Underground Banking Networks Are Bigger Than Anyone Thought And Your Business Is in the Blast Radius

To understand the risks, consider why the Netherlands is a strategic hub for organized crime.

The Netherlands isn’t a passive victim of organized crime. It’s a strategic node in European criminal finance.

Rotterdam is Europe’s largest port. Schiphol is one of the continent’s busiest airports. The Dutch financial system is sophisticated, internationally connected, and deeply integrated with global trade flows. These strengths help legitimize a business. They also help criminal networks.

According to Dutch investigators, €13 billion in criminal proceeds is laundered in the Netherlands each year. The methods include issuing false invoices, making international transfers to less-regulated jurisdictions, and conducting illegal cryptocurrency conversions that require no personal details.

90% of the cocaine that enters the Netherlands is transited onwards to other countries. Criminals launder proceeds by buying cars, art, properties, and companies. They pay in cash, cryptocurrencies, through underground banking, or fraudulent financial transactions.

This threat isn’t hypothetical or distant. It’s happening right now in the same regulatory environment you operate in; act before your business is caught off-guard.

Understanding the mechanics is crucial. So, how does underground banking actually work?

Underground banking sounds abstract. The mechanism is simple.

A Dutch Research and Documentation Center (WODC) report found underground banking has evolved into what researchers call “version 2.0” in recent years. The rise is linked to the decline in cash use. This hawala-style system runs on trust. Cash doesn’t need to physically cross country borders.

Here’s the process:

Person A in the Netherlands wants to send money to Person B in another country. Instead of using a bank, Person A gives cash to an underground banker in Amsterdam. The underground banker contacts a counterpart in the destination country, who delivers the equivalent amount to Person B. No money crosses borders. No formal records exist. The system runs on trust between the bankers, who settle accounts periodically through trade invoicing, bulk cash shipments, or other methods.

This system stays invisible to regulators until it sparks a crisis that exposes everyone involved. Don’t be the business caught unaware when it breaks.

Why does this affect your business?

Dutch financial authorities, the Belastingdienst (tax authority) and De Nederlandsche Bank (central bank), are under pressure to detect these networks. The pressure translates into increased scrutiny of cash-intensive businesses, cross-border transactions, and payment patterns outside expected norms.

If your business handles significant cash, processes international payments, or operates in sectors historically associated with informal finance (hospitality, retail, trade services), you’re in the attention zone.

Underground banking operates with no formal records. Dutch authorities are increasing scrutiny of cash businesses, international transfers, and unusual payment patterns.

So, how have crypto reporting obligations changed your risk landscape?

Cryptocurrency isn’t anonymous. It’s traceable, reportable, and regulated.

Under DAC8 and CARF, crypto service providers established in the Netherlands must report transaction data to the Dutch Tax Administration. This data gets forwarded to EU Member States and third countries within nine months. The Dutch Tax Administration uses this data for regular tax supervision and taxpayer services to improve visibility into crypto holdings and help prevent tax evasion.

If you accept cryptocurrency payments, hold crypto assets, or use crypto for business transactions, those movements are now visible to tax authorities across multiple jurisdictions.

The UK-Netherlands dialogue specifically highlighted the need for enhanced, immediate cooperation on cryptocurrency tracing. This enforcement is operational now, not simply future planning.t This Means for Your Business

You need to treat crypto transactions with the same documentation discipline you apply to bank transfers. That means:

• Recording the business purpose of every crypto transaction
• Maintaining proof of the counterparty’s identity
• Converting crypto values to EUR at the time of transaction for accounting purposes
• Retaining transaction records for at least seven years (Dutch standard retention period)

If you can’t produce this documentation during a tax audit, the transaction becomes unexplained income. The Belastingdienst doesn’t need to prove it’s criminal. You need to prove it’s legitimate.

Crypto transactions are now reported automatically under DAC8 and CARF. Document every crypto transaction as you do with bank transfers to avoid penalties for unexplained income.

Another area of risk: What are DAC6 cross-border reporting obligations?

The Netherlands requires intermediaries and taxpayers to report aggressive cross-border tax arrangements to the Netherlands Tax Administration within 30 days. Failure to report risks a substantial fine. The DAC6 Directive has a retroactive effect. Past arrangements need disclosure.

This doesn’t target sophisticated tax planning by multinationals. The reporting threshold is broad enough to capture arrangements that many small business owners don’t consider aggressive.

If you have cross-border contracts with related parties, licensing arrangements shifting income between jurisdictions, or payment structures intended to reduce VAT or corporate tax, you have a reporting obligation.

The risk isn’t designing something illegal. The risk is not knowing you needed to report.

What this means: Immediate action is required. The Netherlands mandates reporting of aggressive cross-border tax arrangements within 30 days. The threshold is broad, the penalty for non-reporting is substantial, and retroactive rules mean past arrangements still require disclosure.

Alongside reporting obligations, how do criminal networks use legal business structures?

The Serious and Organized Crime Threat Assessment (SOCTA) of 2021 found that more than 80% of criminal groups use legal business structures in the EU. Another 60% are suspected of involvement with drug trafficking. The Netherlands is one of the main hubs for international drug-related crime.

