The UK’s New Fraud Strategy 2026-2029: What it means for financial crime and compliance

A practitioner’s perspective on the government’s most ambitious fraud response to date

Fraud is the largest crime type in the UK, accounting for 45% of all crime recorded in England and Wales, according to the UK Home Office. With losses reaching at least £14.4 billion in 2023-2024 and bank and credit account fraud rising 36% in just two years, the scale of the problem has forced the government’s hand. The result is the updated “Fraud Strategy 2026-2029 – Disrupting crime, supporting economic resilience and delivering justice”, published by the Home Office in March 2026, representing the most comprehensive and coordinated national fraud response the UK has produced.

This document is not one to file away. It has real operational and strategic implications for how banks, payment firms, and technology platforms are expected to detect, prevent and respond to fraud going forward.

How does this compare to the previous strategy?

The previous “UK Fraud Strategy: Stopping Scams and Protecting the Public“, which covered the period 2023 to 2025, laid important groundwork, establishing the 0300 phone number for fraud reporting, creating the National Fraud Squad, and setting ambitious targets to reduce fraud by 10% by 2025. It introduced the concept of shared responsibility between government and industry but stopped short of mandating sector-wide collaboration or investing significantly in shared intelligence infrastructure.

The 2026 Strategy marks a step change in ambition and accountability. Where the previous strategy focused on awareness and enforcement, the new one invests £250 million across three years in a system-wide approach: Disrupt, Safeguard and Respond. Critically, it moves from broad aspirations to concrete delivery milestones, with named institutions, committed funding, and time-bound actions. Industry is no longer an optional partner, it is an embedded participant in the national counter-fraud architecture.

The three pillars – Disrupt, Safeguard, Respond – what they mean in practice

Disrupt focuses on denying criminals access to the tools, infrastructure and financial channels they exploit. The centrepiece is the £31 million Online Crime Centre (OCC), launching April 2026, which brings together the NCA, GCHQ, the National Cyber Security Centre and private sector partners from finance, telecoms and technology for the first time under one coordinated structure. For financial crime teams, this signals a fundamental shift: intelligence sharing with law enforcement and other institutions is becoming a structural expectation, not a goodwill gesture.

Safeguard focuses on building resilience, both in individuals and in the systems criminals exploit. For institutions, this means greater scrutiny of how they protect vulnerable customers, monitor for exploitation, and deploy proactive controls rather than reactive ones.

Respond centres on victim support, reporting and justice. The new ‘Report Fraud’ service and the Fraud Victims Charter (from Q2 2027) will set minimum standards of care that financial services firms will be expected to meet. Reimbursement, communication and case handling processes will all face greater scrutiny.

The ‘so what’: Implications for banks, tech providers and telcos

The strategy is explicit that the financial services, technology and telecommunications sectors are co-owners of this problem. APP fraud, where 53% of reported cases in 2023 involved social media, messaging or call platforms, illustrates how the fraud chain now spans multiple industries simultaneously. No single institution can address it alone.

For banks and payment firms

The pressure to strengthen real-time fraud controls, share data proactively and demonstrate adaptive detection capabilities will intensify. Static, rules-based monitoring will increasingly be viewed as inadequate.

For technology software providers

The OCC creates a new intelligence architecture that fraud platforms will be expected to connect into, sharing typology data and threat signals in near real time. Static rule sets and infrequently updated models will not meet the detection standards this strategy demands. Providers must demonstrate adaptive detection, live intelligence ingestion and explainable outputs that satisfy both operational teams and regulators. The strategy’s endorsement of AI-driven fraud detection raises the bar for what ‘good’ looks like, and those who cannot evidence continuous model improvement will quickly fall behind regulatory expectations, incur more losses and negatively impact customer experiences.

For telecommunications companies

The strategy is unambiguous: telecoms infrastructure is a primary enabler of fraud at scale. SIM-swapping, spoofed numbers, smishing and VoIP abuse are all directly in scope. Telecoms providers will be expected to deploy network-level controls that identify and block fraudulent traffic upstream. They will also share criminal infrastructure signals with the OCC as a baseline obligation, not a voluntary gesture.

Perhaps most significantly, the strategy acknowledges something compliance professionals have long understood: criminals innovate faster than controls. Every defensive measure prompts a workaround. The use of generative AI, deepfakes and voice cloning by organised crime groups means that detection models built on historical patterns will decay rapidly. Institutions need to invest in adaptive, AI-driven fraud detection, not as an enhancement, but as a baseline.

Key takeaways for financial crime leaders

• Shared accountability is now structural, not voluntary. Participation in intelligence sharing with the OCC and law enforcement will become an expectation embedded in regulatory frameworks. Fraud and Compliance teams should begin mapping their data sharing readiness now.

• Static controls are a liability. The strategy explicitly recognises that criminals adapt faster than rules-based defences can respond. Investment in AI-driven, behavioural and adaptive fraud detection is now a compliance requirement.

• Victim experience is a regulated outcome. The Fraud Victims Charter will impose minimum standards of care across all sectors. Reimbursement processes, victim communication and case handling will face regulatory scrutiny in a way they have not previously.

• The strategy sets a new baseline for what fraud technology must deliver. Software platforms must demonstrate adaptive, AI-driven detection, live intelligence sharing and explainable outputs. Telecoms providers must invest in network-level fraud controls and contribute criminal infrastructure signals to the OCC. For both, integration into the national counter-fraud architecture is becoming a compliance expectation, not a commercial choice.

• The international dimension demands horizon scanning. Over two-thirds of fraud cases have an international element. Fraud and Compliance Analytics functions need to monitor typologies emerging from Southeast Asia, West Africa and Eastern Europe, where industrialised fraud networks are expanding rapidly.

The UK’s Fraud Strategy 2026-2029 is a signal of where regulatory expectations are heading. The institutions that treat it as a call to action, rather than a policy update to monitor, will be better positioned to meet what comes next. The window to get ahead of this is open. It will not stay that way for long.

Recent resources

Whitepaper: The New Financial Crime Ecosystem

Reinventing the compliance operating model

Agentic AI, Data, and Financial Crime Control