What it means
Money laundering is the process of making the proceeds of crime look legitimate, usually described in three stages: placement, layering and integration. Cash enters the system, is moved through enough transactions to obscure its origin, and finally emerges as an apparently clean asset such as a property or a business.
AML rules target each stage by making anonymity and unexplained movement difficult. The backbone of any AML regime is customer due diligence, often called know your customer.
Firms must verify identity, understand the source of funds, and establish who ultimately owns and controls a corporate client. Higher risk customers, such as those connected to sanctioned jurisdictions or holding prominent public positions, trigger enhanced checks.
Ongoing monitoring matters as much as the checks at onboarding. Systems flag patterns such as payments split just below reporting thresholds, sudden activity in a long dormant account, or funds routed through countries with no obvious business connection.
Flagged cases go to a nominated officer who decides whether to file a suspicious activity report. Getting this wrong is expensive.
Regulators issue substantial fines, licences can be suspended, and senior managers can be personally sanctioned, while the reputational damage often outlasts the penalty itself. Tipping off a customer that they are under investigation is a criminal offence in most jurisdictions, which is why staff are told never to explain a delay in those terms.
For non-finance staff the practical impact is friction that can feel excessive but is not optional. Onboarding a new client may take days because of ownership checks, and a large or unusual payment can be held while it is reviewed.
Understanding why the checks exist makes the conversation with the customer far easier to handle. A risk-based approach is now the international norm.
Rather than treating every client identically, firms are expected to document their own risk assessment and apply proportionate checks, so a small local supplier and an offshore holding structure receive very different levels of scrutiny.
In practice
Real-world examples.
Example
An estate agency is offered a $1,400,000 house purchase funded by transfers from four separate overseas accounts held in different names. The agency's nominated officer files a suspicious activity report and pauses the transaction rather than completing and asking questions afterwards.
Example
An accountancy firm onboards a new client whose company is owned by two holding companies in different countries. Establishing the beneficial owner takes three weeks, and the firm declines the engagement when the client refuses to identify the individual behind the second layer.
Example
A payments business notices a merchant whose average transaction jumps from $40 to $9,000 within a fortnight with no change in the stated business model. The account is frozen pending review, and the case is escalated to the money laundering reporting officer the same day.
Think of it
“AML is the abbreviation for anti-money laundering-stopping dirty money.
Case study
Seen in the real world.
The following is an illustrative and clearly fictional scenario. Meridian Bridge Payments, an invented cross-border payments provider, grew from 400 to 9,000 business customers in two years while its compliance team stayed at three people. Onboarding checks were reduced to an automated identity match because sales argued that any delay would lose customers to faster competitors.
A routine regulatory visit found that around 15% of the fictional firm's higher risk customers had no recorded source of funds and that alerts from the monitoring system had gone unreviewed for weeks. Meridian was ordered to stop taking on new customers until the backlog was cleared, which took seven months and cost far more in lost growth than proper staffing would have cost.
The illustrative lesson is about sequencing rather than intent. Meridian was not laundering money, but it had allowed customer growth to outpace the controls, and the regulator treated weak oversight as a failure in its own right regardless of whether any criminal money had actually moved.
Watch out
Common mistakes.
- Assuming AML rules apply only to banks, when accountants, lawyers, property agents, high value dealers and crypto firms are all within scope in most jurisdictions.
- Treating customer due diligence as a one-off task at onboarding rather than something that must be refreshed as a relationship and its risk profile change.
- Explaining a delay by telling the customer their payment has been reported, which can amount to the criminal offence of tipping off.
Questions
People also ask.
What does know your customer actually involve?
Verifying identity with reliable documents or data, understanding the nature and purpose of the relationship, and identifying the real individuals who own or control a corporate client.
Who is responsible for AML inside a firm?
Senior management owns the framework and a nominated officer receives internal reports and decides what to escalate, but every member of staff has a duty to raise concerns.
Is a suspicious activity report an accusation?
No, it is a report of a reasonable suspicion passed to the authorities, and the firm is not expected to prove that a crime has taken place.
From the founder's library
Take it further with the book.
Build your financial confidence beyond this definition. Shihan's full-length guide, Accounting Fundamentals, takes the same plain-English approach and turns it into a complete, practical playbook for non-finance managers, business owners and students - with chapter-end quiz answers and presentation slides included.
25% off with code MMHQ25, applied at checkout. Priced in USD - checkout may show the equivalent in your local currency.
View the book and save 25%Related