Quick answer
Anti-money laundering (AML) is the set of laws and controls that stop criminals disguising where their money came from. Financial firms must know their customers, watch transactions and report suspicious activity; in the US, banks also report cash transactions above $10,000[8].
Key points
- Money laundering means disguising the illegal origin of criminal proceeds; it usually runs through placement, layering and integration.
- Estimates are rough because the activity is hidden, but the UN's drugs and crime office puts it at 2–5% of global GDP a year.
- In the US, banks file currency transaction reports above $10,000 and suspicious activity reports, usually within 30 days of detection.
- Splitting cash deposits to dodge the reporting threshold, called structuring, is itself a federal crime in the US.
- The EU has adopted a single AML rulebook and a new authority in Frankfurt that plans to start direct supervision in 2028.
On this page
#What is money laundering in plain words?
Criminals who earn money from drugs, fraud or corruption have a problem: if they spend large amounts with no legal explanation, they attract attention. Money laundering is the processing of criminal proceeds to disguise their illegal origin[1]. Anti-money laundering (AML) is everything designed to stop that: laws, supervisors, and the controls that banks, payment apps and other firms must run. It usually comes paired with countering the financing of terrorism (CFT), which is why you will often see the label AML/CFT.
Nobody knows exactly how much money is laundered, because it is hidden by design. The United Nations Office on Drugs and Crime (UNODC) estimates the amount laundered globally in one year at 2–5% of global GDP, or $800 billion to $2 trillion[2]. The FATF itself notes that precise statistics are not available[1], so treat any single figure as an order of magnitude, not a measurement.
#What are the three stages of money laundering?
The classic three stages of laundering
- Placement — dirty money enters a bank
- Layering — many moves hide the trail
- Integration — returns as 'clean' wealth
The FATF describes the stages this way. In placement, the launderer introduces illegal profits into the financial system, for example through deposits. In layering, the funds are moved or converted many times to distance them from their source, for example through wire transfers. In integration, the money re-enters the legitimate economy through real estate, luxury assets or business ventures[1]. UNODC adds that in practice some stages can be combined or repeated several times[2].
#Who sets the anti-money laundering rules?
At global level, the Financial Action Task Force (FATF) writes the standards. It was set up in 1989 and has 40 members: 38 jurisdictions plus the European Commission and the Gulf Co-operation Council[1]. Its Recommendations, first issued in their current form in February 2012, were last revised in June 2026[3]. The FATF also names countries with weak systems: a 'call for action' list for high-risk jurisdictions and a list of jurisdictions under increased monitoring, updated after plenary meetings held three times a year; the latest update shown on its site is dated 19 June 2026[4].
Countries turn the standards into law. In the US, the core law is the Bank Secrecy Act of 1970, which authorises the Treasury to impose reporting and other requirements on financial institutions to help detect and prevent money laundering[5]. In the EU, a package adopted in 2024 created a single rulebook and a new Anti-Money Laundering Authority (AMLA)[6].
#What do banks and payment firms have to do?
US rules give a good picture of the minimum. A bank's AML programme must include a system of internal controls, independent testing, a designated person responsible for day-to-day compliance, training for staff, and risk-based procedures for ongoing customer due diligence[7]. Customer due diligence starts with KYC, knowing who the customer is, and continues with monitoring what they do.
| Report | Trigger | Deadline / rule |
|---|---|---|
| Currency Transaction Report (CTR) | Cash transactions of more than $10,000[8] | Counted as a daily aggregate amount[5] |
| Suspicious Activity Report (SAR) | Suspicious transactions involving or aggregating at least $5,000[9] | No later than 30 calendar days after initial detection; up to 60 if no suspect is identified[9] |
Thresholds for banks under 31 CFR 1010.311 and 1020.320. Other kinds of firms and other countries have their own thresholds.
Two features surprise beginners. First, a CTR is routine: filing one does not mean anyone suspects you. Second, a SAR is secret. US rules forbid a bank and its staff from disclosing a SAR or any information that would reveal one exists, apart from listed exceptions such as disclosures to FinCEN or law enforcement[9]. That is why a bank may close an account without explaining why.
#Why is splitting cash deposits a crime?
Because it is designed to defeat the reporting rules. US federal law makes it an offence to structure, or help structure, a transaction with one or more domestic financial institutions to evade the reporting requirements[10]. The CTR rule looks at the daily total rather than each deposit, which is the point of the example below.
