Rethinking AML: A Call for Innovation and Efficiency

In the financial services sector, Anti-Money Laundering (AML) continues to be a topic of intense debate. Discussions oscillate between advocating for stricter regulations and questioning the extent of banks' responsibilities in overseeing (policing) financial transactions.

AML regulations are pivotal in preventing the use of financial institutions for facilitating crimes such as money laundering and terrorist financing. However, the effectiveness of these measures is often under scrutiny, especially considering their impact on legitimate customers and banks' financial models. Despite rigorous AML frameworks, a significant gap persists between their intended outcomes and actual results, i.e.

The United Nations estimates that around $2 trillion, equivalent to the GDP of a major economy like France, circulates annually through money laundering channels. Alarmingly the detection and interception rates are disconcertingly low, with only about 2% of this amount being detected, , and merely a fraction of that effectively halted. This highlights the shortcomings of current KYC and AML processes in addressing major financial crimes.
Legitimate customers face substantial repercussions due to the billions invested in compliance each year, which escalates costs for consumers and potentially excludes them from essential banking services. For instance, SMEs may face serious business disruptions due to blocked payments, migrants might struggle to provide the necessary identity proofs for KYC, and low-income consumers might be unfairly flagged as high-risk.
Dozens of financial institutions have already been fined for enormous amounts for non-compliance with KYC and AML procedures. In 2023 alone, several financial institutions, including Binance ($4 billion), Crown Resorts ($450 million), Deutsche Bank ($186 million) and Bank of Queensland ($50 million), were fined significant amounts for non-compliance with KYC and AML procedures, contributing to over $403 billion in penalties since 2008.

Enhancing AML processes requires a shift away from prescriptive governmental measures towards fostering innovation and efficiency. This entails moving beyond a "check-the-box" mentality to solutions that effectively identify and mitigate money laundering risks, a challenge compounded by the complexity of measuring AML effectiveness. E.g. a bank identifying a lot of AML cases, does not necessarily have good practices in place. They might also have been lucky or might have a business model which attracts a lot of money-laundering (making it easier to detect the tip of the iceberg).

Financial institutions can navigate the AML landscape more effectively by implementing best practices that minimize disruption and enhance compliance, such as:

Adopting a Risk-Based Approach: Instead of applying the same level of scrutiny to every transaction, financial institutions should adopt a risk-based approach that focuses on transactions that are most likely to be high risk. This will allow the bank to prioritize its efforts and reduce the number of false positives.
Leveraging Technology: Many financial institutions still use simple rule-based AML systems implemented on outdated and siloed systems, which logically result in bad results. The adoption of advanced, often AI-based systems offered by various RegTech companies (like ComplyAdvantage, Chainalysis, Unit21, Discai, Alessa, Fraudio) can improve however detection accuracy, reducing both false positives and false negatives without significantly impacting user experience. RegTech can offer a beacon of hope for overburdened compliance departments.
Fostering a Culture of Compliance: Continuous education and training ensure that all bank employees are well-versed in AML regulations and understand their role in the compliance process, maximizing the benefits of RegTech innovations.
Continuous Policy and Procedure Review:: Ensuring AML policies and procedures remain effective and aligned with current regulatory standards through regular updates.
Monitoring and Reporting: Ongoing monitoring and reporting on AML compliance efforts help identify areas for improvement, ensuring ongoing effectiveness.

AML is about more than preventing money laundering; it also encompasses combating corruption (i.e. individuals or corporations taking bribes), sanction evasion (i.e. individuals or corporations moving money that should not be allowed to), and fraud (i.e. attempting to steal or scam money from someone else). Criminals use sophisticated techniques to launder illicit funds, complicating detection and intervention efforts by financial institutions, i.e.

Placement : depositing illegal money in the financial system. This is done via different techniques, e.g. via cash businesses with little or no variable costs (e.g. car washes, casinos, tanning studios…), via false invoicing, via smurfing (splitting up in small amounts, which stay below certain AML thresholds), via trusts and offshore companies or foreign bank accounts, via aborted transactions…
Extraction: this consists of getting the money out, so it can be used. Often this is done by techniques, on which the criminals will pay taxes, as this increases the legitimacy. Typical techniques consist of paying salaries to fake employees, loans to directors or shareholders which are not repaid or pay out of dividends.

