A small Dutch wholesaler sends goods to a regular buyer. The money arrives on time, but the bank reference shows another company. Sales wants the stock released. Finance wants the debtor closed. At month-end, nobody wants to slow a clean order. Yet that simple scene now sits inside a tighter control environment.
FIU-Nederland’s 2025 annual overview, published on 17 June 2026, explains why. The unit received more than 3 million unusual transaction reports in 2025 and marked 92,000 transactions as suspicious. It singled out third-party payments, care fraud, straw persons, misuse of legal entities and crypto. In one analysis of third-party payments to Dutch companies, FIU-Nederland marked 2,000 transactions as suspicious, with a value of €300 million.
A suspicious designation is a financial-intelligence signal, not a conviction. The point is not that every odd payer is criminal. The point is that the company must be able to explain the gap between payer, customer, delivery and beneficiary.
The payer is now part of the story
Some third-party payments are routine. A group treasury settles central invoices. A platform pays a supplier after collecting customer money. A financier pays directly. The file becomes fragile when the names do not line up and nobody can explain why. Then the payment is no longer only cash movement. It becomes part of the proof chain.
That is the practical reading of the FIU signal. The question is whether the file can show who ordered, who was invoiced, who paid, who received the goods or service, and why the names differ. If those links are missing, the bank, payment provider or adviser will ask the same question later.
The clock is getting shorter
From 1 July 2026, article 17a Wwft gives FIU-Nederland power to ask a reporting entity to hold one or more transactions temporarily when the legal conditions apply. The normal period is up to five working days. When FIU acts for a foreign FIU, the period can run up to ten working days. The measure sits with reporting entities, mainly banks, payment providers and crypto service providers.
For a small business, the first sign may be simple. A booking lands late. A receipt arrives later than expected. A supplier call waits while the bank asks for support. FIU also says that 51 percent of the more than 3 million unusual reports in 2025 had no direct link with the Netherlands, and for payment service providers the figure was 90 percent. Dutch reporting can still travel through Dutch payment rails, even when buyer and seller sit elsewhere.
What a clean file needs
The answer begins with ordinary administration. The invoice, order, delivery proof, bank reference and customer record should tell one story. Belastingdienst invoice rules require legal names, addresses, VAT identification numbers where relevant, the KVK number where applicable, invoice date, invoice number, the goods or services, delivery or prepayment date, price excluding VAT, VAT rate and VAT amount. Those details explain the money.
Belastingdienst also warns that entrepreneurs can drift into VAT fraud and face deduction problems or a fraud investigation. Typical warning signs include unusually low prices, missing invoice essentials, short-lived counterparties, products outside the supplier’s sector and new businesses trading immediately in large values. In practice, the weak point is often not the invoice alone. It is the distance between the invoice and the work behind it.
UBO records matter in the same way. KVK says organisations must provide their own UBO information and report changes within one week after the change. From 1 April 2026, recognised Wwft and sanctions institutions gained wider digital access to certified UBO extracts through an API connection and kvk.nl. If the data is wrong, parties with Wwft duties must report it back to KVK.
Crypto deserves the same calm treatment. FIU-Nederland treats crypto as a tool in several criminal money-flow methods. AFM supervises crypto-asset service providers under MiCAR, and providers need a licence or notification from AFM or another European supervisor to offer services in the EU. That leaves route, counterparty, purpose and value as normal record items, not afterthoughts.
Pressure changes the weak spots
Market pressure makes weak files more likely. CBS reported entrepreneurial confidence at -14.8 at the start of the second quarter of 2026, the lowest level since late 2022, and profitability deteriorated on balance in the previous quarter. In a tight month, a fast payment can feel more valuable than a neat explanation, especially when stock is waiting or a large customer is impatient.
That pressure does not prove anything by itself. It does, however, widen the gap between commercial speed and clean support. FIU-Nederland’s care-fraud examples show how false invoices, tax avoidance and cash-paid labour can sit in one chain. The same pattern appears in ordinary trade when labour records, hours, subsidies, invoices and payments no longer match the work.
A cleaner answer on Monday morning
Rijksoverheid wants gatekeepers such as banks and notaries to focus more on high risks and less on low risks. DNB says the same in supervision: risk-based and proportional. Low-risk customers should not drown in needless checks. Real anomalies still deserve more than a bank feed and a friendly email.
For the wholesaler, the answer may be plain. The buyer belongs to a group, treasury pays centrally, and the order, contract and delivery proof support that explanation. Then the record should say so. If the payer is new, the price is unusual, the company is short-lived, the VAT data is thin or the goods do not fit the customer’s normal business, the payment needs more attention before it becomes routine.
The paid invoice is no longer the last page of the story. It is where the company’s records meet the outside world. The best answer is not suspicion everywhere. It is a plain, timely explanation when payer, customer, owner, delivery and benefit do not naturally line up.
If payer names, invoices or customer files are causing doubt, we can help turn them into a clear working file
The data, sourcing, and analysis behind this article were conducted by Paolo Maria Pavan. AI was not used to identify sources, build the factual basis, or produce the analytical judgment contained here. AI was used only as a drafting aid. The final English text was personally reviewed, edited, and approved by Paolo Maria Pavan before publication.
