Global AML/CFT Regulations:

Financial Action Task Force (FATF) Recommendations: The FATF is an inter-governmental body that sets standards for AML/CFT. Its 40 recommendations provide a framework for countries to prevent and combat money laundering and terrorist financing.

United Nations Convention against Transnational Organized Crime: This convention aims to prevent and combat transnational organized crime, including money laundering.

United Nations Security Council Resolution 1373: This resolution requires countries to take measures to prevent and suppress terrorist financing.

Key AML/CFT Regulations:

• Know Your Customer (KYC): Verify the identity of customers and maintain records of their transactions.
• Transaction Monitoring: Monitor transactions to detect suspicious activity.
• Suspicious Activity Reporting (SAR): Report suspicious transactions to the relevant authorities.
• Customer Due Diligence (CDD): Conduct due diligence on customers to assess their risk profile.
• Beneficial Ownership: Identify and verify the beneficial owners of entities.

Global AML/CFT Regulations:

Overview
Germany’s AML/CFT framework is comprehensive and strongly influenced by EU law, primarily the EU Anti-Money Laundering Directives implemented into national law, notably through the Money Laundering Act (Geldwäschegesetz — GwG). The system aims to prevent money laundering, terrorist financing and the misuse of the financial sector, with detailed requirements for both financial institutions and a broad scope of designated non-financial businesses and professions (DNFBPs).

Key requirements

• Customer Due Diligence (CDD) & KYC: Obligations to identify and verify customers, understand the purpose of business relationships, and apply risk-based customer segmentation. Enhanced Due Diligence for PEPs, high-risk jurisdictions, and complex ownership structures.
• Beneficial ownership transparency: Companies and certain legal entities must provide information on ultimate beneficial owners; trusts and similar arrangements are subject to strict scrutiny.
• Transaction monitoring & reporting: Firms must implement systems to monitor transactions, detect unusual patterns, and file Suspicious Activity Reports (SARs) to the Financial Intelligence Unit (FIU).
• Record-keeping: Detailed retention requirements for identity and transaction records, in line with EU minimums.
• Internal controls & compliance: Mandatory risk assessments, appointing compliance officers, staff training, and independent audits of AML controls.

Supervisory and enforcement authorities

• Federal Financial Supervisory Authority (BaFin): Primary supervisor for banks, insurance companies, securities firms, and other regulated financial institutions; conducts on-site inspections and imposes administrative measures.
• Federal Ministry of Finance & Ministry of the Interior: Policy and legislative roles.
• German FIU (part of the Federal Criminal Police Office – BKA): Receives SARs, conducts analysis and passes cases to law enforcement or prosecutors.
• Professional supervisors: Chambers and sectoral regulators supervise DNFBPs such as lawyers, notaries and auditors where applicable.

Sectoral scope & special considerations
Germany’s approach tightly integrates EU requirements, so cross-border coordination is strong. The GwG applies broadly: credit institutions, financial service providers, trust and company service providers, auditors, notaries, lawyers (in defined contexts), real estate agents, and dealers in high-value goods. Particular scrutiny is applied to correspondent banking, trade finance, real estate transactions, and increasingly to crypto-asset service providers (CASPs), which must comply with licensing, CDD and reporting obligations.

Enforcement & penalties
BaFin and prosecutorial authorities have significant enforcement powers, including hefty administrative fines, license restrictions, and criminal prosecution for severe violations. Enforcement emphasizes deterrence and remediation (strengthening controls after findings), with public enforcement actions against both institutions and senior individuals in egregious cases.

Recent trends & practical notes
Germany continues to tighten rules on beneficial ownership transparency, virtual assets, and the supervision of DNFBPs. Institutions must maintain robust risk-based frameworks and expect rigorous inspections and heightened expectations for record-keeping and data quality.

Global AML/CFT Regulations:

China maintains a comprehensive and highly centralized AML/CFT framework designed to address risks across both traditional financial sectors and rapidly growing digital platforms. The regulatory system is primarily governed by the Anti-Money Laundering Law, the Counter-Terrorism Law, and a series of administrative measures issued by the People’s Bank of China (PBOC). These regulations apply to banks, payment institutions, securities firms, insurance companies, and a wide range of designated non-financial businesses, including online finance, real-estate sectors, and professional intermediaries.

