De-Risking and Financial Inclusion Trade-Offs
De-risking refers to the practice by financial institutions of terminating or restricting business relationships with entire categories of customers, sectors, or jurisdictions perceived as high money-laundering or terrorist-financing risk, rather than managing those risks on a case-by-case basis. Common targets include correspondent banking relationships in developing regions, money service businesses, remittance providers, charities and non-profit organizations, and politically exposed persons. Institutions pursue de-risking because the compliance cost, enforcement exposure, and reputational damage of serving these clients can outweigh the revenue they generate, particularly after major regulatory penalties have signaled low tolerance for control failures. Financial inclusion is the policy objective of ensuring that individuals and businesses, especially the underserved, have access to affordable, legitimate financial services. When de-risking occurs wholesale, it directly undermines this goal. Communities lose access to remittance corridors, humanitarian organizations cannot move funds into conflict zones, and small businesses are pushed out of the regulated system. Paradoxically, this can increase money-laundering and terrorist-financing risk, because excluded parties resort to informal value transfer systems, cash couriers, or unregulated providers that offer no transparency to law enforcement. The Financial Action Task Force has repeatedly clarified that the risk-based approach does not require or endorse indiscriminate de-risking. Institutions are expected to identify, assess, and mitigate risk proportionately, applying enhanced due diligence where warranted and simplified measures where risk is demonstrably low. Regulators and supervisors increasingly expect firms to document why a relationship was exited and to show that the decision reflected a genuine risk assessment rather than blanket avoidance. For investigators and the anti-financial crime organization, the trade-off is managed through strong customer risk-rating methodologies, tailored transaction monitoring, use of utilities and shared KYC data for correspondent banking, and clear governance over exit decisions. Effective AFC programs therefore balance control objectives against the societal and systemic costs of exclusion, recognizing that keeping legitimate activity visible within the regulated perimeter is itself a core element of fighting financial crime.
De-Risking and Financial Inclusion Trade-Offs: A Complete CAMS Study Guide
De-risking sits at the intersection of two things the CAMS exam cares about deeply: the risk-based approach (RBA) and the real-world consequences of anti-financial crime (AFC) controls. Regulators, the Financial Action Task Force (FATF), the Financial Stability Board (FSB), the World Bank and the Wolfsberg Group have all warned that when financial institutions exit entire categories of customers to avoid risk rather than manage it, they can push legitimate activity into unregulated channels, harm vulnerable populations, and ultimately make the financial system less transparent. For a CAMS candidate, this topic tests whether you truly understand that AML/CFT is about managing risk proportionately, not eliminating it. It also connects to correspondent banking, money services businesses (MSBs), non-profit organizations (NPOs), remittance corridors, and the governance role of the AFC function in balancing compliance, commercial and societal interests.
2. What Is De-Risking?
FATF describes de-risking as the phenomenon of financial institutions terminating or restricting business relationships with clients or categories of clients to avoid, rather than manage, risk in line with the FATF risk-based approach. The key words are categories and avoid rather than manage. De-risking is not the same as a legitimate, case-by-case decision to exit a specific customer whose risk cannot be mitigated. It is the wholesale, indiscriminate exclusion of a whole sector, jurisdiction or customer type without individual assessment.
Common targets of de-risking include:
- Correspondent banking relationships, especially with respondent banks in emerging markets, small island states, and conflict-affected regions
- Money services businesses and remittance providers
- Non-profit organizations and humanitarian charities operating in high-risk zones
- Politically exposed persons (PEPs) as a class
- Foreign embassies and diplomatic missions
- Fintechs, virtual asset service providers (VASPs) and payment institutions
- Customers from specific nationalities or jurisdictions on grey or black lists
3. What Is Financial Inclusion?
Financial inclusion means that individuals and businesses, particularly the underserved and unbanked, have access to affordable, useful formal financial products such as transaction accounts, payments, savings, credit and insurance. FATF formally recognizes financial inclusion as complementary to AML/CFT objectives, not in conflict with them. The logic is simple: money that flows through regulated, transparent channels can be monitored and reported; money forced into cash, hawala or informal value transfer systems cannot. Exclusion therefore undermines the very purpose of AML/CFT.
