Anti-money laundering refers to the complete body of laws, regulations, institutional procedures, and supervisory arrangements that require financial institutions and other regulated entities to prevent, detect, and report the process by which criminally obtained funds are disguised as legitimate income. Money laundering takes dirty money — proceeds from drug trafficking, fraud, corruption, terrorism, human trafficking, or any other serious crime — and cycles it through financial transactions until its illegal origin can no longer be easily traced. AML frameworks disrupt this cycle by imposing transparency and due diligence requirements on the institutions through which money flows.
According to the United Nations Office on Drugs and Crime, between $800 billion and $2 trillion are laundered globally each year, representing 2% to 5% of global GDP. These flows finance the full spectrum of criminal enterprise and represent a systemic threat to financial system integrity.
Money laundering typically proceeds in three stages. Placement is the first and most vulnerable stage: illegal cash is injected into the financial system, often through structuring (making multiple small deposits to avoid reporting thresholds), cash-intensive businesses, or cryptocurrency purchases. Layering is the second stage, in which the funds are moved through complex chains of transactions — wire transfers between multiple accounts in different jurisdictions, conversion into and out of various asset classes, shell company transactions — designed to obscure the trail. Integration is the final stage, in which the laundered funds re-enter the legitimate economy through real estate purchases, business investments, luxury goods, or other vehicles that give them the appearance of lawful origin.
| Pillar | What It Requires |
|---|---|
| Customer Due Diligence (CDD) / Know Your Customer (KYC) | Verify identity of customers at onboarding; assess risk level; understand expected transaction behavior |
| Transaction Monitoring | Ongoing automated review of account activity to identify unusual patterns inconsistent with the customer's profile |
| Suspicious Activity Reporting (SAR) | File reports with financial intelligence units (FinCEN in the US) when suspicious activity is identified |
| Currency Transaction Reporting (CTR) | File reports for cash transactions exceeding $10,000 (US threshold) |
| Enhanced Due Diligence (EDD) | Apply heightened scrutiny to high-risk customers including Politically Exposed Persons and customers in high-risk jurisdictions |
| Record-keeping | Maintain customer and transaction records for minimum periods (typically five years) |
The United States established the foundational AML framework through the Bank Secrecy Act (BSA) of 1970, which requires financial institutions to assist government agencies in detecting and preventing money laundering. The Financial Crimes Enforcement Network (FinCEN), a bureau of the Treasury Department, administers BSA compliance and serves as the US financial intelligence unit. The Anti-Money Laundering Act of 2020 significantly modernized the BSA by directing FinCEN to prioritize AML efforts based on risk, expanding the scope of covered activities, and introducing beneficial ownership registry requirements through the Corporate Transparency Act.
Globally, the Financial Action Task Force (FATF), established in 1989, sets the international standard. FATF's 40 Recommendations define the core elements of an effective AML/CFT framework. Countries are assessed by FATF and FATF-style regional bodies for compliance; placement on the FATF grey list or blacklist signals serious deficiencies and can disrupt correspondent banking relationships and international capital flows.
The pseudonymous nature of blockchain transactions made cryptocurrency an early focus of AML concern. The EU's AMLD5 directive (effective January 2020) was the first major framework to bring virtual currency exchanges and custodian wallet providers within mandatory AML obligations. In the US, FinCEN has applied the BSA to cryptocurrency exchanges since 2013. As of 2025, all major jurisdictions require crypto asset service providers to register with regulators, apply KYC procedures, monitor transactions, and file SARs — essentially the same framework applied to banks. FATF's updated guidance requires crypto asset service providers to implement the Travel Rule, transmitting originator and beneficiary information with transactions exceeding certain thresholds.