Regulators Are Using AI to Spot Non-Compliant Marketing. You Can’t Afford Not to Use It Either

Share
Nobody has to complain about your online content anymore. It used to be that advertising and marketing had a golden rule: your ad may attract the eye of a regulator only if a consumer complains about it. Somebody had to be sufficiently annoyed by your ad to fill in a form. Not anymore.
Regulators across advertising, financial services and consumer protection have spent the last two years building their own AI to go looking for bad ads and bad claims, and none of them are waiting for a complaint form to arrive. This isn’t one regulator having a moment with a new toy either. It’s the same pattern, appearing independently, across sectors and across borders, at roughly the same time.
From Spot Checks to Surveillance
The clearest picture of this shift sits inside the ASA’s 2025 annual report. Its Active Ad Monitoring system, AAM for short, scanned close to 60 million online ads last year, feeding 36 proactive regulatory projects covering gambling, weight-loss injections, alcohol, cosmetic surgery and green claims. Chief executive Guy Parker put a number on what that did to his own organisation: proactive work made up just 5% of the ASA’s regulatory resource in 2012. By the end of 2025 it was 45%. The regulator built the tool, then rebuilt itself around it.
The cool, or slightly scary, part is what it catches that no one would ever have complained about. Take the HealthExpress.co.uk ruling: a stock photo of an injection pen, on an ad for a weight-loss jab, treated as a reference to a prescription-only medicine even though the product itself was never named. No patient was ever going to complain about a photo.
The Alcohol Pulse Report found much the same pattern elsewhere: running large language models over nearly 6,000 paid alcohol ads, it flagged that 48% of the alcohol-free ones left out ABV information nobody had ever thought to report.
Then there are the sweeps that catch entire sectors in one pass. Eurowings and Qatar Airways both picked up near-identical carbon-offset rulings in the same week, and the ASA said outright that its own monitoring system was how it found them. Nike, Lacoste and Superdry were flagged by the same detection system over unqualified “sustainable” claims running through automated platforms like Google Performance Max, with no human sitting there hitting publish.
During the 2026 World Cup, the same system reviewed nearly 10,000 pieces of gambling-related content in four weeks and pulled 36 ads found to appeal too strongly to under-18s. Different sectors, different rules, same underlying engine.
It’s Not Confined to One Regulator or One Country
The same appetite for detection shows up well beyond Britain. In January 2026 the US Federal Trade Commission stood up a dedicated AI enforcement unit and, the same month, clarified a double disclosure rule for ads that mix paid endorsement with AI-generated content.
By May it had fined Cox Media Group and two smaller marketing firms $930,000 for dressing up ordinary email-list buying as an AI service that supposedly “listened” to customers’ phones to serve local ads. FTC enforcement actions rose 40% in 2025.
The FDA has moved the same way, scanning television, print and digital channels for the kind of claim drift that used to slip through a tired reviewer’s inbox. Meta has told advertisers outright that 2026 marks its own shift from reviewing ads after the fact to running every single one through an AI classifier before it earns a first impression.
For anyone in financial services, the closer example matters more. The FCA, ASA, Solicitors Regulation Authority and Information Commissioner’s Office are running a joint taskforce on misleading car finance claims adverts, and it has pulled or amended 1,200 of them since January 2024, 170 in June 2026 alone.
The Competition and Markets Authority in the UK has published its own guidance on AI agents making pricing and marketing decisions, making clear that the humans behind the algorithm carry the liability regardless of who wrote the copy. Add it up and it reads like the whole system being rebuilt around one assumption: the regulator sees the ad before you’d like it to.
What This Means for Your Compliance Function
A pre-launch sign-off from one busy compliance officer used to be enough, back when the odds of getting caught depended on a customer’s patience. Those odds have changed. If a regulator is scanning your sector continuously, at a rate of tens of millions of ads a year, the sensible response is to run the same kind of check on your own ads before the regulator does: screen every ad, landing page and influencer post against the actual rulebook the regulator applies, line by line, before any of it goes live.
Treat any sweep in your sector as a warning shot. When two competitors pick up near-identical rulings the same week, that’s a sector-wide probe, and anyone running similar copy should assume they’re already in the queue. Keep a record of what was checked and when. The FCA’s 2026 examination priorities already ask firms to show that AI-related claims were reviewed in practice, with evidence the review actually happened. A compliance team that can produce that trail is having a very different conversation with a regulator than one that can’t.
Conclusion
Hoping nobody noticed was always a gamble. What’s changed is who’s doing the noticing. The ASA scanned 60 million ads in 2025 and says it’s scaling further in 2026. The FTC has a dedicated unit built for exactly this. Compliance teams reviewing content before it goes live can’t just hope it’ll fly under the radar anymore.
The regulator is using AI for marketing compliance. You can’t afford not to either.
Karavel helps regulated firms review their ads quickly and confidently before they go live. If you would like to understand more about how our platform works, .
We’ve thought a lot about compliance, so you don’t have to.
View all
In Compliance, a Confident Guess Is the Most Dangerous Answer

CONC 3 Has Been a Museum Piece for Years. The FCA Finally Noticed

The FCA Just Cut SM&CR’s Certification List by 15%. Here Is the Question Nobody Is Asking

