When Documents Can No Longer Be Trusted: Rebuilding AML/KYC in the Age of AI
Reseo Team
10th Dec 2025
In the latest episode of State of the Art, Reseo Co-Founders Pierre-Yves Rahari and Luuk Jacobs examine a challenge that is reshaping the foundations of financial crime prevention: the accelerating breakdown of trust in documents.
Across the investment industry, AML and KYC processes still rely heavily on documentation such as passports, certificates, corporate filings and identification records. Yet artificial intelligence is now making it possible to fabricate these documents with astonishing realism and at scale. As the lines between real and fake blur, the industry faces a fundamental question: what happens when the documents we have always relied on can no longer be trusted?
The Emerging Breakdown of Document Trust
AI now makes it possible to fabricate convincing corporate records, beneficial ownership structures, historic filings and identity documents, all with the appearance of legitimacy. What once required expertise and time is now achievable with readily available tools. The majority of companies remain genuine, but the small percentage of sophisticated falsifications represents a systemic vulnerability.
The implication is profound: Traditional document-driven verification no longer provides the assurance it once did. Email exchanges, PDFs and notarised copies aren’t inherently reliable when the underlying content can be artificially generated or manipulated at scale.
Why the Old Model No Longer Works
The challenge is not simply the documents themselves, but the process behind them. Most AML/KYC workflows remain dependent on information submitted by the investor, creating a single point of failure. Manual reviews are done; however, it is harder to distinguish between genuine documentation and high-quality AI-generated forgeries.
This makes a structural shift unavoidable. Verification must increasingly rely on independently sourced, authoritative data rather than investor-supplied documents. Corporate registries, supervisory bodies and tax authorities offer information tied to regulatory oversight and embedded governance, which provides more durable assurance than documents alone. While no single source is perfect, combining multiple trusted datasets makes falsification significantly harder to sustain.
AI as Part of the Solution
Although AI is a driver of the threat, it is also essential to the defence. Used responsibly, AI can compare information across jurisdictions, flag inconsistencies, detect anomalies in company structures and maintain continuously updated profiles of clients. This opens the door to perpetual compliance, a dynamic model that replaces the current cycle of onboarding followed by years-long gaps before the next review.
Corporate structures and ownership can change dramatically in months. AI-enabled monitoring of independently sourced data means AML/KYC no longer has to lag behind real-world developments.
The Case for Interoperability and Collective Defence
A further weakness in today’s environment is fragmentation. Administrators, transfer agents and asset managers each conduct their own AML/KYC checks, often without visibility into decisions made elsewhere. Fraudsters exploit these gaps.
The industry needs a more interconnected ecosystem, where systems are interoperable and trusted data can be exchanged securely, and through consent, remain GDPR compliant. This does not mean a single shared utility, but rather a collaborative architecture that allows risk signals and verified information to flow between platforms, reducing duplication and strengthening the collective defence against financial crime.
Learning From Other Sectors
Similar challenges have already been addressed in other industries, offering inspiration for financial services. In healthcare, AI models compare scans against thousands of other images to identify abnormalities. A technique that could be used to compare companies across peer groups to detect unusual patterns in structure or behaviour. In agriculture and food supply chains, tokenisation is used to trace products from origin to supermarket, creating tamper-resistant provenance records. The same principles could underpin future approaches to tracking corporate identity and document provenance in financial crime prevention, including their incorporation into blockchain-based systems.
These analogies highlight a broader truth: the technologies needed to rebuild trust already exist. The challenge lies in adapting them to an AML/KYC context.
What Firms Should Do Now
The evolving threat landscape requires boards and executive teams to take a more active stance. Protecting the firm from fraud, money laundering and regulatory exposure is not simply a matter of enhancing checklists. It demands a change in mindset and architecture.
Four priorities emerge clearly:
- Shift from document-driven to data-driven verification using independently sourced, authoritative information.
- Move toward perpetual compliance, replacing episodic reviews with continuous monitoring of client profiles.
- Digitise and simplify AML/KYC processes to reduce friction while strengthening defences.
- Collaborate across the ecosystem, developing a collective defence that prevents bad actors from exploiting gaps between firms.
The collapse of document trust is not an isolated threat; it is a systemic one. The firms that respond early with a modern data foundation, smarter technology and collaborative architectures will be best positioned to maintain trust in a world where fraud is increasingly automated.
Click here to listen to the full recording regarding this article.
