AML
Anti-Money Laundering — a framework of laws, regulations, and procedures designed to prevent criminals from disguising illegally obtained funds as legitimate income.
FAQs
What is the difference between AML and KYC?
KYC (Know Your Customer) is a component of AML — the customer identification and due diligence process at account opening that establishes who the customer is and their risk profile. AML encompasses the broader framework: KYC at onboarding, ongoing transaction monitoring, SAR filing, OFAC screening, record-keeping, and employee training. KYC is the 'who' of AML; AML is the full compliance system.
What triggers a Suspicious Activity Report (SAR)?
SARs are filed when a transaction involves funds from illegal activity, is designed to evade BSA requirements (structuring), has no lawful purpose, or involves a known or suspected money laundering pattern. Common triggers include: transactions just below reporting thresholds (structuring), unusual cash activity, transactions inconsistent with customer profile, and rapid movement of funds through accounts.
What AML obligations do fintech startups have?
It depends on the business model and regulatory classification. Money service businesses (MSBs), money transmitters, and companies that issue prepaid cards or handle customer funds are subject to full BSA/AML requirements. SaaS companies that are purely software providers without touching customer funds typically aren't directly regulated under BSA, though their financial institution partners' AML programs cover customer transactions.
Related Terms
KYC
Know Your Customer — the process of verifying the identity of customers and assessing their risk profile to prevent fraud, money laundering, and terrorist financing.
GDPR Compliance
Adherence to the EU's General Data Protection Regulation, governing how organizations collect, store, process, and transfer personal data of EU residents.
SOC 2
A security audit standard developed by the AICPA assessing a service company's data security, availability, processing integrity, confidentiality, and privacy controls.
Audit Trail
A chronological record of all user actions, system events, and data changes in a financial system, providing a traceable history for auditing and investigation.