Chapter 2 International AML CFT Standards Flashcards
Financial Action Task Force
Originally referred to as the G-7 Financial Action Task Force, today FATF
serves as the vanguard in promulgating AML guidance to governmental
bodies around the globe. The International Monetary Fund (IMF) and the World
Bank also offer important perspectives to the field
The intergovernmental body is based at the Organisation for Economic Cooperation and Development (OECD) in Paris, where it has its own secretariat. FATF can be accessed online
FATF Objectives
set standards and promote effective
implementation of legal, regulatory, and operational measures for combating
money laundering, terrorist financing, and other related threats
FATF monitors countries’ progress in implementing the FATF Recommendations
- Spreading the AML message worldwide
- Monitoring implementation of the FATF Recommendations among its
members - Reviewing money laundering trends and countermeasures
Spreading the AML message worldwide
FATF promotes the establishment of a global AML and anti-terrorist financing
network based on expansion of its membership, the development of regional
AML bodies in various parts of the world, and cooperation with other
international organizations
Monitoring implementation of the FATF Recommendations among its members
FATF adopted a new approach to
assessing technical compliance with the Recommendations
Based on experiences of FATF-Style Regional Bodies (FSRBs), the IMF, and the World Bank in conducting
compliance assessments with earlier versions of the FATF Recommendations
The methodology focuses on the technical compliance assessment, effectiveness assessment, and reviewing money laundering trends and countermeasures.
Technical compliance assessment
The technical compliance assessment evaluates the specific requirements of
the FATF Recommendations, including how a member relates them to its
relevant legal and institutional frameworks and the powers and procedures of
its competent authorities. The focus is on the fundamental building blocks of
an AML/CFT system
Effectiveness assessment
The goal of the effectiveness assessment is to assess the adequacy of a
member’s implementation of the FATF Recommendations and ensure there is
evidence that a member is achieving a defined set of outcomes
Effectiveness is evaluated on the basis of 11 Immediate Outcomes:
1. Money laundering/terrorist financing (ML/TF) risks are known, and actions
are coordinated to combat or thwart the proliferation of ML/TF.
2. International cooperation provides actionable information to use against
criminals.
3. Supervisors regulate financial institutions and nonbank financial institutions
(NBFIs) and their risk-based AML/CFT programs.
4. Financial institutions and NBFIs apply preventive measures and report
suspicious transactions.
5. Legal persons are not misused for ML/TF, and beneficial ownership
information is available to authorities.
6. Financial intelligence information is used by authorities in money laundering
and terrorist financing investigations.
7. Money laundering offenses are investigated and criminally prosecuted, and
sanctions are imposed.
8. Proceeds of crime are confiscated.
9. Terrorist financing offenses are investigated and criminally prosecuted, and
sanctions are imposed.
10. Terrorists and terrorist organizations are prevented from raising, moving,
and using money and are not permitted to abuse NPOs.
11. Persons and organizations involved in the proliferation of weapons of mass
destruction are prevented from raising, moving, and using money.
Three Intermediate Outcomes that
represent major thematic goals of AML/CFT measures
- Policy, cooperation, and coordination to mitigate money laundering and
terrorist financing - Prevention of proceeds of crime entering into the financial system and
reporting of such when they do - Detection and disruption of ML/TF threats
Follow up assessments
Under the fourth round of FATF mutual evaluations, whether under regular or an
enhanced follow-up status, follow-up assessments are conducted after five
years.
Fines and Penalties-FATF
FATF does not have the power to impose fines or penalties against recalcitrant
member nations
approach ranges from requiring the country to deliver a progress report at plenary
meetings to suspension of membership
In September 1996, Turkey became the first FATF member exposed to the peer pressure policy. Although a member since 1990, Turkey had yet to criminalize money laundering
Reviewing money laundering trends and countermeasures
October 2013, FATF and the Egmont Group of financial intelligence units (FIUs) released a research report titled Money Laundering
and Terrorist Financing Through Trade in Diamonds, which examined the
vulnerabilities and risks of the “diamond pipeline”
FATF has been working under five-year mandates. In 2019, on FATF’s 30th anniversary, FATF members adopted of an open-ended mandate. This mandate acknowledges that FATF’s mission will continue to exist, as there are enduring concerns for the integrity of the financial system..
