All reports
Daily Brief · FinTech · Crypto · AI

BNM Fines UBB Investment Bank RM10 Million Over Missed AML Reports, Vietnam's Crypto Compliance Infrastructure Takes Shape, and BSP Bets on Voluntary AI Guidance

Bank Negara Malaysia and Labuan's regulator disclosed a RM10 million compound against UBB Investment Bank for failing to report 53 suspicious transactions and botching a customer identity check — settled in June but only announced August 14. Sumsub and Orochi Network launched a compliance partnership aimed at Web3 firms preparing for Vietnam's incoming crypto licensing regime, positioning ahead of a market where five bank-linked applicants are already shortlisted. And the Bangko Sentral ng Pilipinas is leaning on its voluntary STARS framework to govern bank AI use, a lighter-touch approach that stands in contrast to Singapore's binding agentic-AI rules.

August 17, 20264 min readMalaysia · Vietnam · Philippines · AML · Crypto Regulation · AI Governance
Wide-angle editorial photograph of a central bank headquarters building exterior at pre-dawn blue hour, warm floodlit stone-and-glass facade against a deep cobalt sky, a lone security guard in silhouette crossing the forecourt, small in frame against the building.
A joint compound against a Labuan-licensed bank was settled in June and only disclosed to the public in mid-August.

BNM and Labuan's Regulator Fine UBB Investment Bank RM10 Million for Missing 53 Suspicious Transaction Reports

Bank Negara Malaysia and the Labuan Financial Services Authority disclosed a joint enforcement action on August 14 against UBB Investment Bank Limited totalling RM10 million in compounds: RM9 million under the Anti-Money Laundering Act for failing to promptly submit suspicious transaction reports on 53 transactions conducted between 2023 and 2024, and RM1 million under the Labuan Financial Services and Securities Act for failing to properly identify and verify a customer's identity during onboarding in 2023. The breaches surfaced through a joint on-site examination the two regulators conducted in August 2024.

The disclosure timeline is its own data point. The compound was imposed on March 13, 2026; UBB Investment Bank initially missed the payment deadline, which triggered prosecution proceedings before the bank secured reinstatement through the Attorney General's Chambers and paid the full RM10 million on June 11. The public announcement came more than two months after that, on August 14 — regulators framed it as a reminder that reporting institutions face enforcement and prosecution risk for anti-money-laundering lapses.

Sumsub and Orochi Network Build Compliance Rails Ahead of Vietnam's New Crypto Licensing Regime

Identity-verification firm Sumsub and Vietnamese infrastructure startup Orochi Network announced a strategic partnership on August 14 aimed at helping Web3 and digital-asset businesses across Southeast Asia become compliance-ready as Vietnam formalizes its crypto licensing framework. Sumsub contributes identity and business verification, fraud prevention and a Travel Rule directory covering more than 2,100 virtual asset service providers across 220-plus jurisdictions; Orochi contributes zkDatabase, a privacy-preserving verification system built on zero-knowledge proofs. The two firms said their initial focus is go-to-market support for projects seeking Vietnamese licenses, alongside regional education on regulatory readiness.

The timing tracks Vietnam's shift from a gray-zone crypto market to a formal pilot licensing regime, which sets minimum capital of VND 10 trillion (roughly $380 million), requires at least 65% of that capital from institutional shareholders, and caps foreign ownership at 49%. Five domestic applicants — bank affiliates including Techcombank, VPBank and LPBank, alongside brokerage VIX Securities and the Sun Group conglomerate — have already been shortlisted for the pilot track.

BSP Leans on Voluntary AI Guidance for Bank Governance, a Softer Line Than Singapore's Binding Rules

Bangko Sentral ng Pilipinas officials used an August 10 update to reiterate the central bank's approach to AI risk in banking, built around its STARS framework — sustainability, transparency, accountability, responsibility and security — which Deputy Governor Lyn Javier signed into effect in June as voluntary, non-binding guidance rather than enforceable rules. Governor Eli Remolona Jr. framed the underlying philosophy at the central bank's July 27 AI Summit in Manila: "AI can identify patterns, generate ideas, and help us make sense of complexity. But deciding where we want to go or what outcomes we value most by using AI, that remains our responsibility." Javier separately committed the BSP to ensuring consumer safeguards keep pace as AI use in customer service, fraud detection and operational workflows expands.