FATF has published specific guidance on this point: the FATF Guidance on Anti-Money Laundering and Terrorist Financing Measures and Financial Inclusion (2011, updated 2013 and 2017, with further revisions in 2025 to Recommendation 1 encouraging proportionate measures). FATF Recommendation 1 and its Interpretive Note explicitly permit simplified due diligence where lower risks are identified, and allow countries to exempt certain low-risk activities in strictly limited circumstances.
4. The Trade-Off Explained
The tension is this:
From the institution's perspective, serving high-risk categories means higher compliance cost, greater exposure to enforcement actions, reputational damage, and sometimes thin profit margins. Exiting a whole category can appear to be the cheapest, safest option.
From the system perspective, that same exit:
- Drives legitimate transactions into less transparent or unregulated channels (the shadow economy)
- Reduces the visibility of law enforcement and financial intelligence units into flows
- Concentrates remaining flows into fewer banks, increasing systemic concentration risk
- Cuts off remittance lifelines to developing countries where remittances may exceed foreign direct investment
- Impedes humanitarian aid delivery, in some cases violating the spirit of UN humanitarian exemptions
- Harms economic development and can fuel the grievances exploited by criminal and terrorist networks
The trade-off is therefore not simply between risk and no risk. It is between managed, visible risk and displaced, invisible risk. The CAMS exam expects you to recognize that de-risking frequently increases overall ML/TF risk even as it appears to reduce an individual institution's exposure.
5. Drivers of De-Risking
Understand the causes, because exam questions often ask you to identify the root of a de-risking decision:
- Profitability: compliance costs exceed revenue from low-margin segments such as small MSBs or low-volume respondent banks
- Regulatory and enforcement fear: large fines against global banks for correspondent and MSB-related failures created a perception of zero tolerance
- Reputational risk: fear of negative media or association with a jurisdiction perceived as high-risk
- Uncertainty about supervisory expectations: institutions may believe regulators expect them to know their customer's customer (KYCC) in every case, which is not the FATF standard
- Sanctions complexity: overlapping sanctions regimes make certain corridors operationally difficult
- Data and documentation gaps: inability to obtain reliable information on respondent institutions or beneficial owners
- Group-level risk appetite decisions that apply blanket restrictions across jurisdictions
6. The Official Regulatory Position
You should be able to recall the general stance of major bodies:
FATF: In October 2014 and again in 2015, FATF publicly stated that de-risking is not in line with the RBA, and that the RBA does not require institutions to terminate entire categories of customers. FATF clarified in its 2016 Guidance on Correspondent Banking Services that correspondent institutions are not required to conduct customer due diligence on the customers of the respondent bank (no general KYCC obligation). FATF also revised Recommendation 8 in 2016 to stress that not all NPOs are high-risk and that measures must be targeted and proportionate.
FSB: Launched a four-point action plan on correspondent banking decline, including data collection, clarification of regulatory expectations, domestic capacity building, and strengthening tools such as the Wolfsberg Correspondent Banking Due Diligence Questionnaire (CBDDQ) and Legal Entity Identifiers (LEIs).
Basel Committee (BCBS): Updated its Sound management of risks related to money laundering and financing of terrorism with an annex on correspondent banking, reinforcing a risk-based rather than exit-based approach.
Wolfsberg Group: Developed the standardized CBDDQ to reduce the cost of due diligence and encourage institutions to maintain relationships. Wolfsberg has also published guidance emphasizing that compliance programmes should produce effective outcomes, not simply technical compliance.
FinCEN and US federal banking agencies: Issued a 2014 statement on MSBs and a 2016 joint fact sheet on foreign correspondent banking, confirming that there is no expectation of a zero-failure environment, that institutions are not expected to perform KYCC on respondent customers, and that MSBs should not be refused service solely on the basis of their industry category. The US Anti-Money Laundering Act of 2020 mandated a Treasury review of de-risking, which led to a 2023 Treasury de-risking strategy.
European Banking Authority (EBA): Published a 2022 Opinion on de-risking, warning that unwarranted de-risking is a sign of ineffective ML/TF risk management and may breach rules on access to basic payment accounts. The EBA stressed that institutions should not refuse customers solely because they belong to a category.
World Bank: Conducted surveys showing significant decline in correspondent banking relationships, with the greatest impact on the Caribbean, Pacific, Africa and the Middle East.
