AML & Compliance Glossary: Key Terms, Frameworks, and Red Flags

What is Anti-Money Laundering?

Anti-Money Laundering (AML) refers to the laws, regulations, and procedures designed to prevent criminals from disguising illegally obtained funds as legitimate income. Money laundering is the process of making large amounts of money generated by criminal activity — drug trafficking, terrorism funding, fraud, tax evasion — appear to come from a legitimate source.

The global AML regulatory framework is built on recommendations from the Financial Action Task Force (FATF), an intergovernmental body that sets international standards. These standards are implemented through national laws such as the Bank Secrecy Act (BSA) and USA PATRIOT Act in the US, the EU Anti-Money Laundering Directives, and the Proceeds of Crime Act in the UK.

The Three Stages of Money Laundering

• Placement: Introducing illegal funds into the financial system. Examples: depositing cash in small amounts below reporting thresholds (structuring/smurfing), purchasing monetary instruments, or using cash-intensive businesses as fronts.
• Layering: Separating the money from its illicit source through complex financial transactions. Examples: wire transfers between multiple accounts and jurisdictions, trading in financial instruments, converting currency, or moving money through shell companies.
• Integration: Making the laundered money appear legitimate by reintroducing it into the economy. Examples: purchasing real estate, luxury assets, or legitimate businesses; investing in securities or retirement accounts.

Key Regulatory Bodies and Frameworks

Core AML Concepts

KYC (Know Your Customer)

The process of verifying a customer's identity, assessing their risk profile, and understanding the nature of their business. KYC is the first line of defense in AML compliance. It includes customer identification programs (CIP), customer due diligence (CDD), and enhanced due diligence (EDD) for high-risk customers.

CDD / EDD

Customer Due Diligence involves collecting and verifying customer information. Enhanced Due Diligence applies to high-risk customers (PEPs, customers from high-risk jurisdictions) and requires additional information, senior management approval, and increased monitoring frequency.

SAR (Suspicious Activity Report)

A confidential report filed by financial institutions to FinCEN when they detect suspicious transactions. SARs include details about the suspicious activity, parties involved, and the basis for suspicion. In the US, SARs must be filed within 30 days of detecting suspicious activity.

PEP (Politically Exposed Person)

An individual who holds a prominent public position, or their close associates. PEPs are considered higher risk for corruption and bribery. Financial institutions must apply EDD for PEPs and their family members.

Beneficial Ownership

The natural person(s) who ultimately own or control a legal entity. Identifying beneficial owners is critical because shell companies and complex ownership structures are commonly used to conceal the true source of funds.

Sanctions Screening

The process of checking customer names and transactions against sanctions lists maintained by OFAC (US), UN, EU, and other authorities. Sanctions can target individuals, entities, countries, or sectors.

Transaction Monitoring

The ongoing surveillance of customer transactions to detect unusual patterns or activity that may indicate money laundering or terrorist financing. Monitoring systems use rules and statistical models to generate alerts for review.

Red Flags and Indicators

• Structuring: Multiple cash deposits or withdrawals just below reporting thresholds ($10,000 in the US).
• Rapid Movement: Funds that move quickly through multiple accounts or jurisdictions without apparent business purpose.
• Unusual Transaction Patterns: Sudden spikes in transaction volume or value inconsistent with the customer's profile.
• High-Risk Jurisdictions: Transactions involving countries on FATF grey or black lists, or jurisdictions with weak AML controls.
• Round Dollar Amounts: Transactions in round numbers that suggest artificial structuring.
• Mismatched Business Activity: Transaction patterns that don't match the customer's stated business or occupation.
• Unexplained Third-Party Involvement: Transactions involving unrelated third parties without clear rationale.

AML Compliance Program Requirements

Financial institutions are required by law to maintain a risk-based AML compliance program with four minimum components:

1. Policies, Procedures, and Internal Controls: Written policies covering KYC/CDD/EDD, transaction monitoring, SAR filing, record keeping, and independent testing. These must be approved by senior management and reviewed annually.
2. Designated Compliance Officer: A qualified individual appointed to oversee day-to-day AML compliance operations. The compliance officer reports to the board of directors and has authority to challenge business decisions.
3. Ongoing Training Program: Regular training for all relevant employees on AML laws, red flags, reporting procedures, and emerging threats. Training must be tailored to different roles (tellers, relationship managers, compliance analysts).
4. Independent Audit: Periodic testing of the AML program by internal audit or an external qualified party. The audit assesses the effectiveness of controls, identifies gaps, and recommends improvements.