DNFBPs are non-financial sectors, such as lawyers, accountants, real estate agents, company service providers, and dealers in precious metals and stones, that FATF pulls under AML/CFT rules because criminals can use them to place or launder money. They are common weak points in the chain, and enforcement varies a lot by country.
What is a DNFBP, in plain English?
DNFBP stands for Designated Non-Financial Businesses and Professions. It is FATF's label for non-financial sectors that are nonetheless brought under AML and CFT rules, because criminals can route money through them to place or launder it just as they would through a bank.
The logic is that laundering does not only happen inside financial institutions. A lawyer setting up a company, an accountant structuring a transaction, a real estate agent closing a property purchase, or a dealer selling gold can all be used, wittingly or not, to move illicit value. So FATF designates these professions and expects them to run customer checks, monitoring, and reporting like any obliged business.
The practical problem is that coverage and enforcement vary a lot by country. Some jurisdictions supervise DNFBPs tightly; others barely at all. That inconsistency creates cross-border gaps that launderers deliberately exploit, routing structures through the weakest link in the chain.
Which sectors count
Sector | Why criminals use it |
Lawyers and notaries | Set up companies and trusts and lend an air of legitimacy to complex structures. |
Accountants | Structure transactions and manage books in ways that can obscure the money trail. |
Real estate agents | Property is a classic way to place large sums into a durable, legitimate-looking asset. |
Company service providers | Create the shells and nominee arrangements that hide beneficial ownership. |
Dealers in metals and stones | High-value, portable goods that convert cash into assets and back. |
What it looks like in practice
In practice
A bank onboards a company service provider as a business customer. The provider is technically a DNFBP and is meant to run its own AML checks on the shell companies it forms, but when the bank asks for evidence of its program, the provider produces only a thin, generic policy and no record of ever filing a report.
The bank treats this as a due-diligence signal, not a formality. A DNFBP that cannot show a real AML program is effectively importing unscreened risk into the bank, so the relationship gets enhanced due diligence and closer monitoring rather than a standard onboarding.
Why DNFBPs are your risk too
For a bank or other financial institution, DNFBPs matter in two ways. They are often higher-risk customers in their own right, and they frequently act as introducers, bringing in the underlying clients whose money flows through your institution. In both roles, the maturity of their AML controls becomes a factor in your own due diligence.
Because enforcement of DNFBP obligations is uneven across countries, you cannot assume a DNFBP in a lightly supervised jurisdiction runs a real program just because it is technically obliged to. A DNFBP that cannot demonstrate genuine AML controls is bringing its risk to you, and the cross-border gaps in DNFBP supervision are exactly the seams launderers use to move value into the regulated system.
What to watch for
- Thin or generic programs. A DNFBP whose AML policy is boilerplate with no filing history is importing unscreened risk.
- Introducer chains. When a DNFBP brings in underlying clients you never see directly, its controls become your first line.
- Weak-supervision jurisdictions. DNFBPs in countries that barely enforce the rules deserve extra scrutiny, not benefit of the doubt.
- Company formation at scale. Providers spinning up many shells with opaque ownership are a classic layering enabler.
- High-value cash conversion. Metals, stones, and property deals that turn cash into assets are placement in plain sight.
Quick questions
What does DNFBP stand for?
Designated Non-Financial Businesses and Professions. It is FATF's term for non-financial sectors, like lawyers, accountants, real estate agents, and dealers in precious metals, that are pulled under AML/CFT rules.
Why are non-financial businesses covered by AML rules?
Because criminals can use them to place or launder money without ever touching a bank directly. Company formation, property deals, and high-value goods are all effective laundering channels.
Why does enforcement vary so much?
Because supervision of DNFBPs is left largely to individual countries, and their capacity and will differ. That inconsistency creates cross-border gaps launderers exploit by routing through the weakest jurisdiction.
How should a bank treat a DNFBP customer?
As a potentially higher-risk relationship. The maturity of the DNFBP's own AML program becomes a due-diligence factor, and a provider that cannot show real controls warrants enhanced scrutiny.
Are DNFBPs the same as obliged entities?
DNFBPs are a subset of the broader set of obliged entities. All obliged entities carry AML duties; DNFBPs are the specific non-financial professions FATF designates as needing to be covered.
What is an introducer risk?
When a DNFBP brings underlying clients into your institution, you may never see those clients directly, so you are relying on the DNFBP's checks. Weak checks there flow straight through to you.
Go deeper
- FFIEC BSA/AML Examination Manual ↗ — The manual US examiners use to assess BSA and AML programs.
- FATF ↗ — The global standard-setter for AML, counter-terrorist-financing, and counter-proliferation. Recommendations, guidance, and jurisdiction lists.