{"schema_version":"0.10.0","id":"LR-2026-0783","record_version":1,"title":"EU bank AML algorithms flag minority names in 61.8% of alerts","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":43.1,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":0.0,"completeness":2.88,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"1 report: Tech Times · subject to change","original_document":null,"reports_total":1,"reports_independent":1,"reports_derivative":0,"developing":true,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"preliminary","reason":"1 report: Tech Times · subject to change"}]},"sources_hash":"9ee0b46ede109caccdd480c9746d13bdf0239a1c4bad366229ddd4c51b07f80d"},"system":{"model_name":null,"model_version":null,"developer":"unknown","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":null,"safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-03-11","incident_class":"bias_disparate_impact","failure_class":null,"agent_involved":null,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"unknown","summary":"The subject is bank anti-money-laundering screening in the Netherlands, where suspicious-activity reports are produced for customers. A Netherlands Court of Audit review published March 11, 2026 examined 217 such reports and found 61.8% involved a person with a foreign-sounding surname, an overrepresentation the court said could not be explained by any documented risk factor. The same review found mosques questioned more often than Catholic and Protestant institutions. In mid-2024 the Netherlands Institute for Human Rights ruled against ING after customers' transactions were repeatedly blocked or delayed. The sources do not state that an algorithm produced the audited reports, nor a root cause. In May 2026 the Dutch State Commission against Discrimination and Racism called for a halt to data-driven profiling for fraud and crime detection. The EU anti-money-laundering authority is finalising screening guidelines expected in Q4 2026.","tags":[],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":null,"adversarial_actor":null,"input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":null,"precursor_events":null,"primary_risk":"RK16"},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"moderate","harm_class":["discriminatory"],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":[],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://www.techtimes.com/articles/329123/20261016/eu-banks-aml-algorithms-flag-minority-names-618-alerts-audit-finds.htm","publisher":"Tech Times","date":"2026-10-16","type":"press","title":"EU Banks’ AML Algorithms Flag Minority Names in 61.8% of Alerts, Audit Finds - Tech Times","archived_url":null,"attachment":"first_report","independence":"independent"}],"per_field_confidence":{"event.incident_class":"C","event.date_disclosed":"C","impact.harm_class":"C","context.country":"C","context.industry":"C","impact.severity":"D","event.primary_risk":"D","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.trigger":"D","event.detection_method":"D","system.developer":"D","context.denominator_available":"D"},"field_citations":{"event.incident_class":[{"source_index":0,"quote":"Of 217 suspicious-activity reports the auditors examined, 61.8% involved a person with a foreign-sounding surname — an overrepresentation the court said \"could not be explained\" by any documented risk factor and \"may be indicative of discrimination.\""}],"event.date_disclosed":[{"source_index":0,"quote":"Yet a landmark Court of Audit review published March 11, 2026, by the Netherlands Court of Audit found that available information provided no meaningful insight into whether any of those expenditures actually detected money laundering."}],"impact.harm_class":[{"source_index":0,"quote":"In mid-2024, the Netherlands Institute for Human Rights ruled against ING after two customers discovered their transactions had been repeatedly blocked or delayed because their names did not sound Dutch."}],"context.country":[{"source_index":0,"quote":"a pattern a government audit has now confirmed in the Netherlands, where people with foreign-sounding surnames appeared in 61.8% of suspicious-transaction reports examined by national auditors."}],"context.industry":[{"source_index":0,"quote":"Dutch banks reported nearly 250,000 unusual transactions to the national Financial Intelligence Unit (FIU-NL) in 2020."}],"impact.severity":[{"source_index":0,"quote":"Of 217 suspicious-activity reports the auditors examined, 61.8% involved a person with a foreign-sounding surname — an overrepresentation the court said \"could not be explained\" by any documented risk factor and \"may be indicative of discrimination.\""}],"event.summary":[{"source_index":0,"quote":"Yet a landmark Court of Audit review published March 11, 2026, by the Netherlands Court of Audit found that available information provided no meaningful insight into whether any of those expenditures actually detected money laundering."},{"source_index":0,"quote":"Of 217 suspicious-activity reports the auditors examined, 61.8% involved a person with a foreign-sounding surname — an overrepresentation the court said \"could not be explained\" by any documented risk factor and \"may be indicative of discrimination.\""},{"source_index":0,"quote":"The same review found that mosques were questioned more often about the purpose and source of their transactions than the Catholic and Protestant institutions in the sample."},{"source_index":0,"quote":"In mid-2024, the Netherlands Institute for Human Rights ruled against ING after two customers discovered their transactions had been repeatedly blocked or delayed because their names did not sound Dutch."},{"source_index":0,"quote":"In May 2026, the Dutch State Commission against Discrimination and Racism called on the Dutch government to halt the use of data-driven profiling for fraud and crime detection, citing both the discrimination risk documented by the Court of Audit and the Court's finding that evidence of effectiveness was missing."