FRM Exam Part II · Sound Management of Risks Related to Money Laundering and Financing of Terrorism

Money Laundering and Terrorist Financing Risk: Basel Guidelines

Updated 11 October 2026 · Fact-checked

Money laundering (ML) hides the criminal origin of funds. Terrorist financing (TF) funds terrorism, often from legal money. Banks face operational, legal, reputational and concentration risks from both. The Basel Committee guidelines set out how banks should identify, assess, manage and monitor ML/FT risk within their overall risk management framework.

Understand ML/FT Risk Overview and Basel Committee Guidelines

Money laundering is the process of making money from crime look legitimate. The criminal wants to use the proceeds without drawing attention to their source. Banks matter because they move money, so criminals use them.

Laundering is usually described in three stages. Placement puts illicit cash into the financial system, for example through many small deposits. Layering moves the money through transfers, shell companies and accounts across jurisdictions to hide its trail. Integration brings the money back as apparently clean wealth, such as real estate, business investments or loan repayments.

Terrorist financing is providing or collecting funds to support terrorist acts or organisations. The key contrast with ML: in ML the money is dirty at the start and the aim is to make it look clean. In TF the money may come from legal sources, such as donations or salaries, and the aim is to use it for a violent purpose. Amounts can be small, so TF is harder to spot by size alone.

For a bank, ML/FT risk is not a separate silo. It shows up as operational risk (weak controls, processes, people or systems fail to detect suspicious activity), legal and compliance risk (fines, enforcement actions, criminal liability), reputational risk (loss of customer and counterparty trust, loss of correspondent relationships) and concentration risk (heavy dependence on a few customers, products or regions that raise exposure to illicit flows, or loss of funding if those relationships fail).

The Basel Committee guidelines on the sound management of ML/FT risks aim to make banks treat this risk as part of their core risk management. They stress a risk-based approach, board and senior management responsibility, customer due diligence, ongoing monitoring, and group-wide implementation, with supervisors checking that banks comply. Failures harm not only the bank but the safety and soundness of the financial system.

Key formulas to remember

Three stages of money laundering: Placement → Layering → Integration; Placement enters funds into the system; layering obscures the trail; integration returns funds as apparently legitimate.
ML vs TF source of funds: ML: illegal source → legitimate appearance. TF: legal or illegal source → illegal use; Use this contrast to answer any difference question.
Risks arising from ML/FT for a bank: Operational + Legal/Compliance + Reputational + Concentration; These are the risk channels the Basel guidelines highlight; do not label it only as credit or market risk.
Core pillars of the Basel approach: Risk assessment → Customer acceptance and due diligence → Ongoing monitoring → Governance and group-wide implementation; Risk-based approach; stronger controls for higher-risk customers and products.

How to solve ML/FT Risk Overview and Basel Committee Guidelines questions

Use this method for scenario questions about ML/FT risk and the Basel Committee guidelines.

1Identify what the scenario describes: is it about the origin of funds (ML) or the use of funds (TF)?
2If it is ML, map the activity to placement, layering or integration.
3Identify the risk channel hit: operational, legal/compliance, reputational or concentration.
4Link the failure to a Basel principle: risk assessment, customer due diligence, ongoing monitoring, governance or group-wide implementation.
5Decide what the risk-based response is: higher-risk customers get enhanced due diligence and closer monitoring.
6Check each option for absolute words such as 'always' or 'only', and eliminate options that treat ML/FT as only a compliance-department issue.

Quickest way: Keyword-to-concept mapping

When to use it: Use when you have about a minute per question and the options are close.

Small cash deposits, structuring: placement.
Many transfers, shell companies, cross-border hops: layering.
Funds return as real estate, investments or loan repayments: integration.
Legitimate donations or salaries funding violence: terrorist financing.
Fines, lost correspondent banks, press damage: legal and reputational risk.
Weak monitoring system or untrained staff: operational risk and a control failure.

Common mistakes in ML/FT Risk Overview and Basel Committee Guidelines

Saying terrorist financing always uses illegal money.
Students link TF to crime in general.
Fix: Remember TF can use legal funds. The defining feature is the purpose, not the source.
Mixing up layering and integration.
Both involve making money look clean.
Fix: Layering hides the trail through complexity. Integration is when the money re-emerges as legitimate wealth.
Treating ML/FT as only a legal or compliance matter.
Compliance teams often own the process.
Fix: The Basel guidelines place it in overall risk management, with responsibility at board and senior management level.
Applying the same controls to every customer.
Students assume uniform rules are fairer or safer.
Fix: The approach is risk-based: higher-risk customers get enhanced due diligence and monitoring.
Ignoring concentration risk as a channel.
It is usually linked to credit portfolios.
Fix: Remember concentration can arise in customers, products or geographies tied to illicit flows or funding loss.

Worked examples

Example 1

A bank notices a customer making many cash deposits just below the reporting threshold, then wiring the total to several shell companies in different countries. Which stages of money laundering are shown?

Show the solution

The many small cash deposits enter illicit cash into the banking system. This is placement.
Wiring the funds to shell companies across countries obscures the trail. This is layering.
No sign yet that the money is returned as apparently legitimate wealth, so integration is not shown.

Answer: Placement (the structured cash deposits) and layering (the wires to shell companies). Integration is not yet shown.

Example 2

A bank loses several correspondent banking relationships and pays a large regulatory penalty after repeated failures to detect suspicious transactions caused by an ineffective monitoring system. Which risks has it suffered?

Show the solution

Ineffective monitoring system failing to flag transactions is an inadequate internal process or system: operational risk.
The regulatory penalty is legal and compliance risk.
Losing correspondent relationships reflects loss of counterparty trust: reputational risk, with possible funding impact.
Under the Basel guidelines, the root cause maps to weak ongoing monitoring and governance.

Answer: Operational (control failure), legal/compliance (penalty) and reputational (lost correspondent relationships) risk, traced to weak ongoing monitoring.

Exam tips

Expect scenario questions: classify the stage of ML or the risk channel from a short story.
Know the ML versus TF contrast cold. It is a favourite distractor test.
Look for the phrase 'risk-based approach'. It is usually the right answer on control design.
Reject options that assign responsibility only to the compliance team; board and senior management are accountable.
Name the risk channel precisely: operational, legal, reputational or concentration.

Practice questions from Sound Management of Risks Related to Money Laundering and Financing of Terrorism

ML/FT Risk Overview and Basel Committee Guidelines: frequently asked questions

What is the difference between money laundering and terrorist financing?

Money laundering disguises the criminal origin of funds. Terrorist financing supports terrorism and can use funds from legal sources. The first focuses on the source, the second on the purpose.

What are the stages of money laundering?

Placement, layering and integration. Placement puts funds into the financial system, layering hides the trail through complex transfers, and integration returns the funds as apparently legitimate assets.

Why is ML/FT risk an operational risk for banks?

Failures usually come from weak processes, systems, people or controls that miss suspicious activity. It also produces legal and reputational losses, so it affects several risk categories at once.

What is the purpose of the Basel Committee ML/FT guidelines?

They help banks manage ML/FT risk as part of sound overall risk management. They cover risk assessment, customer due diligence, ongoing monitoring, governance and group-wide implementation, and support supervisors in assessing banks.