AML (Anti-Money Laundering)

AML, or Anti-Money Laundering, is the framework of laws, regulations, and internal controls financial institutions use to detect, prevent, and report the movement of illicitly obtained money through the financial system. 

What is AML (Anti-Money Laundering)?

Anti-Money Laundering refers to the full framework of laws, regulations, and internal controls financial institutions deploy to detect, prevent, and report attempts to disguise illegally obtained money by funneling it through legitimate financial channels. A functioning AML compliance program ties together several interlocking components. Customer Due Diligence (CDD) and Know Your Customer (KYC) procedures verify identity and assess risk at onboarding. Ongoing transaction monitoring flags suspicious patterns as they surface. Sanctions screening checks customers and transactions against government watchlists. And formal reporting obligations, such as filing a Suspicious Activity Report (SAR), kick in when a transaction pattern meets defined criteria. 

In the United States, the foundational legal framework traces back to the Bank Secrecy Act (BSA) and was substantially expanded by the USA PATRIOT Act. Internationally, similar frameworks operate under standards set by the Financial Action Task Force (FATF). Because money laundering techniques continually evolve, with criminals structuring transactions to dodge detection thresholds and using cryptocurrency and digital assets to obscure fund origins, AML compliance functions as an ongoing discipline rather than a one-time program. Detection methods and risk assessments have to keep pace as new laundering techniques emerge. 

Why it matters

Money laundering drains the global economy of an estimated $5.5 trillion annually. Financial institutions sit on the front line of the effort to detect and disrupt it, which is precisely why regulators treat AML compliance failures with some of the most severe enforcement penalties in financial services. 5 In 2025 alone, financial institutions worldwide paid $3.8 billion in AML, KYC, sanctions, and customer due diligence penalties.

Beyond direct fines, AML failures carry serious reputational and business consequences. Correspondent banks, regulators, and business partners increasingly scrutinize an institution's AML program strength when deciding whether to maintain or expand a relationship.

The operational challenge is clear: rule-based transaction monitoring systems generate an extremely high volume of false positive alerts. A program that flags transactions faster than investigators can meaningfully review them provides limited protection, no matter how rigorous it looks on paper. 6 Your compliance team handled 500 alerts last week. This week, a new rule pushed that to 2,000. Next week's projection is 3,500. Investigators are buried, deadlines are slipping, and regulators are watching. That's why strong banking and financial services operations treat investigation capacity as a core part of AML program design, not an afterthought.

How AML (Anti-Money Laundering) works

• Customer due diligence at onboarding: New customers undergo identity verification and risk assessment before an account relationship is established.
• Ongoing transaction monitoring: Account activity is continuously monitored for patterns inconsistent with the customer's expected behavior or profile. 7
• Sanctions and watchlist screening: Customers and transactions are screened against government sanctions lists and other relevant watchlists.
• Alert investigation: Flagged transactions are investigated by compliance analysts to determine whether they represent genuine suspicious activity or a false positive.
• Regulatory reporting: Confirmed suspicious activity is documented and reported to the appropriate regulatory authority through formal filings such as a SAR. 8

Regulatory and compliance considerations

AML regulation in the United States is anchored in the BSA, substantially expanded by the USA PATRIOT Act following the September 11 attacks, and enforced by agencies including the Financial Crimes Enforcement Network (FinCEN), the Federal Reserve, and state banking regulators. Parallel frameworks operate internationally under FATF standards. 9

Enforcement activity has shifted by region. Recent data shows a decline in U.S. penalty activity alongside a sharp increase in enforcement from European and Asia-Pacific regulators. This reflects a broader global effort to close gaps in financial crime oversight, not a reduction in the overall regulatory priority placed on AML compliance.

Regulators increasingly look beyond whether an AML program exists on paper. Examiners evaluate whether alerts are investigated thoroughly and consistently, whether the risk assessment methodology is current, and whether the institution can produce documented evidence of its compliance decisions during examination. A well-designed KYC and AML onboarding process supports that evidentiary standard by capturing consistent, auditable records from the first point of customer contact.

‍