Your Challenges

Manage financial crime and integrity risks before they escalate

From individual red flags to one integrated understanding of financial and economic crime risks, governance and enterprise risk

Exposure to financial crime risks rarely first arises at the moment when a regulator, financial institution or law enforcement agency begins to ask questions. The underlying developments usually begin much earlier: with an anomalous payment, an unexplained change in ultimate beneficial ownership, an unusual supplier, a commercial exception, a change in transaction behaviour, inadequately substantiated source of funds, an unusual invoicing pattern, a conflict of interest or a recurring deficiency in internal controls. Viewed in isolation, such signals may appear explicable or relatively limited. The risk increases when they are not assessed together.

A foreign intermediary may have been properly appointed under contract but, at the same time, receive a high commission, be connected to a politically exposed person, route payments through another jurisdiction and be unable to demonstrate sufficiently specific services. Procurement sees the contractual counterparty, finance sees the payment, tax sees the tax treatment, compliance sees PEP or sanctions risk, and legal sees the agreement. When each function considers only its own part, the interconnected risk picture may remain unseen. Van Leeuwen Law Firm therefore approaches this issue through Integrated Financial Crime Risk Management: fraud, money laundering, corruption, tax crime, sanctions circumvention, cyber-enabled financial crime, ultimate beneficial ownership and other integrity risks are connected to the commercial processes, data, transactions and management decisions in which they actually arise.

The aim is not to eliminate every conceivable risk, but to strengthen your organisation's ability to distinguish material financial and economic crime risks from ordinary operational deviations at an early stage. This requires a reliable integrated risk assessment, clear ownership of risks and an effective connection between the first, second and third lines of defence. The business must understand the risks arising from customers, transactions, products, geographic markets, distribution channels and third parties. Legal and compliance must do more than formulate policies: they must be capable of demonstrating effective challenge.

Finance and tax must be able to relate financial anomalies, tax positions and unusual structures to their integrity context. Data and technology must make patterns visible, safeguard data quality and make decision-relevant information available in time. Internal audit must independently assess whether the system actually works in practice. The board must then be able to recognise when several weak signals together constitute a material integrity concern.

Van Leeuwen Law Firm assists your organisation in forging these connections, so that Integrated Financial Crime Risk Management moves from reactive compliance towards enterprise intelligence, demonstrable control of financial and economic crime risks and defensible decision-making. Part of the value lies in ensuring that the first genuinely integrated assessment of your organisation is not ultimately made by a bank, regulator, auditor or law enforcement agency.

Strengthen governance, controls and executive accountability

Ensure that responsibility is not merely formally assigned, but demonstrably and verifiably exercised

Governance acquires its greatest legal and strategic significance when, under pressure, your organisation must be able to explain who knew what information, when that information was available, what warnings were given and why a particular decision was subsequently made. Formal governance charts, policy frameworks, mandates and committee structures are only the starting point. A company may have clearly defined responsibilities on paper while material information is, in practice, escalated too late. A compliance function may be formally independent yet lack sufficient authority to challenge a commercial decision effectively.

Internal audit may identify structural deficiencies without the board or management taking timely action on those findings. Risk committees may receive extensive reports while recurring exceptions, deteriorating controls or concentration risks remain insufficiently visible. When an incident subsequently arises, external scrutiny often shifts immediately from the original event to the surrounding governance and control framework. Was the problem already known?

What warnings existed? What remediation had been promised? Who authorised an exception? What information reached the board?

And was management information sufficiently reliable to permit an informed decision? Van Leeuwen Law Firm therefore treats governance as a demonstrable infrastructure for decision-making and accountability, without reducing decision-making to documentation alone. Board papers, committee minutes, risk acceptances, internal-audit findings, compliance escalations, management reports and decision logs may later demonstrate how directors and executives actually discharged their responsibilities. This becomes particularly important when corporate and individual exposure arise alongside one another.

The interests of your organisation and those of an individual director may initially align, but diverge once knowledge, oversight, individual involvement, delegated authority or management override of controls become subjects of investigation. Strong governance cannot prevent every incident. It can, however, demonstrate that risks were carefully identified, responsibilities were clear, genuine challenge took place, exceptions were assessed in a verifiable way and decisions were based on relevant information. Van Leeuwen Law Firm helps your organisation connect formal governance with its actual operation, so that decision-making remains manageable, reviewable and defensible before regulators, law enforcement agencies, auditors, lenders, shareholders, opposing parties and courts.

