Anti-Money Laundering
Anti-money laundering (AML) laws are regulations requiring financial institutions to detect and report suspicious financial activity that might indicate money laundering, terrorism financing, or other financial crimes. Enacted in nearly every jurisdiction, AML laws impose Know Your Customer (KYC) requirements, suspicious activity reporting, and customer monitoring on banks, brokers, casinos, and other regulated entities. The goal is to starve criminals of the ability to hide proceeds and finance terrorism.
AML is global regulation. The US enforces it through the Bank Secrecy Act and OFAC sanctions. International standards are set by FATF.
Money laundering and the three stages
Money laundering is the process of converting illegally obtained money (“dirty money”) into seemingly legitimate funds. It typically has three stages:
- Placement — introducing dirty cash into the financial system (depositing at banks, converting to wire transfers)
- Layering — moving money through multiple transactions and jurisdictions to obscure origin
- Integration — reintroducing the money into the economy as seemingly legitimate (buying real estate, investing in businesses)
AML laws target each stage. Banks are trained to recognize placement (unusual large cash deposits). Regulators monitor for layering (patterns of rapid transfers). Investigators trace integration (following proceeds into legitimate investments).
Know Your Customer and suspicious activity reporting
The core of AML is KYC — financial institutions must verify customer identity and understand their financial profile. For each transaction, institutions must assess: is this transaction consistent with the customer’s profile? If not, it is suspicious.
Suspicious activity (a transaction that deviates from the customer’s norms, lacks economic rationale, or suggests illegality) must be reported to FinCEN (in the US) via a Suspicious Activity Report (SAR). Banks file millions of SARs annually; law enforcement uses them to investigate crimes.
Bank Secrecy Act and OFAC
In the US, the Bank Secrecy Act (1970) is the primary AML statute. It requires:
- Reporting of cash transactions over $10,000 (Currency Transaction Reports, CTRs)
- Reporting of suspicious activity (SARs)
- Maintaining records of financial transactions
The Office of Foreign Assets Control (OFAC) administers economic sanctions, prohibiting transactions with designated foreign entities (terrorists, drug traffickers, hostile governments). Banks must screen customers and transactions against OFAC lists.
Violations of AML laws can result in substantial fines. In 2020, Deutsche Bank paid $150 million for AML compliance failures. In 2019, Wells Fargo paid $3 billion. Large fines incentivize serious compliance.
Enhanced due diligence for high-risk customers
For customers who pose higher risks — politically exposed persons (PEPs), customers in high-risk jurisdictions, cash-intensive businesses — institutions conduct enhanced due diligence (EDD). EDD involves more investigation, documentation, and ongoing monitoring.
A bank lending to a PEP (a politician or family member) must investigate the source of the politician’s wealth, verify that it is legitimate, and monitor for suspicious activity. If a PEP’s funds suddenly spike in volume, the bank may file an SAR.
International cooperation and FATF
AML is a global regime. The Financial Action Task Force (FATF), a 39-member intergovernmental organization, sets international AML standards. FATF conducts mutual evaluations of countries, assessing their AML/KYC implementation.
Countries that fail FATF evaluations face reputational damage and potential exclusion from the global financial system. The FATF “grey list” (countries with strategic AML deficiencies) leads to enhanced scrutiny. The “black list” (non-cooperative jurisdictions) results in isolation.
Technology and FinTech challenges
Traditional AML relies on rule-based systems: if a transaction meets certain criteria (size, frequency, jurisdiction), it is flagged. But criminals adapt. Modern AML increasingly uses machine learning to detect patterns invisible to rule-based systems.
However, cryptocurrencies and decentralized finance present new challenges. Crypto transactions are pseudonymous and hard to trace. Regulators are pushing for “travel rule” — requiring crypto exchanges to collect KYC on sender and receiver, like banks do for wire transfers. Implementation is ongoing.
Criticism: over-inclusive and financial exclusion
AML has been criticized for being over-inclusive, causing “false positive” reports that waste investigator time. It is also blamed for financial exclusion — banks avoid customers from high-risk jurisdictions or industries, excluding legitimate businesses (remittance services, non-profits, etc.) from the financial system.
Defenders argue the costs are justified — AML is a key tool against terrorism financing and organized crime.
See also
Closely related
- Know Your Customer — core AML requirement
- Customer due diligence — process of gathering information
- Suspicious activity report — filed by institutions
- Bank Secrecy Act — primary US statute
- FinCEN — US agency administering AML
Wider context
- Money laundering — what AML targets
- Terrorism financing — AML prevents
- Financial crime — broader category
- OFAC sanctions — overlaps with AML