A core component of China’s AML/CFT framework is strict Know Your Customer (KYC) and Customer Due Diligence (CDD) requirements. Financial institutions must verify customer identities, assess risk levels, and conduct ongoing monitoring of transactions. Enhanced Due Diligence (EDD) is mandatory for high-risk customers, cross-border transactions, politically exposed persons (PEPs), and atypical business relationships. China also enforces comprehensive beneficial ownership identification, requiring institutions to collect detailed information and maintain updated ownership records.

China places significant emphasis on transaction monitoring and suspicious transaction reporting. Institutions must implement automated monitoring systems, flag unusual patterns, and submit Suspicious Transaction Reports (STRs) to the China Anti-Money Laundering Monitoring and Analysis Center (CAMLMAC). Large-value transactions, both domestic and international, are subject to mandatory reporting thresholds.

Oversight and enforcement are centralized under the PBOC, which conducts on-site inspections, issues compliance directives, and imposes substantial administrative penalties for non-compliance. In recent years, China has expanded its regulatory scope to include digital payment service providers, virtual asset activities, and cross-border e-commerce platforms—sectors with elevated AML/CFT risks. The country continues advancing regulatory reforms to align with FATF standards, focusing on enhanced financial transparency, more effective targeted financial sanctions, and improved supervision of emerging technologies.

Global AML/CFT Regulations:

Overview
The United Kingdom operates a mature, risk-oriented AML/CFT regime shaped by domestic legislation and international obligations (including FATF standards). The principal statute is the Proceeds of Crime Act (POCA) together with the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations (commonly referred to as the UK Money Laundering Regulations). The regime covers a wide range of financial institutions and designated non-financial businesses and professions, and places strong emphasis on both preventive controls and effective enforcement.

Key requirements

• Customer Due Diligence (CDD) & KYC: Firms must identify and verify customers and beneficial owners, apply risk-based CDD, and conduct EDD where risks are elevated (PEPs, high-risk third countries, complex ownership).
• Beneficial ownership & PSC registers: UK companies are required to maintain a People with Significant Control (PSC) register; companies house data is used to enhance transparency and support AML checks.
• Transaction monitoring & Suspicious Activity Reports (SARs): Obligations to monitor and report suspicious transactions to the UK Financial Intelligence Unit (UKFIU) at the National Crime Agency (NCA).
• Record-keeping & policies: Written policies, appointment of MLROs (Money Laundering Reporting Officer), staff training, independent testing and retention of records for statutory periods.
• Travel Rule & payments transparency: Requirements to include payer/payee information in transfers; evolving expectations for crypto-asset providers.

Supervisory and enforcement authorities

• Financial Conduct Authority (FCA): Authorised for supervising banks, insurers (partial), securities firms, money service businesses and crypto businesses that fall within its regime. The FCA issues guidance, conducts supervision and enforces AML rules.
• HM Treasury & Home Office: Policy and legislative responsibilities.
• National Crime Agency (NCA) / UKFIU: Central FIU receiving SARs, conducting intelligence analysis and supporting law enforcement.
• Other supervisors: Solicitors Regulation Authority, professional bodies, and HM Revenue & Customs (HMRC) supervise certain sectors and DNFBPs.

Sectoral scope & special considerations
The UK’s framework is broad: banks, insurers, investment firms, payment service providers, estate agents, legal and accountancy professionals, casinos, high-value dealers, and virtual asset service providers (VASPs) where regulated. The UK has taken an assertive approach to regulating crypto-assets, increasing registration and compliance requirements for VASPs and implementing Travel Rule obligations.

Enforcement & penalties
UK authorities use a mix of criminal prosecutions, civil penalties, and regulatory sanctions. The FCA has issued significant fines and public censures for AML control failures, and prosecutorial authorities pursue both institutions and individuals where criminality is found. The regulatory culture emphasizes deterrence, remediation, and public transparency.

Recent trends & practical notes
Post-Brexit regulatory developments include domestic tailoring of EU-derived rules and a focus on improving the effectiveness of reporting, beneficial ownership data quality, and the treatment of crypto-assets. The UK continues to refine sectoral guidance, strengthen public-private information sharing, and push for improved digital verification and identity standards. Firms should expect continuing emphasis on controls around payment fraud, sanctions screening, and virtual assets.

Global AML/CFT Regulations:

Japan’s AML/CFT regime is founded on the Act on Prevention of Transfer of Criminal Proceeds and overseen by the Financial Services Agency (FSA), the National Police Agency (NPA), and the Japan Financial Intelligence Center (JAFIC). The regulatory framework covers banks, securities firms, insurance companies, money service operators, and designated non-financial businesses such as real-estate brokers, casinos (once fully legalized), and certain professional service providers. Japan aims to maintain a risk-sensitive and internationally aligned AML/CFT system that meets the standards established by the FATF.

