Transfer agents maintain the register of record for securities issuers, which makes shareholder identity verification a different problem from account onboarding. This guide covers registered versus beneficial holders, verification at corporate actions, the lost shareholder and escheatment process, and where AML obligations attach.
Correspondent banking concentrates risk: you are providing services to an institution whose customers you never see. This guide covers the Wolfsberg CBDDQ, the nested relationship problem, how to monitor a respondent’s activity meaningfully, and how to make a de-risking decision defensible.
Training is one of the pillars of an AML programme and the one most often reduced to an annual completion statistic. Examiners increasingly test whether training is matched to role and whether it changed behaviour. This guide covers curriculum design by role, frequency, board training, and how to measure effectiveness.
Money transmitters carry a dual burden most guidance ignores: federal BSA obligations through FinCEN registration, plus a state-by-state licensing regime with its own examinations. This guide covers where the two regimes diverge, the thresholds that differ from banking, and the agent oversight problem that generates most findings.
The UK AML regime is assembled from several instruments at once: MLR 2017 sets the preventative obligations, POCA creates the reporting duties and criminal offences, the FCA supervises and enforces, and JMLSG guidance carries statutory weight. This guide explains how the pieces interact and where firms most often come unstuck.
First-line checklists confirm the work was done. Third-line audit asks whether the control would have caught what it was designed to catch. This guide covers risk-based scoping, sampling that withstands challenge, how to test monitoring rules rather than read about them, and issue grading that drives remediation.
An examination tests whether your programme does what your documents say it does. This guide covers the standard document request, how examiners test a risk-based approach, the findings that recur across institutions, and how to run a self-assessment that surfaces problems while you can still fix them.
Every AML programme is required to rest on a documented risk assessment, and most firms produce one that would not survive a determined examiner. This guide covers the artefact itself — how inherent risk is scored, how control effectiveness is evidenced rather than asserted, and how residual risk connects to the controls it is supposed to justify.
The periodic review cycle is an artefact of a time when refreshing a customer file meant posting a form. Perpetual KYC replaces the calendar with a trigger: the file is reviewed when something changes. This guide covers the trigger taxonomy, the data prerequisites most firms underestimate, and how to retire an existing backlog without pausing the programme.
Most AML budget conversations start with a vendor quote and work backwards. That is the wrong direction. This guide builds the cost of a compliance programme from its real drivers — alert volume, onboarding volume, and the analyst hours each consumes — so you can defend the number to a board and test any quote against it.