The approach reads differently against Singapore's, where the Monetary Authority of Singapore confirmed earlier this month that its AI risk guidelines bind agentic AI systems, not just assistive tools that keep a human in the loop — a formal supervisory line the BSP has not drawn. The BSP's framework leaves individual bank boards to set their own risk appetite and controls within the five STARS pillars, rather than meeting a common regulatory floor.

Eyes on the Day Ahead

The State Bank of Vietnam opens its 2026 Banking Sector Digital Transformation event tomorrow in Hanoi, themed "Smart banking in the data and AI era" and running through August 19 — worth watching for whether SBV officials add any detail on how the digital-transformation push intersects with the crypto-licensing track above, given that all five shortlisted digital-asset exchange applicants are themselves bank-linked or major conglomerates.

Layer 7 Ventures is a research-driven firm focused on AI and cryptocurrency in Southeast Asia. Views expressed are those of the firm and do not constitute investment advice.

More Research

A shopkeeper in a plaid shirt and a helmeted delivery rider face each other across the counter of a Kuala Lumpur shophouse in harsh midday sun, with a card payment terminal and stacked cartons on the counter and motorbikes parked at the kerb.
Daily Brief · FinTech · Geopolitics4 min

SEA Daily Brief: Malaysia Lifts SME Financing to RM57 Billion and Tops Up BNM's Relief Facility, Thailand Plans an SME Credit Portal, and Vietnam Wins Its First Investment-Grade Rating

Malaysia's Budget 2027 raises SME loan facilities and financing guarantees to RM57 billion from RM50 billion, while Bank Negara Malaysia adds RM5 billion to its SME Stabilisation Relief Facility after RM3.8 billion of the first tranche was approved. The Bank of Thailand outlined an SME credit portal, an alternative data exchange and a five-year guarantee scheme aimed at about 100 billion baht of new SME lending a year, after a four-year decline. Japan's R&I upgraded Vietnam to BBB-, the first investment-grade rating from an international agency, while Moody's, S&P Global and Fitch still rate it sub-investment grade.

High-angle view of a Kuala Lumpur financial district at pre-dawn blue hour, with office towers, a river bend and a few tiny pedestrians crossing a floodlit plaza and a marked crosswalk.
Daily Brief · FinTech · AI4 min

SEA Daily Brief: Malaysia's Budget 2027 Backs Startups and Crowdfunding, the SC Reports 2025 Restitution Figures, and UOB Explores a Dedicated AWS Cloud for ASEAN

Malaysia's Budget 2027, tabled on 9 October, earmarks RM450 million for startups through Jelawang Capital and Dana Perintis and RM270 million to draw private capital into equity crowdfunding and P2P platforms, with no distribution mechanism disclosed. The Securities Commission told Parliament it returned RM1.98 million to 239 investors in 2025 and has set aside RM8.6 million for 933 more. UOB signed an MoU with AWS to explore a dedicated Singapore cloud environment for its five ASEAN markets, with no financial terms or timeline given.

Office workers and a security guard walk across a stone forecourt toward a modern government building with a sweeping roofline in Kuala Lumpur, lit by low golden-hour sun with palm trees and a lawn in the foreground.
Daily Brief · FinTech · Crypto · AI4 min

SEA Daily Brief: Malaysia's Budget 2027 Proposes Tokenised Retail Sukuk, Singapore Licenses Large Data Centres, and the NSRC Plans an AI Scam-Check App

Prime Minister Anwar Ibrahim proposed a blockchain-based retail savings sukuk in Budget 2027, tabled on 9 October, with no launch date, minimum investment or return disclosed. Singapore's Parliament passed the Digital Infrastructure Bill on 7 October, creating licensing regimes for data centres of 10MW or more and large cloud providers. Malaysia's National Scam Response Centre also plans an AI application to check suspicious numbers, accounts and links, with no funding or launch date stated.

Stay Informed

Get the next report in your inbox.