}]},"notes_on_gaps":"Single source, a press article; the audit text it quotes is secondhand. The sources do not state that an algorithm or AI system produced the audited suspicious-activity reports; the headline's attribution to algorithms is not supported by the audit sentences, so no system, model, developer, deployment or agent fields are given and agent_involved, failure_class and trigger are left out. No date of occurrence is stated. No root cause is stated by a source; the article's proxy-variable explanation is Privacy First and commentary, so root_cause was left out. The 217-report sample is the only stated count; affected parties were not counted from the 61.8% figure. Severity judged moderate: data of others touched, with a bounded scope (217 reports) stated. Harm class discriminatory is taken from the ING ruling and audit finding. No control from this incident is stated as held, failed or missing, so links are empty. No remediation by a party is stated; AMLA guidelines and Privacy First requests are proposals, not changes made, so remediations are empty. The DNB fine on ABN AMRO and the Amnesty and State Commission items concern other matters and are included only as dated events in the timeline. The Dutch Banking Association acknowledgement and the Bank Policy Institute estimates were not included as values. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Preliminary (1 report: Tech Times · subject to change)]"},"context":{"industry":"banking","org_size_band":null,"country":"NL","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"doing","text":"Dutch banks filed large volumes of unusual-transaction reports with the national financial intelligence unit.","quote":"Dutch banks reported nearly 250,000 unusual transactions to the national Financial Intelligence Unit (FIU-NL) in 2020.","source_index":0,"grade":"C"},{"step":"went_wrong","text":"Reports examined showed a high share of people with foreign-sounding surnames that the court could not explain by documented risk factors.","quote":"Of 217 suspicious-activity reports the auditors examined, 61.8% involved a person with a foreign-sounding surname — an overrepresentation the court said \"could not be explained\" by any documented risk factor and \"may be indicative of discrimination.\"","source_index":0,"grade":"C"},{"step":"reached","text":"Two ING customers had transactions repeatedly blocked or delayed; the human rights institute ruled against the bank.","quote":"In mid-2024, the Netherlands Institute for Human Rights ruled against ING after two customers discovered their transactions had been repeatedly blocked or delayed because their names did not sound Dutch.","source_index":0,"grade":"C"},{"step":"caught","text":"A Netherlands Court of Audit review published the findings in March 2026.","quote":"Yet a landmark Court of Audit review published March 11, 2026, by the Netherlands Court of Audit found that available information provided no meaningful insight into whether any of those expenditures actually detected money laundering.","source_index":0,"grade":"C"}],"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://www.techtimes.com/articles/329123/20261016/eu-banks-aml-algorithms-flag-minority-names-618-alerts-audit-finds.htm"]},"analysis":{"sections":{"timeline":[{"text":"Dutch banks reported nearly 250,000 unusual transactions to FIU-NL.","quote":"Dutch banks reported nearly 250,000 unusual transactions to the national Financial Intelligence Unit (FIU-NL) in 2020.","source_index":0,"when":"2020"},{"text":"Reported unusual transactions had more than doubled to more than 530,000.","quote":"By 2024, that figure had more than doubled to more than 530,000.","source_index":0,"when":"2024"},{"text":"Netherlands Institute for Human Rights ruled against ING over repeated blocked or delayed transactions.","quote":"In mid-2024, the Netherlands Institute for Human Rights ruled against ING after two customers discovered their transactions had been repeatedly blocked or delayed because their names did not sound Dutch.","source_index":0,"when":"mid-2024"},{"text":"Dutch State Commission against Discrimination and Racism called for a halt to data-driven profiling.","quote":"In May 2026, the Dutch State Commission against Discrimination and Racism called on the Dutch government to halt the use of data-driven profiling for fraud and crime detection, citing both the discrimination risk documented by the Court of Audit and the Court's finding that evidence of effectiveness was missing.","source_index":0,"when":"May 2026"},{"text":"Amnesty International published Automating Suspicion on risk profiling systems.","quote":"Amnesty International's June 2026 Automating Suspicion report examined risk profiling systems across the Netherlands, France, Denmark, Sweden, and Australia, and concluded that such systems are incompatible with international human rights law.","source_index":0,"when":"June 2026"},{"text":"Privacy First submitted a consultation response to AMLA.","quote":"Privacy First, a Dutch civil liberties foundation, submitted a formal AMLA consultation response to AMLA on September 2, 2026.","source_index":0,"when":"September 2, 2026"},{"text":"AMLA expected to issue final guidelines.","quote":"AMLA will incorporate consultation feedback — from Privacy First, from Accountancy Europe, which also submitted a response on September 2, 2026, and from a range of financial-sector bodies — before issuing final guidelines expected in Q4 2026.","source_index":0,"when":"Q4 2026"},{"text":"The Anti-Money Laundering Regulation takes effect.","quote":"The AMLR itself takes effect July 10, 2027, leaving fewer than nine months after final guidelines are published for the entire EU financial and non-financial sector to align its compliance frameworks.","source_index":0,"when":"July 10, 2027"}]},"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://www.techtimes.com/articles/329123/20261016/eu-banks-aml-algorithms-flag-minority-names-618-alerts-audit-finds.htm"]}}