The Risks of De-Risking
How New Technologies Are Fighting Old Enemies
📅 September 18, 2024
📅 September 18, 2024
Compliance officers at financial institutions have the monumental task of acting as guardians at the gate: protecting their organization and the global financial system from abuse while also ensuring that licit funds flow undisturbed. This is a delicate balance, as global regulations continue to grow in complexity and regulators threaten to impose harsh penalties for knowingly, or unwittingly, facilitating the transfer of illicit funds originating from high-risk customers. Despite the ever-expanding web of regulation, each financial institution sets its own risk appetite, meaning there is no single globally consistent consensus on what constitutes a high-risk client.
The strain of regulations has prompted some financial institutions to de-risk from certain markets or jurisdictions, which could deprive individuals and businesses in high-risk jurisdictions of critical banking services. Additionally, by moving financial flows towards methods which are less subject to regulatory measures – such as informal money transfers – de-risking can inadvertently undermine efforts to promote integrity and transparency in the global financial system.
What are high-risk clients? Must a bank cease its relationships with these clients to protect its reputation and mitigate the risks of regulatory penalties?
A high-risk client is a customer who presents a greater risk of financial crime and who warrants enhanced due diligence and monitoring throughout the client lifecycle. While financial institutions will differ in how they approach their business with high-risk clients depending on their own risk appetite, some markers of high-risk clients are well-established.
Generally, four factors determine if a customer is high-risk: geography/jurisdiction, profession or industry, products/services, and channel. Client-specific characteristics may also influence their risk rating including political exposure, adverse news, sanctions nexus, ownership structure, or entity type.
Geography/Jurisdiction
A client could be considered high-risk if they live in a jurisdiction particularly vulnerable to illicit finance risks, such as geographies with lax AML/CFT controls. For business customers, this would apply where the business is registered, operates in, or has clients in these higher risk jurisdictions. Geographic risk factors also can include countries subject to sanctions, and countries with significant levels of corruption, and criminal and terrorist activity, according to the Financial Action Task Force Interpretive Note to Recommendation 10. Geographic/jurisdictional risk factors also include proximity to, and cross-border transactions with, high-risk countries.
Profession or Industry
This category of high-risk clients is the most wide-ranging given the number of industries and sources of wealth that may be considered vulnerable to illicit finance risks. The Wolfsberg Group Guidance on a Risk-Based Approach outlines several professions and sectors as high risk, including armaments, the financial sector (including money services businesses), casinos and other cash-intensive businesses, and charities and nonprofit organizations. Dealers in precious metals and stones, as well as art, antiquities, and real estate are also vulnerable to illicit finance.
The shipping sector is particularly vulnerable to trade-based money laundering and sanctions and strategic trade control evasion. Industries in that sector include commodity traders, port operators and others.
Clients operating in defense or dual-use goods – meaning those which can be used for both military and civilian purposes – may be subject to strategic trade controls. If strategic trade control requirements are breached, the institution financing the trade may be subject to regulatory action too.
Products or Services
High-risk financial products and services include those that facilitate high-speed transactions, present anonymity, and intermediate relationships. Trade finance instruments, dollar clearing services, correspondent banking accounts, and pooled vehicles that manage assets on behalf of clients, and others, may be vulnerable to abuse.
Intermediated relationships should warrant extra caution. The greater the number of financial intermediaries, the more complicated KYC and CDD efforts become.
Client-Specific Characteristics
A client with opaque ownership or control structure or unclear client base can be considered high-risk. The involvement of shell companies, shelf companies, nominee arrangements, and other complex ownership structures also increase the risks of financial crimes.
The majority of clients are engaged in perfectly legitimate business, even those with high-risk characteristics. The decision to onboard or maintain a relationship with a high-risk client may differ depending on a financial institution’s risk appetite.
The costs of enhanced due diligence for high-risk clients are burdensome. Financial institutions must accommodate both meet regulatory requirements and ensure profitability from a relationship. De-risking from high-risk markets and jurisdictions can be a legitimate risk management tool, or commercial decision as profit margins diminish with compliance costs, but it can also lead to financial exclusion.
Risks of De-Risking
Certain financial institutions have chosen not to service high-risk markets, jurisdictions, or client types altogether rather than exert resources on due diligence required to maintain effective control for these high-risk clients. The repercussions of de-risking may be severe for the affected markets or clients.
FATF believes de-risking could increase the use of informal financial services, undermine financial inclusion efforts, and increase money laundering and terrorist financing risks. The U.S. Department of Treasury, in its 2023 De-Risking Strategy, outlined how de-risking could disrupt the “unencumbered flow of development funding, as well as humanitarian and disaster relief.”
