Using intermediaries or agents to execute transactions, obscuring the true source and destination of funds. By introducing a layer of agent involvement, launderers reduce direct scrutiny from financial institutions and complicate AML/CFT supervision. Agents may serve multiple payment providers, further fragmenting transactional records and hindering straightforward tracing of illicit flows. Criminals often leverage sub-agents or partner outlets operating under a licensed payment institution’s umbrella, sometimes via 'white labelling,' to facilitate high-risk transfers with minimal oversight. Regulatory bodies observe that these sub-agents can directly handle funds and engage with customers, frequently bypassing core AML/CFT checks. Segmentation of the payment chain, including outsourced operations abroad, further complicates monitoring and increases the likelihood of unreported illicit activity. In many cases, the receiving institution only identifies the aggregator, losing visibility into whether a sub-agent actually handled the transaction. Overly complex principal–agent relationships weaken compliance controls, allowing criminals to disguise suspicious flows as legitimate under a licensed framework. Multiple suspicious matter reports also highlight that sub-agents sometimes accept small, structured deposits beneath reporting thresholds, making the source of funds more difficult to track or question. Moreover, outsourcing transaction processing to third-party providers can create added distance from the principal, reducing transparency and impeding effective due diligence.
Agent-Based Transaction Processing
Using Agents for Transaction Processing
Employing Intermediaries for Transactions
Tactics
Criminals exploit sub-agents and third-party payment processors under a licensed umbrella to circumvent stricter AML/CFT checks. They leverage weaker oversight at the agent or sub-agent level to covertly introduce or move funds into the financial system.
Criminals introduce intermediary layers through agents or sub-agents to obstruct direct tracing, dispersing transaction records across agent networks and increasing complexity for investigators. By fragmenting the payment chain under multiple licensed or semi-licensed entities, they distance illicit assets from their origin.
Risks
Criminals exploit agent-based or aggregator-driven channel structures to bypass direct institutional scrutiny by introducing layers of sub-agents that operate with minimal oversight. This fragmented payment chain obscures the true source and destination of funds, complicating AML checks. Receiving institutions often see only the main aggregator, losing visibility into sub-agent activities and weakening overall compliance controls.
Sub-agents often operate in high-risk or weakly supervised jurisdictions, exploiting inconsistent regulations and diminished supervisory capacity. By outsourcing transaction handling to foreign partner outlets or sub-agents, criminals exploit cross-border gaps and dilute oversight, complicating due diligence and the tracing of illicit funds.
Indicators
Frequent high-value deposits from multiple unrelated sources into a single agent account, followed by rapid outgoing transfers within short timeframes.
Agent utilizes multiple payment service providers on behalf of the same customer, segmenting transaction records and complicating audit trails.
Funds credited to the agent's account often lack standard referencing or supporting documentation, indicating inconsistent origin details.
Several agents or sub-agents share common ownership or control not clearly disclosed in official records.
Agent’s declared business activity is inconsistent with the volume or frequency of transactions moving through its accounts.
Agent operates across multiple high-risk jurisdictions with limited AML supervision, resulting in uneven KYC practices and documentation.
Sub-agents accept multiple small deposits structured below reporting thresholds, obscuring the cumulative total of funds handled.
Data Sources
- Highlights risk levels and AML/CFT enforcement variations across different jurisdictions where agents operate.
- Helps detect cross-border segments with weaker supervision or less rigorous KYC practices.
- Enables targeted monitoring of payments flowing through higher-risk locations commonly exploited by sub-agents.
- Captures inbound and outbound transaction details, including timestamps, amounts, and counterparties, across agent or sub-agent accounts.
- Reveals patterns of structured deposits and layering, including multiple sub-threshold transactions.
- Enables tracing of funds through different payment providers or aggregators, helping identify hidden links in the payment chain.
- Provides records from e-wallets and fintech payment processors, including transaction details, user accounts, and usage patterns.
- Detects whether a single agent or sub-agent is splitting or aggregating transactions across multiple digital platforms.
- Supports identification of structured deposits, rapid fund movements, and other anomalies possibly obscured by multi-provider usage.
- Lists licensed and registered MSBs, including any sub-agents and license particulars.
