Chapter 2: Global Regulatory Framework

2.1 The Financial Action Task Force (FATF)

The Financial Action Task Force stands as the global standard-setter for AML/CFT (Anti-Money Laundering and Countering the Financing of Terrorism) measures. Established in 1989 by the G7 summit in Paris, FATF has evolved into an inter-governmental body comprising 39 member jurisdictions and 2 regional organizations, representing major financial centers worldwide.

2.1.1 FATF's Mandate and Mission

FATF's primary objectives include developing policies to combat money laundering and terrorist financing, promoting the effective implementation of these measures globally, and identifying and responding to emerging threats. The organization operates through consensus among its members, producing recommendations that, while not legally binding in themselves, form the basis for national legislation in virtually every jurisdiction.

2.1.2 The 40 Recommendations

FATF's 40 Recommendations constitute the international standard for AML/CFT efforts. Originally issued in 1990 and subsequently revised in 1996, 2003, and comprehensively updated in 2012, these recommendations cover:

1. AML/CFT Policies and Coordination: National risk assessment, cooperation, and policy development
2. Money Laundering and Confiscation: Criminalization of money laundering and asset recovery
3. Terrorist Financing and Financing of Proliferation: CFT measures and targeted financial sanctions
4. Preventive Measures: Customer due diligence, record-keeping, and reporting by financial institutions
5. Transparency of Legal Persons and Arrangements: Beneficial ownership requirements
6. Powers and Responsibilities of Authorities: Supervision, investigation, and enforcement
7. International Cooperation: Mutual legal assistance, extradition, and information sharing

2.1.3 Mutual Evaluation Process

FATF conducts mutual evaluations of member countries to assess compliance with the 40 Recommendations. This rigorous peer review process examines both technical compliance (the legal and regulatory framework) and effectiveness (the actual implementation and results achieved). Countries receive detailed evaluation reports with ratings and recommendations for improvement.

The evaluation process typically follows a multi-year cycle:

• Year 1-2: Country prepares self-assessment and provides detailed information
• Year 2-3: On-site visit by evaluation team, interviews with government officials and private sector
• Year 3: Draft report prepared, reviewed, and finalized
• Post-Evaluation: Country reports on progress addressing deficiencies; follow-up evaluations as needed

2.1.4 High-Risk Jurisdictions and Enhanced Monitoring

FATF maintains lists of jurisdictions with strategic AML/CFT deficiencies. These lists have significant implications for affected countries and their financial institutions:

List Type	Description	Implications
Grey List (Increased Monitoring)	Countries with strategic deficiencies who have committed to action plans	Enhanced due diligence required; reputational impact; potential restrictions
Black List (Call for Action)	Countries with significant strategic deficiencies posing risks to international financial system	Counter-measures required; severe restrictions on transactions; major business impact

2.2 Regional Bodies and FATF-Style Regional Bodies (FSRBs)

FATF works closely with nine FATF-Style Regional Bodies, which apply FATF standards in their respective regions and conduct mutual evaluations of their members. These FSRBs extend FATF's reach to over 200 jurisdictions globally.

2.2.1 Key Regional Bodies

Asia/Pacific Group on Money Laundering (APG): Covering 41 jurisdictions in the Asia-Pacific region, APG focuses on the unique challenges facing emerging economies, including informal value transfer systems, cash-based economies, and rapid fintech growth.

Caribbean Financial Action Task Force (CFATF): Comprising 25 member states in the Caribbean region, CFATF addresses risks related to offshore finance, international business companies, and the region's role in international money flows.

Committee of Experts on the Evaluation of Anti-Money Laundering Measures and the Financing of Terrorism (MONEYVAL): A permanent monitoring body of the Council of Europe, MONEYVAL evaluates 35 countries not covered by FATF's core membership.

Eurasian Group (EAG): Covering nine member states in the Eurasian region, EAG addresses challenges specific to transitioning economies and cross-border financial flows in the former Soviet sphere.

2.3 Major Jurisdictional Frameworks

2.3.1 United States

The U.S. maintains one of the world's most comprehensive and strictly enforced AML regimes. Key legislation and regulations include:

Bank Secrecy Act (BSA) / Anti-Money Laundering Act: The foundation of U.S. AML requirements, requiring financial institutions to assist government agencies in detecting and preventing money laundering. Recent amendments include the Anti-Money Laundering Act of 2020, which represents the most significant BSA reform in decades.

USA PATRIOT Act: Enacted after 9/11, this law dramatically expanded AML requirements, introduced enhanced due diligence for certain accounts, and strengthened information sharing provisions.

FinCEN Regulations: The Financial Crimes Enforcement Network, a bureau of the U.S. Treasury Department, issues detailed implementing regulations covering customer identification programs, customer due diligence, beneficial ownership requirements, and suspicious activity reporting.

