AML enforcement cases: where compliance programs fail in practice

TL;DR: Institutions are penalized when AML programs exist on paper but fail in execution, with cases like TD Bank, Danske Bank, HSBC and Standard Chartered illustrating gaps in monitoring, escalation, and due diligence, according to Unit21 analysis. Coverage, not policy volume, is the control that determines whether AML governance actually works.

Editorial analysis by NHI Mgmt Group, based on content published by Unit21: “How to combat money laundering, with real enforcement cases to learn from”.

Key questions

Q: What breaks when an AML program exists on paper but not in operations?

A: The program loses its ability to prevent, detect, and escalate suspicious activity.

Q: Why do banks get fined even when they have AML policies and staff in place?

A: Because regulators assess whether the control works, not whether it exists.

Q: How do teams know whether AML monitoring is actually effective?

A: They should test both alerted and non-alerted activity, then compare outcomes against the institution’s risk exposure and typologies.

Practitioner guidance

• Define monitoring coverage as a measurable control Track the percentage of transaction volume, customer segments, and payment rails that are actually screened, and review it as a board-level risk metric rather than a tuning detail.
• Tie KYC data to alerting logic Use onboarding attributes, expected activity, and customer risk ratings to drive the scenarios that monitor future behavior so the baseline remains meaningful.
• Test escalation paths with real cases Run internal audit and compliance findings through the actual decision chain to confirm they reach a person who can change rules, staffing, or thresholds.

Bottom line: The article shows that AML enforcement usually follows a gap between documented controls and actual coverage, not a lack of policy language.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →