Nasdaq Verafin Integrates Q6 Cyber Dark Web Intelligence Into AML and Fraud Platform

Nasdaq Verafin has partnered with Q6 Cyber to integrate dark web fraud intelligence directly into its fraud and anti-money laundering platform, giving banks and credit unions access to compromised-data signals inside the same workflow used for financial-crime investigations.

The partnership, announced on August 27, 2026, combines Q6 Cyber’s monitoring of dark web marketplaces, deep web forums and encrypted messaging channels with Nasdaq Verafin’s consortium transaction and counterparty intelligence. Q6 Cyber identifies threats including compromised checks, payment cards, online banking credentials and mule accounts, with the resulting intelligence surfaced to financial institutions as high-risk alerts in Verafin.

Dark web signals move into the existing investigation workflow

Nasdaq said its consortium network covers more than 2,800 financial institutions and over 850 million counterparties. Q6 Cyber, meanwhile, says it continuously monitors hundreds of thousands of underground sources. Over the past 18 months, the company collected more than 1.2 million compromised checks, 57 million unique compromised credentials and 158 million compromised payment cards.

The companies said the objective is to move fraud detection further upstream. In a proof-of-concept cited by Nasdaq, the average time between Q6 Cyber detecting a stolen check listing on the dark web and the first fraudulent check being returned was 10 days. The integration is intended to give financial institutions an earlier opportunity to protect accounts before the associated fraudulent transaction is attempted.

Nasdaq Verafin provides technology for fraud detection, AML/CFT compliance, high-risk customer management, sanctions screening and information sharing. Under the partnership, Q6 Cyber’s threat intelligence will become another risk signal available within those financial-crime workflows rather than operating as a separate intelligence feed.

For financial-crime teams, the practical significance is the convergence of pre-transaction cyber intelligence with transaction and counterparty monitoring. That can help investigators connect stolen credentials or payment instruments with subsequent account activity while keeping the alert and investigation process inside a single case workflow.