Money laundering

From CEOpedia
Money laundering
See also


Money laundering - is the processing of criminal proceeds to disguise their illegal origin, so that the offender can enjoy the profits without exposing their source. The United Nations Office on Drugs and Crime uses exactly this working definition and points to the 1988 Vienna Convention, which describes laundering as the conversion or transfer of property, knowing that it is derived from an offence, "for the purpose of concealing or disguising the illicit origin of the property"[1].

Put simply, dirty money is useless until it looks clean. A drug trafficker sitting on a room full of banknotes can't buy a house, invest in a company or pay school fees without someone asking where the cash came from. Laundering answers that question with a lie. The underlying crime can be almost anything that produces money: drug trade, fraud, tax evasion, bribery, smuggling, cybercrime. For managers it's not abstract: banks, insurers, accountants, lawyers, estate agents and crypto platforms must legally spot it, and any trading firm can be dragged in through a customer, supplier or dishonest employee.

Background and history

Hiding dirty money is ancient. The policy response isn't. For most of the twentieth century prosecutors chased the predicate offence and ignored the proceeds. The cocaine boom of the 1980s changed that: following the money was often easier than catching the couriers.

The United States moved first. The Currency and Foreign Transactions Reporting Act of 1970, later known simply as the Bank Secrecy Act, required financial institutions to keep records and report large cash transactions[2]. Laundering itself became a federal crime in 1986. Internationally, the 1988 Vienna Convention obliged signatory states to criminalise the laundering of drug proceeds[1], and in 1989 the G7 created the Financial Action Task Force (FATF), which published its first set of 40 Recommendations a year later.

The scope kept widening, from drug money to the proceeds of all serious crimes and, after September 2001, to terrorist financing. Peter Reuter and Edwin Truman, in their review of the anti-money laundering (AML) regime, describe it as a system built step by step, often in reaction to particular scandals, with ambitious goals and surprisingly little evidence on what actually works[3]. That observation still holds.

Three stages of money laundering

The classic model divides laundering into three stages. UNODC lists them as follows[1]:

  • Placement - moving the funds away from direct association with the crime. Typically this means getting cash into the financial system or converting it into other assets.
  • Layering - disguising the trail to foil pursuit. Money is moved through a series of transactions, accounts, companies or countries so that the link with its source becomes hard to trace.
  • Integration - making the money available to the criminal from what seem to be legitimate sources: business profits, loan repayments, sale proceeds, salaries.

It's a teaching model, not a law of nature. UNODC itself notes that real cases may skip a stage, combine two of them or repeat some several times. Cash split into small sums, deposited by "money mules" and then wired to a shell company as payment for fictitious services is placement and layering in one go[1].

Stage Main goal Where it is most visible
Placement Get illicit proceeds into the system Cash deposits, currency exchange, purchase of high-value goods
Layering Break the audit trail Wire transfers, chains of companies, cross-border payments
Integration Give funds a plausible origin Real estate, business investment, loans, luxury assets

Typical methods

Described here at the level of regulators' typologies. The point is recognition, not technique.

Structuring (smurfing)

Large amounts of cash are broken into many smaller deposits or purchases to stay under reporting thresholds. Several people ("smurfs") may be used at once. In the United States structuring is a crime in its own right, even when the money is legal. Detection relies on aggregation: monitoring systems add up transactions across days, branches and related accounts.

Trade-based money laundering

Value is moved by misrepresenting the price, quantity or quality of goods in international trade. Over-invoicing an import moves money out of a country; under-invoicing moves it in. Phantom shipments are a variation. It's hard to catch because customs officers rarely know the fair price of every product.

Shell companies and complex ownership

A shell company has no real operations, staff or assets. It exists on paper, frequently registered in a jurisdiction with weak disclosure rules or in a tax haven. Layers of such companies, nominee directors and trusts make it difficult to see who the beneficial owner is, that is, the natural person who ultimately owns or controls the money. That explains the push for beneficial ownership registers, and the treatment of lack of transparency as a risk factor in itself.