Respond to supervision, investigations and enforcement without losing control

Retain control when one set of facts may have criminal, regulatory, tax and administrative consequences simultaneously

A regulatory investigation, information request, inspection, dawn raid or criminal investigation immediately creates an asymmetry of information and power. The authority often determines the initial questions, possesses statutory powers and may already have received information from reports, supervision, financial intelligence, cooperation with other authorities or sources of which your organisation is not fully aware. The initial response is therefore often decisive for what follows. Statements made too quickly may subsequently prove difficult to correct.

Uncontrolled document production may omit relevant context. Internal communications about suspicions may be interpreted by external readers as conclusions of fact. Employees may give statements without a sufficient understanding of their own legal position. At the same time, a defensive, fragmented or uncoordinated response may undermine an authority's confidence.

The central issue is therefore not simply whether to cooperate or defend, but how procedural protection, factual accuracy, proportionate cooperation, legal professional privilege, information control and strategic oversight can be organised simultaneously. The challenge becomes greater when several authorities or proceedings arise from the same factual circumstances. A regulatory finding may become relevant to a criminal assessment; tax information may acquire significance in a fraud investigation; an internal investigation report may be requested or become part of civil litigation; remediation may build trust while also containing wording that is interpreted adversely elsewhere. Van Leeuwen Law Firm therefore works from a single central, verifiable basis of facts and evidence.

Your organisation must know which authority has which mandate, which information requests are outstanding, which deadlines apply, which procedural safeguards matter, what information may be protected by privilege or confidentiality and where corporate and individual interests may diverge. The factual foundation must remain consistent, even though legal positioning may differ from one set of proceedings to another. Van Leeuwen Law Firm assists with dawn raids, compulsory information requests, interviews, document production, regulatory engagement, parallel proceedings and the development of one coherent defence strategy, so that an enforcement response does not become a succession of isolated reactions but a controlled process in which your organisation retains its rights, credibility and decision-making room.

Manage sanctions, AML/CFT and cross-border integrity risks

Understand not only with whom your organisation does business, but who actually exercises control, where value ultimately flows and what cross-border risks lie behind a transaction

International transactions create a far more complex risk picture than the formal place of establishment of contracting parties might suggest. Your organisation may deal with a counterparty that is, in itself, permissible, while indirect ownership, control, intermediary structures, payment routing, end-use, ultimate beneficiaries or trade routes nevertheless create material sanctions or AML/CFT risk. A customer may appear transparent during onboarding but subsequently exhibit changes in ownership, transaction patterns or geographic exposure. A distributor in a third country may perform a legitimate commercial function but may also be used as a route for diversion or sanctions circumvention.

A payment may pass through several banks and jurisdictions and thereby simultaneously raise questions concerning money laundering, sanctions, corruption, tax crime and trade-based money laundering. Cross-border integrity risk therefore cannot be managed through name screening and periodic KYC alone. It requires a dynamic understanding of identity, ownership, control, behaviour, purpose, geography, goods, services and flows of funds. Van Leeuwen Law Firm places sanctions compliance and AML/CFT within the wider context of Integrated Financial Crime Risk Management, corporate investigations, regulatory enforcement and corporate criminal defence.

Customer due diligence must be connected to transaction monitoring; beneficial ownership information to sanctions analysis; payment flows to commercial rationale; PEP intelligence to corruption risk; and unusual trade routes to customs, fraud and circumvention indicators. When red flags become material, your organisation must be able to determine swiftly which intervention is proportionate and legally defensible: enhanced due diligence, restricting a transaction, legal analysis, an internal investigation, engagement with the financial intelligence unit, regulatory dialogue, contractual intervention or termination of a relationship. Cross-border matters also bring together different legal systems, regulators and law enforcement agencies, so that a single decision may have effects in several jurisdictions. Van Leeuwen Law Firm assists with ownership and control analysis, sanctions screening, AML/CFT, source of funds, source of wealth, trade controls and cross-border investigations, on the principle that your organisation must be able demonstrably to understand and explain the economic reality behind its international relationships.

Protect businesses, directors and professionals against criminal exposure

Build the defence before a suspicion, statement or investigative measure begins to define the legal position of your organisation or the people involved

Criminal exposure within a company rarely arises only at the point when the Public Prosecution Service formally identifies a criminal suspicion. The factual foundation for a future criminal case may be laid much earlier: in an internal report, a compliance review, an auditor's finding, an unusual transaction, a tax dispute, a regulatory investigation, an employment incident, a cyber investigation or correspondence with a bank or other institutional party. A payment may initially appear commercially questionable and later be investigated as possible fraud, bribery, forgery, money laundering or tax crime. A deficiency in a control framework may initially prompt remediation and subsequently become relevant to whether a legal entity can be held criminally liable.

