Terrorist financing is a massive issue for financial institutions, regulators and law enforcement agencies the world over. To develop effective countermeasures, you need to understand how terrorists fund themselves and move money. This paper looks at three key case studies: the 9/11 funding trail, ISIS and the use of cryptocurrencies and India's enforcement of the UAPA. It also covers key lessons, the latest developments, and best practices for compliance officers.
9/11 Funding Trail
The 9/11 attacks were funded through both the formal financial system and informal value transfer systems (hawala and donations). Al-Qaeda used charities and hawala. The 9/11 Commission Report (National Commission on Terrorist Attacks Upon the United States, 2004) states that hawala and the like were used to move money rapidly across borders with little documentation. These informal systems made them difficult for regulators and law enforcement to track.
The 9/11 financing case is a textbook example of how a terrorist operation can be run on a very modest budget. Al-Qaeda's outlay was in the range of $400k-$500k, and the impact was enormous. The use of both official and informal channels exposed huge gaps in the ability to track money moving across borders. The response was tighter global AML/CFT rules and new legislation governing the activities of charities, hawalas, and correspondent banks. For the compliance officer, it is a clear reminder to watch small transactions and small anomalies, especially in high-risk jurisdictions or complex organisations.
ISIS and Cryptocurrency
Al-Qaeda mainly relied on traditional, informal networks, but ISIS moved to cryptocurrency for fundraising. According to the Europol cryptocurrency report, the Islamic State used Bitcoin and other virtual currencies for small donations, crowdfunding, and fundraising related to their propaganda (Europol, 2019). Cryptocurrencies gave ISIS supporters a way to send money across borders without going through the traditional banking system.
While ISIS has used crypto, its crypto fundraising has been relatively modest. Most of the ISIS crypto fundraising has been shut down by law enforcement in the past few years (US DOJ included). Blockchain analysis and co-operation between regulators and VASPs are key to reducing the risks of crypto's inherent anonymity and decentralisation. Compliance teams can use dedicated blockchain analysis platforms (Chainalysis, Elliptic, TRM Labs, for example) to trace crypto flows and spot the signs of illicit activity. These platforms can identify typologies including the use of mixers, chain hopping (switching from one token to another or from one blockchain to another), and layered structuring via multiple wallets. The compliance group should watch for red flags, including small donations to accounts on extremist sites, switching between tokens, and the use of mixers or privacy coins.
India's UAPA Enforcement
India's Unlawful Activities (Prevention) Act (UAPA) is the principal piece of legislation that provides the legal framework for preventing terrorism and tackling the financial crimes that accompany it. It enables the Government to ban terrorist organisations, declare certain organisations unlawful, and freeze the assets of those involved in terrorism. The NIA utilises the UAPA to investigate and prosecute those suspected of funding terrorism.
A very relevant example is Dawood Ibrahim's organisation, which is a UN-designated terrorist group and which used hawala to move funds both within India and overseas. The NIA found that over a period of four years the Ibrahim network moved an estimated ₹12-13 crore to fund terrorism in India (NIA, 2022). NGOs and civil society organisations have also been monitored under the UAPA, where there is suspicion that funds are being misused. Recent bans on organisations such as the PFI clearly indicate the government's intention to ensure compliance in the non-profit space.
The UAPA, along with the RBI's KYC rules and the FIU-IND reporting requirements, bolsters India's AML/CFT regime. Compliance folks should watch for front accounts, odd fund flows, and sudden spikes in NGO expenditure. In practice, real red flags include multiple cash deposits or withdrawals just below the reporting threshold; multiple accounts with the same signatories or contact details; transfers between NGOs with no apparent link to each other or to shell companies; and sudden spikes in donations from unknown sources. Transactions routed through high-risk jurisdictions, a mismatch between the charity's stated purpose and the actual flow of funds, and repeated use of similar descriptions for fund transfers are also potential indicators of suspicious activity. The key is to apply extra due diligence and monitor regularly to prevent legitimate financial channels from being exploited for terrorist purposes.
Comparative Analysis and Emerging Trends
These case studies point to several clear trends. Terrorist groups employ a wide variety of methods to fund their operations (informal networks, charities, cash, cryptocurrencies, etc.). Most funding is on a very small scale relative to the scale of the attacks, demonstrating the efficiency of these networks. Newer trends (particularly the use of cryptocurrency) mean financial institutions will need strong compliance regimes and tools such as blockchain analysis.
Regulators have responded to these risks. Post-9/11 AML/CFT rules have become much stricter worldwide, and regulators have introduced several new digital asset rules in recent years to reduce crypto risks. Several important regulatory developments have occurred in recent years, including the implementation of the FATF Travel Rule. This requires VASPs to collect and pass on the information of the sender and the recipient of a virtual asset in certain circumstances. Many jurisdictions now require VASP registration and licensing, which in turn creates a much tighter regulatory regime and compliance burden. India's UAPA (aligned with FATF guidance) is a good example of a national law that can address both old and new forms of financing. Compliance teams must keep risk management up to date, stay abreast of new requirements, and work with regulators and law enforcement to be effective.
Best Practices for Compliance Professionals
To combat the risk of terrorist financing, the compliance function needs to be multi-layered. You need to identify current gaps and prioritise your work based on risk and what you have available. A sensible approach is to start with the most robust due diligence and transaction monitoring for the highest-risk customers and transactions, then progressively roll out advanced training and information sharing. Set clear priorities and timelines for implementation so you can put best practice in place sustainably.
- Cost constraints: Due Diligence – carry out robust KYC and Customer Due Diligence (CDD), particularly for high-risk customers, charities, and cross-border transactions.
- Transaction Monitoring – use your state-of-the-art monitoring tools to look for the sorts of patterns that would suggest suspicious activity (e.g. structured payments, unusual crypto asset transactions).
- Cooperation and information exchange – remain in regular contact with regulators, FIUs and international partners.
- Training and Sensitisation – keep staff up to date on the latest trends, methods, and rules so they can spot and address potential threats.
By adopting these practices, financial institutions and regulators can more effectively protect themselves against new forms of terrorist financing.
Conclusion
Terrorist financing is evolving, combining the old ways (hawala, etc.) with the new (cryptocurrency). The 9/11 attacks constituted a stark demonstration of the damage that can be done through a small, well-structured financial network, and ISIS's use of virtual currency is a clear indication of the new risks. India's UAPA is a good example of how national legislation can work with international standards to address both traditional and new forms of financing. Compliance officers must stay alert, use technology, and work collaboratively to detect and prevent terrorist financing and support national security.