Money services businesses, non-profit organizations, and foreign respondent banks, especially in high-risk jurisdictions, are also highly vulnerable to de-risking. While most financial institutions cited profitability as the cause of termination of business with these types of customers, interviews conducted with representatives of financial institutions reflected an ingrained belief that the “potential for added scrutiny” is a “reason they may choose not to bank or service certain accounts.”
Case Study: Somalia
The case of Somalia is a model for the implications of blunt de-risking. Almost all U.S. banks have de-risked from Somalia, where an estimated 40% of the population relies on remittances from abroad for basic necessities. In 2013, the U.K.-based Barclays terminated business with all money transmitters, including Dahabshiil, one of Somalia’s largest hawaladar which 95% of non-profits in the country used for funds transfers. Barclays remained adamant that the driving cause for the decision was the inherent risk of servicing money transmitters in high-risk jurisdictions, and not a pattern of Dahabshiil being abused by illicit actors.
De-banking money transmitters did not impede the flow of remittances, but simply reduced the transparency in remittances and slowed progress in promoting transparency and accessibility in the country’s nascent banking sector. Families continued to send remittances through Dahabshiil and remittance networks, and Somali non-profits began to call for donations via hawala networks.
As information and communication technology infrastructure has improved in Somalia, the adoption of unregulated mobile money transfers has increased, constituting a near majority of funds transfers in the country. The Central Bank of Somalia has launched initiatives to oversee digitalization in the nation, but as of 2024, the FATF has not yet conducted a mutual evaluation report of Somalia’s AML/CFT framework, including its regulation of mobile money transfers.
Mobile money transfers and a reversion to informal hawala networks have become the norm in the country. With Somalis reliant on unregulated financial channels highly susceptible to money laundering and terrorist financing, de-risking has hindered potential progress in promoting financial safeguards in the country and impeded the work of legitimate non-profits.
Away from De-Risking and Toward the Risk-Based Approach
Blunt de-risking is rightly a major concern for global authorities. Somalia is just one example of where de-risking could result in the increased adoption of opaque financial channels.
Understanding the characteristics of high-risk clients and effectively allocating compliance resources to develop a complete risk assessment is crucial for the stability of the global financial system. Governments and regulators, and financial institutions must work together to balance regulatory obligations and financial inclusion policy objectives. Complex regulations and harsh penalties have forced financial institutions to dedicate a disproportionate amount of resources to service high-risk clients, which can prevent entire jurisdictions from accessing the global financial system.
Dialogue between governments and regulators, and financial institutions is needed to address the concerns of de-risking. Clear strategies must be developed by all parties to effectively balance risk management and regulatory obligations. The risk-based approach, the pillar of financial crimes compliance, is ineffective if reputational and punitive risk patently outweigh any benefits of engaging with high-risk clients.
This site uses cookies. By continuing to browse the site, you are agreeing to our use of cookies.
Accept settingsHide notification onlySettingsWe may request cookies to be set on your device. We use cookies to let us know when you visit our websites, how you interact with us, to enrich your user experience, and to customize your relationship with our website.
Click on the different category headings to find out more. You can also change some of your preferences. Note that blocking some types of cookies may impact your experience on our websites and the services we are able to offer.
These cookies are strictly necessary to provide you with services available through our website and to use some of its features.
Because these cookies are strictly necessary to deliver the website, refusing them will have impact how our site functions. You always can block or delete cookies by changing your browser settings and force blocking all cookies on this website. But this will always prompt you to accept/refuse cookies when revisiting our site.
We fully respect if you want to refuse cookies but to avoid asking you again and again kindly allow us to store a cookie for that. You are free to opt out any time or opt in for other cookies to get a better experience. If you refuse cookies we will remove all set cookies in our domain.
We provide you with a list of stored cookies on your computer in our domain so you can check what we stored. Due to security reasons we are not able to show or modify cookies from other domains. You can check these in your browser security settings.
These cookies collect information that is used either in aggregate form to help us understand how our website is being used or how effective our marketing campaigns are, or to help us customize our website and application for you in order to enhance your experience.
If you do not want that we track your visit to our site you can disable tracking in your browser here:
We also use different external services like Google Webfonts, Google Maps, and external Video providers. Since these providers may collect personal data like your IP address we allow you to block them here. Please be aware that this might heavily reduce the functionality and appearance of our site. Changes will take effect once you reload the page.
Google Webfont Settings:
Google Map Settings:
Google reCaptcha Settings:
Vimeo and Youtube video embeds:
You can read about our cookies and privacy settings in detail on our Privacy Policy Page.
Privacy Policy