- Validates whether agents or sub-agents are operating under proper regulatory frameworks.
- Detects unregistered or unauthorized sub-agents who may be bypassing AML/CFT controls.
- Verify declared business activities and transaction volumes for agents and sub-agents, identifying inconsistencies with reported turnover.
- Confirm ownership, beneficial owners, and any undisclosed control relationships among agents or sub-agents.
- Compare inbound funds to stated sources and documented backgrounds, highlighting suspicious or undocumented inflows indicative of potential laundering.
- Documents cross-border payment flows, intermediary banks, and settlement routes.
- Exposes hidden or layered transactions processed through multiple payment service providers.
- Supports deeper scrutiny of foreign-based agents and sub-agents masking the ultimate origin or destination of funds.
- Provides official registration data, shareholders, directors, and beneficial owners for agent entities.
- Identifies undisclosed or overlapping ownership among multiple agents and sub-agents.
- Cross-referencing these details with transactional data can highlight complex or hidden ownership structures facilitating laundering.
Mitigations
Perform deeper background checks and licensing validations for agent-based relationships, especially for sub-agents operating abroad or in high-risk jurisdictions. Verify ownership structures, regulatory standing, and the sub-agent’s AML record to prevent undisclosed beneficial owners from exploiting agent channels.
Implement specialized rules to identify agent accounts that receive multiple structured deposits from diverse sources or funnel large, rapid outgoing transfers. Focus on aggregator-based flows to detect masked sub-agent transaction patterns, triggering alerts for deeper investigations when fund movements or referencing details are inconsistent with declared business activities.
Require thorough AML oversight of agents and sub-agents by enforcing contractual clauses that mandate standardized KYC, record-keeping, and monitoring controls. Conduct regular compliance reviews of aggregator networks to ensure consistent AML practices across all sub-level relationships, closing visibility gaps introduced by multiple agent layers.
Require sub-agents to maintain comprehensive transaction logs that link each customer deposit to the ultimate beneficiary, capturing references and supporting documentation. Ensure these records are accessible to principal institutions for compliance reviews, thereby closing gaps where sub-agent handling might obscure transaction origination details.
Regularly audit principal-agent agreements and sub-agent onboarding files to confirm AML controls are applied at every layer. Include sample testing of aggregator-based transaction logs to detect unreported high-risk activities, ensuring reliable data sharing between principal and sub-agents.
Join industry cooperation forums or partnerships with regulators and law enforcement to identify sub-agent networks known to facilitate layering. Share typologies, account identifiers, and agent-level red flags for coordinated detection of multi-tier laundering methods across different providers.
Limit or suspend sub-agents from handling high-value or high-risk cross-border transfers without explicit principal authorization. Enforce transaction velocity controls to prevent structuring or bulk deposits below reporting thresholds, preventing sub-agents from evading detection by segmenting funds into smaller transactions.
Continuously review agent and sub-agent activity against declared business profiles, updating risk ratings when new service provider affiliations, ownership changes, or unexpected transaction volumes emerge. Promptly escalate deviations for further scrutiny to keep pace with evolving agent networks.
Instruments
- Sub-agents open or manage bank accounts under a principal’s licensed umbrella, receiving funds from multiple unrelated sources and structuring them below detection thresholds.
- Layering is achieved by quickly routing deposits through various agent-held accounts, fragmenting the transaction chain.
- The receiving institution sees only the aggregator’s account, effectively obscuring sub-agent and beneficial owner details.
- Sub-agents accept physical currency and deposit it in smaller increments under reporting thresholds, masking the origin of illicit cash.
- Aggregators consolidate these deposits, hindering the identification of each sub-agent’s transactions.
- By channeling funds through a licensed payment provider, criminals exploit the perceived legitimacy of the principal institution while concealing their true identities.
- Sub-agents load multiple small deposits onto prepaid cards, mobile money, or e-wallets on behalf of customers, circumventing direct KYC checks.
- These instruments allow easy layering by splitting funds across various stored-value accounts, making transaction tracing more difficult.
- The principal institution often views only the aggregated activity, failing to see the sub-agents’ individual transactions or the ultimate source of funds.