Key U.S. Requirements:

• Currency Transaction Reports (CTRs) for cash transactions exceeding $10,000
• Suspicious Activity Reports (SARs) for suspected money laundering or fraud
• Customer Identification Program (CIP) verifying identity of all customers
• Customer Due Diligence (CDD) including beneficial ownership identification
• Enhanced Due Diligence for high-risk accounts
• Written AML programs with designated compliance officers
• Independent testing and employee training

2.3.2 European Union

The EU has developed a comprehensive AML framework through a series of Anti-Money Laundering Directives (AMLDs), which member states must transpose into national law.

Fifth Anti-Money Laundering Directive (5AMLD): Implemented in 2020, this directive expanded the scope of AML obligations to include virtual currency exchanges and wallet providers, enhanced beneficial ownership transparency, and strengthened powers of Financial Intelligence Units (FIUs).

Sixth Anti-Money Laundering Directive (6AMLD): Effective from December 2020, 6AMLD harmonizes the definition of money laundering across member states, expands criminal liability to legal persons, and extends the list of predicate offenses.

Proposed AML Package (2021): The European Commission has proposed creating a new EU AML Authority (AMLA) to enhance supervision and harmonize implementation across member states, along with comprehensive new regulations replacing the directive-based approach.

Key EU Features:

• Risk-based approach to customer due diligence
• Public beneficial ownership registers (with some restrictions following ECJ ruling)
• Enhanced measures for PEPs, including domestic PEPs
• Specific provisions for cryptocurrency service providers
• Enhanced cooperation between FIUs
• Strengthened whistleblower protections

2.3.3 United Kingdom

Post-Brexit, the UK maintains robust AML regulations building on EU directives while developing its own enhancements:

Money Laundering Regulations 2017 (as amended): Implementing EU AML directives with UK-specific enhancements

Proceeds of Crime Act 2002: Criminalizes money laundering and provides powers for asset recovery

Terrorism Act 2000: Addresses terrorist financing

Economic Crime (Transparency and Enforcement) Act 2022: Introduces Register of Overseas Entities, reforms unexplained wealth orders, and enhances sanctions enforcement

The UK's Financial Conduct Authority (FCA) provides detailed guidance and conducts rigorous supervision, with significant enforcement actions for AML failures.

2.3.4 Singapore

Singapore, as a major Asian financial center, maintains stringent AML/CFT requirements aligned with FATF standards:

• Corruption, Drug Trafficking and Other Serious Crimes (Confiscation of Benefits) Act (CDSA)
• Terrorism (Suppression of Financing) Act
• Monetary Authority of Singapore (MAS) Notices on AML/CFT
• Strong supervisory framework with regular inspections
• Advanced digital identity verification initiatives

2.3.5 Hong Kong

Hong Kong maintains an independent AML/CFT regime based on FATF standards:

• Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO)
• Detailed guidelines from regulatory authorities (HKMA, SFC, IA, CR)
• Risk-based approach with emphasis on beneficial ownership transparency
• Enhanced measures following recent FATF evaluation

2.4 Sectoral Standards

2.4.1 Basel Committee on Banking Supervision

The Basel Committee has issued important guidance on AML/CFT for banks:

Customer Due Diligence for Banks (2001, revised 2016): Comprehensive guidance on CDD practices, including identifying customers and beneficial owners, understanding the nature and purpose of business relationships, and conducting ongoing due diligence.

Sound Management of Risks Related to Money Laundering and Financing of Terrorism (2017): Principles-based guidance on governance, risk assessment, policies and procedures, and group-wide programs.

2.4.2 Wolfsberg Group

The Wolfsberg Group, an association of 13 global banks, develops frameworks and guidance on AML/CFT. Their principles and questionnaires have become industry standards, particularly for:

• Correspondent banking
• Private banking
• Trade finance
• Politically exposed persons
• Risk assessment and screening

2.4.3 Insurance Sector

The International Association of Insurance Supervisors (IAIS) has issued guidance on AML/CFT for the insurance sector, recognizing the sector's specific vulnerabilities and risk factors, particularly in life insurance products.

2.5 Sanctions Regimes

Economic sanctions represent a critical component of the AML/CFT framework, though technically separate from traditional AML requirements.

2.5.1 United Nations Sanctions

The UN Security Council imposes sanctions under Chapter VII of the UN Charter. These sanctions, mandatory for all UN member states, typically target:

• States supporting terrorism or threatening international peace
• Terrorist organizations and individuals
• Weapons proliferation activities

2.5.2 U.S. Sanctions (OFAC)

The Office of Foreign Assets Control (OFAC) administers numerous sanctions programs. U.S. sanctions have extraterritorial reach, affecting non-U.S. institutions with U.S. connections (dollar clearing, U.S. subsidiaries, etc.).