7. How a Risk-Based Alternative Works in Practice
Rather than exit, an institution applying the RBA would:
Step 1 - Assess the specific customer: Conduct a documented individual risk assessment considering jurisdiction, products, delivery channels, ownership, business model, AML programme quality and regulatory supervision of the customer.
Step 2 - Identify mitigants: For an MSB, this may include reviewing its AML programme, registration or licensing status, independent audit results, agent oversight, transaction limits and corridor restrictions. For a respondent bank, this includes the CBDDQ, assessment of home-country supervision, ownership transparency, public enforcement history and the respondent's own AML controls.
Step 3 - Calibrate controls proportionately: Apply enhanced due diligence (EDD), tailored transaction monitoring scenarios, lower thresholds for review, periodic site visits, restricted product sets (for example, no payable-through accounts or nested relationships without approval), and more frequent reviews.
Step 4 - Price and resource accordingly: Pass through appropriate costs rather than exit; ensure compliance has adequate staff and technology for the segment.
Step 5 - Govern the decision: Decisions to restrict or exit should go through a committee with documented rationale, consideration of financial inclusion impact, senior management sign-off and an appeals or escalation mechanism.
Step 6 - Exit only where risk genuinely cannot be mitigated: Examples include refusal to provide information, evidence of shell bank status, direct sanctions exposure, credible evidence of complicity in crime, or a respondent that permits its own correspondent accounts to be used by shell banks. Such exits are legitimate risk management, not de-risking.
8. Tools Supporting Financial Inclusion
Be familiar with practical mechanisms that reconcile AML/CFT with inclusion:
- Tiered or progressive KYC: basic accounts with low transaction and balance limits opened with reduced documentation, upgrading to full KYC as activity grows
- Simplified due diligence (SDD) for proven low-risk products such as low-value prepaid cards or micro-savings accounts
- Digital identity and national ID systems that reduce documentation barriers
- Reliance on third parties and utilities such as KYC registries and the Wolfsberg CBDDQ
- Agent banking and mobile money with proportionate agent oversight
- Regulatory sandboxes enabling supervised innovation
- Humanitarian exemptions and safe harbours for NPOs delivering aid in sanctioned or conflict regions
- Public-private partnerships and information-sharing arrangements that improve risk understanding
9. Role of the AFC Organization
Within the CAMS domain on controls, investigations and the AFC organization, the compliance function should:
- Advise the board on the difference between risk appetite and risk avoidance
- Ensure the institution's risk appetite statement addresses de-risking explicitly and requires case-by-case evaluation
- Document rationale for category-level restrictions and ensure they are periodically reviewed
- Monitor exit decisions for patterns that indicate discriminatory or indiscriminate outcomes
- Train first-line staff that category membership alone is not grounds for refusal
- Engage with regulators and industry bodies to clarify expectations
- Consider off-boarding impacts such as customer notification, orderly transition and regulatory reporting obligations
10. Exam Tips: Answering Questions on De-Risking and Financial Inclusion Trade-Offs
Tip 1 - Default to the risk-based, case-by-case answer. When options include exiting all customers of a type versus assessing each relationship individually and applying proportionate controls, the individual assessment is almost always correct. CAMS consistently rewards RBA thinking.
Tip 2 - Recognize that de-risking increases systemic risk. If a question asks about the consequence of de-risking, look for answers mentioning loss of transparency, movement to unregulated or informal channels, reduced law enforcement visibility, or harm to remittances and humanitarian aid. An answer claiming de-risking eliminates ML/TF risk is a distractor.
Tip 3 - Know there is no general KYCC requirement. A classic exam trap suggests correspondent banks must perform CDD on the respondent bank's underlying customers. FATF and US agencies say this is not required in the ordinary course. The correspondent must understand the respondent's business, customer base and controls, not identify each underlying customer.
Tip 4 - Distinguish de-risking from legitimate exits. If the scenario includes a shell bank, refusal to supply information, a nested relationship concealed from the correspondent, or sanctions evasion, terminating the relationship is appropriate risk management, not improper de-risking. Read the facts carefully.
Tip 5 - Remember FATF's position on NPOs and MSBs. Not all NPOs are high-risk; Recommendation 8 calls for targeted, proportionate measures. MSBs should not be refused solely because of their industry. Answers that treat an entire sector as inherently high-risk without analysis are wrong.
