Anti-money laundering (AML) is the set of laws, regulations, and internal controls that financial institutions and regulated businesses use to detect and prevent criminals from disguising illegally obtained funds as legitimate income. AML programs require verifying customer identities, monitoring transactions for suspicious patterns, and reporting activity that crosses certain risk thresholds to regulators.

Money laundering typically moves through three stages. Placement introduces illicit cash into the financial system. Layering moves funds through multiple accounts, shell companies, or cross-border transfers to obscure their origin. Integration returns the funds to the criminal as seemingly legitimate assets, ready to spend or invest. AML controls exist to interrupt this cycle at each stage, not just at the point of deposit.

Frequently Asked Questions

What triggers a Suspicious Activity Report (SAR)?

A SAR gets filed when a transaction or pattern of transactions looks inconsistent with a customer's known profile or has no clear legitimate business purpose, regardless of dollar amount. Common triggers include structuring deposits to stay under reporting thresholds, rapid movement of funds through accounts with no economic reason, and transactions involving high-risk jurisdictions.

How is AML different from KYC?

Know Your Customer (KYC) is the identity verification step that happens once, typically at onboarding. AML is the broader ongoing program that KYC feeds into, covering transaction monitoring, sanctions screening, and reporting for the life of the customer relationship.

What industries are required to have AML programs?

Banks, credit unions, money service businesses, casinos, broker-dealers, and increasingly fintechs and payment processors are all subject to AML regulation in most jurisdictions. The specific requirements scale with the type of financial activity a business handles.

What happens if a company fails an AML audit?

Regulators can issue consent orders, require costly remediation programs, restrict growth including blocking mergers or new product launches, and levy fines. In the most severe cases, individual compliance officers have faced personal liability.

What's the difference between AML and sanctions screening?

Sanctions screening checks whether a specific person, entity, or country appears on a government watchlist. AML is the umbrella discipline that includes sanctions screening alongside transaction monitoring, KYC, and SAR filing as one part of a complete program.

Does automating AML transaction monitoring increase compliance risk?

Zamp addresses this by keeping every automated decision auditable: AI agents pre-screen alerts, correlate signals across banking and CRM systems, and draft investigation notes, but every case that meets a risk threshold is routed to a human analyst before it's closed. The goal is cutting the false-positive workload, not removing human judgment from actual risk decisions.

Where can I read more about AML automation in practice?

See AML Automation: How It Works for the full breakdown of how AI agents fit into an AML program end to end.