Cybercrime is one of FinCEN's national AML/CFT priorities, and ransomware reaches financial institutions on both sides of the payment: customers who pay a ransom and accounts that receive it. The signals are usually in your data already, but a single red flag rarely tells the whole story. This session covers how ransomware payments move through banks, fintechs and crypto platforms, gives an overview of the Unit21 platform, and closes with a live demo of AI Agents turning one flagged account into a documented investigation. It's built for fraud and compliance professionals, and no prior Unit21 experience is required.