Financial crime rarely respects corporate structures.
The same individuals, businesses, intermediaries and organised-crime networks may target multiple organisations across the same industry. They may submit similar false invoices, exploit common supplier processes, use shared professional enablers or move between different levels of a supply chain.
Yet organisations frequently respond in isolation.
One business investigates a fraudulent supplier without knowing that the same supplier has already raised concerns elsewhere. Another identifies an insider threat but does not recognise the links to a wider network. A prime contractor strengthens its controls while fraudsters simply move downstream to a smaller and less mature supplier.
The threat is shared even where the businesses compete
Competitors may operate in the same market, pursue the same contracts and protect highly sensitive intellectual property. They may nevertheless face almost identical financial-crime threats.
Common risks include:
- Procurement fraud
- Bribery and corrupt influence
- False invoicing
- Mandate fraud
- Supplier impersonation
- Conflicts of interest
- Insider collusion
- Sanctions evasion
- Money laundering
- Fraudulent recruitment
- Theft of materials or intellectual property
- Manipulation of contract performance
- Cyber-enabled payment diversion
- Use of shell companies
- Falsified qualifications or security credentials
- Infiltration by organised-crime groups
Where organisations share suppliers, labour markets, technologies and contracting environments, weaknesses identified in one organisation may be highly relevant to another.
Sharing does not have to mean exchanging personal data
Effective collaboration can begin with information that does not identify individuals. Organisations can share:
- Emerging fraud typologies
- Anonymised case studies
- Common control weaknesses
- Suspicious approaches used by offenders
- Fraudulent document features
- Indicators of supplier manipulation
- Trends in attempted payment diversion
- Lessons from internal investigations
- Relevant legislative developments
- Effective prevention controls
- Training materials
- Anonymised data patterns
- Intelligence about systemic vulnerabilities
This allows participants to strengthen their own arrangements without exchanging sensitive commercial or personal information. Where identifiable information is necessary, the sharing must be supported by an appropriate legal basis, clear purpose and proportionate governance.
Data protection law is not an automatic barrier
Organisations sometimes assume that UK data-protection legislation prevents them from sharing information relating to suspected fraud. That is not correct.
The Information Commissioner’s Office states that the UK GDPR and Data Protection Act 2018 do not prevent organisations from sharing personal information where it is appropriate to do so or from taking steps to prevent harm. The ICO encourages organisations to share information for fraud prevention in a responsible, confident and compliant manner.
However, the ability to share data is not unrestricted. Organisations must consider:
- The purpose of the sharing
- The applicable lawful basis
- Necessity
- Proportionality
- Data minimisation
- Accuracy
- Security
- Transparency
- Retention
- Individual rights
- Additional conditions where criminal-offence data is involved
Knowledge sharing and data sharing require different governance
Industry collaboration should distinguish between general knowledge exchange and operational intelligence sharing.
Knowledge sharing
Non-personal information such as typologies, trends, controls and anonymised lessons. Generally lower risk, often conducted through industry forums, workshops and thematic reports.
Operational intelligence sharing
May involve identifiable individuals, companies, transactions, bank accounts or allegations. Requires stronger governance, defined thresholds, lawful bases, security arrangements and clear rules on use.
Formal referrals
Where there is evidence or suspicion of criminal conduct, information may need to be referred to law enforcement, regulators or contracting authorities. The disclosure framework should define when and how those referrals are made.
Competition law must remain central
A forum involving competitors must be structured carefully. Financial-crime cooperation should never be used as a vehicle for exchanging commercially sensitive information such as future pricing, customer allocation, bidding intentions, contract strategy or market-sharing arrangements.
Forums should have a clear financial-crime purpose, defined terms of reference and appropriately controlled agendas. Good governance may include:
- Independent chairing
- Pre-approved agendas
- Competition-law protocols
- Attendance records
- Meeting minutes
- Legal oversight
- Restrictions on commercially sensitive discussion
- Controlled circulation of outputs
- Mechanisms for stopping inappropriate discussion
Why supply-chain collaboration matters
Financial-crime resilience is often only as strong as the least mature organisation in the supply chain. Large organisations may operate sophisticated compliance, cyber-security and counter-fraud systems. Smaller suppliers may lack equivalent resources, specialist personnel or access to threat intelligence.
Offenders understand this imbalance. They may target subcontractors to gain access to larger payment systems, sensitive information, secure sites, materials and technology, customer credentials, prime-contractor relationships or legitimate supply-chain identities.
A threat introduced several tiers down the supply chain may create significant consequences for the entire ecosystem. Prime contractors and major customers should therefore consider how they can help suppliers strengthen their controls without merely transferring additional contractual obligations to them.
The defence sector: a particularly compelling case
The UK defence sector operates through an extensive and interconnected network of government bodies, major contractors, specialist manufacturers, technology businesses, consultants, logistics providers and smaller suppliers. The sector faces many of the same fraud and corruption risks as other industries, but with additional considerations relating to national security, classified information, export controls, sensitive technology, overseas intermediaries and security-cleared personnel.