FATF Three main activities
- Standard setting
- Ensuring effective compliance with the standards
- Identifying money laundering and terrorist financing threats
FATF 40 Recommendations
These measures are detailed in the 40
Recommendations, which were first issued in 1990
- Identification of risks
- Development of appropriate policies
- Criminal justice system and law enforcement
Financial system and its regulation - Transparency of legal persons and arrangements
- International cooperation
With its 2012 revision, FATF introduced risk
assessment as the first recommendation, underscoring that assessing risk is
the first step in combating money laundering and terrorist financing
FATF 40 recommendations-2003 revision
The most important changes made to the Recommendations in 2003 were:
- Expanded coverage to include terrorist financing
- Widened the categories of business that should be covered by national
laws, including real estate agents, precious metals dealers, accountants,
lawyers, and trust services providers - Specified compliance procedures on issues such as customer
identification and due diligence - Adopted a clearer definition of money laundering predicate offenses
- Encouraged prohibition of “shell banks,”
- Urged improved transparency of legal persons and arrangements
- Included stronger safeguards, notably regarding international cooperation
in, for example, terrorist financing investigations
FATF 40 recommendations-2012revision
- Manage, and mitigate AML/CFT risks using a risk-based approach
- More information on assessing risks and applying a risk-based approach to
all AML/CFT efforts
3.Creation of a Recommendation for targeted financial sanctions related to
the proliferation of weapons of mass destruction (WMD)
4.More attention on domestic PEPs and individuals entrusted with prominent
functions by international organizations
- New requirement for the identification and assessment of risks of new
products prior to their launch - New requirements on obtaining and sending accurate originator,
intermediary, and beneficiary information in wire transfers (travel rule) - New requirement for financial groups to implement group-wide AML/CFT
programs and establish procedures for sharing information within the
group
8.Inclusion of tax crimes within the scope of designated categories of
offenses for money laundering
FATF Recommendations number 1-2
AML/CFT Policies and Coordination
* Assessing risks and applying a riskbased approach
* National cooperation and
coordination
FATF Recommendations number 3-4
Money Laundering and Confiscation
* Money laundering offenses
* Confiscation and provisional
measures
FATF Recommendations number 5-8
Terrorist Financing and Financing of
Proliferation
* Terrorist financing offenses
* Targeted financial sanctions related
to terrorism and terrorist financing
* Targeted financial sanctions related
to proliferation
* Nonprofit organizations
FATF Recommendations number 9-23
Financial and Nonfinancial Institution
Preventative Measures
* Financial institution secrecy laws
* Customer due diligence and
recordkeeping
* Additional measures for specific
customers and activities
* Reliance, controls, and financial
groups
* Reporting of suspicious transactions
* Designated nonfinancial businesses
and professions
FATF Recommendations number 24-25
Transparency and Beneficial Ownership
of Legal Persons and Arrangements
* Transparency and beneficial
ownership of legal persons
* Transparency and beneficial
ownership of legal arrangements
FATF Recommendations number 26-35
Powers and Responsibilities of
Competent Authorities and Other
Institutional Measures
* Regulation and supervision
* Operational and law enforcement
* General requirements
* Sanctions
FATF Recommendations number 36-40
International Cooperation
* International instruments
* Mutual legal assistance
* Mutual legal assistance regarding
freezing and confiscation
* Extradition
* Other forms of international
cooperation
FATF 40 Recommendations Highlights
1.Using a risk based approach
2.Designated categories of offenses-precursory crimes to ML
3.Terrorist financing and financing of proliferation-criminalize TF, freeze accounts etc
4.Knowledge and criminal liability-willful blindness,” or deliberate avoidance of knowledge of the facts
5.CDD Measures -Identify ID,UBO,nature of relationship,ongoing CDD
6.Maintain records of transactions
7.Rely on other parties for CDD
8.Establish a group wide AML/CFT program.
Additional CDD on specific customers and activities:
1.Identify PEPs extra measures must be taken
2.Cross border correspondent banking-respondent institution’s business, reputation, supervision, and AML/CFT controls
3.Money or value transfer services (MVTS): Countries should ensure that
MVTSs are licensed or registered and subject to appropriate AML/CFT
requirements.
