FATF Warns Digital Platforms Are Becoming a More Complex Terrorist Financing Channel

The Financial Action Task Force has issued a new warning on the misuse of social media, instant messaging applications and streaming platforms for terrorist financing, signalling that digital platforms are no longer only a propaganda or recruitment concern.

They are increasingly part of the financial infrastructure used to raise, move and obscure funds.

The new FATF publication, issued on 26 June 2026, focuses on how social media, messaging applications and streaming platforms are being abused to support terrorist financing activity. It builds on FATF’s wider work on terrorist financing risks, including its 2025 comprehensive update, and reflects a broader concern that digital ecosystems are developing faster than many national risk assessments, supervisory frameworks and reporting mechanisms.

From Communication Tools to Financial Ecosystems

FATF’s concern is that digital platforms have evolved far beyond simple communication channels. Social media, messaging and streaming platforms now combine global reach, encrypted communication, content monetisation, creator payments, embedded payment tools, virtual assets and links to third-party financial services.

That combination creates opportunities for abuse. According to FATF, terrorists and their supporters may misuse these platforms not only for fundraising, but also through fraudulent humanitarian or charitable crowdfunding campaigns, creator-economy features such as live-stream tipping, virtual asset fundraising using rotating wallets and QR codes, coded language, ephemeral content and commercial entities designed to obscure terrorist financing activity.

This is why the issue is becoming harder for both authorities and the private sector. A suspicious campaign may not appear as a traditional bank transaction at first glance. It may begin as a social media appeal, move into an encrypted chat, direct donors to a crowdfunding page, use a payment processor or virtual asset wallet, and then fragment funds across several channels. Each participant may see only part of the activity.

A Gap in National Risk Assessments

One of the most important findings highlighted by FATF is that fewer than 30% of reporting jurisdictions are covering terrorist financing risks through social media, messaging and streaming platforms in their national risk assessments. That is a major gap, because national risk assessments usually influence supervisory priorities, public-private cooperation, reporting expectations and resource allocation.

If these risks are not properly assessed at national level, banks, payment institutions, crowdfunding platforms, virtual asset service providers and technology companies may receive limited guidance on what typologies to monitor, what red flags matter and how information should be shared. The result is an uneven response to a threat that is inherently cross-border and platform-driven.

This concern is consistent with FATF’s 2025 comprehensive update on terrorist financing risks, which warned that terrorist financing methods are increasingly mixed, decentralised and adapted to local contexts. The 2025 report pointed to the use of cash, hawala-style networks, money or value transfer services, online payment services, formal financial services, digital platforms, virtual assets and legal entities as part of the modern terrorist financing landscape.

Crowdfunding Remains a Major Risk Area

The latest FATF work should also be read alongside its earlier report on crowdfunding for terrorist financing. FATF has previously noted that crowdfunding is overwhelmingly used for legitimate purposes, including charitable, creative and business projects, but can be exploited by terrorist groups and supporters seeking to reach large audiences and raise small-value contributions at scale.

The risk becomes more difficult where campaigns use vague humanitarian language, conflict-zone narratives, unclear beneficiaries or links to external social media pages containing extremist symbolism or rhetoric. FATF has also identified the use of social media and messaging apps to amplify crowdfunding appeals and move users toward specific fundraising channels. In some cases, crowdfunding may interact with virtual assets, privacy-enhancing tools or instructions to fragment payments across platforms.

This creates a practical challenge for compliance teams. A single donation may look low-risk in isolation. The wider pattern may only become suspicious when viewed alongside platform content, donor behaviour, beneficiary links, wallet addresses, repeated campaigns, geographic exposure or attempts to move contributors away from regulated payment rails.

The Creator Economy Adds Another Layer

The rise of creator monetisation has introduced new vulnerabilities. Live-streaming, tipping, paid subscriptions and platform-based monetisation tools allow individuals to receive funds from dispersed audiences quickly and with limited friction. These features are legitimate and form part of the modern digital economy, but FATF’s warning is that the same tools can be misused by terrorist financiers or extremist networks.

The problem is not necessarily the size of each payment. Terrorist financing often involves small sums, fragmented transfers and low-visibility activity. A platform may see tips or donations. A payment institution may see card or wallet transactions. A bank may see settlement flows. A virtual asset service provider may see wallet activity. Without cooperation, each actor may miss the broader picture.

This is why FATF is pushing for stronger coordination between the public sector, the formal financial sector and the technology industry. The 2026 publication specifically points to the need for improved detection and disruption through public-private cooperation, including engagement with financial institutions and tech companies.

Why Financial Institutions Should Care

This is not only a matter for social media companies. Banks, EMIs, payment processors, crowdfunding platforms, crypto firms and other regulated entities may all be exposed to parts of the transaction chain. A customer may be receiving funds from platform monetisation, sending payments to high-risk regions, operating a charitable campaign, using virtual asset wallets, or acting as an intermediary for a network that originated elsewhere online.

For AML and CFT teams, the risk is that monitoring remains too narrowly focused on traditional transaction indicators while the underlying activity has shifted into digital-platform ecosystems. Standard rules around geography, volume, velocity and counterparty risk remain relevant, but they may need to be combined with additional intelligence around campaign narratives, online presence, platform typologies, virtual asset indicators and links to designated persons or organisations.

This does not mean that every humanitarian campaign, crowdfunding appeal or creator account should be treated as suspicious. FATF repeatedly emphasises risk-based and proportionate measures. The challenge is to avoid both extremes: ignoring digital-platform risks because they sit outside traditional banking activity, or overreacting in a way that disrupts legitimate charitable, humanitarian or creator-economy activity.

FATF’s Broader Direction

The timing of the publication is also important. FATF’s June 2026 Plenary approved a series of new publications and initiatives designed to help countries respond to emerging risks and criminal methods, including the abuse of technological innovation and the need for stronger coordination with the private sector.

The new report therefore fits into FATF’s broader direction of travel: terrorist financing is becoming more digital, more fragmented and more dependent on hybrid methods. The risk is not confined to one sector. It moves between platforms, payment providers, virtual assets, legal entities and formal financial institutions.

For regulated firms, the practical takeaway is that terrorist financing risk assessments need to be updated to reflect how digital platforms are actually used. Policies and monitoring scenarios should account for crowdfunding, creator monetisation, virtual asset wallets, embedded payments, encrypted communications and cross-platform movement of funds.

Training should also move beyond traditional typologies and explain how small-value online activity can form part of a broader financing network.

FATF’s message is clear: digital platforms are now part of the terrorist financing risk environment. Countries and firms that do not assess that exposure properly may miss the very channels through which modern terrorist financing is increasingly being organised, disguised and moved.

By fLEXI tEAM