Financial Crime Management Solutions

Forrester spent years telling financial institutions that treating fraud detection and anti-money-laundering as separate programs was a structural mistake. On 20 August 2026 it published the evaluation that makes the argument concrete: The Forrester Wave: Financial Crime Management Solutions, Q3 2026, the inaugural edition of a merged category, scored against fifteen providers.

The result is unusual for a first edition. Forrester named four Leaders and eleven Strong Performers, and placed no vendor in Contenders at all. There is no Challengers band. Every provider that made the cut landed in the top two tiers, which says as much about how the field was selected as about how the vendors performed.

The merge was announced, then scored

Forrester did not spring this on the market. Andras Cser's blog post of 11 March 2026 said the firm was consolidating its enterprise fraud management and anti-money-laundering research into a single stream and planned a Wave for the third quarter of 2026. The Financial Crime Management Solutions Landscape, published two days earlier on 9 March 2026, mapped more than forty providers without scoring them.

The Wave is the scored follow-through on that announcement, and it is the first time the two disciplines have been ranked against one shared set of criteria rather than in parallel tracks. The predecessor evaluations ran separately and on different schedules: an enterprise fraud management Wave covering Asia-Pacific in the fourth quarter of 2025, and an anti-money-laundering Wave in the second quarter of 2025.

That history matters for reading this edition, because a vendor's placement here is not directly comparable to the placement it held under either predecessor. The criteria changed when the categories merged, and some vendors that led one track have not led the combined one.

What the Q3 2026 Forrester Wave for Financial Crime Management Solutions measured

The evaluation carries eleven current-offering criteria. Most of them are the anti-money-laundering set from the second quarter of 2025 carried forward, which is a deliberate continuity choice: Forrester kept the criteria that had already been tested and added one.

The addition is a criterion called AI agent use in the solution, named publicly by DataVisor. Its presence in a financial crime evaluation is the clearest signal of what changed between the two predecessor Waves and this one. Agentic tooling moved from a differentiator that vendors mentioned to a scored capability that Forrester evaluates.

The analyst of record is Andras Cser. Forrester does not publicly name the three additional contributors to the report, so they are not named here.

Forrester states three drivers behind the merge. The first is that the lines between fraud and money laundering have blurred, so a transaction that looks like one may be the other. The second is economic: when the tooling is siloed, a vendor has to build and maintain two models instead of one, and agentic AI has made that duplication expensive rather than merely wasteful. The third is labor, since financial institutions cannot staff separate fraud and anti-money-laundering towers with the specialists each one needs.

Four Leaders, two of them brand new to the top

The Leaders are SAS, Sardine, Visa, and SymphonyAI.

SAS is the highest-scoring vendor in the report, with a current-offering score of 4.70 out of 5, top marks in nine of the eleven criteria, and the distinction of being the only provider with no below-par current-offering scores anywhere in the evaluation. That is a notable reversal: SAS placed as a Contender in the enterprise fraud management Wave for Asia-Pacific in the fourth quarter of 2025.

Sardine is the second new arrival. It has no appearance in either predecessor evaluation and entered this one directly as a Leader, which is the kind of result a first edition of a merged category makes possible and a long-running series rarely does.

Visa and SymphonyAI complete the Leader band. Both hold a single customer-feedback halo, meaning their own customers rate them above average on the measures the report uses.

SAS and Sardine each hold two halos, which earns both the Customer Favorite designation. That is the strongest combined signal in the report: a Leader placement and above-average customer sentiment at once, from the same vendor, on both counts.

NICE Actimize moved down and published nothing

The eleven Strong Performers are DataVisor, Oracle, NICE Actimize, Nasdaq Verafin, IMTF, ComplyAdvantage, Quantexa, LexisNexis Risk Solutions, Feedzai, Mastercard, and Fiserv.

NICE Actimize is the placement worth explaining. It was a Leader in both predecessor tracks, and it is a Strong Performer in the merged evaluation. That does not necessarily describe a decline in the product. A vendor can hold its position in two separate evaluations and place lower in a combined one when the criteria change and the comparison set widens to include competitors it was never ranked against before.

NICE Actimize has published no statement about this edition, so there is no vendor-side account of its result to weigh against the report.

Four names that appear in the wider market are absent from the roster entirely: FICO, Hawk AI, Tencent, and Ant Digital Technologies. Absence from a Wave can mean a vendor did not meet the inclusion criteria, declined to participate, or was evaluated without being plotted. The report does not rank them, so nothing about their standing can be inferred from this edition.

Fifteen providers, and nobody placed badly

Four Leaders and eleven Strong Performers out of fifteen evaluated providers is an unusual distribution. Most Waves place at least some vendors in Contenders, and a first edition of a merged category would ordinarily be expected to have a longer tail.

Two explanations are consistent with the report. The first is that the inclusion criteria for this edition were demanding enough to filter the field before it was scored, which is the more likely reading given that more than forty providers appeared in the unscored Landscape three months earlier and fifteen made it into the Wave. The second is that Forrester considers the financial crime tooling market to be one where the serious vendors are close together on capability and separated by strategy and scale.

Both readings point a buyer toward the same question, which is what the criteria were and whether they match the institution's own risk profile. A short Leader band means the difference between a Leader and a Strong Performer is a smaller gap than the labels suggest.

What the merge is actually for

The case for consolidation rests on three claims that Forrester makes and that are worth separating from the claims it does not make.

It does make the case that fraud and money laundering have converged, that duplicating models across two toolchains is wasteful when agentic AI raises the cost of each one, and that the labor market will not support two parallel analyst towers at most institutions. Those are cost and coverage arguments.

What the report does not argue is that the two functions have aligned incentives. Fraud teams and anti-money-laundering teams sit under different reporting lines at many institutions, answer to different regulators, and are measured on different outcomes, and nothing in the tooling consolidation changes which team owns which alert. A merged platform can remove duplicate data pipelines and duplicated model maintenance. It does not decide who is accountable when a transaction is flagged by one model and cleared by another.

That distinction is the one to hold on to when a vendor presents the merged category as a solved problem. The consolidation is real and the economics are real. The organizational question is outside the scope of what any Wave can score.

What to ask before you consolidate the two towers

Which criteria did you score well on, and which of those are ours? SAS led on nine of eleven criteria, which is not the same as leading on all eleven. Ask any shortlisted vendor which criteria it owns and whether those are the ones matching the institution's own exposure mix.

What changed when the tracks merged? A vendor that led a separate anti-money-laundering or enterprise fraud evaluation has not necessarily led the combined one. Ask what the merged criteria set moved, and treat a predecessor placement as history rather than evidence.

Where did the four absent vendors go? FICO, Hawk AI, Tencent, and Ant Digital Technologies do not appear. Ask whether they were evaluated and not plotted, or were not eligible, because the answer determines whether the shortlist you are working from is the whole market.

What does the customer feedback say separately from the placement? Two vendors hold both a halo and a Customer Favorite designation, and several hold neither. Ask for the halo status directly, since it comes from the vendor's own reference customers rather than from Forrester's scoring.

Will the merged platform actually reduce headcount, or only tooling? The labor argument behind this merge is about duplicate model maintenance and duplicate data pipelines. Ask what the vendor does about the two reporting lines, because that is where the operational cost usually survives consolidation.

Forrester does not endorse any vendor named here, and tier placement should not be read as a recommendation to buy.

This pairs closely with Open Banking Intermediaries, where two of the category's most prominent independent players are now owned by the card networks they were supposed to route around.