Tip 6 - Link financial inclusion to AML/CFT effectiveness. Expect questions framing inclusion and AML as opposites. The correct view is that they are mutually reinforcing: inclusion brings activity into the monitored system. Simplified due diligence and tiered KYC are legitimate FATF-endorsed tools.
Tip 7 - Identify the primary driver. When asked why institutions de-risk, the most commonly cited drivers are profitability relative to compliance cost, fear of regulatory penalties, and reputational concern. Choose the answer the scenario supports rather than a generic one.
Tip 8 - Watch for governance and documentation answers. Questions about what a compliance officer should do when a business line proposes a blanket exit are best answered by: conduct a documented risk assessment, consider mitigating controls, escalate to the appropriate committee, and record the rationale. Avoid answers that simply approve or reject without analysis.
Tip 9 - Eliminate absolutes. Words such as always, never, all, and none in an answer choice are red flags in this topic because the entire subject is about proportionality and judgment.
Tip 10 - Think like a regulator, not just a risk-averse banker. The examiners want the answer a FATF assessor or thoughtful supervisor would endorse: effective outcomes, proportionate controls, and preservation of financial system integrity and access.
11. Worked Example
Scenario: A regional bank's business head proposes terminating all 40 of its correspondent relationships with banks in a Caribbean jurisdiction after one respondent was fined for AML failures. The compliance officer is asked for a recommendation. Which is the most appropriate response?
A. Agree, because the jurisdiction is now demonstrably high-risk.
B. Agree, but delay termination by 90 days to allow customers to find alternatives.
C. Recommend a documented, relationship-by-relationship risk review, with enhanced controls for those that can be mitigated and exit only for those that cannot.
D. Recommend conducting full CDD on the customers of each respondent bank before deciding.
Analysis: A and B are de-risking based on category rather than individual risk. D imposes a KYCC standard that FATF does not require and is impractical. C is correct because it reflects the RBA, proportionate controls, and governance with documented rationale.
12. Key Terms to Memorize
- De-risking: wholesale termination or restriction of categories of customers to avoid rather than manage risk
- Financial inclusion: access of underserved populations to formal financial services, recognized by FATF as complementary to AML/CFT
- Simplified due diligence: reduced CDD measures permitted where lower risk is identified
- Tiered KYC: progressive identification requirements tied to account functionality limits
- KYCC: know your customer's customer, not a general FATF requirement in correspondent banking
- Nested or downstream correspondent banking: a respondent providing access to other institutions through its correspondent account, requiring heightened scrutiny
- CBDDQ: Wolfsberg Correspondent Banking Due Diligence Questionnaire
- Recommendation 1: the FATF risk-based approach, including proportionate measures and permitted exemptions
- Recommendation 8: targeted, proportionate measures for NPOs
- Recommendation 13: correspondent banking due diligence requirements
13. Summary
De-risking is a symptom of risk avoidance replacing risk management. The CAMS exam expects you to understand that the risk-based approach demands individual assessment, proportionate controls and documented decisions, and that indiscriminate exclusion of customer categories displaces risk into less transparent channels while harming financial inclusion, remittances, humanitarian aid and economic development. When answering questions, favour case-by-case analysis, reject blanket exits and absolutes, remember there is no general KYCC obligation, and treat financial inclusion and effective AML/CFT as partners rather than rivals.
CAMS - De-Risking and Financial Inclusion Trade-Offs Example Questions
Test your knowledge of De-Risking and Financial Inclusion Trade-Offs
Question 1
A bank's national risk assessment rates basic, low-value deposit accounts as low risk for money laundering. A branch has been declining newly arrived refugees who present only an identity document issued by a recognised humanitarian agency, because that document is not on the bank's standard identification list. The head of KYC is asked how the branch should handle these applicants in future. Which approach is MOST appropriate?
Question 2
After a cost review, a bank exits every money services business customer that sends remittances to a high-risk corridor. The decision rests on compliance cost, not on any assessed customer-level risk, and peer banks take the same step. From a system-wide financial crime perspective, which outcome is MOST likely?
Question 3
Which of the following best describes de-risking as the term is used in FATF guidance on financial inclusion?