Due to the variety of types of financial crime and the techniques used for placement and extraction, it becomes very complex for financial institutions to properly detect and stop these activities. The main reasons for that being:

Lack of comprehensive data available to banks, often due to privacy regulations like GDPR. This limitation makes effective AML akin to finding a needle in a haystack. Enhanced, more fine-grained data collection and sharing, subject to stringent security measures, could significantly improve AML efforts.
Every bank implements AML on its own and tries to ensure compliance within its organization. This isolated approach of banks to AML compliance, coupled with the exploitation of this by criminals, underscores the need for a legal framework facilitating data sharing and collaboration among financial institutions. RegTechs can play a crucial role in this ecosystem by offering resources like sanction screening lists and regulatory compliance tools, which are shared in a SaaS model across its customers.
Given the international nature of financial crime, the development of global AML standards and increased international cooperation are imperative. Money laundering is a global issue that demands a unified response.
Regulators do very little to support financial institutions in their mission. Instead of just defining strict (often outdated) rules and imposing sanctions, they could also offer tooling to support financial institutions in having better AML. E.g. up-to-date and easily accessible sanction screening APIs, good (API-based) access to company and UBO registers or the setup of regulatory sandbox, in which (anonymized) examples of recently detected fraud and common false positives are included, would all help players to be more effective in AML compliance. Additionally regulators can organize trainings and knowledge sharing forums to facilitate the exchange of crucial expertise.

Ultimately, the journey toward more efficient and effective AML practices demands collective action. Financial institutions, regulators, and RegTech providers must collaborate closely, sharing insights and data to enhance AML efforts.

Comments

Transforming the insurance sector to an Open API Ecosystem

1. Introduction "Open" has recently become a new buzzword in the financial services industry, i.e. open data, open APIs, Open Banking, Open Insurance …, but what does this new buzzword really mean? "Open" refers to the capability of companies to expose their services to the outside world, so that external partners or even competitors can use these services to bring added value to their customers. This trend is made possible by the technological evolution of open APIs (Application Programming Interfaces), which are the digital ports making this communication possible. Together companies, interconnected through open APIs, form a true API ecosystem , offering best-of-breed customer experience, by combining the digital services offered by multiple companies. In the technology sector this evolution has been ongoing for multiple years (think about the travelling sector, allowing you to book any hotel online). An excelle...

Are product silos in a bank inevitable?

Silo thinking is often frowned upon in the industry. It is often a synonym for bureaucratic processes and politics and in almost every article describing the threats of new innovative Fintech players on the banking industry, the strong bank product silos are put forward as one of the main blockages why incumbent banks are not able to (quickly) react to the changing customer expectations. Customers want solutions to their problems and do not want to be bothered about the internal organisation of their bank. Most banks are however organized by product domain (daily banking, investments and lending) and by customer segmentation (retail banking, private banking, SMEs and corporates). This division is reflected both at business and IT side and almost automatically leads to the creation of silos. It is however difficult to reorganize a bank without creating new silos or introducing other types of issues and inefficiencies. An organization is never ideal and needs to take a numbe...

RPA - The miracle solution for incumbent banks to bridge the automation gap with neo-banks?

Hypes and marketing buzz words are strongly present in the IT landscape. Often these are existing concepts, which have evolved technologically and are then renamed to a new term, as if it were a brand new technology or concept. If you want to understand and assess these new trends, it is important to reduce the concepts to their essence and compare them with existing technologies , e.g. Integration (middleware) software ensures that 2 separate applications or components can be integrated in an easy way. Of course, there is a huge evolution in the protocols, volumes of exchanged data, scalability, performance…, but in essence the problem remains the same. Nonetheless, there have been multiple terms for integration software such as ETL, ESB, EAI, SOA, Service Mesh… Data storage software ensures that data is stored in such a way that data is not lost and that there is some kind guaranteed consistency, maximum availability and scalability, easy retrieval...

IoT - Revolution or Evolution in the Financial Services Industry

1. The IoT hype We have all heard about the "Internet of Things" (IoT) as this revolutionary new technology, which will radically change our lives. But is it really such a revolution and will it really have an impact on the Financial Services Industry? To refresh our memory, the Internet of Things (IoT) refers to any object , which is able to collect data and communicate and share this information (like condition, geolocation…) over the internet . This communication will often occur between 2 objects (i.e. not involving any human), which is often referred to as Machine-to-Machine (M2M) communication. Well known examples are home thermostats, home security systems, fitness and health monitors, wearables… This all seems futuristic, but smartphones, tablets and smartwatches can also be considered as IoT devices. More importantly, beside these futuristic visions of IoT, the smartphone will most likely continue to be the cent...

