What is AML?
AML (Anti-Money Laundering) is the body of law, policy and operational control designed to stop the proceeds of crime from being disguised as legitimate funds. In India the framework rests on the Prevention of Money Laundering Act, 2002 and the rules made under it, enforced through sectoral regulators, with the Financial Intelligence Unit – India (FIU-IND) acting as the national agency that receives and analyses prescribed reports.
AML and KYC are frequently used interchangeably, which obscures the relationship. KYC is one control inside an AML programme: it establishes who the customer is so that everything they subsequently do can be judged against a known profile.
The controls an AML programme is built from
- Customer due diligence at onboarding — identity, address and, for entities, beneficial ownership.
- Sanctions and watchlist screening — including the designated lists India gives effect to.
- PEP screening and enhanced due diligence for higher-risk relationships.
- Adverse media checks on customers and their controllers.
- Transaction monitoring — rules and models that flag activity inconsistent with the declared profile.
- Prescribed reporting — suspicious transaction reports and threshold-based cash and cross-border reports to FIU-IND.
- Record retention for the statutory period, in a form that can be produced on demand.
- Governance — a designated Principal Officer and Designated Director, staff training, and independent testing of the programme.
Why verification quality decides monitoring quality
Transaction monitoring compares behaviour against an expected profile. If the identity behind the account is wrong — a mule account opened with borrowed documents, or a merchant account in a name unconnected to the trading business — then every alert generated against it is being scored against fiction. Weak onboarding verification does not just create a compliance gap at signup; it degrades every downstream control for the life of the account.
The mule account problem
The dominant AML failure pattern in Indian digital finance is not sophisticated layering but volume: large numbers of accounts opened in real but unwitting or complicit identities, used briefly to move funds, then abandoned. The practical defences are unglamorous — confirming that the account holder name returned by the bank matches the applicant, checking that the phone number is genuinely in the applicant’s control, and looking for the same account or device appearing across supposedly unrelated customers.
Related terms
- KYC (Know Your Customer)
- PEP (Politically Exposed Person)
- KYB (Know Your Business)
- Name Match
- CKYC and the Central KYC Registry
Verify it with Veriqos
Strengthen the onboarding controls that AML monitoring depends on:
- Bank Account Verification API — Instantly confirm the authenticity of any bank account with Veriqos’ Bank Account Verification API — account number, holder name, and status in real time.
- Penny Drop Verification API — Verify bank account ownership instantly with Veriqos’ Penny Drop Validation API, performing a secure ₹1 transaction to validate accounts in real time.
- SMS OTP Verification API — Secure user logins and verify phone numbers instantly with Veriqos’ SMS OTP Verification API — for account creation, transactions, or digital onboarding.
See how these checks are applied in Banks & NBFCs, Fintech & Digital Lending.
← Back to the verification glossary
This entry explains how the check works in practice. It is general information, not legal or compliance advice — confirm current requirements against the applicable regulation.