A director who approved an exception under commercial pressure may later face questions about knowledge, involvement, supervision, de facto leadership or the handling of red flags. Corporate criminal defence therefore requires reconstruction of the full organisational context: who acted, under what mandate, with what information, within which controls, for what purpose, and what decisions followed once possible warnings became apparent? Van Leeuwen Law Firm approaches criminal exposure as an integrated matter of defence, evidence and governance. Your organisation must be able to respond to searches, seizures, interviews, demands for information and possible criminal characterisations without hasty internal conclusions or uncoordinated communications narrowing the available room for defence.

At the same time, decisions must be taken concerning employees, counterparties, business continuity, reporting, insurance, remediation and external communications. This requires central control over facts, documents, digital data, financial reconstruction, privilege and procedural strategy. In major white-collar cases, for example, a prosecution theory may be based on a selection of transactions that appear suspicious without their commercial context, while full reconstruction reveals a different economic rationale. An email may appear incriminating when read in isolation but acquire a different meaning within a broader chronology.

Conversely, a formally correct approval process may afford inadequate protection where evidence shows that relevant information was deliberately kept outside the process. Van Leeuwen Law Firm connects criminal law, forensic accounting, digital evidence, governance analysis and individual defence, enabling early identification of where corporate and individual interests diverge, which facts can actually be proved and which defence strategy is most sustainable in procedural and substantive terms.

Manage cyber, privacy, data and AI risks

Treat technology not merely as infrastructure, but as a source of risk, evidence, decision-making and executive accountability

Cyber, privacy, data and AI risks can no longer be treated as separate technical or legal subjects. Digital systems determine how your organisation communicates, executes transactions, accepts clients, classifies risks, supports employees, detects fraud and produces management information. A single technical vulnerability may consequently trigger several legal and operational chain reactions. A compromised mailbox can lead to business email compromise and payment fraud.

A stolen identity can be used for account takeover or to open financial relationships. Beyond business continuity, a ransomware incident may also give rise to extortion, crypto payments, sanctions questions, privacy exposure and evidence-preservation issues. A data breach may affect sensitive personal data while simultaneously demonstrating structural deficiencies in access rights, logging, vendor management or governance. AI and automated decision-making systems add further questions: models may influence decisions concerning customers, fraud, pricing, employment or compliance without directors always being able to see immediately which data, assumptions and thresholds determine the outcome.

Where technology participates in decision-making, human and executive accountability remains central. Van Leeuwen Law Firm brings together legal, privacy, cybersecurity, fraud, compliance, technology, data science and governance within one integrated assessment framework. During an incident, technical teams must be able to organise rapid containment without destroying relevant forensic evidence. Privacy analysis must establish which personal data have been affected, while investigators reconstruct who had access, which systems were manipulated and whether financial losses or unauthorised transactions occurred.

For AI and automated controls, it is necessary to assess the provenance and traceability of data, how models were tested, which limitations were known, how human overrides operate and whether material decisions can subsequently be reconstructed and explained. This concerns not only privacy and technology law, but also regulatory enforcement, financial and economic crime risk management, consumer protection, employment, contractual liability and executive accountability. Van Leeuwen Law Firm therefore assists your organisation through an integrated digital risk and evidence framework in which prevention, incident response, forensic investigation, data governance and executive accountability are interconnected. The objective is a demonstrable understanding of how digital systems affect risk, the evidential position, statutory obligations and decision-making.

Prevent and resolve complex disputes

Build a dispute strategy around facts, evidence, economic interests and procedural leverage, not legal arguments alone

Complex disputes are rarely determined solely by the legal characterisation of a contractual provision or statutory rule. The factual reality, quality of evidence, timing, financial exposure, available remedies and commercial interests often have at least as much bearing on which litigation strategy is rational. A shareholder dispute may turn on related-party transactions, directors' conduct and financial reporting. A commercial dispute may involve allegations of fraud, misrepresentation or manipulation of invoices.

A financing dispute may depend on customer due diligence, financial registrations or internal banking decisions. A project or construction dispute may require reconstruction of change orders, payments, schedules and technical documentation. A conflict that initially appears civil in nature may also produce regulatory, criminal, tax or reputational spillover. Van Leeuwen Law Firm therefore begins dispute strategy not by asking which proceedings can be commenced, but by identifying the outcome your organisation or you as a client actually need to achieve, the facts supporting that outcome, evidential risks, the practical value of remedies and the collateral effects of escalation.

