Financial Inclusion and Proportionate Regulation

Why This Topic Matters
Financial inclusion and proportionate regulation sit at the heart of a tension that every AML professional must understand: the stronger and more rigid AML/CFT controls become, the greater the risk that legitimate but low-income, undocumented, rural, or otherwise marginalised people are pushed out of the formal financial system. When this happens, they turn to cash, informal remittance networks, and unregulated value-transfer systems, which are far harder for law enforcement to monitor. In other words, financial exclusion is itself a money laundering and terrorist financing risk. The FATF explicitly recognises this, and the CAMS exam tests whether you understand that a risk-based approach (RBA) must be applied proportionately, not mechanically. Candidates who assume that "more controls are always better" often get these questions wrong.

What Financial Inclusion Means
Financial inclusion refers to ensuring that individuals and businesses, including the poor, the unbanked, migrants, refugees, women in certain jurisdictions, and small enterprises, have affordable and appropriate access to formal financial products and services such as transaction accounts, payments, savings, credit, and insurance. An estimated 1.4 billion adults worldwide remain unbanked. Common barriers include lack of formal identity documents, lack of proof of address, geographic distance from branches, high fees and minimum balances, and distrust of institutions. AML/CFT requirements, especially rigid customer due diligence (CDD) and know-your-customer (KYC) rules, can unintentionally become one of these barriers.

What Proportionate Regulation Means
Proportionate regulation is the principle that AML/CFT measures should be commensurate with the actual risks identified. It flows directly from FATF Recommendation 1 (the risk-based approach) and the FATF Interpretive Note on Recommendation 10 (customer due diligence). Under this principle:
• Where risks are higher, countries and institutions must apply enhanced due diligence (EDD).
• Where risks are lower, countries may allow institutions to apply simplified due diligence (SDD), provided there is a proper risk analysis and no suspicion of ML/TF.
• A one-size-fits-all approach that applies the most burdensome measures to every customer is not consistent with the FATF Standards.
FATF published its Guidance on Anti-Money Laundering and Terrorist Financing Measures and Financial Inclusion (2011, updated 2013 and 2017, with a supplement on CDD in 2017) to make clear that financial inclusion and AML/CFT are complementary, not conflicting, goals. In 2025 FATF went further, amending Recommendation 1 to explicitly require that measures be "proportionate" and encouraging countries to consider financial inclusion in their national risk assessments.

How It Works in Practice

1. Tiered or Risk-Based CDD
Many jurisdictions permit tiered accounts. A basic account may have low transaction limits, low maximum balances, restrictions on international transfers, and domestic-only functionality. Because the product's risk profile is limited by design, the institution may onboard the customer with reduced identity verification (for example, a single national ID card, a letter from a community leader, or biometric verification). As the customer seeks higher limits or more features, verification requirements step up. This is sometimes called progressive or tiered KYC.

2. Simplified Due Diligence (SDD)
SDD does not mean no due diligence. The institution must still identify the customer, but it may verify identity using alternative or fewer documents, defer verification until after account opening (subject to limits), reduce the frequency of profile updates, or reduce the depth of ongoing monitoring. SDD is never permitted where there is suspicion of ML/TF or where a higher-risk scenario is present.

3. Alternative and Digital Identity
FATF's 2020 Guidance on Digital Identity supports the use of reliable, independent digital ID systems (such as national biometric programmes like India's Aadhaar or mobile-based identity in Kenya) to verify customers who lack traditional documents. The key test is whether the digital ID system is reliable and independent, with appropriate assurance levels.

4. Mobile Money and Agent Banking
Mobile money services (such as M-Pesa) and agent networks extend reach into underserved areas. Regulators often apply proportionate requirements: lower-value wallets face lighter CDD, while agents are supervised through the licensed provider rather than being individually licensed.

5. National Risk Assessments (NRAs)
Countries are expected to consider the risks created by financial exclusion within their NRA. A large informal cash economy, heavy reliance on hawala, or unregulated remittance channels are indicators that exclusion itself is contributing to ML/TF vulnerability.

