AML risk in foreign exchange (FX): How to comply

Foreign exchange (FX) services process over $9.6 trillion every day, the highest daily turnover ever recorded by the Bank for International Settlements (BIS). This massive volume makes FX one of the most attractive channels for criminals to move illicit funds across borders, and regulators are making it clear they are not waiting for firms to catch up.

This guide breaks down the specific anti-money laundering (AML) risks facing foreign exchange businesses and the compliance steps that will withstand regulatory scrutiny.

TLDR

• FX businesses face four core AML risks: identity verification gaps, regulatory disparity across jurisdictions, structuring across multiple providers, and the concealment of beneficial ownership.
• Compliance requires robust customer due diligence (CDD) at onboarding and throughout the relationship, transaction monitoring, sanctions and politically exposed person (PEP) screening, and a designated AML compliance officer.
• Since over 90% of AML alerts are false positives, automated, AI-native compliance platforms can reduce that noise by up to 95% while still preserving the audit trails regulators require.
• The FCA’s May 2026 review of 150 firms found that poor audit trails and inadequate screening documentation remain the most common drivers of sanctions breaches.

What are the AML risks for foreign exchange businesses?

Foreign exchange businesses face a unique AML risk profile shaped by the speed, volume, and cross-border nature of currency transactions. Four risks are particularly acute for FX service providers: weaknesses in identity verification, regulatory disparities across jurisdictions, structuring vulnerabilities, and the concealment of beneficial ownership.

Identity verification gaps

Many foreign currency exchange services aren’t held to the same identity verification measures as banks or broker-dealers. The cash-intensive nature of FX, combined with quick remittance services, makes it easy for criminals to convert funds quickly or to use money mules to conduct transactions on their behalf. On top of that, the proliferation of online FX platforms makes customer identity verification harder than ever and more difficult for authorities to supervise.

Regulatory disparity across jurisdictions

FX transactions routinely cross borders, and money launderers actively exploit differences in regulatory standards between countries. The Financial Action Task Force (FATF) has warned that many countries – especially those considered higher-risk – lack adequate AML and counter-financing of terrorism (CFT) regulations or supervisory structures for the FX industry. Because of this disparity, firms in different jurisdictions apply different reporting thresholds for suspicious transactions, and international financial authorities often struggle to coordinate during investigations.

As of June 2026, the FATF grey list contains approximately 22 jurisdictions under increased monitoring, and three countries – Iran, North Korea, and Myanmar – remain on the blacklist. FX firms transacting with counterparties in those jurisdictions face much stricter due diligence obligations.

Structuring across multiple providers

FX services are highly vulnerable to structuring – where money launderers use a series of smaller transactions to disguise the source of illegal funds before embedding them in the legitimate financial system. Criminals route funds through multiple FX providers in various currencies to obscure their origin. The relative anonymity of some FX channels, combined with regulatory gaps between jurisdictions, makes structuring particularly difficult to detect without automated monitoring.

Beneficial ownership concealment

The growth of FX service providers, both physical and online, has made it easier for money launderers to buy or control these firms and use them to circumvent AML protections. Criminals might own FX businesses outright, operate through sub-agents, or use financial incentives – or even coercion – to have someone hold ownership on their behalf. As a result, financial authorities often struggle to determine the ultimate beneficial owner (UBO) of an FX firm, especially when corporate structures are obscured by shell companies and tax havens.

How FX firms comply with AML regulations

Foreign exchange service providers must stay on top of the AML/CFT regulations that apply in their jurisdiction, including any licensing requirements. In FATF member states, firms are expected to take a risk-based approach (RBA) to the money laundering threats they face, implementing tailored measures as part of an internal AML/CFT program.

FATF Recommendation 14 specifically governs Money or Value Transfer Services (MVTS) – the category covering most FX service providers. It requires that all MVTS providers be licensed or registered and be subject to effective monitoring systems to ensure compliance with the full FATF Recommendations. The FATF Guidance for a Risk-Based Approach for Money or Value Transfer Services serves as the primary reference document for FX compliance teams.

In practice, this means FX firms should:

• Perform customer due diligence (CDD) checks at onboarding and throughout the customer relationship to accurately verify identities. CDD checks should also establish beneficial ownership when dealing with another FX company or corporate entity.
• Implement transaction monitoring to detect suspicious activity, including transactions above reporting thresholds, unusual patterns, and transactions involving high-risk countries. In the US, FX dealers operating as Money Services Businesses (MSBs) under the Financial Crimes Enforcement Network (FinCEN)’s rules should file suspicious activity reports (SARs) on transactions of $2,000 or more involving suspected money laundering, file Currency Transaction Reports (CTRs) on cash transactions exceeding $10,000, and retain all records for a minimum of five years.
• Screen and monitor customers for sanctions, politically exposed person (PEP) status, and involvement in adverse media stories on an ongoing basis.
• Appoint an AML compliance officer to oversee the compliance program, liaise with financial authorities, and manage audits.

