Comparing AFC Regimes Across Jurisdictions

1. Why This Topic Matters

Financial crime does not respect borders, but laws do. Money launderers, terrorist financiers and sanctions evaders deliberately exploit the gaps between national anti-financial crime (AFC) regimes: a shell company formed where beneficial ownership is opaque, funds routed through a jurisdiction with weak supervision, and cash deposited where reporting thresholds are high or unenforced. An AML professional who understands only their home regime will miss the risk that arises precisely at the seams between jurisdictions.

For the CAMS exam, this topic sits within the domain on Regulatory Regimes, Risk Assessments and Collaboration. The exam expects you to understand that the Financial Action Task Force (FATF) sets global standards, that jurisdictions implement those standards differently, and that a compliance officer in a multinational institution must reconcile those differences through group-wide policies, country risk assessments and cross-border cooperation. In practice this knowledge drives correspondent banking decisions, customer and geographic risk ratings, enhanced due diligence triggers and the design of enterprise-wide compliance programs.

2. What Is an AFC Regime?

An AFC regime is the full architecture a jurisdiction uses to prevent, detect and punish money laundering, terrorist financing, proliferation financing, sanctions evasion, fraud, bribery and corruption. It typically consists of:

• Primary legislation that criminalizes money laundering and terrorist financing, defines predicate offenses and sets penalties.
• Preventive obligations on financial institutions and designated non-financial businesses and professions (DNFBPs): customer due diligence (CDD), record keeping, suspicious activity reporting, and internal controls.
• A Financial Intelligence Unit (FIU) that receives, analyzes and disseminates suspicious transaction reports.
• Supervisors and regulators that license institutions, conduct examinations and impose sanctions for non-compliance.
• Law enforcement and prosecutorial capacity, including asset forfeiture and confiscation powers.
• International cooperation mechanisms such as mutual legal assistance treaties (MLATs), FIU-to-FIU exchange through the Egmont Group, and participation in FATF or an FATF-Style Regional Body (FSRB).

Every jurisdiction that belongs to the FATF global network has committed to the FATF 40 Recommendations, but the Recommendations are deliberately principles-based. Each country translates them into domestic law in its own way, which is why regimes differ even when they share a common foundation.

3. The Common Foundation: FATF Standards

Before comparing regimes you must understand the benchmark against which they are compared.

• The 40 Recommendations cover AML/CFT policies and coordination, money laundering and confiscation, terrorist and proliferation financing, preventive measures, transparency of legal persons and arrangements, powers and responsibilities of competent authorities, and international cooperation.
• The Risk-Based Approach (Recommendation 1) requires countries and institutions to identify, assess and understand their risks and allocate resources accordingly. This is the single most important concept linking all regimes.
• Mutual Evaluations assess each country on two dimensions: technical compliance (are the laws and regulations in place?) rated Compliant, Largely Compliant, Partially Compliant or Non-Compliant, and effectiveness (do they work in practice?) rated across eleven Immediate Outcomes as High, Substantial, Moderate or Low.
• Public listings: jurisdictions with strategic deficiencies may be placed on the list of Jurisdictions under Increased Monitoring (commonly called the grey list) or the list of High-Risk Jurisdictions subject to a Call for Action (commonly called the black list). Institutions are expected to apply enhanced due diligence to the former and, in the most serious cases, counter-measures to the latter.
• FSRBs such as MONEYVAL, APG, GAFILAT, ESAAMLG, GIABA, MENAFATF, CFATF and EAG extend FATF methodology to member states regionally.

4. How Regimes Differ: The Key Comparison Dimensions

When the exam asks you to compare regimes, it is usually testing one or more of the following axes.

4.1 Legal tradition and legislative style
Common-law jurisdictions such as the United States and United Kingdom often rely on broad statutes supplemented by regulatory guidance and case law, while civil-law jurisdictions in continental Europe and Latin America tend toward detailed codified rules. The European Union adds a supranational layer: Anti-Money Laundering Directives (AMLDs) that must be transposed into national law, and more recently a directly applicable AML Regulation and a new EU Anti-Money Laundering Authority (AMLA) intended to harmonize supervision across member states.

4.2 Scope of predicate offenses
Some jurisdictions use an all-crimes approach in which any criminal conduct can be a predicate for money laundering. Others use a list approach or a threshold approach tied to the seriousness of the offense. Tax crimes are a classic area of divergence: they are predicates in many regimes today but historically were not everywhere. The United States, for example, uses a statutory list of Specified Unlawful Activities.