Van Leeuwen Law Firm connects litigation with investigations, forensic analysis, negotiation and asset strategy. Relevant evidence must be identified and preserved early. Financial claims must be substantiated in a verifiable manner. Digital communications must be placed in context.

Where assets are at risk of dissipation, interim relief may be more important than a future final judgment. Where parallel criminal or regulatory proceedings exist, disclosure must be carefully coordinated. At the same time, litigation is not automatically the best ultimate objective. A strong litigation position may be necessary precisely to enable negotiation; mediation or settlement may create greater value where confidentiality, continuity, speed or commercial relationships matter more than precedent.

The central principle is strategic optionality: your organisation must know which routes are available, the evidential position associated with each route, the resulting costs and risks and the point at which escalation, negotiation or settlement adds value. Van Leeuwen Law Firm thereby turns complex litigation into an integrated process of building the factual record, legal analysis, commercial judgement, procedural strategy and controlled pressure.

Remediate deficiencies and transform governance and control frameworks

Use incidents and supervisory findings not simply to close findings, but to make the underlying organisation demonstrably stronger

Remediation begins where investigation, supervision or assurance shows that a problem cannot be explained solely by individual conduct. A control may exist but be insufficiently effective. A monitoring system may generate thousands of alerts without recognising material risk in time. Compliance may have developed detailed policy frameworks while ownership within the business remains insufficiently developed.

Internal audit may repeatedly report the same findings without clear follow-up at management level. Data may be technically available but insufficiently reliable for decision-making. In such circumstances, adding yet another policy or training module is of little value if the organisation does not investigate why the existing system failed to prevent, detect or escalate the risk in time. Root-cause analysis must therefore distinguish between design failure, implementation failure, operational failure, data deficiencies and governance deficiencies.

Was a control incorrectly designed? Was capacity or expertise lacking? Were responsibilities unclear? Was management information inadequate?

Were commercial exceptions routinely permitted? Were data incomplete or inconsistent? Or was there a culture in which effective challenge had insufficient influence? Only once the cause has been established with sufficient reliability can remediation amount to more than a cosmetic correction.

Integrated Financial Crime Risk Management and integrity transformation then go beyond closing individual findings. Governance, controls, data, technology, reporting, incentives, accountability and assurance must be assessed together. The first line must be able genuinely to discharge responsibilities that previously rested in practice with compliance. The second line must have sufficient authority, expertise and intelligence to provide effective challenge.

The third line must be able to perform independent validation rather than simply document that actions have formally been completed. Boards must receive less information by volume and sharper insight into recurring deficiencies, material exceptions and concentration risks. Data must make it possible to connect financial and economic crime risks across business units. Investigation findings must feed back into policy frameworks, controls, training and decision-making.

Van Leeuwen Law Firm assists your organisation with remediation that must be demonstrably effective in the eyes of regulators and other stakeholders. The ultimate objective is not administrative closure, but an organisation better able to recognise, control, investigate and account for future integrity and enforcement risks.

Protect financial rights, registrations and access to financial services

Protect your economic position where registrations, risk classifications and financial integrity decisions restrict access to essential financial services

Financial services are increasingly determined by risk classifications, automated alerts, fraud prevention, customer due diligence, internal warning systems and decisions concerning the acceptance, monitoring, restriction or termination of customer relationships. As a result, a registration, internal classification or integrity decision can have far-reaching consequences extending well beyond the original event. You or your organisation may face a BKR credit registration that makes financing more difficult, a fraud registration that affects future services, an internal or external referral that restricts access to banking products, an account restriction that obstructs ordinary business operations, or a customer risk classification that triggers enhanced due diligence, additional documentation or termination of the relationship. The legal issue is rarely confined to whether an institution had formal authority to enter a registration.

The accuracy of the underlying facts, proportionality, currency, necessity, duration, data quality, reasons given and concrete economic consequences may also be decisive. A technically correct registration may become disproportionate if insufficient account is taken of remediation, the passage of time or changed circumstances. Van Leeuwen Law Firm begins by reconstructing the factual basis of the financial decision. What event led to the registration or restriction?

What data were used? Was a distinction drawn between proven facts, suspicions and risk signals? What opportunities to be heard or to remedy the situation were offered? Were earlier payments, remedial measures, changed circumstances or explanations taken into account?

