Practitioner Intelligence
Transaction Monitoring
Legacy rules-based systems generate massive false-positive volumes. Optimization means shifting from simple threshold alerts to tracking complex transactional behavior over time.
Core typologies
Structuring & smurfing
Breaking large amounts of cash into deposits that fall just below CTR reporting thresholds. Retail institutions watch for multiple branch deposits in a single day, immediately followed by rapid wire transfers out to external financial institutions.
Pass-through accounts
Accounts that receive wires or ACH deposits and rapidly transfer them elsewhere while maintaining a low daily balance. Often indicative of mule networks or professional money laundering organizations exploiting the banking system’s speed.
Funnel accounts
A central account receiving deposits from multiple distinct geographic locations, rapidly consolidated and wired out. Common in trade-based schemes and cartel finance — geography is the tell.
The tuning discipline
An alert threshold is a model parameter, and regulators treat it as one. Above-the-line / below-the-line testing, documented scenario coverage against your risk assessment, and periodic revalidation are not optional hygiene — they are the difference between a monitoring program and a liability generator.
The false-positive economy
Every untuned rule taxes your investigators. A program producing 95 percent false positives isn't conservative — it is burying true risk under noise and burning the analysts who would find it. Alert quality, not alert volume, is the metric that matters to outcomes and to examiners.
Practitioner Note
Real-time payment rails have collapsed the window between placement and layering from days to seconds. Monitoring architectures designed for overnight batch cannot defend real-time money. If your rails are instant, your detection posture must be too — that is the operational case for the AI-assisted approaches covered in the AI in AML briefing.
Continue Reading
Monitoring finds the suspicious. Screening blocks the prohibited.
Sanctions is the one discipline where strict liability applies — intent does not matter, and a single missed interdiction is an enforcement action.