This statistic should stop you in your tracks. The risk of unintentional involvement is high. React now, before someone else decides your fate. Minimal  networks don’t exclusively operate in the shadows. They operate inside the same corporate structures, banking systems, and supply chains you use. They register with the Kamer van Koophandel. They file VAT returns. They maintain business bank accounts.

The difference is in the controls.

Criminal networks exploit weak governance environments. They target businesses with informal approval processes, poor documentation discipline, and minimal separation of duties. They enter through supplier relationships, subcontractor arrangements, and payment processing channels.

The Mechanism You Need to Understand

Amsterdam investigators found that tourist shops were making large cash deposits into bank accounts, inconsistent with the turnover typical of tourism stores. The same shops were selling cocaine cutting agents, precision scales, and drug distribution equipment. Mayor Femke Halsema warned that “our economy will be inundated with criminal money and violence will reach an all-time high” if left unchecked.

The pattern is simple:

A legitimate business with weak controls becomes a cash processing point. Criminal money enters through inflated sales figures, fake invoices, or supplier payments. The business owner doesn’t even know if they’ve delegated financial supervision without installing verification controls.

By the time the pattern becomes visible to authorities, the business is compromised.

Criminal networks exploit weak governance and use legitimate corporate structures to process illicit funds. Business owners often remain unaware until authorities investigate and take action.

Given all this, what should expat entrepreneurs do right now?

I’m not suggesting you’re at risk of criminal infiltration because you run a small business in the Netherlands. The compliance environment is tightening because of the scale of the problem. Weak governance structures get caught in the enforcement net.

Here’s what reduces your exposure:

Install Separation of Duties in Financial Processes

No one person should approve, pay for, and record transactions. This is the most common control gap in micro businesses. It’s the easiest entry point for internal leakage or external manipulation.

If you’re a solo founder, use your accountant or bookkeeper as a second verification point. If you have staff, assign approval and payment authority to different people.

Document the Business Purpose of Every Material Transaction

Material means anything above €500. For every payment, maintain a record that explains:

• What you paid for
• Who you paid
• Why is the amount reasonable?
• What documentation verifies the transaction (invoice, contract, delivery confirmation)

This isn’t bureaucracy. This is proof of discipline. When authorities question a transaction, they don’t care about your memory. They care about your documentation.

Verify Supplier and Client Identities Before Onboarding

Check that your suppliers and clients are registered with the KvK. Verify the bank account you’re paying corresponds to the registered business name. If you’re dealing with a foreign entity, confirm that it’s registered in its home jurisdiction.

This takes 10 minutes per relationship. It prevents months of cleanup if the relationship turns out to be problematic.

Monitor Cash Movements and Reconcile Daily

If your business handles cash, reconcile daily. Every euro that enters or leaves the business should be traceable to a specific transaction with supporting documentation.

Cash businesses are under heightened examination because they’re the easiest channel for money laundering. If you can’t accurately explain your cash movements, you’re creating exposure.

Treat Crypto Transactions Like Bank Transfers

If you accept cryptocurrency, retain the same documentation standard you use for bank payments. Record the counterparty, the business purpose, the EUR value at the time of transaction, and retain proof for seven years.

Crypto reporting is now mandatory. Treating it as informal or experimental creates tax risk.

Review Cross-Border Arrangements for DAC6 Reporting Obligations

If you have contracts with related parties in other countries, licensing arrangements, or payment structures that shift income across borders, check whether you have a reporting obligation under DAC6.

The safe approach: consult a tax advisor who specializes in cross-border arrangements. The penalty for non-reporting is substantial. Retroactive disclosure obligations require past arrangements to be reported.

What Is the Real Risk for Small Businesses?

Most expat entrepreneurs don’t fail because they’re careless. They fail because they’re overloaded. They emphasize speed over structure.

You delegate financial supervision to someone you trust without installing verification controls. You accept cash payments without reconciling daily. You process crypto transactions without documentation. You onboard suppliers without checking their KvK registration.

Each option feels small. All decisions are rational under pressure.

But the system doesn’t care about your intentions. It cares about your controls.

When Dutch and UK authorities intensify cooperation on illicit finance, underground banking, and cryptocurrency tracing, they’re not targeting criminal masterminds exclusively. They’re targeting weak governance areas where criminal activity slips in undetected.

If your business has weak controls, you’re in the attention zone.

What this means: The real risk is structural drift. You favor speed over controls. Each informal decision seems small, but it creates exposure. Authorities target weak governance environments, not criminal intent. Weak controls put you in the attention zone.

How Serious Is the Netherlands About Financial Integrity?

The UK-Netherlands dialogue isn’t symbolic. Since the 2025 dialogue, the partnership has delivered multi-tonne cocaine seizures and greater strategic cooperation to counter illicit finance threats.

The upcoming UK Illicit Finance Summit will produce new EU-UK regulatory alignments. These alignments will affect compliance standards for firms operating across both jurisdictions.

