{"id":2474,"date":"2020-03-09T05:48:43","date_gmt":"2020-03-09T05:48:43","guid":{"rendered":"https:\/\/blog.kyc2020.com\/?p=2474"},"modified":"2023-03-09T08:33:15","modified_gmt":"2023-03-09T08:33:15","slug":"writing-an-aml-policy-for-your-fintech-startup-with-kyc2020","status":"publish","type":"post","link":"https:\/\/www.kyc2020.com\/blog\/writing-an-aml-policy-for-your-fintech-startup-with-kyc2020\/","title":{"rendered":"Writing Your AML Policy for Fintech Startups"},"content":{"rendered":"

Financial technology (Fintech) firms are subject to Anti-Money Laundering (AML) regulations or oversight via their relationship and dependency on banks. The unassuming, but crucial expectation, of this oversight is an AML policy which describes how the Fintech will administer their AML program. This policy shows banks or regulators that the organization consistently performs their due diligence in screening clients for eligibility as well as transactions for suspicious activity.<\/span><\/p>\n

Most startups find hiring a professional to create an AML program too costly, so they end up creating their AML policy themselves. This is a risky proposition as they usually lack the expertise to identify potential pitfalls. Banks are wary of DIY attempts, and costly delays or false starts haunt those Fintechs that pursue the DIY method.<\/span><\/p>\n

What is an AML Policy?<\/b><\/h3>\n

An AML policy details the steps your organization takes to combat financial crimes such as money laundering and terrorist financing. Regulations have slight variations depending on your jurisdiction, but largely follow the Financial Action Task Force (FATF) recommendations<\/a> to help align global efforts in combating financial crimes. Since most jurisdictions largely apply the FATF recommendations, it is possible for you to create an AML policy through a template. But using templates can have its disadvantages which we will talk about later.<\/span><\/p>\n

Why You Need an AML Policy for Your Fintech Startup?<\/b><\/h3>\n

While some Fintechs are regulated directly, and must comply with the law by having an AML policy, many more must comply because their financial partners require it. Failure to comply with AML regulations can result in fines, cease and desist notices, and permanent industry bans. For startups, even small fines can cause a business venture to fail, and delays while you negotiate your policy with the banks take time and resources away from the business venture. Enacting an appropriate AML policy to ensure you follow all AML regulations keeps risks to a minimum.<\/span><\/p>\n

How To Create an AML Policy<\/b><\/h3>\n

Creating an AML policy must, therefore, be a priority for regulated organizations, and those Fintechs that partner with banks to provide financial services. For those interested in the DIY method, there are free resources online such as FINRA\u2019s AML template<\/a>. This template guides you through each piece of information you need to include in your AML policy complete with examples of how you should fill it in. You can use this template to create your policy and then have an expert review or complete the policy. This provides you with a cost-effective method of ensuring your policy follows all AML regulations without the need to hire a professional for the entire process.<\/span><\/p>\n

Firm Policy<\/b><\/h4>\n

The first section of an AML policy outlines your firm\u2019s policy on your intentions to combat money laundering and other financial crimes. Within this section you define the kinds of financial crimes that your Fintech startup could be exposed to and confirm your intentions to fully comply with all AML regulations, by detecting and deterring such attempts.<\/span><\/p>\n

AML Compliance Personnel Designations<\/b><\/h4>\n

In the next section, you designate who is responsible for AML compliance within your organization. The key role you must fill to ensure AML compliance is the Chief AML Compliance Officer,<\/a> or CAMLO. This individual oversees your entire AML compliance operation ensuring your overall compliance as well as determining how to improve the way you achieve compliance.<\/span><\/p>\n

Sharing AML Information with Law Enforcement<\/b><\/h4>\n

This section provides an overview of your organization\u2019s policies for sharing all AML information with the applicable authorities. As part of your AML compliance, you must share all of your findings related to AML with the authorities applicable to your jurisdiction. Within this section you should highlight which authorities your organization can share information with and how your organization will share that information. Generally, you must comply with all requests from FinCEN, National Security Letters, Grand Jury Subpoenas, and most law enforcement requests subject to a subpoena; however, some jurisdictions have additional discovery methods.<\/span><\/p>\n

Sharing AML Information with Other Financial Institutions<\/b><\/h4>\n

While you are not required to share information with other financial institutions, it can help you fulfill your AML compliance obligations. Within this section, you must detail whether you intend to share certain types of otherwise confidential information with other financial institutions. If you intend to share information with other financial institutions, you should include how you intend to share that information and under what circumstances you intend to share information.<\/span><\/p>\n

Procedure for Checking Sanctions Lists<\/b><\/h4>\n

The Office of Foreign Asset Control maintains a list of sanctioned entities and individuals. Though this section is not directly related to AML, the requirements to identify individuals are so closely tied to the AML expectations, that they are often lumped together. This section demonstrates your organization\u2019s compliance with these sanctions. Within this section you detail your organization\u2019s exact steps for checking all sanctions lists when opening a new account for a client, altering an existing account, or partnering with a client. For an inventory of global watchlists and a list of sanction screening solution vendors visit Mr. Watchlist<\/a>. For help with what sanction lists you should be screening for your compliance program, check out this free Watchlist Builder Tool<\/a> from KYC2020.<\/span><\/p>\n

Know Your Customer (KYC) Compliance<\/b><\/h4>\n

Your Fintech\u2019s method for verifying the identities of your customers is required in writing within your organization\u2019s AML policy. These regulations are commonly referred to as Know Your Customer, or KYC, regulations. These regulations are so close to the OFAC identification requirements that they are usually lumped together. In this section you must define reasonable procedures your company follows to confirm the identity of your customers. These procedures must include:<\/span><\/p>\n