6. Avoiding De-Risking
De-risking is the wholesale termination or restriction of relationships with entire categories of customers (for example, all money service businesses, all charities, or all correspondent banks in a region) to avoid rather than manage risk. FATF has repeatedly stated that de-risking is not consistent with the risk-based approach and can drive transactions underground, undermining both financial inclusion and transparency. Institutions are expected to assess risk on a case-by-case basis.

Key Trade-Offs to Understand
• Proportionality does not lower the overall standard; it reallocates effort toward where risk is genuinely higher.
• Simplified measures must be supported by a documented risk assessment, not applied for commercial convenience.
• Institutions retain the obligation to monitor for suspicious activity and file suspicious activity/transaction reports even on low-risk accounts.
• Regulators must give institutions clear safe harbours or guidance, otherwise fear of enforcement leads to over-compliance and exclusion.

Exam Tips: Answering Questions on Financial Inclusion and Proportionate Regulation

Tip 1: Remember that exclusion is a risk, not a safe outcome. If an answer option suggests that refusing all customers without standard documents "eliminates" risk, it is almost certainly wrong. The CAMS exam wants you to recognise that pushing people into the informal economy reduces transparency.

Tip 2: Link everything back to the risk-based approach. The correct answer typically involves assessing the specific risk of the customer, product, or channel and then applying measures proportionate to that risk. Options that apply the same measures to everyone (whether maximum or minimum) are usually distractors.

Tip 3: Know what SDD is and is not. SDD is reduced verification for demonstrably lower-risk situations. It is never "no CDD," and it is never acceptable where suspicion exists. If a question describes a low-value, domestic-only, capped basic account, SDD is a reasonable approach. If the scenario adds red flags (structuring, unusual volumes, high-risk jurisdiction), SDD is no longer appropriate.

Tip 4: Recognise de-risking language. Phrases such as "exit all customers in this category," "terminate all MSB relationships," or "close accounts of all charities" signal de-risking. FATF discourages this. The better answer will involve individualised risk assessment and risk mitigation.

Tip 5: Tiered products are a classic correct answer. When a scenario asks how an institution can serve unbanked customers while managing AML risk, look for answers involving tiered accounts with transaction limits, progressive KYC, or alternative identity verification. These demonstrate proportionality.

Tip 6: Watch for the regulator's role. Some questions approach the topic from a supervisory angle. Regulators support inclusion by issuing clear guidance, permitting SDD for defined low-risk products, recognising digital ID, and considering exclusion within the NRA. An answer suggesting regulators should simply impose the strictest standards universally is unlikely to be correct.

Tip 7: Do not forget ongoing obligations. Even under simplified measures, institutions must still conduct ongoing monitoring appropriate to the risk and report suspicious activity. An option implying that low-risk customers are exempt from monitoring or reporting is a trap.

Tip 8: Eliminate absolutes. Words like "always," "never," and "all" in answer options should prompt caution. The financial inclusion topic is fundamentally about judgment and calibration, so nuanced answers are typically correct.

Sample Question Walkthrough
A bank in a developing country wants to offer accounts to rural customers who lack passports or utility bills. Which approach best aligns with FATF standards?
A) Decline these customers because identity cannot be verified to the normal standard.
B) Offer a basic account with transaction and balance limits, verify identity using the national ID card or a reliable digital ID, and apply monitoring proportionate to the limited product risk.
C) Open full-service accounts with no verification since the customers are low-income.
D) Require a notarised affidavit from a lawyer before onboarding.

Option A reflects exclusion and ignores FATF guidance. Option C is not SDD; it is no due diligence, which is never permitted. Option D imposes a disproportionate barrier that defeats the purpose. Option B is correct because it applies a tiered product, alternative verification, and proportionate monitoring, exactly the approach FATF's financial inclusion guidance recommends.

Summary
Financial inclusion and proportionate regulation are two sides of the same principle: AML/CFT controls should be calibrated to real risk. Over-regulation excludes legitimate users and drives activity into the shadows; under-regulation creates vulnerabilities. The CAMS exam rewards candidates who can identify the balanced, risk-based middle path, recognise de-risking as inconsistent with FATF standards, correctly define the limits of simplified due diligence, and articulate how tiered products and alternative identity tools allow institutions to serve the underserved without compromising integrity.