AML (Anti-Money Laundering)

What Is Anti-Money Laundering (AML)?

Anti-money laundering (AML) refers to the laws, regulations, internal policies and operational controls designed to stop criminals from making the proceeds of crime look legitimate. Money laundering is the process of disguising where money came from so it can be used without drawing attention to the underlying offense, whether that offense is drug trafficking, fraud, corruption, tax evasion or something else.

AML is usually discussed together with counter-terrorist financing (CFT). The two share most of the same tools, although terrorist financing can involve funds from legitimate sources, so the focus is on where money is going as much as where it came from. Many frameworks also cover proliferation financing and sanctions compliance under the same program.

The Three Stages of Money Laundering

A classic model describes laundering in three stages. Real cases rarely follow them neatly, but the model is a helpful way to think about where controls belong.

1. [Placement](/resources/knowledge-base/placement). Criminal proceeds, often cash, enter the financial system, for example through deposits, currency exchange or purchases of monetary instruments.
2. [Layering](/resources/knowledge-base/layering). Funds are moved through a series of transactions, accounts, companies or jurisdictions to break the audit trail.
3. [Integration](/resources/knowledge-base/integration). The money returns to the criminal in an apparently legitimate form, such as business revenue, loan repayments or property sales.

Why AML Matters

Money laundering allows crime to pay. By making it harder to use illicit funds, AML controls reduce the incentive for the underlying crimes and help law enforcement trace and confiscate assets. Laundering also distorts markets, undermines the integrity of financial institutions and can weaken public institutions where corruption is involved.

For firms, the stakes are direct. Weak AML controls can lead to regulatory enforcement, restrictions on business, loss of banking or correspondent relationships, reputational damage, and personal liability for senior managers and compliance officers in some jurisdictions.

The Elements of an AML Program

Although the detail differs by country and sector, most AML programs are built from the same components.

Governance and Risk Assessment

• A business-wide AML risk assessment covering customers, products, delivery channels and geographies.
• Written policies and procedures approved by senior management.
• A designated AML compliance officer or MLRO with enough authority and resources.

Customer Controls

• Customer due diligence: identifying and verifying customers and their beneficial owners, and understanding the purpose of the relationship.
• Enhanced due diligence for higher-risk customers, including PEPs and customers connected to high-risk jurisdictions.
• Sanctions and PEP screening at onboarding and on an ongoing basis.

Monitoring and Reporting

• Transaction monitoring to detect activity that does not fit the customer's profile.
• Investigation of alerts and filing of suspicious activity reports with the national Financial Intelligence Unit.
• Record keeping so that transactions and decisions can be reconstructed.

Assurance

• Staff training appropriate to each role.
• Independent testing or audit of the program.

Regulatory Expectations

The global standard setter is the Financial Action Task Force (FATF), an intergovernmental body established in 1989. Its Recommendations set out the measures countries should put in place, and its mutual evaluations assess how effectively they do so.

Regional and national rules implement those standards:

• European Union. A series of AML Directives, including Directive (EU) 2015/849 (AMLD4) and its amendments, has been joined by the AML Regulation (EU) 2024/1624, which sets directly applicable rules for obliged entities, and by a new EU Anti-Money Laundering Authority (AMLA).
• United States. The Bank Secrecy Act and its implementing regulations, administered by FinCEN, require financial institutions to maintain AML programs, keep records and file reports such as Suspicious Activity Reports and Currency Transaction Reports. Sanctions are administered separately by OFAC.
• United Kingdom. The Proceeds of Crime Act 2002 defines the main money laundering offenses, and the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 set out the preventive obligations for regulated firms.

Across all of these, regulators generally expect a risk-based approach: resources should be focused where the risk is highest, and the firm should be able to explain why its controls fit its own risk profile.

Common Challenges

• False positives. Screening and monitoring systems that are tuned too broadly flood analysts with alerts, while overly narrow rules miss real risk.
• Data quality. Incomplete or inconsistent customer data weakens every downstream control.
• Complex ownership. Layered corporate structures, nominees and offshore vehicles make it hard to identify who really controls a customer.
• New channels. Instant payments, virtual assets and embedded finance move money faster and across more parties, which shortens the time available to react.
• Explainability. Firms need to show supervisors why a system raised or cleared an alert, which is difficult with opaque models.

How on8.ai Helps

on8.ai supports the customer screening part of an AML program. SmartSanction screens people, companies, vessels, crypto wallets and addresses against sanctions, PEP and other risk sources, applies the OFAC 50 Percent Rule through its ownership graph, and explains each match. Pre-KYC checks add email, phone, IP and velocity signals before onboarding begins. Each customer runs on a dedicated deployment with no external LLM in the decision path.

Related Terms

• CFT (Combating the Financing of Terrorism)
• FATF (Financial Action Task Force)
• AMLD4 / AMLD5 / AMLD6
• KYC (Know Your Customer)
• Transaction Monitoring System (TMS)
• SAR (Suspicious Activity Report)