AML compliance has moved from checkbox to board-level priority
Anti-money-laundering compliance in India has shifted from a procedural checkbox to a genuine business risk for banking, insurance, fintech, real estate and professional-services firms. Enforcement activity under the Prevention of Money Laundering Act (PMLA) has increased, and the question for most businesses isn't whether to build AML screening into onboarding — it's how to do it without adding unnecessary friction to legitimate customers.
What is AML?
AML stands for anti-money laundering: the laws, rules and checks that stop the proceeds of crime being moved into the legitimate financial system and made to look clean. In India the core law is the Prevention of Money Laundering Act, 2002 (PMLA), with its rules setting out who has to verify customers and keep records.
For a business, "doing AML" comes down to three things:
- Know who you are dealing with: verify the identity of customers, and of the people who own or control a business customer (KYC and KYB).
- Screen them: an AML check looks for the person or business on sanctions lists, politically exposed person (PEP) lists and in adverse news.
- Keep a record and repeat it: store what was checked and decided, and re-screen ongoing relationships.
Banks, NBFCs, insurers and other regulated entities must do this. Many other businesses run AML checks on larger customers, vendors and partners because the same risks reach them.
What AML screening actually involves
AML screening checks individuals and entities against:
- PEP lists — politically exposed persons, their immediate family and close associates
- Sanctions lists — international and India-specific designated-entity lists
- Adverse media — negative news coverage tied to the individual or entity
- Watchlists — other flagged-entity lists relevant to the jurisdiction
A useful AML check does more than match a name — many people share common names, so disambiguating matches and recording the reasoning behind a decision matters as much as running the check in the first place.
Regulatory context businesses should be aware of
Expanded predicate offences. Amendments to the PMLA framework have broadened the list of underlying offences whose proceeds can constitute money laundering, which means sectors that previously felt insulated from AML exposure are worth re-examining.
Beneficial ownership disclosure. Companies Act requirements around disclosing Ultimate Beneficial Owners (UBOs) mean financial institutions onboarding corporate clients increasingly need to verify the individuals behind an ownership structure, not just the company itself.
Digital lending scrutiny. Regulatory guidance on digital lending has pushed AML expectations further down-market, so fintechs that previously relied on simplified KYC are increasingly expected to run fuller AML workflows.
Building an AML screening workflow
1. Classify customer risk
Not every customer carries the same AML risk. A simple risk classification — based on customer type (individual, corporate, PEP), geography and product — lets you apply lighter screening to low-risk relationships and more scrutiny to higher-risk ones.
2. Screen at onboarding
Run sanctions and PEP screening and adverse media screening before a relationship begins, not after. A useful result includes:
- A clear match / no-match outcome, with disambiguation for common names
- The specific list or source a match came from
- A timestamped record you can point to for audit purposes
3. Re-screen periodically
Onboarding screening alone isn't sufficient — sanctions lists and adverse-media coverage change over time. Re-running the check periodically catches new hits that didn't exist when the relationship began.
4. Document the decision
When a compliance team reviews a match, the reasoning behind the decision — clear, escalate, or decline — should be recorded alongside the check itself, so the file holds up under audit.
What non-compliance costs
Regulatory enforcement in this space has included financial penalties, and in more serious cases, licence action against regulated entities — well beyond the cost of running the screening itself. A documented AML process is a fraction of the cost of dealing with an enforcement action after the fact.
Getting started with AML screening
VerifyAll runs sanctions and PEP screening and adverse media checks from a self-serve dashboard — enter the individual or entity's details, get a result, and download a report for your compliance file. It combines with KYC and KYB checks in the same workflow, so identity, business and risk screening sit together rather than across separate tools. Talk to our team about setting up AML screening for your onboarding process.