AML is not just an 80-Page document: Why implementation matters

There is a particular kind of compliance comfort that comes from a very long document. It looks serious. It feels comprehensive. It gives everyone the sense that something substantial has been done. But in AML, length is not the same as effectiveness.

For many law firms preparing for Tranche 2, the instinct has been to ask: ‘What documents do we need?’ It is a fair question. Firms do need an AML/CTF program. They do need policies, procedures, controls, training records and evidence of decisions. But the better question is: ‘What do we need people to do differently in practice?’

Handing a client an 80-page document at matter opening is not the only way to do AML. In fact, for many firms, it would be a terrible way to do AML. Clients do not need a compliance dissertation before they can provide ID. They need a clear explanation of what is required, why it is required, what they need to provide and what happens next.

Proportionate implementation means designing an AML framework around risk, not panic. A low-risk, long-standing client with a straightforward matter should not necessarily go through the same level of friction as a complex structure involving overseas entities, unclear source of funds and urgent instructions. The whole point of a risk-based approach is that the response changes depending on the risk.

That does not mean cutting corners. It means being deliberate. A proportionate framework should still be documented, consistent and capable of being explained. It should identify which services are designated services, when customer due diligence is required, who is responsible for each step, how matters are risk-rated, what enhanced checks look like, when to escalate concerns and how decisions are recorded.

The danger with over-engineering is that it can create a beautiful system that nobody uses. If the process is too complex, busy lawyers will bypass it. If the questions are too broad, support teams will not know what good answers look like. If every matter is treated as high risk, genuine high-risk matters will be harder to spot. Good AML design is not about adding endless layers. It is about putting the right controls in the right places.

For law firms, this should start with the client and matter journey.

• Where does a new enquiry come in?

• Who captures the information?

• When is the matter accepted?

• When is ID requested?

• Who checks the documents?

• What happens if the client is a company, trust or overseas entity?

• At what point does the matter become one that requires enhanced scrutiny?

• Where is that decision recorded?

  
  

These are the questions that turn AML from theory into workflow.

A practical AML framework also needs language people understand. If your internal policy is full of jargon, people will glaze over. If your client-facing wording sounds alarming, clients may feel accused before the relationship has properly started. The sweet spot is calm, plain English: ‘As part of our legal and regulatory obligations, we need to verify certain information before we can proceed.’ That is usually enough.

Training should follow the same principle. Staff do not need to become financial crime academics overnight. They need to know what the firm’s process is, what red flags look like in their role, and what to do when something does not feel right. That is where practical examples are so valuable. A receptionist, accounts assistant and senior associate will each notice different things. The framework should help all of them act on what they see.

The most defensible AML program is not necessarily the longest one. It is the one that reflects the firm’s actual services, clients, risks and resources. It is the one that a new staff member can understand, a partner can apply, and a regulator can follow. It is the one that creates evidence of sensible decision-making without grinding the firm to a halt.

There is more than one way to build an AML framework. The best version is the one that is proportionate, practical and alive inside the business. If your program only works on paper, it does not really work.

Starting to understand the full weight of the task? You are not alone. Reach out to us at hello@amlsorted.com and let's have a chat.