Real estate

Property absorbs large sums in a single transaction, tends to hold its value and can be bought through companies or intermediaries. Purchases made in cash, through foreign shell companies or well above market value are standard warning signs.

Cash-intensive businesses

Restaurants, car washes, bars, nail salons, small retail shops. When a business really takes a lot of cash, it's easy to mix illicit cash with genuine takings and report the total as revenue. The tell-tale sign: turnover out of line with the premises, the staff or the neighbours.

Crypto-assets

Cryptocurrencies are held in digital wallets and can be transferred across borders within minutes. Pseudonymous addresses, mixing services, privacy coins and exchanges in poorly regulated jurisdictions can make the trail harder to follow. But most public blockchains record every transaction permanently, and specialised analytics firms trace flows that would be invisible in cash. Since the 2018-2019 revisions the FATF standards explicitly cover virtual assets and virtual asset service providers[4], which brought exchanges into the same customer identification and reporting duties as banks.

Other methods

Typologies also list informal value transfer (hawala), casinos, art and luxury goods, abuse of offshore banking and professional enablers who build structures for a fee.

Scale of money laundering

How much money gets laundered? Nobody knows. The figure most often quoted comes from UNODC: "The estimated amount of money laundered globally in one year is 2 - 5% of global GDP, or $800 billion - $2 trillion in current US dollars"[1]. The same page adds that, due to the clandestine nature of the activity, the total is difficult to estimate.

That caveat matters. The range is wide and rests on models stacking one uncertain estimate on another. Brigitte Unger's study reviewed the available measurement methods and showed how sensitive results are to the assumptions behind them[5]. Reuter and Truman added that a costly regime aimed at a poorly measured problem is hard to evaluate[3].

The damage, though, isn't in doubt: reinvested crime, corrupted officials, distorted property prices, lost tax revenue.

Legal framework

FATF Recommendations

The FATF Recommendations are the global standard. They are not a treaty, but more than 200 jurisdictions have committed to them, and countries are assessed in regular peer reviews ("mutual evaluations"). Countries with serious gaps land on FATF's monitoring lists, which makes doing business with them costlier. The Recommendations cover, among other things[4]:

  • assessing risks and applying a risk-based approach (Recommendation 1),
  • customer due diligence and record-keeping by financial institutions (Recommendations 10 and 11),
  • reporting of suspicious transactions (Recommendation 20),
  • AML duties for casinos, real estate agents, dealers in precious metals, lawyers, notaries and accountants,
  • transparency of beneficial ownership of legal persons and arrangements (Recommendations 24 and 25),
  • new technologies and virtual assets (Recommendation 15) and the information that must accompany wire transfers (Recommendation 16),
  • powers of financial intelligence units and international cooperation.

European Union

The EU translated the FATF standards into a series of AML directives, starting in 1991. The fourth directive (2015/849) made the risk-based approach and beneficial ownership registers central; the fifth extended the rules to virtual currency exchange platforms and custodian wallet providers. In 2024 the EU adopted a bigger package: a directly applicable Anti-Money Laundering Regulation (Regulation (EU) 2024/1624) with a single rulebook for obliged entities[6], a sixth directive on national supervisors and financial intelligence units, and a regulation establishing a new EU authority. The three acts were published in the Official Journal on 19 June 2024.

That authority is AMLA, the Authority for Anti-Money Laundering and Countering the Financing of Terrorism, based in Frankfurt am Main. It will directly supervise selected high-risk cross-border financial entities, coordinate national financial intelligence units and issue technical standards. According to its own timeline, around 40 obliged entities are to be selected for direct supervision during 2027, with direct supervision starting during 2028[7].

United States

The Bank Secrecy Act remains the backbone of the American system. Its implementing regulations require financial institutions, among other things, to keep records of cash purchases of negotiable instruments, to file reports of cash transactions exceeding $10,000 (daily aggregate amount) and to report suspicious activity that might signify money laundering, tax evasion or other crimes[2]. FinCEN, part of the Treasury, administers the rules.

