What is Shell bank?

What is a shell bank?

A shell bank holds a banking license but has no real operations behind it: no offices, no staff, no genuine place of business, and no mind and management actually running it in the country that licensed it. Critically, it is also not part of a regulated financial group that would be subject to consolidated supervision. That combination means no competent authority is effectively overseeing its books.

The reason this matters for AML is simple. A normal bank sits inside a web of oversight: a regulator, examinations, capital rules, and an AML program someone is accountable for. A shell bank has none of that, so it can move money with essentially no scrutiny. That makes it an ideal conduit for laundering proceeds, evading sanctions, and financing illicit activity while wearing the respectable label of a bank.

Because of that, laws like the USA PATRIOT Act and standards from bodies like the Wolfsberg Group prohibit regulated banks from maintaining correspondent accounts with shell banks, and require them to take steps to ensure their correspondent accounts are not being used indirectly by a shell bank through nesting.

Shell bank versus a real bank

The gap between a shell bank and a supervised institution is exactly what the rules key on:

What changes	Shell bank	Regulated bank
Physical presence	None; an address only	Real offices and staff
Mind and management	Not genuinely located anywhere	Decision-makers on the ground
Supervision	No effective oversight	Examined by a regulator
Group affiliation	Standalone, unregulated	Part of a supervised group
Correspondent access	Prohibited under AML law	Permitted with due diligence

Who is involved?

Who	Their role
The shell bank	Holds a license but no real operations; seeks a way into the mainstream financial system.
The correspondent bank	Barred from dealing with it directly, and expected to prevent indirect access through nesting.
The respondent bank	Can become the entry point if it nests a shell bank behind its own correspondent account.
The illicit actor	Uses the shell bank as an unsupervised channel to move and launder funds.

What it looks like in practice

An entity registers a bank in a jurisdiction that sells licenses cheaply, listing only a mailbox address and a local agent. It has no branch, no employees, and no regulator meaningfully examining it. It cannot open a correspondent account at a major bank directly, because AML rules forbid it.

So it approaches a small foreign respondent bank that already has correspondent access, and arranges to route its payments through that respondent's account. The correspondent, believing it is only serving the respondent it vetted, unknowingly processes the shell bank's flows. When the correspondent later probes the respondent for nested relationships, the shell bank surfaces, and the account is terminated.

Why it matters to operators

Shell banks are a bright-line prohibition, not a risk to be priced and managed. A regulated bank cannot lawfully hold a correspondent relationship with one, and dealing with a shell bank, even indirectly, is a serious compliance failure that regulators treat harshly. The hard part is rarely the direct case; it is the indirect exposure through nesting, where a shell bank hides behind a legitimate respondent.

That is why correspondent due diligence has to go beyond confirming a respondent is licensed. Banks are expected to obtain certifications that the respondent is not a shell bank and does not provide accounts to shell banks, and to watch for the payment patterns that suggest an unsupervised institution is riding along inside an otherwise normal relationship.

What to watch in the data

No verifiable presence. A counterparty bank with only a registered agent or mailbox address and no traceable operations or staff.
Licensing havens. Charters from jurisdictions known for selling banking licenses with little supervision.
Nesting signals. A respondent whose traffic includes originators that look like another, unnamed bank.
Certification gaps. A respondent that cannot or will not certify it is not a shell bank and does not serve shell banks.
Opaque ownership. Layered or nominee ownership that obscures who really controls the institution.

Quick questions

Is a shell bank the same as a shell company?

No. A shell company is a business with no real operations; a shell bank specifically holds a banking license but no physical presence and no regulated-group affiliation. The banking license is what makes it uniquely dangerous, because it can plug into payment networks.

Why are shell banks banned rather than just monitored?

Because no supervisor effectively oversees them, there is no reliable way to know their customers, controls, or exposure. Regulators decided the risk is unmanageable, so laws like the USA PATRIOT Act prohibit correspondent relationships with them outright.

How can a shell bank still reach the system?

Through nesting. It routes payments via a legitimate respondent bank that has correspondent access, hiding behind that respondent's account. This is why correspondents must actively check for and prevent indirect shell-bank access.

How do banks confirm a counterparty is not a shell bank?

They obtain certifications and due-diligence documentation confirming the institution has a physical presence, is subject to supervision or belongs to a supervised group, and does not itself provide accounts to shell banks.

Does a foreign branch of a real bank count as a shell bank?

No. A branch or affiliate of a regulated bank that is subject to consolidated supervision by a recognized authority is not a shell bank, even without its own local presence, because oversight still reaches it through the group.