Service & Products
- These intermediary platforms facilitate settlements and invoicing on behalf of merchants or individuals, potentially leaving the principal institution unaware of sub-agents managing funds.
- The agent-based model disperses transactional records across multiple third parties, reducing transparency for AML investigators.
- Criminals exploit minimal oversight in partner outlets to handle high-risk transfers under a legitimate service provider’s umbrella.
- By using white-labeled or aggregator-driven payment channels, criminals insert an extra intermediary layer between the licensed provider and end users.
- Sub-agents can handle funds and client onboarding independently, bypassing full AML/CFT checks.
- This fragmentation of transaction data across multiple sub-level platforms hinders effective tracing of illicit flows.
- Criminals leverage sub-agents or partner outlets operating under a licensed principal to process funds, reducing direct AML scrutiny.
- The receiving institution often sees only the main provider (aggregator), obscuring the true source and final beneficiary.
- Sub-agents may accept multiple small deposits below reporting thresholds, fragmenting transaction records and complicating oversight.
Actors
These criminal actors orchestrate agent-based transaction processing by:
- Engaging sub-agents or partner outlets operating under licensed payment institutions.
- Structuring high-risk transfers in smaller amounts to slip below reporting thresholds.
- Splitting fund flows across multiple providers, fragmenting audit trails.
- Concealing the true source and destination of illicit proceeds behind intermediaries.
Payment service providers serve as licensed principals whose agent networks can be exploited when:
- Criminals leverage white-labeled or aggregator-driven platforms that mask the identity of sub-agents.
- Only the aggregator is visible to receiving institutions, obscuring the sub-agent’s role.
- Complex principal-agent relationships dilute oversight and weaken AML controls.
- Illicit flows blend in with legitimate services under the provider’s authorized framework.
Money transfer agents, including sub-agents and partner outlets, facilitate illicit tactics by:
- Directly receiving customer funds with minimal AML/CFT oversight.
- Accepting multiple small deposits structured below mandatory reporting limits.
- Introducing an additional intermediary layer, reducing the transparency of end-to-end transactions.
- Fragmenting transactional data across sub-level platforms, complicating financial institutions’ tracing efforts.
References
EBA (European Banking Authority). (2023). EBA report on ML/TF risks associated with payment institutions (EBA/REP/2023/18). https://eba.europa.eu
AUSTRAC (Australian Transaction Reports and Analysis Centre). (2021). Australia's non-bank lending and financing sector money laundering and terrorism financing risk assessment. Commonwealth of Australia. https://www.austrac.gov.au/business/how-comply-guidance-and-resources/guidance-resources/australias-non-bank-lending-and-financing-sector-risk-assessment-2021
AUSTRAC (Australian Transaction Reports and Analysis Centre). (2019). Australia's mutual banking sector money laundering and terrorism financing risk assessment. Commonwealth of Australia. https://www.austrac.gov.au/business/how-comply-guidance-and-resources/guidance-resources/risk-assessment-mutual-banking-sector
The Swedish Companies Registration Office, the Swedish National Council for Crime Prevention, the Swedish Economic Crime Authority, the Swedish Estate Agents Inspectorate, Swedish Financial Supervisory Authority, the Swedish Enforcement Authority, the County Administrative Board of Skåne, the County Administrative Board of Stockholm, the County Administrative Board of Västra Götaland, the Swedish Police Authority, the Swedish Inspectorate of Auditors, the Swedish Tax Agency, the Swedish Gambling Authority, the Swedish Bar Association, the Swedish Security Service, Swedish Customs, & the Swedish Prosecution Authority. (2021). National risk assessment of money laundering and terrorist financing in Sweden 2020/2021. The Swedish Police Authority.https://polisen.se/siteassets/dokument/om-polisen/penningtvatt/national-risk-assessment-of-money-laundering-and-terrorist-financing-in-sweden_.pdf
FCA (Financial Conduct Authority). (2011). Electronic Money Guidance. FCA. fca.org.uk
Smit, C.J. (2023). The Joint Money Laundering Steering Group Guidance for the UK Financial Sector Part II: Sectoral Guidance. Joint Money Laundering Steering Group (JMLSG). https://www.jmlsg.org.uk/