25 Years After 9/11, Europe Still Has a Terrorist-Financing Blind Spot

• Two and a half decades of tougher AML rules have transformed Europe’s financial-crime controls—but terrorist financing remains difficult to detect because the money often looks ordinary.

Twenty-five years after the September 11 attacks forced the financial system to confront terrorist financing as a distinct threat, Europe has built a far more sophisticated framework for detecting illicit funds. Yet the central problem that exposed the hijackers’ financial activity before 9/11 has not disappeared: terrorist financing can look remarkably ordinary.

The lesson from 9/11 was uncomfortable. The attackers did not need vast sums or obviously suspicious transactions to execute a devastating operation. Their financial activity largely consisted of routine spending, including accommodation, food, travel and relatively modest withdrawals.

The 9/11 Commission found that no financial institution had filed a suspicious activity report in connection with the hijackers. In hindsight, the transactions appeared significant because investigators knew what they were looking for. At the time, however, the individual transactions largely resembled those of ordinary customers.

That remains one of the most difficult problems for European banks and financial-intelligence units.

Since 2001, banks have gained considerably stronger KYC, transaction monitoring, wire-transfer controls and information-sharing capabilities. Monitoring has also shifted from examining isolated payments towards identifying behavioural patterns and changes in customer activity.

But better technology does not automatically solve the intelligence problem.

A transaction may be perfectly legitimate when viewed alone while becoming suspicious when connected to other information held by another bank, financial institution or public authority. The challenge, therefore, is increasingly about connecting fragmented signals rather than simply detecting large or unusual payments.

Europe’s evolving AML architecture reflects this challenge. The creation of the Anti-Money Laundering Authority (AMLA) is intended to strengthen supervisory coordination across the bloc, while the EU’s new AML framework is pushing financial institutions towards more consistent and risk-based controls. Yet differences in national approaches and reporting practices remain an obstacle to fully integrated intelligence.

The danger is that compliance becomes increasingly sophisticated at identifying conventional financial-crime indicators while terrorist financiers adapt by remaining below those thresholds.

For banks, the post-9/11 lesson is therefore not simply to build more alerts. It is to develop better context.

That means understanding customers, networks, counterparties and behavioural changes well enough to recognise when individually unremarkable transactions form part of a much larger pattern.

Europe is far better equipped today than it was in 2001. But the fundamental terrorist-financing challenge remains the same: the money may not look dangerous until someone connects the dots.

And 25 years after 9/11, connecting those dots remains one of the financial system’s most important unfinished tasks.