PSD3: The Next Phase in Europe’s Payment Services Regulation

With the successful rollout of PSD2, the European Union (EU) continues to advance innovation in the payments domain through the anticipated introduction of the Payment Services Directive 3 (PSD3) . On June 28, 2023, the European Commission published a draft proposal for PSD3 and the Payment Services Regulation (PSR) . The finalized versions of this directive and associated regulation are expected to be available by late 2024, although some predictions suggest a more likely timeline of Q2 or Q3 2025. Given that member states are typically granted an 18-month transition period, PSD3 is expected to come into effect sometime in 2026. Notably, the Commission has introduced a regulation (PSR) alongside the PSD3 directive, ensuring more harmonization across member states as regulations are immediately effective and do not require national implementation, unlike directives. PSD3 shares the same objectives as PSD2, i.e. increasing competition in the payments landscape and en...

Trade-offs Are Inevitable in Software Delivery - Remember the CAP Theorem

In the world of financial services, the integrity of data systems is fundamentally reliant on non-functional requirements (NFRs) such as reliability and security. Despite their importance, NFRs often receive secondary consideration during project scoping, typically being reduced to a generic checklist aimed more at compliance than at genuine functionality. Regrettably, these initial NFRs are seldom met after delivery, which does not usually prevent deployment to production due to the vague and unrealistic nature of the original specifications. This common scenario results in significant end-user frustration as the system does not perform as expected, often being less stable or slower than anticipated. This situation underscores the need for better education on how to articulate and define NFRs , i.e. demanding only what is truly necessary and feasible within the given budget. Early and transparent discussions can lead to system architecture being tailored more close...

Low- and No-code platforms - Will IT developers soon be out of a job?

“ The future of coding is no coding at all ” - Chris Wanstrath (CEO at GitHub). Mid May I posted a blog on RPA (Robotic Process Automation - https://bankloch.blogspot.com/2020/05/rpa-miracle-solution-for-incumbent.html ) on how this technology, promises the world to companies. A very similar story is found with low- and no-code platforms, which also promise that business people, with limited to no knowledge of IT, can create complex business applications. These platforms originate , just as RPA tools, from the growing demand for IT developments , while IT cannot keep up with the available capacity. As a result, an enormous gap between IT teams and business demands is created, which is often filled by shadow-IT departments, which extend the IT workforce and create business tools in Excel, Access, WordPress… Unfortunately these tools built in shadow-IT departments arrive very soon at their limits, as they don’t support the required non-functional requirements (like h...

An overview of 1-year blogging

Last week I published my 60th post on my blog called Bankloch (a reference to "Banking" and my family name). The past year, I have published a blog on a weekly basis, providing my humble personal vision on the topics of Fintech, IT software delivery and mobility. This blogging has mainly been a personal enrichment , as it forced me to dive deep into a number of different topics, not only in researching for content, but also in trying to identify trends, innovations and patterns into these topics. Furthermore it allowed me to have several very interesting conversations and discussions with passionate colleagues in the financial industry and to get more insights into the wonderful world of blogging and more general of digital marketing, exploring subjects and tools like: Search Engine Optimization (SEO) LinkedIn post optimization Google Search Console Google AdWorks Google Blogger Thinker360 Finextra … Clearly it is not easy to get the necessary ...

The UPI Phenomenon: From Zero to 10 Billion

If there is one Indian innovation that has grabbed global headlines , it is undoubtedly the instant payment system UPI (Unified Payments Interface) . In August 2023, monthly UPI transactions exceeded an astounding 10 billion, marking a remarkable milestone for India’s payments ecosystem. No wonder that UPI has not only revolutionized transactions in India but has also gained international recognition for its remarkable growth. Launched in 2016 by the National Payments Corporation of India (NPCI) in collaboration with 21 member banks, UPI quickly became popular among consumers and businesses. In just a few years, it achieved remarkable milestones : By August 2023, UPI recorded an unprecedented 10.58 billion transactions , with an impressive 50% year-on-year growth. This volume represented approximately 190 billion euros . In July 2023, the UPI network connected 473 different banks . UPI is projected to achieve a staggering 1 ...

AI in Financial Services - A buzzword that is here to stay!

In a few of my most recent blogs I tried to demystify some of the buzzwords (like blockchain, Low- and No-Code platforms, RPA…), which are commonly used in the financial services industry. These buzzwords often entail interesting innovations, but contrary to their promise, they are not silver bullets solving any problem. Another such buzzword is AI (or also referred to as Machine Learning, Deep Learning, Enforced Learning… - the difference between those terms put aside). Again this term is also seriously hyped, creating unrealistic expectations, but contrary to many other buzzwords, this is something I truly believe will have a much larger impact on the financial services industry than many other buzzwords. This opinion is backed by a study of McKinsey and PWC indicating that 72% of company leaders consider that AI will be the most competitive advantage of the future and that this technology will be the most disruptive force in the decades to come. Deep Lea...

Bankloch

Search This Blog