A shell bank is a bank that exists on paper but has no physical presence and no affiliation with a regulated financial group, so no real supervisor oversees it. Because there is no one meaningfully watching what it does, AML rules ban regulated banks from dealing with shell banks as correspondents.
What is a shell bank?
A shell bank holds a banking license but has no real operations behind it: no offices, no staff, no genuine place of business, and no mind and management actually running it in the country that licensed it. Critically, it is also not part of a regulated financial group that would be subject to consolidated supervision. That combination means no competent authority is effectively overseeing its books.
The reason this matters for AML is simple. A normal bank sits inside a web of oversight: a regulator, examinations, capital rules, and an AML program someone is accountable for. A shell bank has none of that, so it can move money with essentially no scrutiny. That makes it an ideal conduit for laundering proceeds, evading sanctions, and financing illicit activity while wearing the respectable label of a bank.
Because of that, laws like the USA PATRIOT Act and standards from bodies like the Wolfsberg Group prohibit regulated banks from maintaining correspondent accounts with shell banks, and require them to take steps to ensure their correspondent accounts are not being used indirectly by a shell bank through nesting.
Shell bank versus a real bank
The gap between a shell bank and a supervised institution is exactly what the rules key on:
What changes | Shell bank | Regulated bank |
Physical presence | None; an address only | Real offices and staff |
Mind and management | Not genuinely located anywhere | Decision-makers on the ground |
Supervision | No effective oversight | Examined by a regulator |
Group affiliation | Standalone, unregulated | Part of a supervised group |
Correspondent access | Prohibited under AML law | Permitted with due diligence |
Who is involved?
Who | Their role |
The shell bank | Holds a license but no real operations; seeks a way into the mainstream financial system. |
The correspondent bank | Barred from dealing with it directly, and expected to prevent indirect access through nesting. |
The respondent bank | Can become the entry point if it nests a shell bank behind its own correspondent account. |
The illicit actor | Uses the shell bank as an unsupervised channel to move and launder funds. |
What it looks like in practice
An entity registers a bank in a jurisdiction that sells licenses cheaply, listing only a mailbox address and a local agent. It has no branch, no employees, and no regulator meaningfully examining it. It cannot open a correspondent account at a major bank directly, because AML rules forbid it.
So it approaches a small foreign respondent bank that already has correspondent access, and arranges to route its payments through that respondent's account. The correspondent, believing it is only serving the respondent it vetted, unknowingly processes the shell bank's flows. When the correspondent later probes the respondent for nested relationships, the shell bank surfaces, and the account is terminated.
Why it matters to operators
Shell banks are a bright-line prohibition, not a risk to be priced and managed. A regulated bank cannot lawfully hold a correspondent relationship with one, and dealing with a shell bank, even indirectly, is a serious compliance failure that regulators treat harshly. The hard part is rarely the direct case; it is the indirect exposure through nesting, where a shell bank hides behind a legitimate respondent.
That is why correspondent due diligence has to go beyond confirming a respondent is licensed. Banks are expected to obtain certifications that the respondent is not a shell bank and does not provide accounts to shell banks, and to watch for the payment patterns that suggest an unsupervised institution is riding along inside an otherwise normal relationship.
What to watch in the data
- No verifiable presence. A counterparty bank with only a registered agent or mailbox address and no traceable operations or staff.
- Licensing havens. Charters from jurisdictions known for selling banking licenses with little supervision.
- Nesting signals. A respondent whose traffic includes originators that look like another, unnamed bank.
- Certification gaps. A respondent that cannot or will not certify it is not a shell bank and does not serve shell banks.
- Opaque ownership. Layered or nominee ownership that obscures who really controls the institution.
Quick questions
Is a shell bank the same as a shell company?
No. A shell company is a business with no real operations; a shell bank specifically holds a banking license but no physical presence and no regulated-group affiliation. The banking license is what makes it uniquely dangerous, because it can plug into payment networks.
Why are shell banks banned rather than just monitored?
Because no supervisor effectively oversees them, there is no reliable way to know their customers, controls, or exposure. Regulators decided the risk is unmanageable, so laws like the USA PATRIOT Act prohibit correspondent relationships with them outright.
How can a shell bank still reach the system?
Through nesting. It routes payments via a legitimate respondent bank that has correspondent access, hiding behind that respondent's account. This is why correspondents must actively check for and prevent indirect shell-bank access.
How do banks confirm a counterparty is not a shell bank?
They obtain certifications and due-diligence documentation confirming the institution has a physical presence, is subject to supervision or belongs to a supervised group, and does not itself provide accounts to shell banks.
Does a foreign branch of a real bank count as a shell bank?
No. A branch or affiliate of a regulated bank that is subject to consolidated supervision by a recognized authority is not a shell bank, even without its own local presence, because oversight still reaches it through the group.
Shell bankと併せて知っておきたい用語
2026年 不正・AMLレポート
予測は不要です。このレポートは、不正・AMLチームが実際に直面していることと、その対応方法を分解して解説します。