What are common AML red flags in foreign exchange?

FX employees need adequate training to recognize the characteristics of money-laundering methods targeting foreign exchange services. The FATF typologies report on remittance and currency exchange providers identifies several red flags that FX firms should keep on their radar:

• Transactions that hover just below or go above jurisdictional reporting thresholds.
• Customers making transactions at an unusually high frequency or volume.
• Customers who consistently use non-face-to-face FX services, concealing their identities or sending third parties to conduct transactions on their behalf.
• Multiple currency exchanges that appear connected.
• Multiple exchanges across different service providers.
• Transactions involving PEPs, sanctioned individuals, or customers flagged in adverse media.
• Rapid currency round-tripping, where funds are converted and reconverted between currencies with no apparent commercial purpose.

What to look for in FX AML compliance technology

For FX firms processing high volumes of cross-border transactions, manual compliance processes simply can’t keep pace. Five criteria separate effective AML technology from tools that create more problems than they solve.

Data reliability and sanctions coverage

The freshness, breadth, and depth of your financial crime risk data – including sanctions lists, PEPs, adverse media, and beneficial ownership records – determine whether a platform catches what it should. For FX businesses, a missed or delayed sanctions hit on a cross-border transaction creates immediate regulatory and reputational exposure. The UBS/FINRA enforcement action in August 2026 is a concrete example: foreign-currency wire-monitoring failures persisted for five years before resulting in a massive fine.

False positive reduction

Rules-only workflows constantly flood analysts with false alerts. FX firms processing high volumes of low-value transactions across multiple currencies are especially vulnerable to this alert noise. Effective platforms use probabilistic scoring and structured data to deliver measurable reductions – not vague claims without published benchmarks.

Real-time performance and scalability

FX businesses operate on real-time payment rails, which means sub-second response times and minutes-fresh sanctions data are non-negotiable. Latency or throughput limits that can’t keep pace with transaction volumes will either block legitimate business or allow risk to pass undetected.

Lifecycle coverage and regulatory reporting

Fragmented compliance stacks – where screening, monitoring, and case management run on separate systems – create massive reconciliation overhead and dangerous gaps. A platform that spans the full lifecycle from due diligence through screening, monitoring, remediation, and reporting gives compliance teams a single, connected view of risk.

Audit trail and explainability

The FCA’s May 2026 review of 150 firms’ sanctions systems and controls identified “poor audit trails, missing customer data, and limited corroboration of information provided by customers” as recurring failure modes. The FCA explicitly requires firms to “maintain a clear audit trail of enhancements to their sanctions systems and controls” and has found that firms relying on third-party screening providers often cannot demonstrate effective oversight of those controls. Ultimately, audit trail ownership can’t be delegated.

The regulatory pressure on FX firms is intensifying

The recent enforcement actions against a number of financial institutions and banks are part of a growing pattern, and the regulatory framework is only tightening further. The EU’s Anti-Money Laundering Authority (AMLA) became operational on July 1, 2025, and the EU’s new AML Single Rulebook (AMLR) applies uniformly across all 27 member states from July 10, 2027. This extends obligations to non-EU entities operating within the EU regulatory perimeter, including FX service providers. In the UK, the FCA’s May 2026 review of 150 firms found that poor audit trails and inadequate documentation of screening decisions remain the most common drivers of sanctions breaches.

For FX firms that need to shift from manual, fragmented compliance to a platform that screens in real time against continuously refreshed global sanctions, PEP, and adverse media data, the fastest way to test our claim is on your own data.

Choosing the right approach for FX AML compliance

FX firms’ compliance needs vary by scale, geography, and the location of their biggest gaps. Ultimately, the right tool depends on which problem is most urgent. If you’re a fintech or payment firm processing FX at scale, ComplyAdvantage delivers AI-native sanctions, PEP, and adverse media screening with sub-second API response times and sanctions data refreshed within minutes of announcement. We serve over 3,000 enterprises across 75 countries with coverage spanning 200+ countries and territories.

If your FX operations span multiple jurisdictions with differing regulatory requirements, ComplyAdvantage’s proprietary knowledge graph covers 200+ countries with sanctions data refreshed within minutes of a jurisdiction’s announcement. That refresh speed is critical when a new designation takes effect on publication, and the firm is processing cross-border transactions in real time.

If you need to understand the regulatory framework before selecting technology, start with FATF’s Guidance for a Risk-Based Approach for Money or Value Transfer Services and your jurisdiction’s specific FX AML requirements. Technology selection should always follow regulatory mapping.