Worked example
Worked example: one day, three cash deposits
Someone deposits cash at the same US bank three times on one business day. Each deposit is below $10,000, but CTRs are based on the daily aggregate amount[5]. Totals computed with code.
- Deposit 1
- $4,000
- Deposit 2
- $3,500
- Deposit 3
- $3,000
- Daily total
- $10,500 → more than $10,000, so a CTR is due
- If the person had split $28,500 into three $9,500 deposits on purpose to avoid a report
- That pattern is what the structuring offence targets
#How is AML changing in the EU?
In May 2024 the Council of the EU adopted a package that includes a regulation with directly applicable rules, a new directive and a regulation creating AMLA. The package sets a €10,000 limit on cash payments, extends the rules to most of the crypto sector, and the AML regulation applies three years after it entered into force[6]. AMLA is based in Frankfurt; it was legally established on 26 June 2024, plans to select 40 obliged entities for direct supervision during 2027 and to begin direct supervision during 2028[11].
Key dates in the EU's new AML system
30 May 2024
Council adopts the AML package, including the €10,000 cash payment limit[6].
26 June 2024
AMLA is legally established[11].
Summer 2025
AMLA starts operations in Frankfurt[11].
2027
AMLA plans to select 40 obliged entities for direct supervision[11].
2028
Direct supervision by AMLA is planned to begin[11].
Common beginner mistakes about AML
Thinking a big cash deposit is illegal
Large cash deposits are legal; above the US threshold the bank simply files a routine report.
Splitting deposits to 'avoid paperwork'
Deliberately breaking up cash to dodge a report is structuring, an offence in its own right in the US.
Expecting the bank to explain a closure
If a suspicious activity report was filed, staff may not reveal it, so you may get no detailed reason.
Believing AML only targets drug gangs
The same controls catch fraud proceeds, corruption, tax crime and terrorist financing.
#Where does technology fit in?
Monitoring millions of payments by hand is impossible, so firms use software to flag unusual patterns and to check names against lists. That market is called regtech; see what is regtech. Name checks against government lists are covered in sanctions screening explained, and the fast-moving world of cross-border transfers in cross-border payments explained.
The bottom line
Anti-money laundering rules turn financial firms into lookouts: they identify customers, monitor activity and report what looks wrong. The three stages of laundering explain what they look for, and reports such as CTRs and SARs are how the information reaches authorities. The rules keep evolving, with the EU now building a single rulebook and a central supervisor.
Frequently asked questions
Is AML the same as KYC?
No. KYC (know your customer) is one part of AML: identifying and verifying customers. AML also covers transaction monitoring, reporting and staff training[7].
Will I get in trouble for depositing more than $10,000 in cash?
Not for the deposit itself. The bank files a currency transaction report for cash transactions above $10,000[8]; this is routine. Splitting deposits on purpose to avoid the report is what the law forbids.
Will my bank tell me if it reports me as suspicious?
No. US rules forbid banks from disclosing a SAR or information that would reveal its existence, apart from specific exceptions[9].
How much money is laundered every year?
No one knows precisely. UNODC estimates 2–5% of global GDP, or $800 billion to $2 trillion a year[2].
Sources
- Frequently asked questions: money laundering — Financial Action Task Force (FATF), 2026 Primary
- Money laundering — overview — United Nations Office on Drugs and Crime, 2026 Primary
- The FATF Recommendations — Financial Action Task Force (FATF), 2026 Primary
- High-risk and other monitored jurisdictions — Financial Action Task Force (FATF), 2026 Primary
- The Bank Secrecy Act — Financial Crimes Enforcement Network (FinCEN), 2026 Primary
- Anti-money laundering: Council adopts package of rules (press release, 30 May 2024) — Council of the European Union, 2024 Primary
- 31 CFR 1020.210 — Anti-money laundering program requirements for banks — eCFR (US Code of Federal Regulations), 2026 Primary
- 31 CFR 1010.311 — Filing obligations for reports of transactions in currency — eCFR (US Code of Federal Regulations), 2026 Primary
- 31 CFR 1020.320 — Reports by banks of suspicious transactions — eCFR (US Code of Federal Regulations), 2026 Primary
- 31 U.S.C. 5324 — Structuring transactions to evade reporting requirement prohibited (United States Code, 2023 edition) — U.S. Government Publishing Office (govinfo), 2024 Primary
- About AMLA — Anti-Money Laundering Authority of the EU (AMLA), 2026 Primary
