of the narrative attached to an alert: who controls the account, what behaviour broke the expected pattern, where the money came from and where it went.

That is why Tracfin’s report is relevant well beyond France. European financial centres are trying to build systems that share enough information to detect cross-border networks without turning every unusual transaction into noise. The French numbers show the scale of the input problem. The strategic question is whether institutions can move from mass reporting to network-level understanding quickly enough to seize assets, disrupt fraud and expose the routes through which illicit money travels.

Same event, other desks

Story file →