What is AML?
Anti-Money Laundering
📖 Definition
AML, Anti-Money Laundering, is the body of laws and procedures that require banks, exchanges, and other financial businesses to verify customer identities, monitor transactions, and report suspicious activity so criminal proceeds cannot be disguised as legitimate funds. It is a legal obligation, not a company preference, and KYC identity checks exist mainly because AML law requires them.
Money laundering itself typically moves through three stages that regulators watch for: placement, where illegally obtained cash first enters the financial system, layering, where it is moved through multiple accounts and transactions to obscure its origin, and integration, where it comes back out looking like ordinary income. AML rules exist to interrupt that process at each stage, not just at the account opening step.
The United States passed the first comprehensive AML statute, the Bank Secrecy Act, in 1970, requiring banks to keep records and report large cash transactions. Money laundering became a federal crime in its own right with the Money Laundering Control Act of 1986, and the USA PATRIOT Act of 2001 added stricter customer identification procedures after the September 11 attacks exposed gaps in tracking terrorist financing. Internationally, the Financial Action Task Force, founded by the G7 in 1989, published the 40 Recommendations that now serve as the global AML standard, and the European Union has issued a series of Anti-Money Laundering Directives to bring its member states in line with that standard.
The most recent major update, the US Anti-Money Laundering Act of 2020, modernized these rules for shell companies and cryptocurrency, adding beneficial ownership disclosure and pulling crypto wallets and exchanges under the same reporting requirements banks have followed for decades. This is why a platform that never asked for identification a few years ago may now require a full verification before you can trade, withdraw, or transfer funds.
⚖️ AML vs KYC vs CDD
These three terms get used almost interchangeably, but they describe different layers of the same compliance system. AML is the umbrella law, CDD is the risk-based process that law demands, and KYC is the specific identity-verification step inside that process.
| Term | What It Means | What It Covers |
|---|---|---|
| AML Anti-Money Laundering | The overall legal framework of laws, regulations, and enforcement aimed at stopping money laundering and terrorist financing | Identity checks, transaction monitoring, suspicious activity reporting, recordkeeping, staff training, audits, sanctions screening |
| CDD Customer Due Diligence | The risk-based process AML law requires firms to run on every customer relationship, before and after onboarding | Identity verification, understanding the customer's purpose and expected activity, beneficial ownership, ongoing monitoring, enhanced checks for higher-risk customers |
| KYC Know Your Customer | The specific step of confirming a customer is who they claim to be | ID document checks, selfie or liveness matching, database and watchlist screening, proof of address |
🏢 Where You Will See This
AML obligations reach far beyond traditional banks. Banks and credit unions, broker-dealers and investment advisers, insurance companies selling investment-linked policies, and money service businesses like remittance and payment apps all fall under AML law. Cryptocurrency exchanges and wallet providers were formally added to this list in the United States by the 2020 AMLA update, and international standards from FATF also extend coverage to casinos, precious metals dealers, and certain lawyers and accountants who handle client funds. If a platform asks you to upload an ID and take a selfie, it is very likely doing so to satisfy an AML requirement somewhere behind the scenes.
Frequently Asked Questions
What is the difference between AML and KYC?
AML is the entire legal framework aimed at stopping money laundering and terrorist financing, covering everything from identity checks to transaction monitoring to reporting. KYC is one piece inside that framework, specifically the process of verifying who a customer is using an ID document and a selfie or database check. Every KYC check happens because of an AML requirement, but AML also includes many controls that have nothing to do with identity verification.
What happens if a company fails AML compliance?
Regulators can issue civil money penalties, cease and desist orders, and license restrictions, and in serious or repeated cases individuals can face criminal charges. Under the US Anti-Money Laundering Act of 2020, some violations involving politically exposed persons carry fines up to one million dollars, and global banks have paid multi-billion dollar settlements for large scale AML failures. Reputational damage and loss of banking partnerships often outlast the fine itself.
Does AML apply to crypto exchanges?
Yes. In the United States, the Anti-Money Laundering Act of 2020 brought cryptocurrency exchanges and wallet providers under the same Bank Secrecy Act framework that governs banks, and FATF's international standards extend to virtual asset service providers as well. This is why most crypto platforms now require full identity verification before letting you trade or withdraw.
Who created AML regulations?
The United States passed the first comprehensive AML law, the Bank Secrecy Act, in 1970, and made money laundering itself a federal crime with the Money Laundering Control Act of 1986. Internationally, the Financial Action Task Force, formed by the G7 in 1989, set the 40 Recommendations that most countries now use as the global AML standard, and the European Union has issued its own series of AML Directives to align its member states with that standard.
Having KYC Issues?
Try our free AI analysis or get expert help for guaranteed approval.