The USA PATRIOT Act of 2001 strengthened the system after the September 11 attacks. Its purposes include strengthening U.S. measures to prevent, detect and prosecute international money laundering and terrorist financing and subjecting foreign jurisdictions and financial institutions to special scrutiny[8]. It also required formal customer identification programmes.

AML compliance in companies

For an obliged entity, AML compliance is a management system, not a single procedure.

Risk-based approach

The firm assesses its own exposure, by customers, products, delivery channels and geography, and spends its effort where risk is highest. Low-risk customers get simplified checks; high-risk ones get enhanced due diligence. The logic is the same as in any risk based approach, and the business-wide assessment usually feeds into the company's broader risk management and operational risk framework.

Know Your Customer and customer due diligence

Know Your Customer (KYC) means identifying the customer and verifying the identity with reliable documents. Customer due diligence (CDD) goes further: identify the beneficial owner, understand the purpose and intended nature of the relationship, and keep the information up to date. Enhanced due diligence (politically exposed persons, high-risk countries, odd structures) may require proof of source of funds and senior approval. The outcome is a documented customer profile against which later behaviour is compared. Commercial due diligence before acquisitions works on similar logic.

Transaction monitoring

Payments are screened against the customer profile and against rules or statistical models. A dormant account suddenly receiving transfers from five countries? That's an alert for an analyst. Sanctions screening runs alongside.

Suspicious activity reporting

If an analyst cannot dismiss the suspicion, the firm files a Suspicious Activity Report (SAR, the US term) or a Suspicious Transaction Report (STR, common elsewhere) with the national financial intelligence unit. The customer must not be told; "tipping off" is itself an offence in most jurisdictions.

Governance, training and audit

A designated AML officer, board-level responsibility, staff training, record-keeping for at least five years and independent testing complete the system. Banks typically organise it on the "three lines" logic: business units own the risk, compliance oversees it and internal audit checks whether controls work. External compliance audits add another layer, all of it part of corporate governance.

Red flags

Typical warning signs listed in supervisory guidance include:

  • cash deposits just below the reporting threshold, repeated over days or across branches,
  • customers reluctant to provide identification or information on the source of funds,
  • transactions with no apparent economic purpose, or a turnover inconsistent with the customer's known business,
  • frequent transfers to or from high-risk jurisdictions or secrecy havens,
  • complex ownership chains, nominee shareholders, recently formed companies with no visible activity,
  • invoices that don't match the goods, prices far from market levels, unusual shipping routes,
  • links to acts of corruption, such as payments involving public officials or their relatives.

One flag rarely proves anything. Several together, and especially behaviour that changes suddenly, are what analysts look for.

Example of customer risk scoring and threshold reporting

The following case is hypothetical; the weights and bands are illustrative, not taken from any regulation.

A mid-sized bank scores each business customer on five factors, rated from 1 (low risk) to 5 (high risk). The score is a weighted average:

\[ Risk\ score = \sum_{i=1}^{5} w_i \times r_i , \quad \sum w_i = 1 \]

Factor Weight Customer A (local bakery) Customer B (import-export firm)
Customer type and ownership 0.25 1 → 0.25 3 → 0.75
Geography 0.20 1 → 0.20 4 → 0.80
Products used 0.20 2 → 0.40 3 → 0.60
Delivery channel 0.10 1 → 0.10 3 → 0.30
Transaction behaviour 0.25 1 → 0.25 4 → 1.00
Total 1.00 1.20 3.45

Bands: below 2.0 low risk (simplified review every three years), 2.0-2.99 medium (standard CDD, review every two years), 3.0 and above high (enhanced due diligence, annual review, senior approval). Customer A stays in the low band. Customer B, owned through two foreign holding companies and paying into high-risk countries, goes to enhanced due diligence.

Now the threshold part. Assume a US-style rule: cash above $10,000 a day is reported. Over four consecutive days a customer of the bank deposits $9,500, $9,800, $9,700 and $9,400 in cash at different branches. None triggers a currency transaction report. Together: $38,400. A rolling seven-day aggregation rule raises an alert; the analyst sees classic structuring (amounts just below the threshold, different branches, no business reason) and a suspicious activity report is filed.

