Our financial crime and fraud controls are designed around this principle. We build and continuously evolve our own risk frameworks internally, defining how behaviour should be interpreted, when it should be escalated, how it should be reviewed and how outcomes should be resolved. Ownership of those decisions remains firmly with our teams.

The challenge is not defining these frameworks. It is applying them at scale, maintaining consistency across products and customers and refining them over time without creating unnecessary operational noise.

In our experience, this approach can be supported by tooling that enables consistent execution. One of the tools we use for this purpose is NOTO.

NOTO 360 Fraud & Compliance is the platform we use to operationalise our internally designed frameworks and embed them into everyday workflows.

It allows us to translate our risk logic into structured, reviewable monitoring logic and apply it consistently across transactional activity. More importantly, it enables teams to work with behavioural context rather than isolated signals, and to review outcomes in a controlled and auditable way as assumptions change.

NOTO provides structure and discipline without imposing a one-size-fits-all model. This means our teams spend their time exercising judgment and analysis, not managing tooling or process overhead.

Behaviour over transactions

A core part of our approach is behavioural transaction monitoring.

Rather than treating transactions as isolated events, we look at how behaviour evolves over time. Individual transactions may appear unremarkable on their own, but taken together they can represent a meaningful shift from a customer’s historical activity.

Using tools like NOTO, we are able to observe these developments over time, surface cases that warrant closer attention and provide reviewers with sufficient context to assess situations holistically. The added context helps reduce noise while ensuring genuinely unusual behaviour is handled consistently.

Risk controls are not static. They require regular review, testing and refinement as products, customers and external risk factors evolve.

NOTO supports this process by allowing us to review outcomes and adjust monitoring logic in a controlled manner, while ensuring accountability and final decision-making remain with our teams.

The result is clearer context, stronger human judgment and controls that scale alongside the business.

This reflects how we evaluate and use tools within real operational risk environments — prioritising disciplined execution over theoretical capability.