OFAC maintains several lists:

• Specially Designated Nationals (SDN) List: Blocked persons and entities
• Sectoral Sanctions Identifications (SSI) List: Restrictions on certain transactions
• Non-SDN Lists: Various sector-specific and country-specific lists

2.5.3 EU Sanctions

The EU maintains autonomous sanctions regimes separate from UN sanctions, targeting countries, entities, and individuals. EU sanctions are binding on all member states and their nationals.

2.6 Cryptocurrency and Virtual Asset Regulations

The rapid growth of cryptocurrency and virtual assets has prompted regulatory evolution worldwide.

2.6.1 FATF Guidance on Virtual Assets

FATF updated its recommendations in 2019 to explicitly include Virtual Asset Service Providers (VASPs), requiring:

• Licensing or registration of VASPs
• Full suite of AML/CFT obligations
• The "Travel Rule": transmitting originator and beneficiary information with transfers
• Risk-based supervision

2.6.2 National Approaches

Jurisdictions have adopted varied approaches to cryptocurrency regulation:

United States: Multiple regulators with overlapping jurisdiction; FinCEN treats VASPs as money services businesses; SEC oversight of security tokens; CFTC for derivatives.

European Union: Markets in Crypto-Assets Regulation (MiCA) creating comprehensive framework; 5AMLD brought crypto exchanges and wallet providers under AML scope.

Singapore: Payment Services Act requires licensing and AML/CFT compliance for digital payment token services.

Japan: Among the first to regulate, requiring registration and strict AML compliance for crypto exchanges.

2.7 Enforcement Trends and Penalties

Global enforcement of AML/CFT requirements has intensified dramatically, with regulators imposing record penalties for violations.

2.7.1 Major Enforcement Actions

Recent years have seen unprecedented fines and settlements:

Institution	Year	Amount	Primary Issues
HSBC	2012	$1.9B	Mexican cartel money laundering, sanctions violations
BNP Paribas	2014	$8.9B	Sudan, Iran, Cuba sanctions violations
JPMorgan	2014	$2.6B	Madoff Ponzi scheme
Danske Bank	Ongoing	TBD	€200B Estonia branch scandal
Westpac	2020	A$1.3B	Transaction monitoring failures, child exploitation

2.7.2 Common Deficiencies Identified

Enforcement actions typically cite recurring issues:

• Inadequate customer due diligence and beneficial ownership identification
• Insufficient transaction monitoring systems or alert investigation
• Failure to file timely suspicious activity reports
• Inadequate governance and compliance programs
• Deficient screening against sanctions lists
• Poor record-keeping and documentation
• Inadequate resources and staffing for compliance functions

2.8 Challenges in Global Harmonization

Despite significant progress toward international standards, challenges remain:

2.8.1 Jurisdictional Variations

While FATF provides common standards, national implementation varies significantly based on legal traditions, enforcement philosophies, and local risks. This creates compliance challenges for multinational institutions.

2.8.2 Extraterritorial Reach

U.S. regulations in particular have significant extraterritorial impact, affecting non-U.S. institutions that clear dollars or have U.S. operations. This creates complex compliance obligations and potential conflicts between jurisdictions.

2.8.3 De-risking and Financial Inclusion

Stringent AML requirements have led some institutions to "de-risk" by withdrawing from higher-risk markets or customer segments. This raises concerns about financial inclusion and access, particularly in developing countries and for remittances.

2.8.4 Privacy and Data Protection

AML requirements for customer information and cross-border data sharing can conflict with data protection laws like GDPR, requiring careful balancing of compliance obligations.

2.9 Future Developments

The regulatory landscape continues to evolve:

Enhanced Beneficial Ownership Transparency: Global trend toward public or semi-public beneficial ownership registers

Digital Identity Solutions: Growing acceptance of digital identity verification to streamline KYC

Information Sharing: Enhanced public-private partnerships and cross-border information exchange

Technology Regulation: Evolving frameworks for DeFi, stablecoins, and other innovations

ESG Integration: Increasing focus on environmental crimes as predicate offenses for money laundering

2.10 Conclusion

The global AML/CFT regulatory framework represents a complex web of international standards, national laws, and sectoral guidance. While FATF provides the foundation, successful compliance requires understanding and navigating numerous overlapping and sometimes conflicting requirements across jurisdictions.

For financial institutions, this means maintaining robust programs capable of meeting the highest applicable standards, staying current with regulatory developments across multiple jurisdictions, and investing in systems and expertise to manage this complexity effectively.