4.3 Reporting regimes
• Suspicious activity reporting: the United States requires Suspicious Activity Reports (SARs) generally within 30 days of initial detection, with a monetary threshold for most institutions. Many other countries require Suspicious Transaction Reports (STRs) with no threshold and in some cases a very short deadline or immediate filing. Some regimes require the institution to obtain consent from the FIU before proceeding with a suspicious transaction (the UK defence against money laundering model), while others only require post-event reporting.
• Currency and threshold reporting: the US Currency Transaction Report (CTR) at over 10,000 US dollars is a well-known objective reporting requirement; many jurisdictions have no equivalent, relying solely on suspicion-based reporting, while others impose cash payment limits on merchants.
• Cross-border cash declarations exist in nearly all regimes but at different thresholds.

4.4 Customer due diligence and beneficial ownership
All FATF members require CDD, but the details differ: the ownership percentage that defines a beneficial owner (commonly 25 percent, but lower in some high-risk contexts and lower in certain jurisdictions), whether a central beneficial ownership register exists and who can access it, how domestic versus foreign politically exposed persons (PEPs) are treated, and whether simplified due diligence is permitted for low-risk products. The EU pioneered public or semi-public registers; the United States introduced a non-public register under the Corporate Transparency Act, with subsequent changes to its scope.

4.5 Sanctions regimes
Sanctions are a major source of jurisdictional conflict. The United Nations Security Council imposes sanctions binding on all member states, but the United States (OFAC), the European Union, the United Kingdom (OFSI) and others also maintain autonomous programs with different designated persons and different prohibitions. US sanctions have notable extraterritorial reach through secondary sanctions and the use of the US dollar, and the EU has adopted blocking statutes to counter certain US measures. A multinational institution may face a transaction that is permitted in one jurisdiction and prohibited in another.

4.6 Data privacy and information sharing
Privacy law shapes what institutions may share. The EU General Data Protection Regulation (GDPR) and bank secrecy laws in several jurisdictions restrict cross-border transfer of customer data, which can conflict with a parent institution's need for group-wide monitoring. The United States permits voluntary inter-institution sharing under Section 314(b) of the USA PATRIOT Act with a safe harbor, and mandates law enforcement to institution requests under Section 314(a). The UK Joint Money Laundering Intelligence Taskforce (JMLIT) and similar public-private partnerships exist elsewhere but with varying legal bases. Tipping-off prohibitions exist almost everywhere but the definition and exceptions vary.

4.7 Supervision and enforcement culture
Regimes differ in who supervises (a single financial regulator, multiple sectoral regulators, a central bank, or self-regulatory bodies for lawyers and accountants), how often examinations occur, and the scale and publicity of penalties. US enforcement is characterized by very large monetary penalties, deferred prosecution agreements and personal liability for compliance officers. Other jurisdictions may rely more on licence conditions, remediation orders or criminal prosecution of individuals.

4.8 Coverage of DNFBPs and emerging sectors
Lawyers, accountants, real estate agents, dealers in precious metals and casinos are covered inconsistently. The United States has historically had gaps in coverage of certain gatekeepers compared with the EU and UK. Virtual asset service providers (VASPs) are now within FATF standards, including the Travel Rule, but national implementation ranges from comprehensive licensing to outright prohibition to minimal regulation.

5. How It Works in Practice: Managing Multi-Jurisdictional Compliance

5.1 Group-wide policies and the higher standard principle
FATF Recommendation 18 requires financial groups to implement group-wide AML/CFT programs. The usual approach is that the group adopts the stricter of the home or host country requirement wherever permitted. Where host country law prohibits applying the group standard, the institution must apply appropriate additional measures and inform the home supervisor.

5.2 Country risk assessment
Institutions assign risk ratings to jurisdictions using inputs such as FATF listings, mutual evaluation results, Transparency International Corruption Perceptions Index, Basel AML Index, sanctions exposure, tax haven status, terrorist activity, bank secrecy and offshore financial center status. These ratings feed into customer risk scoring and transaction monitoring thresholds.

5.3 Correspondent banking
Comparing regimes is central to correspondent banking due diligence. The correspondent must assess the respondent's home jurisdiction regime, the quality of its supervision and whether the respondent is itself subject to equivalent AML obligations. Shell banks are prohibited universally, and nested or downstream correspondent relationships multiply the jurisdictional exposure.

5.4 Cross-border cooperation
• Egmont Group: secure FIU-to-FIU information exchange based on reciprocity and confidentiality.
• MLATs and letters rogatory: formal evidence gathering for prosecutions.
• Supervisory colleges and memoranda of understanding between regulators.
• Asset recovery networks such as CARIN and StAR.
• Public-private partnerships that bring institutions, FIUs and law enforcement together to share typologies.

