In plain English
Money laundering is the process of making illegally obtained money look legitimate. It is often described in three stages: placing the money into the financial system, layering it through transactions to obscure its origin, and integrating it back as apparently clean funds.
Anti-money laundering (AML) is everything an institution does to prevent this and to spot it when it happens: understanding its own risks, knowing its customers, monitoring activity, reporting suspicions to the authorities, training staff and keeping records.
Why it matters to a board
Supervisors expect the board and senior management to own the AML program, not to delegate it entirely to compliance. Weaknesses can lead to enforcement action, fines and damage to the institution's reputation and banking relationships, and in many jurisdictions to personal accountability for senior individuals.
Common mistakes
- Treating AML as a compliance department task instead of a business responsibility.
- Having a well-written policy but no evidence that it operates in practice.
- Using a generic risk assessment that does not reflect the institution's actual customers, products and geographies.
What the standards and regulators say
- FATF Recommendations: international standards on combating money laundering and the financing of terrorism and proliferation
- UAE: Federal Decree-Law No. 10 of 2025 on anti-money laundering and combating the financing of terrorism and proliferation, and its executive regulations (Cabinet Resolution No. 134 of 2025)