Not If, But When

Ask any compliance officer, fraud investigator or bank auditor what keeps them up at night, and the answer increasingly sounds the same: it is not the crime they already understand, it is the one that has not happened yet. Financial crime and cybercrime used to sit in separate departments, separate training budgets and separate reporting lines. That separation no longer reflects reality.

When two risks become one

A phishing email that steals login credentials is no longer just an IT problem. Once those credentials are used to redirect a SWIFT payment or manipulate a SEPA transfer, it becomes a financial crime problem too, with regulatory, legal and reputational consequences that land squarely on compliance and audit teams. Business email compromise, deepfake-enabled CEO fraud and AI-assisted account takeover are not hypothetical scenarios; they are the everyday material of fraud investigations across European financial institutions.

This is the gap that Frankfurt School's Certified Financial and Cybercrime Specialist (CFaCS) programme is built to close. Rather than treating cybersecurity and financial crime compliance as neighbouring disciplines, the course brings them together into one coherent framework, over five intensive days in Frankfurt am Main or live online.

Five modules, one continuous story

The programme moves through a clear arc rather than a loose collection of lectures. It opens with the convergence of cybersecurity and financial crime, then works through the digital ecosystem in which today's fraud actually happens, including payment fraud and the kind of CEO fraud cases that regularly make headlines. From there, participants move into AI-driven financial crime analytics, covering monitoring systems, machine learning in anti-money laundering, and the growing challenge of deepfakes. A module on compliance, regulation and cyber governance ties the technical material back to frameworks such as GDPR, DORA and FATF standards, and to the practicalities of filing suspicious activity reports within a three-lines-of-defence model.

The day everything goes wrong

The final module is where the course earns its keep. Day five is dedicated to crisis management: how to lead an organisation through the moment a breach actually happens, contain the financial and reputational damage, and turn an incident response into a demonstration of strategic competence rather than a scramble. As one participant, Jan Osenegg, Senior Consultant at Senior Advisory, put it in a testimonial for the programme: “The threat is real, and the question is not 'if' it will hit you, but 'when'. The difference between a controlled response and a costly one comes down to preparation made before the breach, not during it.”

That is a fair summary of what the CFaCS certificate is trying to instil: not just knowledge of the threats, but the judgement to act on them under pressure.

Who it is for and what it asks in return

The course is aimed at compliance professionals, AML specialists, risk managers, internal auditors and investigators, particularly those whose roles increasingly sit at the intersection of IT and regulatory functions. It rewards people who are willing to be honest about where their own knowledge has gaps: the cyber specialist who has never sat through an AML case study, or the compliance veteran who has never had to think like an attacker.

It is worth being upfront about what this asks of participants, too. Five days away from the desk, plus a final exam, is a real commitment of time and focus, and the certification carries a cost that needs weighing against its value to your specific role. For professionals whose work already touches both fraud and cyber risk, that trade-off tends to look favourable; for others, it is worth a conversation with your manager about where the gap in your team's coverage actually sits.

Before you go

If the convergence of financial and cybercrime is already part of your working reality, the Certified Financial and Cybercrime Specialist programme runs from 23 to 27 November 2026, with a discount available for registrations completed by 30 September. There is no need to decide today, but it might be worth having a look at the full curriculum before the early registration window closes.