Anti-money laundering (AML) is the set of laws, regulations, and controls that financial institutions use to prevent, detect, and report the disguising of illegally obtained funds as legitimate income. It’s a global regulatory regime, and identity verification (through KYC) is one of its foundations.

Money laundering turns "dirty" money clean by moving it through the financial system until its origin is obscured. AML is the coordinated effort to stop that, and the penalties for weak AML programs run to billions.

The pillars of an AML program

• KYC / customer due diligence, knowing who customers are and their risk (the identity foundation).
• Transaction monitoring, watching activity for suspicious patterns (structuring, unusual flows, mule behavior).
• Sanctions and watchlist screening, checking customers and transactions against sanctioned entities and PEP lists.
• Suspicious activity reporting, filing reports (SARs) with regulators when warranted.
• Recordkeeping and governance, maintaining auditable records and a program overseen by a compliance function.

Where identity fits

AML depends on reliable identity. You can’t monitor for suspicious activity or file meaningful reports if you don’t know who’s behind an account, and money launderers specifically exploit weak onboarding with synthetic identities and money mules. Strong KYC/IDV at onboarding, plus ongoing identity-aware monitoring, is what gives AML programs something solid to stand on. The money-mule problem in particular sits right at the intersection of identity, fraud, and AML.

The modern challenge

AML is resource-heavy and plagued by false positives, legitimate activity flagged as suspicious, drowning compliance teams in review. The direction of travel is toward smarter, AI-assisted monitoring and better identity signals to raise precision: catching more real laundering while reducing the noise. Fusing identity, fraud, and AML signals (rather than running them in silos) helps connect the dots (an account opened with a shaky identity that then behaves like a mule) that siloed systems miss.

The false-positive problem

AML’s biggest operational pain is false positives. Rules-based transaction monitoring flags enormous volumes of activity as potentially suspicious, and the overwhelming majority turns out to be legitimate. Compliance teams then spend their time clearing alerts rather than investigating real crime, and the sheer noise can bury the genuine cases. Industry estimates routinely put false-positive rates on AML alerts extremely high, which is both a cost problem (armies of analysts) and a risk problem (real laundering lost in the noise).

The response is smarter, identity-aware detection. Better identity signals reduce false positives by giving monitoring more context about who’s actually behind an account, and machine-learning approaches can prioritize the alerts most likely to be genuine. This is another argument for fusing identity, fraud, and AML: when the system knows an account opened with a strong, verified identity and behaves consistently, it can suppress noise; when it sees a weak identity that starts moving money like a mule, it can escalate. Precision (catching more real laundering with fewer wasted investigations) is where modern AML is headed.

Frequently asked questions

What does AML stand for?

Anti-money laundering.

How does AML relate to KYC?

KYC (identity verification and due diligence) is a foundational pillar of a broader AML program.

What is a SAR?

A suspicious activity report filed with regulators when potentially illicit activity is detected.

Why do AML programs struggle with false positives?

Rules-based monitoring flags much legitimate activity, which is why better identity signals and AI are used to improve precision.

Related: Know Your Customer (KYC) · Money Mule · Transaction Monitoring · Synthetic Identity Fraud · Know Your Business (KYB)