AML Control

Overview

Context and purpose

An Anti-Money Laundering control is a specific measure within a broader compliance program. Examples include customer identification, sanctions screening, risk rating, transaction monitoring , enhanced due diligence, case investigation, recordkeeping, and suspicious activity escalation or reporting. Controls may be preventive, detective, or corrective and should correspond to identified products, customers, channels, jurisdictions, and transaction risks. A control’s design alone is insufficient if data are incomplete, thresholds are inappropriate, alerts are ignored, or staff lack authority. Organizations should document ownership, frequency, evidence, exceptions, and expected outcomes for each control. Testing and monitoring must confirm that the control operates effectively, while findings lead to remediation, tuning, training, or changes in risk acceptance. An AML control is effective only when it addresses a defined risk, operates consistently, produces evidence, and receives meaningful follow-up. Evidence for policy, process, and system should preserve the governing requirement, policy version, control execution, exception decision, owner, and review date.

How it works

An AML control is a measure used to manage money-laundering risk under applicable laws and policies. Depending on the role and jurisdiction, controls can include due diligence, transaction monitoring, escalation and recordkeeping.

Practical checks and failure points

Document accountable ownership, legal scope, risk-based thresholds, escalation and tests of control effectiveness.

Related concepts

Compliance Alert · Sanctions Match

Further reading

• www.fatf-gafi.org official reference