5.5 Conflicts of law
A common scenario: a host-country subsidiary identifies suspicious activity but local secrecy law bars it from sharing details with the parent. Or a US-origin sanctions requirement conflicts with a local anti-boycott or blocking statute. The expected professional response is to escalate, document the conflict, seek legal advice, apply the risk-based approach, consider whether the relationship can continue, and notify the home supervisor where required.

6. How to Answer Exam Questions on This Topic

CAMS questions are typically scenario-based. Follow this method.

Step 1: Identify the layer. Ask yourself whether the question is about the global standard (FATF), a regional body (EU, FSRB), a national regime (US, UK, another country), or an institution's internal policy. Many wrong answers confuse these layers, for example attributing a US-specific rule to FATF.

Step 2: Apply the risk-based approach. When two answers both seem compliant, the one that evaluates risk and allocates proportionate controls is usually correct. Answers that apply a blanket rule without assessment, or that ignore risk entirely, are usually wrong.

Step 3: Apply the higher standard principle. If a question involves a group with subsidiaries in different countries, the correct answer typically applies the stricter standard where local law allows and escalates where it does not. Choosing to simply follow the weaker host requirement is almost always a distractor.

Step 4: Distinguish technical compliance from effectiveness. If a question describes a country with excellent laws but few prosecutions and few convictions, the issue is effectiveness, and the risk rating should reflect that, not just the existence of legislation.

Step 5: Recognize the role of FATF listings. Grey-listed jurisdictions warrant enhanced due diligence, not automatic exit. Black-listed jurisdictions subject to a call for action may require counter-measures. An answer that calls for terminating all relationships with any grey-listed country is usually too extreme.

Step 6: Eliminate absolutes. Options containing words like always, never, all or none are frequently incorrect in a topic defined by variation between jurisdictions.

7. Exam Tips: Answering Questions on Comparing AFC Regimes Across Jurisdictions

• Know FATF as the anchor. Be able to state what the Recommendations cover, what mutual evaluations measure, and the difference between the grey list and the black list. Many questions reward recognizing that FATF is a standard setter, not a regulator or law enforcement body, and that its power lies in peer pressure and listing.

• Memorize the headline differences between the major regimes: US SAR timing and CTR threshold, the UK consent or defence against money laundering model, EU directive-based harmonization and beneficial ownership registers, and the general FATF expectation of no-threshold suspicious reporting. You do not need encyclopedic knowledge of every country, but you should recognize the main archetypes.

• Understand extraterritoriality. Expect questions on how US sanctions and the USA PATRIOT Act reach non-US institutions through correspondent accounts and dollar clearing, and how this creates conflicts for foreign banks.

• Expect data privacy conflict scenarios. The correct answer usually acknowledges that privacy law can restrict sharing, requires the institution to seek a lawful basis or use approved channels (such as FIU exchange through Egmont), and never suggests ignoring either the AML obligation or the privacy obligation.

• Watch for tipping-off traps. Sharing information with a foreign affiliate or a correspondent bank about a filed report may be permitted in some regimes and prohibited in others. The safe exam answer respects the tipping-off rule and uses legally sanctioned sharing mechanisms.

• Remember who is covered. If a scenario involves a lawyer, real estate agent or crypto exchange, consider that DNFBP and VASP coverage varies by jurisdiction and that this gap itself is a risk indicator.

• Think like the compliance officer, not the regulator. Questions ask what the institution should do. The best answers involve assessing, documenting, escalating and applying proportionate controls rather than making legal determinations on behalf of a government.

• Use country risk inputs correctly. Be ready to list the sources used in geographic risk assessment and to explain that a single input such as corruption perception is not sufficient on its own.

• Do not over-penalize or under-react. The exam favors measured responses: enhanced due diligence over immediate exit for grey-listed exposure, escalation over unilateral action for conflicts of law, and proportionate monitoring over wholesale de-risking.

• Read for the trigger word. Terms such as mutual evaluation, Immediate Outcome, equivalence, correspondent, nested, blocking statute, 314(b), consent regime or Travel Rule each point to a specific body of knowledge. Identify the trigger and recall the associated rule before reading the answer options.

8. Quick Revision Summary

• FATF sets the standard; countries implement it differently; institutions reconcile the differences.
• Compare regimes along legal tradition, predicate offenses, reporting rules, CDD and beneficial ownership, sanctions, privacy and information sharing, supervision and enforcement, and sectoral coverage.
• Mutual evaluations measure technical compliance and effectiveness; grey and black lists drive enhanced due diligence and counter-measures.
• Financial groups apply the higher standard where permitted and escalate conflicts to the home supervisor.
• Cross-border cooperation runs through Egmont, MLATs, supervisory MOUs and public-private partnerships.
• On the exam, apply the risk-based approach, respect both AML and privacy or secrecy obligations, avoid absolutes, and choose the proportionate, well-documented, escalated response.