FATF AI Anti-Money Laundering Guidance

Overview

The Financial Action Task Force (FATF), the global standard-setter for anti-money laundering (AML) and counter-terrorism financing (CFT), published guidance on opportunities and challenges of new technologies for AML/CFT in 2021, with specific attention to artificial intelligence and machine learning applications. FATF's guidance acknowledges that AI and ML tools offer significant potential for enhancing the detection of financial crime, improving customer risk scoring, and reducing false positives in transaction monitoring systems. At the same time, FATF identifies risks associated with AI adoption in the AML/CFT context, including model bias, lack of explainability in regulatory submissions, data quality issues, and the risk that over-reliance on automated systems could undermine human judgment and accountability. The guidance is addressed both to private sector reporting entities-including banks, money services businesses, virtual asset service providers, and other obligated entities-and to national financial intelligence units and supervisors. FATF does not have binding legislative authority but its Recommendations form the basis of AML/CFT legislation in over 200 jurisdictions, and non-compliance with FATF standards can result in a jurisdiction being placed on the FATF grey list or black list, with severe reputational and market access consequences. The guidance encourages regulators to adopt a risk-based and technology-neutral approach when evaluating AI-based compliance systems, and supports regulatory sandboxes and public-private partnerships as mechanisms for advancing responsible AI innovation in financial crime compliance.

Key Requirements

• •Reporting entities using AI/ML for AML/CFT must be able to demonstrate to supervisors how their models arrive at risk ratings and suspicious activity flags—adequate explainability is required.
• •Model governance frameworks must include regular validation, back-testing, and performance monitoring of AI/ML systems used in financial crime detection.
• •Data used to train AI/ML models must be relevant, of sufficient quality, and free from biases that could result in discriminatory or ineffective outcomes.
• •Human oversight must be maintained; AI/ML outputs should augment rather than replace the judgment of qualified AML compliance officers.
• •Third-party AI vendors must be subject to due diligence, and contractual arrangements must preserve the institution's ability to meet its regulatory obligations.
• •Supervisors should develop the technical capacity to assess and audit AI/ML-based AML systems during examinations.
• •Jurisdictions and financial institutions are encouraged to participate in public-private partnerships to improve financial crime data sharing and AI model development.

Effective Date

2021-10-01