The next step is to determine which legal and strategic course is most effective: rectification or erasure of data, reassessment of proportionality, an objection to a risk classification, restoration of services, negotiation with a financial institution or, where necessary, procedural intervention. This does not overlook the legitimate role of banks and other institutions in fraud prevention, AML/CFT, sanctions compliance and Integrated Financial Crime Risk Management. That responsibility does not, however, relieve financial institutions of the obligation to make careful, factually substantiated and proportionate decisions. Van Leeuwen Law Firm combines factual reconstruction, privacy and data analysis, contractual position, proportionality and strategic communication to protect financial rights, reputation and access to essential financial services.

Protect individual legal positions against authorities, institutions and opposing parties

Make formal rights genuinely effective when information disadvantages, institutional power and personal consequences put your legal position under pressure

The real value of protecting individual legal rights becomes apparent when you face a party with substantially greater information, expertise, resources or decision-making power. This may be a public authority withdrawing a benefit, refusing a permit or taking enforcement action; a financial institution restricting services; an employer or institutional organisation conducting an integrity investigation; a landlord taking measures; a child protection organisation intervening in family life; or another professional counterparty capable of profoundly affecting your circumstances. A formal objection, appeal, defence or civil action may be available, but effective legal protection requires more than the existence of a legal remedy. You must be able to obtain access to the facts on which a decision rests, understand the legal standard being applied, have a sufficient opportunity to produce evidence and genuinely be able to correct inaccurate assumptions or one-sided information.

An administrative decision may appear legally correct even though essential facts were not investigated. An integrity measure may rely on internal information that you were never able to challenge. A family or child law decision may profoundly affect parental authority, contact or safety while reports contain conflicting information. A criminal suspicion may have immediate consequences for employment, reputation and family life while the evidential position remains uncertain.

Van Leeuwen Law Firm directs its strategy towards restoring legal and factual balance. This begins with identifying precisely the relevant decision, the power being exercised, the reasons given and the evidential basis. What information does the institution hold? What information is missing?

Which facts are presented as established although they are in dispute? Which deadlines, procedural safeguards and remedies are available? The next step is to identify which interests require immediate protection. Sometimes this concerns liberty or personal safety; sometimes income, housing, contact with family, privacy, access to credit or professional reputation.

In urgent circumstances, interim protection may be necessary before the substantive dispute can be fully litigated. In other situations, further development of the evidence is needed before formal proceedings are commenced. Van Leeuwen Law Firm brings together criminal defence, administrative-law protection, privacy, family and child law interests, social security and civil intervention on the same underlying principle: reducing information asymmetry, making decision-making reviewable and translating formal rights into practical protection for you as a client.

Embed lasting resilience, trust and enterprise value

Turn legal risk management and integrity into a lasting capability that strengthens trust, decision-making and long-term value

The highest form of legal and organisational resilience is not achieved when your organisation manages to handle each individual incident without visible damage, but when it becomes structurally better at recognising, connecting and controlling risks before external intervention becomes necessary. Financial crime, regulatory risk, cyber incidents, governance deficiencies, litigation and reputational issues may appear at first sight to belong to different categories, yet they are often shaped by the same underlying factors: poor data, fragmented responsibilities, inadequate challenge, unclear escalation, weak documentation, commercial pressure and the absence of one shared understanding of risk. Your organisation may have excellent policy frameworks and still remain vulnerable when actual business operations routinely diverge from them. It may use sophisticated monitoring and still miss material risks when signals remain dispersed across different systems.

It may investigate an incident carefully yet learn little if the findings are not translated into governance, controls, incentives and future decision-making. Sustainable resilience therefore requires a shift away from separate compliance and legal interventions towards one integrated organisational capability in which risk information, decision-making, investigation readiness, controls, assurance and remediation continuously reinforce one another. Within this theme, Van Leeuwen Law Firm focuses on connecting legal resilience with sustainable organisational value. A company that can reliably demonstrate who was responsible, what information was available, why a decision was taken and how relevant risks were monitored is better positioned before regulators, lenders, auditors, investors, business partners and courts.

A company that systematically converts findings into improvements can not only reduce enforcement exposure but also make decisions faster because responsibilities, escalation pathways and data requirements are clearer. Strong integrity governance can support transaction certainty, facilitate due diligence and increase confidence in management information. Within Integrated Financial Crime Risk Management, the three lines of defence are not optimised separately but connected by one consistent control logic: the first line assumes operational responsibility, the second line establishes standards and provides challenge, the third line provides independent assurance, and the board translates relevant information into accountable decision-making. Incidents, audits and investigations then become sources of intelligence through which your organisation continuously strengthens its financial and economic crime risk management and legal resilience.

In this way, institutional trust, legal resilience and sustainable enterprise value form part of the same strategic agenda.