Transaction Monitoring
Transaction monitoring is the ongoing review of customer activity — automated rules and models plus human investigation — against what the firm expected that customer to do and against known laundering patterns. Activity that does not fit produces an alert for someone to work.
Also called: TM · post-transaction monitoring
Transaction monitoring compares what a customer actually does with what the firm expected them to do when the account was opened, and with patterns known to indicate laundering. Rules and models flag the outliers — a sudden jump in volume, funds arriving and leaving the same day, counterparties in countries the customer has no reason to deal with — and each flag becomes an alert in a queue.
An analyst then works that alert: pulls the customer file, reads the history, asks the relationship owner, and either closes it with a written rationale or escalates it. Escalation can lead to a suspicious activity report, to further due diligence, or to exiting the customer. The quality of the onboarding data decides how well any of it works: with no clear expected profile, there is nothing for the activity to be compared against.
In practice
Alerts are not findings. A system that generates alerts nobody works through provides no compliance benefit at all, and a large unworked queue is worse evidence than a smaller, well-tuned one.
Commonly confused with
| Term | How it differs |
|---|---|
| Sanctions Screening | Screening matches names and identifiers against published lists; monitoring examines behavior over time and has no list to match against. |
| Know Your Transaction | KYT usually describes analyzing an individual transfer, often on-chain; monitoring is the continuous review across a customer’s whole activity. |
See also
- Suspicious Activity ReportA suspicious activity report is a confidential filing made to FinCEN when a US financial institution knows, suspects, or has reason to suspect that a transaction above a set dollar floor involves illicit funds, has no apparent lawful purpose, or is designed to evade reporting rules. It is filed without telling the customer.
- Know Your TransactionKnow your transaction, or KYT, is the practice of screening individual transactions and the counterparties behind them, particularly on-chain, rather than relying only on what was established about the customer at onboarding. It answers a different question: not who this customer is, but where this particular payment came from.
- Sanctions ScreeningSanctions screening is the checking of customers, counterparties and payment messages against sanctions lists and watchlists — at onboarding, repeatedly afterwards, and on payments while they are still in flight — and the holding or rejecting of anything that genuinely matches.
- AML ProgramAn AML program is the documented set of controls a regulated firm must maintain to detect and deter money laundering. In the United States it is conventionally described as four pillars: written policies and procedures, a designated compliance officer, staff training, and independent review. Other regimes frame the same components differently.