Insights on Crypto Payments, Infrastructure, and Operations

AML Program

Pronunciation: A-M-L PROH-gram

Definition

An AML program is the coordinated governance, people, controls, technology, training, testing, and reporting used to manage financial-crime risk. An Anti-Money Laundering program is the complete operating framework an organization uses to prevent, detect, investigate, and report suspected money laundering and related offenses. Its required components depend on jurisdiction, business model, products, customers, and regulatory status. Typical elements include risk assessment, designated leadership, customer due diligence, sanctions screening, transaction monitoring, investigations, reporting, recordkeeping, employee training, control testing, and remediation.

Overview

An Anti-Money Laundering program is the complete operating framework an organization uses to prevent, detect, investigate, and report suspected money laundering and related offenses. Its required components depend on jurisdiction, business model, products, customers, and regulatory status.

Typical elements include risk assessment, designated leadership, customer due diligence, sanctions screening, transaction monitoring, investigations, reporting, recordkeeping, employee training, control testing, and remediation. Technology supports these activities but does not replace accountable decisions or professional judgment.

The program should be proportionate to risk and demonstrably effective, not merely documented. Governance bodies need reliable metrics, independent challenge, adequate resources, and evidence that findings, data limitations, false positives, and emerging threats receive timely treatment.

An AML program is the coordinated governance, people, controls, technology, training, testing, and reporting used to manage financial-crime risk. A credible AML program integrates policy, operations, data, oversight, and testing into one risk-based system that can demonstrate effectiveness.

Implementation of AML Program should map the coordinated governance, people, controls, technology, training, testing, and reporting used to manage financial-crime risk to the applicable entity, product, customer, transaction, and jurisdictional scope. Evidence for coordinated governance, people, and controls should preserve the governing requirement, policy version, control execution, exception decision, owner, and review date. Material changes affecting the AML program and coordinated governance, people, and controls should trigger reassessment instead of silent reuse of an outdated conclusion.

Assurance work for AML Program should sample records involving coordinated governance, people, and controls, test whether stated procedures operated in practice, and keep corrective actions open until a qualified reviewer verifies closure.

Key Takeaway

A credible AML program integrates policy, operations, data, oversight, and testing into one risk-based system that can demonstrate effectiveness.

Sources

  1. FATF Documentation: Virtual Assets — FATF (2026-07-30)
  2. FATF Documentation: Fatf Recommendations — FATF (2026-07-30)