Date: 28th April 2026
Compliance Institute’s recent survey on Financial Crime featured in extensive online and print media coverage including The Irish Times, The Irish Independent, IFSC and Sandyford.
Cybercrime remains the number one threat as Concern Surges – 51% Say it’s the No. 1 financial crime
Fraud Ranks Second Among Key Financial Crime Concerns
Cybercrime – including hacking, phishing, and online scams – continues to dominate as the leading financial crime threat in Ireland. Concern among compliance professionals has risen sharply, with 51% now ranking it as the top risk in 2026, up from 34% in 2023, maintaining its position as the most prevalent financial crime in Ireland. Fraud was identified as the second most prevalent threat (23%), followed by tax evasion (13%).
The Compliance Institute’s latest survey, which gathered insights from 150 compliance professionals nationwide primarily working within Irish financial services, asked participants to rank the most prevalent financial crimes in Ireland.
Michael Kavanagh, CEO of the Compliance Institute, commented on the findings,
“It is no surprise that cybercrime remains the number one financial crime concern among compliance professionals, with the proportion ranking it as the top threat rising sharply from 34% in 2023 to 51% in 2026. There’s an escalating concern across the sector, driven by the growing scale, frequency and sophistication of online criminal activity in recent years.
Unlike more traditional forms of financial crime, such as tax evasion or insider trading, the prevalence of cybercrime is constantly growing. Criminals are quick to take advantage of new technology, new ways of communicating and moments when people may be more vulnerable, making phishing scams, identity theft, ransomware and online fraud increasingly difficult to prevent.
As more people manage their finances online, whether for banking, pensions, insurance, or investments, cybercrime is now a serious financial risk for individuals and businesses. The consequences can be significant. People can suffer direct financial loss, have personal information stolen or face the stress and disruption of trying to regain control of their accounts. For businesses, cyberattacks can result in downtime, reputational damage and major recovery costs”.
News mention on RTE: https://api.ruepoint.com/links/broadcast/19362901
The Irish Times:
Irish Times - Irish financial firms see cyber attacks as biggest operational threat:
Irish financial services firms believe that cyber attacks or system outages represent the biggest threat to their operations in 2026 in the aftermath of several high-profile incidents in recent times.
However, the vast majority of companies believe they are at least reasonably well prepared to deal with an attack, a Compliance Institute survey of more than 150 experts working in financial services has found.
Survey respondents said that cyber attacks and outages are by far the biggest operational risk their firm faces this year, with some 60 per cent citing them as their top concern.
Regulatory changes are a distant second, with just 14 per cent citing this as their primary concern, followed by supply chain disruptions and staff shortages, each cited by 10 per cent of respondents.
Still, some 70 per cent of compliance experts said they were reasonably confident that their firm has plans to deal with incidents and address operational risk, while 17 per cent said they were very confident.
Michael Kavanagh, chief executive of the Compliance Institute, highlighted recent high-profile incidents involving companies such as Marks & Spencer and Jaguar Land Rover, which he said were “badly disrupted” by cyber attacks.
Last November, Marks & Spencer said it would take a £136 million (€154 million) hit to its annual profits due to the attack, which occurred in April 2025, leaving it unable to sell clothes and furniture online for seven weeks.
“Cyber attacks can have catastrophic consequences not just for those against whom they are perpetrated, but for the wider public,” Kavanagh said.
“We only have to look at the devastation that was caused to patients following the 2021 hacking of the HSE to understand the severity of the crimes.”
He said artificial intelligence tools are increasingly being used by cyber criminals to defraud people.
“Unfortunately, this means that the potential for damage from cyber attacks is rapidly increasing, something that compliance professionals in the financial services sector are acutely aware of,” Kavanagh said.
“So it’s incumbent on us all – consumers, businesses and regulators alike – to keep up to speed on, and to be in a position to withstand, the growing incidence and severity of cyber attacks.”
Separately, a recent survey from Vodafone found that 70 per cent of Irish SMEs were more worried about attacks on mobile devices than they were last year. Yet, more than 40 per cent still said they give full, unrestricted access to company resources on personal handsets – everything from email and apps to company documents.