What is AML (Anti-Money Laundering)?

AML refers to the legal framework, controls, and day-to-day processes that prevent dirty money from entering or moving through the financial system. To put it cleanly: know who you’re onboarding and working with, watch what they’re doing, and escalate when behavior becomes suspicious or crosses the line. Banks, neobanks, fintech wallets, brokers, gaming, crypto desks…same playbook, different risk knobs.

AML infrastructure and requirements are a global scaffolding. The FATF Recommendations. EU AMLDs and the U.S. BSA, PATRIOT Act, et cetera, plus local country transpositions. The theme is constant—risk-based. Controls are calibrated to exposure, not to subjective vibes. High risk has more friction; low risk still gets seatbelts.

Boiled down essentials, core components of an AML program, include:

• Risk assessment: products, geographies, customer types, delivery channels. Document it. Update it.
• CDD/KYC: identity verification, purpose understanding, segmentation by risk. Refresh on a schedule or on trigger.
• Ongoing monitoring: to identify unusual patterns and activity (high velocity spikes, layering tells, mule behavior, etc. )
• Screening: sanctions, PEPs and related parties both before onboarding and continually across the lifecycle (see sanctions & PEP screening)
• Adverse media to capture reputational/legal risk and flags early in the cycle
• Reporting: STR/SAR filings, audit trails and preservation of evidence
• Program governance, including policies, training, QA and an independent review function that has teeth

And what good looks like: low noise with high catch-rate, explainable decisions, fast analyst workflows, and feedback loops so confirmed cases tune rules and models to reduce false positives. Measure it—alert precision/recall, time-to-decision, escalation SLA, false-positive burn, regulator findings.

Where vendors can help: identity proofing, watchlist and media screening, transaction monitoring, case management and triage, and high-friction step-ups only where risk demands it. For a deeper dive into program design, essential controls, and operational playbooks see AML compliance resources specifically for regulated businesses.

Bottom line: AML isn’t about catching everything, it’s about catching the right things—consistently, defensibly, and on time.