Potential threats include:
- Corrupt procurement
- Collusive tendering
- False claims and invoices
- Manipulation of contract performance
- Conflicts of interest
- Insider-enabled fraud
- Theft or diversion of controlled materials
- Falsified security or professional credentials
- Sanctions and export-control evasion
- Misuse of subcontractors
- Cyber-enabled payment fraud
- Infiltration of suppliers
- Concealment of beneficial ownership
No single organisation can see the whole threat picture. A prime contractor may identify one part of a network. A specialist supplier may observe a suspicious approach. Another organisation may hold information about a related company, director, address or intermediary. When that knowledge remains separated, the wider pattern may go unnoticed.
The Verix Defence Industry Forum
Verix Advisory leads a defence industry forum designed to bring UK defence organisations and their supply chains together to strengthen the collective prevention of fraud and financial crime.
The Forum provides a structured and trusted environment in which participants can:
- Share emerging fraud and corruption typologies
- Identify common supply-chain vulnerabilities
- Discuss changes in legislation and regulation
- Exchange anonymised lessons from incidents and investigations
- Compare effective prevention and detection controls
- Strengthen supplier awareness
- Explore opportunities for lawful data collaboration
- Develop consistent reporting and escalation approaches
- Hear from government, law enforcement and industry specialists
- Build stronger professional relationships across the sector
What makes an effective industry forum?
A credible forum requires more than occasional meetings. It needs a clear operating framework.
Defined purpose
Participants understand what the forum is designed to achieve and what subjects are outside scope.
Trusted membership
Membership criteria ensure participants have a legitimate role and appropriate authority to contribute.
Appropriate classification
Information is categorised by sensitivity with clear rules for recording, retaining and sharing.
Legal and ethical governance
Data protection, competition law, confidentiality and national-security requirements built into the design.
Actionable outputs
Discussions result in practical alerts, guidance, training, risk indicators or control improvements.
Two-way engagement
Participants contribute as well as receive. Value increases as members share credible experience and insight.
Measurement
The forum assesses whether collaboration leads to stronger controls, improved reporting or prevented losses.
Moving from information exchange to collective prevention
Mature collaboration should progress through several stages, from basic awareness-sharing through to structured intelligence exchange and shared analytics.
Shared awareness
Exchange general trends, typologies and lessons
Common standards
Develop consistent approaches to due diligence and reporting
Coordinated prevention
Joint campaigns, thematic reviews and supply-chain exercises
Structured intelligence sharing
Defined indicators exchanged through controlled arrangements
Shared analytics
Privacy-preserving data matching and trusted analytical environments
The progression must be proportionate to the sensitivity of the sector and the maturity of participating organisations.
The value to organisations
Effective collaboration can help organisations identify threats earlier, recognise offenders operating across multiple businesses, strengthen supply-chain controls and reduce duplication of effort.
Further benefits include:
- Improved quality of risk assessments
- More relevant training
- Benchmarking of arrangements
- Accelerated response to emerging threats
- Demonstrated proactive compliance
- Stronger relationships with government and law enforcement
- Protection of the integrity and reputation of the wider industry
How Verix Advisory can help
Verix Advisory helps organisations and industries establish practical, lawful and trusted approaches to financial-crime collaboration.
Industry forum design and leadership
We establish and facilitate structured forums focused on shared fraud, bribery, corruption and economic-crime threats.
Terms of reference and governance
We develop membership criteria, decision rights, information-handling rules, competition-law safeguards and reporting arrangements.
Data-sharing frameworks
We help organisations define purposes, lawful bases, data categories, controls, security requirements, retention periods and accountability.
Threat and typology development
We turn participant experience, case information and external intelligence into practical alerts and risk indicators.
Supply-chain resilience reviews
We assess how financial-crime risks move through the supply chain and identify where suppliers require additional support or assurance.
Common control frameworks
We help participants create proportionate standards for due diligence, reporting, investigation cooperation, fraud-risk assessment and contract management.
Workshops and scenario exercises
We facilitate realistic cross-industry exercises involving fraud, bribery, insider threats, payment diversion and supplier compromise.
Analytics and data collaboration
We assess opportunities for lawful data matching, shared risk indicators and privacy-preserving analytical approaches.
Independent secretariat and assurance
We provide independent coordination, document decisions, track agreed actions and assess whether collaboration is producing meaningful outcomes.
Collective resilience is the next frontier
Fraudsters benefit when organisations remain divided. They exploit differences in controls, move between suppliers and reuse successful methods against multiple targets. Organisations that share knowledge responsibly can identify patterns that no single participant could see alone.
The future of effective financial-crime prevention will therefore depend not only on the strength of individual organisations, but also on the quality of collaboration across industries and supply chains.
This article provides general information and does not constitute legal advice. Organisations should obtain specialist advice before sharing personal, commercially sensitive, classified or criminal-offence information.