A key pillar of Japan’s framework is Customer Due Diligence (CDD). Institutions must verify customer identities, understand the purpose of the business relationship, and assess the risk presented by each client. Enhanced Due Diligence applies to high-risk categories, including foreign politically exposed persons, non-resident customers, and individuals engaging in complex or large-value transactions. Japan has strengthened its requirements around beneficial ownership transparency, mandating that institutions identify controlling stakeholders and maintain accurate records.

Japan requires financial institutions and designated businesses to implement ongoing monitoring and suspicious transaction detection systems. All suspicious activity must be reported to JAFIC, which serves as the national FIU (Financial Intelligence Unit). Japan mandates strict maintenance of transaction records, including documents related to customer identification and financial activity, which must be preserved for extended retention periods.

Regulatory oversight focuses heavily on risk-based supervision, periodic audits, and sector-specific guidelines issued by the FSA. In recent years, Japan has updated its AML/CFT rules to address digital finance, including cryptocurrency exchanges and virtual asset service providers (VASPs). These entities must register with the FSA, implement robust AML controls, and comply with Travel Rule requirements for crypto transfers. Japan continues strengthening its legal and institutional framework to enhance enforcement effectiveness, increase transparency, and keep pace with international AML/CFT standards.

Global AML/CFT Regulations:

Overview
India’s AML/CFT framework is anchored in the Prevention of Money Laundering Act (PMLA) and supported by rules and guidance issued by the Reserve Bank of India (RBI), the Securities and Exchange Board of India (SEBI), the Insurance Regulatory and Development Authority (IRDAI), and other sectoral regulators. India combines criminal law, administrative regulation, and targeted supervisory measures to address money laundering, terrorist financing, and proliferation financing risks across banking, capital markets, insurance, and an expanding fintech and digital payments ecosystem.

Core obligations & risk controls

• Customer Due Diligence (CDD) & KYC: Financial institutions and many designated non-financial businesses and professions must perform thorough identity verification, ongoing monitoring, and risk-based customer segmentation. Enhanced due diligence is required for PEPs, non-resident customers, correspondent banking relationships, and other high-risk categories.
• Transaction monitoring & reporting: Institutions must implement transaction-monitoring systems to identify unusual patterns and file Suspicious Transaction Reports (STRs) with the Financial Intelligence Unit–India (FIU-IND). Reporting also covers large cash transactions and certain high-value activities.
• Beneficial ownership & corporate transparency: Entities are required to disclose ownership and control structures; regulators increasingly demand clarity on ultimate beneficial owners, particularly for corporates involved in high-value transactions or cross-border flows.
• Record-keeping & internal controls: Firms must maintain records of transactions and client identification for statutory retention periods, implement written AML/CFT policies, appoint compliance officers, conduct regular staff training, and perform independent audits of AML programs.

Supervisory framework & authorities

• FIU-IND: The national Financial Intelligence Unit, responsible for receiving, analyzing and disseminating STRs to law enforcement and regulatory authorities.
• Reserve Bank of India (RBI): Primary supervisor for banks and certain NBFCs — issues circulars, conducts inspections and enforces compliance.
• SEBI, IRDAI, Ministry of Corporate Affairs, GST & Customs authorities: Each supervise AML-related obligations within their sectors, such as capital markets, insurance, corporate filings and cross-border trade.
• Enforcement agencies: Enforcement Directorate (ED) is active in investigations and prosecutions under PMLA; prosecutions can include attachment of proceeds, fines and criminal charges.

Sectoral scope & special considerations
India’s regime covers banks, NBFCs, payment service providers, money changers, remittance providers, securities market intermediaries, insurance firms, and certain DNFBPs. Given India’s rapid digital payment adoption, regulators place special emphasis on e-wallets, prepaid instruments, and fintech onboarding controls. Cross-border remittances, trade-based money laundering risks (including over/under-invoicing), and informal value transfer systems are persistent focus areas.

Enforcement & trends
Enforcement includes administrative penalties, attachment of assets, and criminal prosecutions under PMLA. India has progressively tightened AML obligations, broadened reporting expectations, and increased coordination between FIU-IND, RBI and law enforcement. Recent practical emphasis includes strengthening beneficial ownership transparency, improving IT-driven transaction surveillance, and enhancing controls for virtual assets and payment aggregators.