4.New products, delivery mechanisms, and technologies-assess risks prior to onboarding
5.Wire Transfers-Countries should require relevant ID information, monitor wire transfers for TF/ML
6.STR Reporting-Must have reasonable grounds befor reporting to FIU
7.Derisking-terminating or restricting relationships to manage risks
8.Expanded coverage of industries-DNFBPs-Casinos,Real estate agents, Dealers in precious materials,Lawyers,Notaries and other independent legal professionals,Trust and company service providers.-Specific thresholds for each type of firm. Fin org-$15,000, Casinos-$3,000, dealers-$15,000
9.Transparency and beneficial ownership of legal persons and arrangements-prevent misuse of legal person for ML/TF
10.Powers and responsibilities of competent authorities: Countries should
oversee financial organizations to ensure they are implementing the FATF
Recommendations
11.* International cooperation:-Countries should ensure that they provide the most assistance possible and should ratify UN resolutions on ML/TF.
FATF membership criteria
- The jurisdiction should be strategically important based on quantitative and qualitative indicators and additional considerations.
*
Quantitative Indicators
o Size of gross domestic product (GDP)
o Size of the banking, insurance, and securities sectors
o Population
- Qualitative Indicators
o Impact on the global financial system, including the degree of
openness of the financial sector and its interaction with international
markets
o Active participation in an FSRB (Financial Action Task Force-Style Regional Body)and regional prominence in AML/CFT efforts
o Level of AML/CFT risks faced and efforts to combat those risks - Additional considerations
o Level of adherence to financial sector standards
o Participation in other relevant international organizations
- FATF’s geographic balance should be enhanced by the jurisdiction
becoming a member
Process for FATF membership-Step 1—Engaging with the country and granting observership
- Submit Written committment endorsing FATF recommendations and AML/CFT Methodology 2013
2.Agree to undergo evaluation periodically
3.Agree to participate Actively in the FATF giving support wherever needed
The Plenary decides that a high-level visit to the country is warranted to verify the written commitment with the relevant ministers, representatives of the Parliament, and competent authorities
Recommendations essential for the establishment of a robust AML/CFT regime, such as Recommendations 3, 5, 10, 11 and 20, within 3 years
Based on the outcomes of the report of the high-level visit, the Plenary may decide to invite the country to participate in FATF as an observer, beginning with the next Plenary meeting.
may appoint a contact group to advise as to the appropriate time to extend such an invitation to the country
The contact group is open to all FATF members and associate members and should include at least one member of the Steering Group.
Process for FATF membership-Step 2—Carrying out a mutual evaluation, agreeing on an action plan, and
granting membership
Membership is granted if the mutual evaluation is satisfactory. A mutual evaluation is not satisfactory if the country meets one of the following criteria
- Within a maximum of 3 years after being invited to participate in FATF as an observer, the mutual evaluation process for the country should be launched
- Has eight or more noncompliant/partially compliant (NC/PC) ratings for technical compliance
- Is rated NC/PC on any one or more of Recommendations 3, 5, 10, 11 and 20
- Has a low or moderate level of effectiveness for seven or more of the 11 effectiveness outcomes
- Has a low level of effectiveness for four or more of the 11 effectiveness outcomes
If not Satisfactory the country should commit to a satisfactory level within a reasonable time frame.
At each FATF meeting, the Plenary closely monitors the implementation of the country’s action plan
A country will not be granted full membership if it is rated NC/PC on any one or more of Recommendations 3, 5, 10, 11 or 20. Otherwise membership can be granted.
Noncooperative Countries
On February 14, 2000, FATF published an initial report on NCCTs that listed the 25 criteria that help identify relevant detrimental rules and practices and that are inconsistent with the 40 Recommendations
Noncooperative Countries-Loopholes in financial regulations
- No or inadequate regulations or supervision of financial organizations
- Inadequate rules for the licensing or creation of financial organizations, including assessing the backgrounds of managers and beneficial owners
- Inadequate customer identification requirements for financial
organizations - Excessive secrecy provisions regarding financial organizations
- Lack of efficient SAR reporting
Noncooperative Countries-Obstacles raised by other regulatory requirements
- Inadequate commercial law requirements for registration of business and legal entities
- Lack of identification of the beneficial owner(s) of legal and business entities
Noncooperative Countries-Obstacles to international cooperation
- Obstacles to cooperation from administrative authorities
- Obstacles to cooperation from judicial authorities
Noncooperative Countries-Inadequate resources for preventing and detecting money laundering activities
- Lack of resources in public and private sectors
- Absence of an FIU or equivalent mechanism
The next step in the NCCT initiative was the publication in June 2000 of the first review, which identified 15 NCCTs. The NCCT process ultimately involved 24 jurisdictions, including up to 19 jurisdictions at one time, until the jurisdictions eventually took the necessary steps to get off the list.
