![\"Heading](\"https:\/\/www.complycube.com\/wp-content\/uploads\/2026\/07\/alibaba-and-aus-pay-whopping-600m-for-selling-illicit-products-1024x577.png\")
<\/figure>\n\n\n\nThe items sold on Alibaba included illegal pharmaceuticals, controlled substances, and regulated chemicals. Under the Federal Food, Drug, and Cosmetic Act (FDCA) and other federal laws, the sale of these products is prohibited.<\/p>\n\n\n\n
The DOJ accused Alibaba and AUS, noting that their Anti-Money Laundering (AML) controls were weak and unable to fully prevent merchants from engaging in illegal activity. Moreover, despite multiple employees raising concerns about deficiencies in the company\u2019s identity verification and AML framework, Alibaba failed to act on them.<\/p>\n\n\n\n
Financial Crime in the Marketplace and Payments Industry<\/h2>\n\n\n\n
The rise of criminal activity in the marketplace and payments industry poses a huge risk to consumers, businesses, and financial systems. The global eCommerce market is projected to exceed $3.88 trillion<\/a> in 2026, accounting for 56% of global sales. With this, almost 3.2% of annual eCommerce revenue is lost to payment fraud globally.<\/p>\n\n\n\n 3.2%<\/a> of total annual eCommerce revenue is lost to payment fraud globally.<\/p>\n<\/blockquote>\n\n\n\n Despite the scale and convenience of these digital marketplaces, a portion of this revenue still leaks into criminal activity. Alibaba is one of the biggest marketplaces in the world, generating over $148 billion<\/a> at the end of its fiscal year in March 2026. At the outset, this is a large sum, however, it still highlights the small fraction of the vast marketplace economy.<\/p>\n\n\n\n Without active compliance, criminals use eCommerce<\/a> sites to carry on and profit from illicit activity.<\/p>\n<\/blockquote>\n\n\n\n The risks are not limited to just Alibaba or AUS. According to the 2026 Global eCommerce Payments & Fraud Report, 45% of merchants<\/a> say real-time payment fraud is a significant form of fraud attack. Additionally, 80% identify technological infrastructure as one of their biggest fraud challenge. This case was not only an eCommerce moderation challenge but also a failure in payments and AML controls, highlighting the dangers of fragmented monitoring.<\/p>\n\n\n\n Tysen Duva, the Assistant Attorney General of the Justice Department\u2019s Criminal Division, notes, \u201cWithout active compliance, criminals use eCommerce sites to carry on and profit from illicit activity.\u201d In this Alibaba and AUS case alone, over four enforcement bodies, including the Federal Deposit Insurance Corporation (FDIC) and the Internal Revenue Service Criminal Investigation (IRS-CI), were involved. Authorities are now treating platform-enabled illegal activity as a multi-agency issue, highlighting how quickly marketplace compliance failures can escalate into a coordinated federal matter. <\/p>\n\n\n\n Despite multiple warnings from internal employees, Alibaba and AUS had deep failures in their compliance infrastructure. From eCommerce moderation to identity verification and transaction monitoring, both firms failed to detect high-risk activity at every layer. <\/p>\n\n\n\n The penalty spoke for itself: Alibaba paid a criminal monetary penalty of $125 million and forfeited $200 million, while AUS agreed to pay a criminal monetary penalty of $85 million and forfeit $190 million. A strong prevention framework could have prevented these costly consequences:<\/p>\n\n\n\n Segment merchants by geography, product category, and transaction behavior. Ensure increased scrutiny of higher-risk merchants through beneficial ownership checks, source-of-funds verification, and more. You can learn more here: The Risk-Based Approach in AML.<\/a><\/p>\n\n\n\n Review products on an ongoing basis. Listings that include controlled or restricted items must automatically trigger re-screening, manual investigations, and senior management approval before products are listed again.<\/p>\n\n\n\n Perform AML screening on merchants and associated parties against sanctions, watchlist, Politically Exposed Persons (PEPs), and adverse media data sources. Run it on an ongoing basis to detect new risks. You can learn more here: Global Sanctions Check Guide.<\/a><\/p>\n\n\n\n Ensure that risk scoring, alert generation, and case management run continuously<\/a> throughout the entire customer lifecycle. This ensures that any merchant who displays suspicious patterns after onboarding will be identified early. <\/p>\n\n\n\n Continually review and test if existing controls can actually catch sophisticated prohibited listings, suspicious merchant behavior, and payment anomalies. All compliance decisions must be logged clearly and timely.<\/p>\n\n\n\n Marketplaces and payment processors alike must demonstrate end-to-end accountability from onboarding through post-sale monitoring. A layered friction model can make off-platform migration harder and easier to catch before dirty money moves. The cost of non-compliance cannot be overlooked, stay ahead, or risk million-dollar penalties and trust erosion.<\/p>\n\n\n\n\n
\n
What Should Have Happened Instead?<\/h2>\n\n\n\n
1. Risk-tiered merchant onboarding<\/strong><\/h3>\n\n\n\n
2. Product risk review<\/strong><\/h3>\n\n\n\n
3. Sanctions and watchlist screening<\/strong><\/h3>\n\n\n\n
4. Ongoing monitoring<\/strong><\/h3>\n\n\n\n
5. Control testing and internal audit<\/strong><\/h3>\n\n\n\n
![\"Fortify](\"https:\/\/www.complycube.com\/wp-content\/uploads\/2025\/04\/contact-complycube-award-winning-aml-and-kyc-1024x577.png\")
<\/a><\/figure>\n\n\n\n