Now the cost side. The bank's rules produce about 12,000 alerts a month; roughly 95% (11,400) are false positives and 5% (600) need deeper investigation. If an analyst spends on average 20 minutes on first-level review, that's 12,000 × 20 / 60 = 4,000 hours a month, or about 25 full-time analysts at 160 working hours each. At a loaded cost of $45 per hour the first-level review alone costs $180,000 a month. Tuning rules to cut false positives is where most savings lie.

Costs of AML compliance

Compliance is expensive. Big banks run large financial crime teams; even small firms pay for screening software, identity checks, training and audits. Main cost drivers:

  • staff for onboarding, periodic reviews and alert investigation,
  • technology: monitoring systems, sanctions lists, data quality work,
  • customer friction and lost business, since longer onboarding drives some clients away,
  • fines and remediation programmes after supervisory findings, which can dwarf the running costs,
  • "de-risking": closing accounts of whole customer groups (money transfer firms, charities) judged too costly to serve, which pushes activity to less transparent channels.

These costs are part of financial risk management. Seen narrowly they look like a burden; set against the loss of a banking licence or a correspondent relationship, they look more like insurance.

Advantages of an effective AML system

  • It makes crime less profitable by making proceeds harder to use.
  • It produces financial intelligence for investigations of fraud, corruption, organised crime and terrorism.
  • It protects the reputation of banks and financial centres.
  • Beneficial ownership transparency also helps fight tax evasion and corruption.
  • Good KYC also helps credit assessment and the detection of accounting fraud by clients.

Limitations and criticism

  • Unclear effectiveness. Only a small share of estimated criminal proceeds is ever frozen or confiscated, and the evidence that more rules lead to less crime is thin[3].
  • Uncertain size of the problem. The 2-5% of global GDP range is wide and based on models with strong assumptions[5].
  • Defensive reporting. Fear of penalties leads firms to file huge numbers of low-quality reports, which overwhelm financial intelligence units.
  • False positives. See the example above.
  • Displacement. Tighter bank controls push criminals to cash, trade and informal networks.
  • Privacy. Profiling every customer to find a few criminals raises proportionality questions.
  • Uneven enforcement. Standards are global, but supervision and prosecution differ widely between countries, and some bank secrecy jurisdictions still lag behind.

Related approaches

Anti-money laundering sits close to several other fields. Counter-terrorist financing uses the same tools but looks at money flowing towards crime rather than from it. Sanctions compliance screens for prohibited persons and countries. Anti-bribery and anti-fraud programmes share the investigative toolkit. The Basel Committee, hosted by the Bank for International Settlements, has issued guidance on handling money laundering risk inside banks. Same idea throughout: know who you deal with, and ask why the money moves.

References

Footnotes

  1. ↑ United Nations Office on Drugs and Crime, Money Laundering - Overview, UNODC
  2. ↑ Financial Crimes Enforcement Network, The Bank Secrecy Act, U.S. Department of the Treasury
  3. ↑ Reuter P., Truman E.M., Chasing Dirty Money: The Fight Against Money Laundering, Institute for International Economics, 2004
  4. ↑ Financial Action Task Force, The FATF Recommendations, FATF, 2012 (as updated)
  5. ↑ Unger B., The Scale and Impacts of Money Laundering, Edward Elgar Publishing, 2007
  6. ↑ Regulation (EU) 2024/1624 of the European Parliament and of the Council of 31 May 2024, Official Journal of the European Union, 2024
  7. ↑ Authority for Anti-Money Laundering and Countering the Financing of Terrorism, About AMLA, section "Timeline"
  8. ↑ Financial Crimes Enforcement Network, USA PATRIOT Act, U.S. Department of the Treasury
Money laundering — recommended articles
Tax evasion — Tax haven — Offshore banking — Bank secrecy — Risk based approach — Compliance audit — Forms of corruption
Retrieved from CEOpedia