Anti-money laundering (AML) is the body of laws, rules, and firm controls built to catch and deter criminal money moving through the financial system. It is the umbrella discipline that ties together customer checks, monitoring, screening, and reporting, usually framed around three stages: placement, layering, and integration.
What is AML, in plain English?
Anti-money laundering is the whole system a regulated business runs to keep criminal money out and to report it when it shows up. It is not a single tool or team; it is the umbrella that covers know-your-customer checks at onboarding, ongoing transaction monitoring, sanctions and watchlist screening, and the filing of suspicious activity reports to the authorities.
The reason the discipline exists is that criminals need to make illicit proceeds look legitimate before they can spend them. AML controls are designed to interrupt that process, or at least to leave a paper trail law enforcement can follow. Most frameworks describe laundering in three stages: placement (getting cash into the system), layering (moving it around to break the trail), and integration (bringing it back out looking clean).
The single most important thing for an operator to internalize is that AML is regulatory and reporting-driven, not loss-driven. You can and often must file a report even when your firm loses no money at all. Treating AML as just another way to cut fraud losses is a common framing mistake that leads straight to missed obligations.
How dirty money moves: the three stages
Classic laundering runs through three stages, each with its own tell-tale behaviors:
- Placement — Get cash into the system. Illicit cash enters via deposits, prepaid cards, or a cash-intensive business, often broken into small amounts to dodge thresholds.
- Layering — Break the trail. Funds bounce through accounts, shells, and jurisdictions so the original source becomes hard to reconstruct.
- Integration — Bring it back clean. The money re-enters the economy as an investment, loan repayment, or asset purchase that looks perfectly ordinary.
Who does what in an AML program?
Who | Their role |
The regulated firm | Builds and runs the program: KYC, monitoring, screening, and reporting. Carries the legal obligation. |
The named officer | The BSA Officer or MLRO who owns filing decisions and answers to examiners. |
The regulator or FIU | Sets the rules, examines the program, and receives the suspicious activity reports. |
Law enforcement | Uses the reports and paper trail to investigate and prosecute the underlying crime. |
What it looks like in practice
In practice
A small logistics firm opens a business account and starts making frequent cash deposits just under the reporting threshold, always at different branches. The stated business does not obviously generate that much cash, and the money leaves within days by wire to two overseas suppliers nobody can verify.
No customer complains and the bank loses nothing, so a fraud-only lens would see nothing to act on. The AML team, however, files a suspicious activity report on the structuring and the unexplained cash, because the obligation is to report the pattern, not to wait for a loss.
Why AML is not just loss prevention
The trap most teams fall into is measuring AML by dollars saved. AML does not exist to protect the firm's balance sheet; it exists to protect the financial system and to give authorities visibility into crime. That is why a firm can be heavily fined for a weak program even in years when it suffered zero fraud loss. The failure regulators punish is not detecting and reporting, not losing money.
Keep AML separate in your head from sanctions and counter-terrorist financing, which have different triggers and far more urgency, and from plain fraud loss prevention. They overlap in data and tooling, but the obligations and the clocks are different. Blur them and you will either over-invest in the wrong controls or, worse, quietly miss a filing duty.
What to watch in the data
- Threshold-hugging. Deposits or transfers that sit just below reporting limits, repeated over time, point to deliberate structuring.
- Source that does not fit. Cash or volume that the customer's stated business or income cannot plausibly explain.
- Rapid pass-through. Money that arrives and leaves within hours or days, leaving no economic footprint, is classic layering.
- Complex ownership. Layers of shells and nominees whose only apparent purpose is to obscure who really controls the money.
- Reporting is the goal. Remember you may owe a report even with no loss; do not let a clean loss ledger talk you out of filing.
Quick questions
Is AML the same as fraud prevention?
No. Fraud prevention protects the firm and its customers from loss; AML protects the financial system and is measured by detection and reporting. They share data and tools but answer to different goals and regulators.
What are the three stages of money laundering?
Placement, layering, and integration. Placement gets illicit funds into the system, layering moves them around to hide the source, and integration returns them to the economy looking legitimate.
Can you file a report if the firm lost no money?
Yes, and often you must. AML reporting is triggered by suspicion or by mechanical thresholds, not by whether anyone suffered a loss. A clean loss ledger does not remove the obligation.
What are the core parts of an AML program?
Internal controls, a named compliance officer, ongoing training, independent testing, and risk-based customer due diligence. Regulators grade each part on its own merits.
How is AML different from sanctions compliance?
Sanctions work is about blocking specific named parties immediately and is close to absolute; AML is about detecting and reporting suspicious behavior over time. Keep the triggers and the urgency separate.
Who has to run an AML program?
Banks, money transmitters, exchanges, and a growing list of non-financial businesses that regulators designate. If you are a regulated or obliged entity, the full set of duties applies to you.
Go deeper
- FFIEC BSA/AML Examination Manual ↗ — The manual US examiners use to assess BSA and AML programs.
- FATF ↗ — The global standard-setter for AML, counter-terrorist-financing, and counter-proliferation. Recommendations, guidance, and jurisdiction lists.