The NCCT list has been replaced by a new process whereby FATF started identifying jurisdictions with deficiencies in their AML/CFT regimes. This new FATF process was in response to the G-20 countries’ efforts to publicly identify high-risk jurisdictions and issue regular updates on jurisdictions with strategic deficiencies
FATF’s two public documents-
1.High-Risk Jurisdictions Subject to a Call for Action (previously known as Public Statement)
This list is often referred to in the media as the “FATF blacklist.
2.Jurisdictions under Increased Monitoring (previously
known as Improving Global AML/CFT Compliance: On-going process)
identifies countries that are already actively engaging with FATF to address strategic deficiencies in their regimes to counter money laundering, terrorist financing, and proliferation financing
This list is externally referred to as the “FATF greylist.”
a country is considered to have made significant progress in improving its AML/CFT regime when it establishes a legal and regulatory framework for meeting its commitments
Review process
FATF’s International Cooperation Review Group (ICRG) oversees the process
of identifying and reviewing jurisdictions with strategic AML/CFT deficiencies.
The process began in 2007 and was enhanced in 2009. It was updated in 2015
to reflect the revised FATF standards and mutual evaluation process
Results are considered poor when
20 or more Non Compliant and Partially Complaint Ratings
or Low level of effectiveness for 6 or more of the 11 outcomes
International Cooperation Review Group (ICRG) oversees the process of identifying and reviewing jurisdictions with strategic AML/CFT deficiencies
Once on ICRG scope jurisdiction has 1 year to work with FSRB or FATF to address issues before formal review.
FATF then prioritizes the review of those countries that have more significant financial sectors, such as US$5 billion or more in financial sector assets
The Basel Committee on Banking
Supervision
established in 1974 by the central bank governors of the Group of Ten (G-10) countries, promotes sound
supervisory standards worldwide
Its mandate is to strengthen
the regulation, supervision, and practices of banks worldwide to enhance financial stability. The Committee is best known for its landmark publications on capital adequacy (Basel I, Basel II, and Basel III)
MEMBERS OF THE BASEL COMMITTEE ON BANK SUPERVISION
Table on Page 184-186
OBSERVERS OF THE BASEL COMMITTEE ON BANK SUPERVISION
Pages also on page 186
History of the Basel Committee
In 1988, the Basel Committee issued a Statement of Principles, called
Prevention of Criminal Use of the Banking System for the Purpose of Money
Laundering
The statement set out principles with respect to:
- Customer identification
- Compliance with laws
- Conformity with high ethical standards and local laws and regulations
- Full cooperation with national law enforcement to the extent permitted
without breaching customer confidentiality - Staff training
- Recordkeeping and audits
In 1997, the Basel Committee issued its Core Principles for Effective Banking
Supervision, a basic reference for authorities worldwide
It also urged nations to adopt FATF’s 40
Recommendations
The Core Principles were prepared with the assistance of 15 non-G-10 nations, including Brazil, Chile, Hong Kong Special Administrative Region (SAR, China), Mexico, Russia, Singapore, and Thailand.
The Core Principles for Effective Banking Supervision has been periodically
updated. The update in 2012 combined the core principles content with the
assessment methodology to create a more comprehensive document. It also
revised the structure of the 29 core principles, dividing them more clearly
between principles for banking supervisors and for banks
The Basel Committee’s KYC guidance
use of due diligence requirements to mitigate the dangers of corrupt customers
Sound KYC policies and procedures are critical to protecting the safety and soundness of banks, as well as the integrity of banking systems
- The four key elements of a KYC program:
o Customer identification
o Risk management
o Customer acceptance policy
o Ongoing monitoring
Banks should ID customers and monitor accounts
Numbered accounts should not be prohibited, but they should be
subjected to exactly the same KYC procedures as other customer
accounts.