For expat entrepreneurs from non-EU countries, this deepening security cooperation reinforces the importance of strict compliance with Dutch regulations. Information-sharing capabilities between authorities are expanding. Even minor differences in KvK registration, Belastingdienst reporting, or UWV employee documentation trigger scrutiny.

The environment is tightening. The question: Does your governance structure withstand the pressure?

What this means: The UK-Netherlands partnership is operational, not symbolic. New regulatory alignments are coming. Information-sharing between authorities is expanding. Minor differences in registration or reporting trigger scrutiny. Your governance structure needs to withstand this pressure.

Structure Is the Price of Freedom in Business

I’ve spent years analyzing how small businesses lose control. It’s rarely sudden. It’s rarely dramatic.

Control leaks through informal processes, undocumented decisions, and trust-reliant relationships, replacing verification. By the time the problem becomes visible, the damage is expensive.

The UK-Netherlands organized crime dialogue is a signal. The compliance environment in the Netherlands is intensifying. Financial authorities are under pressure to detect illicit finance. Weak governance structures will get caught in the enforcement net.

You can’t control the regulatory environment. You can control your governance structure.

Install separation of duties. Document transactions. Verify counterparties. Reconcile cash daily. Treat crypto like bank transfers. Check your DAC6 obligations.

These controls don’t slow you down. They protect you when pressure arrives.

Structure is not bureaucracy. It’s the framework that keeps you in control when the system starts asking questions.

Frequently Asked Questions

What is underground banking, and why should I care?

Underground banking is an informal system of money transfers outside formal financial institutions. Money never crosses borders physically. Instead, networks of trusted intermediaries settle accounts through trade invoicing or bulk cash. Dutch authorities are under pressure to detect these networks, meaning increased scrutiny of cash-intensive businesses and cross-border payments.

Do I need to report my crypto transactions in the Netherlands?

Yes. Under DAC8 and CARF, crypto service providers must report transaction data to the Dutch Tax Administration. The data gets forwarded to EU Member States and third countries within nine months. If you accept crypto payments or hold crypto assets, those movements are visible to tax authorities. Use the same documentation you use for bank transfers.

What makes a cross-border arrangement reportable under DAC6?

DAC6 requires reporting aggressive cross-border tax arrangements within 30 days. This includes contracts with related parties in other countries, licensing arrangements shifting income between jurisdictions, and payment structures to minimize VAT or corporate tax. The threshold is broad. Consult a tax advisor who specializes in cross-border arrangements to check your obligations.

How do criminal networks infiltrate legitimate businesses?

Criminal networks target businesses with weak controls. They exploit informal approval processes, poor documentation, and minimal separation of duties. They enter through supplier relationships, subcontractor arrangements, or payment channels. A business with weak controls becomes a cash processing point. The owner doesn’t know until authorities investigate.

What is the separation of duties, and why does it matter?

Separation of duties means that no single person should approve, pay for, and record transactions. This is the most common control gap in micro businesses. If you’re a solo founder, use your accountant or bookkeeper as a second verification point. If you have staff, assign approval and payment authority to different people. This prevents internal leakage and external manipulation.

What documentation do I need for business transactions?

For every transaction above €500, maintain a record explaining what you paid for, who you paid, why the amount is reasonable, and what documentation substantiates the transaction (invoice, contract, delivery confirmation). When authorities question a transaction, they care about your documentation, not your memory. This is proof of discipline, not bureaucracy.

How do I verify the identities of the supplier and the client?

Check that suppliers and clients are registered with the KvK (Chamber of Commerce). Verify the bank account you’re paying is consistent with the registered business name. If you’re dealing with a foreign entity, confirm that it’s registered in its home jurisdiction. This takes 10 minutes per relationship. Prevents months of cleanup if the relationship becomes problematic.

What happens if I can’t explain my cash movements?

Cash businesses are under greater scrutiny. They’re the easiest channel for money laundering. If you handle cash, reconcile daily. Every euro should be traceable to a specific transaction with supporting documentation. If you don’t accurately explain cash movements, you’re creating exposure to penalties and investigations.

Key Takeaways

• Dutch authorities track “>€13 billion in annual money laundering. Underground banking networks handle far more money than previously estimated, operating outside formal systems through trust-based networks.
• Crypto transactions are now reported automatically to tax authorities under DAC8 and CARF. Treat crypto with the same documentation discipline as bank transfers or face unexplained income penalties.
• 80% of criminal groups in the EU use legal business structures. They exploit weak governance, entering through supplier relationships and payment channels. Weak controls put your business in the attention zone.
• Cross-border arrangements must be reported under DAC6 within 30 days. The threshold is broad. Penalties for non-reporting are considerable. Past arrangements need disclosure because of retroactive rules.
• Implement separation of duties, document all material transactions, verify counterparties, reconcile cash daily, and check DAC6 obligations. These controls protect you when authorities ask questions.
• The UK-Netherlands partnership is intensifying enforcement. New regulatory alignments are coming. Information-sharing is expanding. Minor differences in registration or reporting trigger scrutiny.
• Structure is not bureaucracy. It’s the framework keeping you in control when pressure arrives. You can’t control the regulatory environment, but you control your governance structure.