Why does money laundering create risk for banks and the wider economy?

Money laundering creates risk because it converts illicit proceeds into seemingly legitimate funds, which distorts markets, masks criminal activity, and drives compliance costs higher. Banks face rising monitoring burdens and enforcement pressure, while the broader economy absorbs property inflation, trade distortion, and reduced trust in financial channels. The impact is both operational and systemic.

How laundering risk shows up in bank operations

Money laundering is not just a legal or reputational problem, it changes how banks have to operate every day. Institutions must monitor customer activity, investigate unusual flows, escalate alerts, and retain evidence for regulators. That means higher screening volumes, more analyst time, slower onboarding in some cases, and a greater chance of false positives that consume control capacity.

The operational burden becomes more severe when transaction patterns are designed to look ordinary. Structuring, layering, shell entities, and rapid movement across accounts can all force banks to spend more to distinguish legitimate activity from concealment. In practice, the bank is paying for uncertainty, and that cost scales with volume and complexity.

FATF Recommendations set the global AML and KYC baseline that drives these monitoring and reporting obligations.
NIST Cybersecurity Framework 2.0 is useful here for the governance, detection, response, and recovery discipline banks need when suspicious financial flows increase operational strain.

Why laundering distorts markets and weakens trust

The wider economic harm comes from the fact that laundered funds do not behave like normal capital. They can be pushed into property, trade, or other assets for concealment rather than productive investment, which distorts prices and allocation decisions. That can inflate local markets, disadvantage legitimate buyers, and create artificial demand in sectors attractive to illicit finance.

Laundering also weakens trust in the financial system itself. If customers, counterparties, or supervisors believe channels can be used to hide criminal proceeds, they respond with tighter controls, more friction, and higher compliance overhead. The result is a drag on efficiency: legitimate commerce faces more verification, and the system becomes more expensive to use because confidence is lower.

FATF Recommendations remain the key reference for customer due diligence, beneficial ownership, and suspicious activity controls that reduce market abuse.

Risk and Threat Considerations

Money laundering creates layered risk because the concealment process can exploit banks as trusted intermediaries while also spreading harm into asset prices, trade channels, and regulatory exposure. The threat is not only the original predicate crime, but the way illicit value can be recycled through ordinary financial activity until it becomes harder to detect and more costly to unwind.

Failure mechanism: Criminal proceeds are moved through accounts, entities, and transactions in ways that obscure origin and ownership, overwhelming detection systems and encouraging acceptance of tainted funds as legitimate.

Impact: Banks face enforcement, remediation, and monitoring costs, while the wider economy absorbs distorted pricing, lower market integrity, and reduced trust in financial channels.

Standards & Framework Alignment

This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.

NIST CSF 2.0 and CIS Controls v8 set the technical controls, while NIS2 and DORA define the regulatory obligations.

Framework	Control / Reference	Relevance
NIST CSF 2.0	GV.RM — Risk Management Strategy	Money laundering creates systemic financial and compliance risk that needs board-level oversight.
	DE.AE — Anomalies and Events	Suspicious transaction patterns are anomaly signals requiring investigation.
Recommendation — Align AML controls to enterprise risk appetite and escalation thresholds. Triage anomalous financial activity into case investigation workflows.
CIS Controls v8	8 — Audit Log Management	AML detection depends on retaining transaction and identity evidence for review.
	9 — Email and Web Browser Protections	Customer and staff phishing often supports account abuse that enables laundering.
Recommendation — Retain and review logs needed to reconstruct suspicious financial flows. Reduce initial account compromise paths that can support illicit fund movement.
NIS2	Art. 21 — Cybersecurity Risk-Management Measures	Financial institutions need resilient controls and incident handling for trust and availability risks.
Recommendation — Implement governance and response measures proportionate to financial-sector exposure.
DORA	Article 5 — ICT Risk Management Framework	Financial firms need structured governance for operational and systemic risk created by laundering-related pressure.
Recommendation — Embed monitoring, escalation, and resilience into financial crime control operations.

Practitioner Guidance

What to prioritise: Focus on the parts of the control environment that fail most often under laundering pressure, namely customer due diligence, beneficial ownership transparency, alert triage quality, and evidence retention. If those controls are weak, banks usually end up compensating with more manual review rather than better detection.

What to measure: Watch false positive rates, alert aging, case backlog, and the proportion of suspicious activity that can be traced cleanly to source, ownership, and purpose. Those signals tell you whether the control stack is actually reducing uncertainty or just producing more workload.

Practitioner takeaway: The main objective is not to chase every suspicious pattern equally, but to make concealment expensive, visible, and hard to sustain without turning routine banking into an unmanageable compliance bottleneck.