Financial institutions commonly rely on a correspondent bank to process cross-border payments while assuming the respondent bank has implemented effective AML controls. Criminals exploit this assumption by routing illicit proceeds through the respondent’s weaker or unverified checks, creating a conduit for laundering and bypassing direct scrutiny. When the correspondent fails to perform independent screening of downstream clients—especially if the respondent is in a high-risk or poorly regulated jurisdiction—this vulnerability becomes more acute. As a result, illicit funds flow undetected into the international financial system, capitalizing on the correspondent bank’s trust in the respondent’s oversight.
Correspondent Banking
Transactions Without CDD
Passing Transactions Without Client Verification
Tactics
Criminals exploit the minimal due diligence performed by respondent banks to establish frictionless entry points into the international financial system. This allows them to explicitly circumvent stricter compliance controls at the correspondent institution and bypass standard AML checks.
Risks
Criminals exploit the cross-border correspondent banking channel by relying on the respondent bank's minimal or absent due diligence. The correspondent bank assumes that the respondent has properly vetted customers and transactions, enabling illicit funds to flow internationally without direct scrutiny. This weak channel oversight is the primary vulnerability that criminals leverage to obscure the origin and beneficiaries of illicit proceeds.
This technique is particularly concerning when the respondent bank is situated in a high-risk or poorly regulated jurisdiction, where AML enforcement is weak. Criminals exploit these regulatory gaps, ensuring that the correspondent institution unknowingly processes illicit funds from regions with lax oversight, further reducing the likelihood of detection.
Indicators
Frequent cross-border wire transfers routed through the same respondent bank with missing or incomplete originator and beneficiary details in payment instructions.
Respondent bank continues processing high-value international transfers for newly onboarded accounts without providing updated KYC documentation or clarifying ultimate beneficial owners.
Ongoing correspondent banking relationship with an institution operating in a jurisdiction known for lax AML regulations, yet no evidence of enhanced due diligence requirements being applied.
Multiple newly formed or dormant corporations at the respondent bank funnel funds via the same correspondent route, lacking evidence of operational activity or legitimate commercial ties among them.
Repeated use of generic or identical payment references across numerous cross-border transactions from the respondent bank, suggesting minimal independent review of underlying documentation.
Respondent bank repeatedly fails to respond to information requests or provide supporting documents for suspicious cross-border transactions, indicating lax internal AML controls.
Data Sources
Consolidates information on higher-risk or poorly regulated jurisdictions, including AML enforcement practices and regulatory frameworks. Leveraging this data helps the correspondent bank apply enhanced due diligence measures and detect potentially suspicious cross-border transactions flowing from or into high-risk areas.
Encompasses official sanctions lists maintained by governments and international bodies. Screening cross-border transactions against these lists ensures that no illicit payments are processed for sanctioned entities or jurisdictions, helping the correspondent bank uphold sanctions compliance and mitigate AML risk.
Houses verified customer identities, beneficial ownership information, and ongoing due diligence data for respondent banks and their customers. This enables the correspondent bank to verify that newly onboarded accounts have been properly vetted, preventing criminals from exploiting incomplete or outdated KYC to launder funds through correspondent channels.
Provides detailed records of cross-border wires, including originator and beneficiary details, amounts, currencies, involved institutions, and settlement processes. This helps detect frequent or suspicious patterns, identify missing or incomplete originator/beneficiary data, and flag potential layering or infiltration of illicit funds within the correspondent banking chain.
Contains official records of corporate registrations, shareholders, and beneficial owners. This data helps expose shell or front companies orchestrated through respondent banks, enabling the correspondent bank to identify dormant or suspicious entities lacking legitimate business activities.
Mitigations
Evaluate the jurisdiction of each respondent bank to identify high-risk or poorly regulated regions, applying stricter scrutiny or service limitations when necessary. By aligning risk tolerance to geography, the correspondent bank addresses vulnerabilities specific to countries with known AML control weaknesses or prevalent financial crime.
Require thorough background checks on each respondent bank’s AML program, including documented evidence of their risk assessment, screening procedures, and onboarding protocols. For higher-risk jurisdictions, demand additional validation, such as ownership structures and suspicious activity metrics, to avoid wholly depending on the respondent’s representations and to confirm robust downstream controls.
Implement targeted cross-border transaction monitoring specifically for correspondent accounts to detect incomplete originator or beneficiary information, generic or repetitive payment references, and unusual flows from the respondent bank. By not relying solely on the respondent’s internal checks, the correspondent bank can proactively identify high-risk routing patterns and escalate potential misuse early.
Perform regular and systematic reviews of each respondent bank’s AML governance, such as through on-site assessments, external audit certificates, or documented policies. Include contractual clauses requiring them to cooperate with information requests and notify of any AML program changes. This ensures that correspondent institutions can swiftly detect deficiencies in the respondent's oversight.
Set up formal data-sharing agreements and protocols with respondent banks to regularly exchange KYC information, ultimate beneficial ownership details, and suspicious transaction alerts. By coordinating AML intelligence, correspondent banks can bypass the respondent’s blind spots and close the information gap that criminals exploit in minimal due diligence arrangements.
Continuously update and validate respondent bank profiles, ensuring they maintain sound AML practices and promptly provide requested data, such as updated KYC documentation and beneficial ownership details. By regularly reassessing the respondent's risk level, the correspondent bank prevents criminals from exploiting static or outdated due diligence processes.
Instruments
- Criminals open or control respondent bank accounts where lax AML checks allow illicit funds to be deposited with minimal scrutiny.
- These funds are then transferred across borders via the correspondent bank's infrastructure, relying on the assumption that the respondent's due diligence is sufficient.
- Because the correspondent bank often does not independently validate the ultimate account holders, cross-border wires from these accounts escape deeper inspection, effectively concealing both the origin and the final beneficiaries of illicit proceeds.
Service & Products
- Allow foreign bank clients direct access to a correspondent bank’s infrastructure, bypassing stricter due diligence requirements.
- If the respondent bank fails to identify or monitor ultimate beneficiaries properly, criminals can move illicit funds internationally under the correspondent bank’s umbrella with minimal scrutiny.
- Criminals exploit the respondent bank’s lax or unverified AML controls to funnel illicit proceeds through cross-border payments.
- This arm’s-length relationship often means the correspondent bank relies too heavily on the respondent’s oversight, allowing illicit funds to enter the system undetected without independent checks.
Actors
In a respondent capacity, the bank provides accounts or payment services without sufficiently verifying customer risk or transaction activity. Criminals exploit this gap to:
- Initiate or layer illicit transfers under the assumption that minimal checks will not be questioned.
- Pass funds through cross-border channels where the final receiving institution relies on the bank’s inadequate oversight.
Provides cross-border services to the respondent bank but often relies too heavily on the respondent’s oversight. This lack of independent verification allows:
- Undetected inflow of potentially illicit proceeds, under the presumption that the respondent has vetted transactions properly.
- Criminals to capitalize on minimal due diligence, embedding tainted funds into global payment systems.
Illicit operators exploit the respondent bank’s weaker or unverified AML checks by:
- Routing illicit proceeds across borders through accounts at the respondent bank.
- Bypassing the stricter controls of the correspondent bank, which assumes the respondent has performed adequate due diligence.
This allows illicit funds to enter the global financial system with minimal scrutiny.
References
The Wolfsberg Group. (2023, February). Correspondent Banking Due Diligence Questionnaire (CBDDQ) Guidance. The Wolfsberg Group. https://wolfsberg-group.org/resources
ACAMS. (2022). Certified Anti-Money Laundering Specialist study guide (Version 6.44). ACAMS. http://acams.org