The Basel Committee’s KYC guidance-High risk customers
Issues pertaining to High risk customers include:
1.Trust, Nominees, Fiduciary
2.Corporate Vehicles
3.Introduced Businesses
4.Customer accounts opened by intermediaries
5.PEPs
6. Non face to face customers
7.Correspondent Banking
Banks should develop policies to identify customer background,country, business and other risk indicators
The Basel Committee-KYC Guidance
1.Know identity of Corporations operating accounts and relationships if using intermediaries.
2.Use standard procedures when dealing with non face to face clients
3.Periodic bank wide training to be provided
4.Internal Audit and Compliance should regulary review
5.Ongoing monitoring of high risk accounts
6.Bank regulators should ensure that bank staff follow KYC related procedures
The Basel Committee-Account opening Guidelines
In February 2003, the Committee issued account opening and customer identification guidelines and a general guide to good practices based on the principles of
the Committee’s paper
The Basel Committee-Consolidated KYC Risk Management
Released in 2004 as a complement to its CDD issued for banks in 2001.
addresses the need for banks to adopt a global approach and apply the elements necessary for a sound KYC program to both the parent bank or head office and all of its branches and subsidiaries
These elements consist of risk management, customer acceptance and identification policies, and ongoing monitoring of high-risk accounts
The Basel Committee-Recent Guidance
Jan 2014-Sound Management of Risks Related to Money Laundering and Financing of Terrorism that superseded previous publications on customer due diligence
for banks and know-your-customer risk management
The guidelines discuss the following controls for banks to implement:
1.Risk analysis and Governance-use inherent and residual risks
2.Proper governance arrangements for a culture of Compliance the board should oversee and approve policies for risk, risk management and Compliance
3.Board should appoint a Chief AML officer.
The Basel Committee-Three lines of defense-Business
- The line of business, or the first line of defense
Is responsible for creating, implementing, and maintaining policies and procedures, as
well as communicating them to all personnel.
The Basel Committee-Three lines of defense-AML and Compliance
- The AML compliance and internal control functions
AML officer is responsible for ongoing monitoring for AML compliance
the AML officer must have sufficient independence from the business
lines to prevent conflicts of interest and unbiased advice and counsel.
The officer should not be entrusted with the responsibilities of data
protection or internal audit
The Basel Committee-Three lines of defense-Audit
- The audit function, or the third line of defense
should report to the audit
committee of the board of directors (or a similar oversight body) and
independently evaluate the risk management and controls of the bank.
accomplished through periodic assessments, including the
adequacy of the bank’s controls to mitigate the identified risks, effectiveness of the bank’s staff’s execution of the controls, effectiveness of the compliance oversight and quality controls, and effectiveness of the training.
Audits should be risk based
The Basel Committee-CDD and Acceptance
Banks should develop a customer
acceptance policy to identify customers that are likely to pose a higher
money laundering risk (e.g., PEPs) and relationships the bank will not
accept
KYC Utility or third party database can be but the following needs to be considered:
o The utility specifies the date of the last update and when the information was last confirmed with the source.
o The utility clearly specifies the source of the information (e.g., the customer itself, a public registry)
The Basel Committee-Customer Verification
(1) identification of the customer (whether an individual or a legal person) and
any beneficial owners or authorized signatories
(2) assessment of the customer’s risk profile information
(3) verification of the identity of the
customer and any beneficial owners or authorized signatories, as required
by applicable law, using reliable documentary and/or nondocumentary
sources
(4) further risk-based verification, such as verifying source of wealth and source of funds
The Basel Committee-Minimum Information
legal name, residential address, unique identification number or other identifier,
and date and place of birth
Other info based on risk: Other names used, business address, residency status, occupation, income, expected use of the account for high risk income sources, personal reference or verification of employment
Documentary ID: Photo ID or using a utility to confirm address
Non documentary: public registers, private databases and other independent sources
Banks can use written declaration for ownership but not rely solely on them
Transaction monitoring systems and ongoing monitoring
AML risks require more than just appropriate policies and procedures; banks must have adequate and appropriate monitoring systems. For most banks, this will involve an automated transaction monitoring system
Bank should document why it does not need a system if not implementing an automated system.
The transaction monitoring system should allow the bank to gain a centralized knowledge of information
Use TMS to conduct ongoing investigations