The onboarding check on the borrower is only the start of AML in lending. Identity matters, but a loan launders money through what follows it: who repays, how fast, from which account, and what secures the debt. The integration stage in the model of money laundering methods includes "loans backed by laundered collateral", one of the ways criminal money comes back as clean looking wealth.
Where does laundering show up in a loan?
Picture a lender (illustrative) that grants a EUR 60,000 term loan over 36 months to a small company. After four months a business with no link to the borrower pays off the balance, and the credit file records a good outcome.
Table 1. Where laundering shows in seven loan types.
| Loan product | Where laundering shows | Data that reveals it | The check |
|---|---|---|---|
| Consumer installment loan | Repayments in cash or from changing third party accounts | Payer account against the borrower's own | Payer match at each repayment |
| SME term loan | Early settlement by an unrelated company | Settlement amount and payer against turnover | Source of funds at early settlement |
| Secured or cash collateralized loan (loan back) | The borrower's own illicit deposit secures a loan that returns as credit | Origin and location of the collateral | Collateral and guarantor checks |
| Mortgage | A deposit or lump sum overpayments with no clear source | Deposit source and overpayment pattern | Source of funds on deposits; mortgage fraud checks are a separate duty |
| Leasing | The funds go to a dealer or supplier, not the lessee | Payee against the contract | Screening of the dealer and supplier |
| Peer to peer loan | The same person controls the lender and the borrower | Linked accounts on both sides | Links between the two parties |
| Buy now, pay later | Goods bought on credit and resold for cash; repayments from other people's cards | Repayment cards and devices | Payer and device checks |
Two of these rows come from the European Banking Authority's risk factors. Its guideline for retail banks counts as higher risk a product that "allows payments from third parties that are neither associated with the product nor identified upfront, where such payments would not be expected, for example for mortgages or loans", and lending secured on assets in other jurisdictions (EBA/GL/2021/02, 9.4). A low value loan tied to buying a specific good may lower the risk (9.5).
Which lenders fall under AML rules?
In AML rules the word lender has a wide meaning: any business that extends credit, from banks and credit unions to finance companies, leasing firms and online platforms. The FATF Recommendations count lending and financial leasing among the activities that make a business a financial institution, though not leasing of consumer products.
In the EU, any undertaking that lends is a financial institution under Directive (EU) 2015/849, Article 3(2)(a). From 10 July 2027 the AML Regulation also names creditors under the mortgage and consumer credit directives, and credit intermediaries that hold the funds (Article 2(1)(6)(g) and (h)).
The UK gets there through the "listed activity" test in regulation 10 of the Money Laundering Regulations 2017, except a firm whose only lending is fixed sum credit for services under a debtor creditor supplier agreement, repaid within 12 months (10(3)(b)).
The United States is the exception. The Bank Secrecy Act names "a loan or finance company" as a financial institution (31 U.S.C. 5312), but FinCEN's rule fills that category with one capacity only, the residential mortgage lender or originator (31 CFR 1010.100(lll)). So as of October 2026 a non bank consumer, auto or SME lender has no FinCEN AML program rule of its own, unlike the same lender in the UK or the EU.
Banks run full programs, and mortgage lenders need a written program approved by senior management (31 CFR 1029.210).
What does a lender check, from application to final payment?
The checks follow the life of the loan, and a lender's AML program sets who runs each one.
- Application. Customer due diligence on the borrower, its owners and any guarantor, each screened: the guarantor is often the party the repayment really rests on.
- Disbursement. Where the money goes. A dealer, a supplier or a third party account is a different counterparty from the borrower.
- Repayments. Who pays and from where. A payer who is not the borrower raises a source of funds question.
- Early settlement. A lump sum that clears the balance long before term is the moment to ask where it came from.
- Collateral. Cash deposits and assets abroad that secure a loan get the scrutiny of a deposit, because a loan back runs on them.
- The term. Transaction review of repayments against the borrower's profile until the contract ends.
- Exit. A file that cannot be explained ends in a suspicious activity report, not a quiet write off.
complead, formerly Sanction Scanner, keeps these AML checks for lenders on one record: guarantors are screened together with the borrower, and installments, early settlements and payments from third parties are read against what the lender knows of the borrower until the final payment.
Which AML compliance risks do lenders miss?
Picture a consumer lender (illustrative) whose fraud team reads an early repayment as good news: the loan is closed with no credit loss and no fraud loss. The AML team reads the same event as the moment criminal money became a clean credit record.
Loan fraud is the reverse case, a borrower who lies to get credit and never repays. When the two teams in the lending industry sit on separate systems, with data split by product, nobody sees the same stranger paying off three borrowers' loans. Where fraud and AML teams share the payer data, the second payment shows up.
What moved for lenders in 2026?
- 10 April. FinCEN proposed its AML/CFT program reform (91 FR 18704); comments closed on 9 June, and on 29 October it was still a proposal.
- 15 July. Deferred payment credit, the legal name for the buy now, pay later agreements the UK now regulates, came under FCA regulation when a third party lender offers it (PS26/1); a merchant lending directly stays outside.
The EUR 60,000 loan from the start of this entry ends the same way: the file the credit team closed as a good outcome is the one AML reopens. The early settlement goes to a source of funds question before the loan is marked repaid, and a suspicious activity report follows if the answer does not hold.
Related terms
- Loan fraud. Obtaining credit by deception with no intent to repay.
- Mortgage fraud. Lies or omissions in a mortgage application or deal.
- Source of funds and source of wealth. Where the money in a transaction comes from, and how the customer built the wealth behind it.
- Know your transaction. Reading each payment against what a firm knows of the customer.
- Money mule. A person who moves criminal money through their own account.
- Buy now, pay later. Short term credit at checkout, repaid in a few installments.
How this entry was checked. Each scope sentence on this page was written from the rule it cites and reread on 29 October 2026 for its exceptions: the FATF Glossary (June 2026), Directive (EU) 2015/849 Article 3, Regulation (EU) 2024/1624 Article 2, regulation 10 of the UK Money Laundering Regulations 2017, 31 U.S.C. 5312, 31 CFR 1010.100 and 1029.210, the EBA ML/TF Risk Factors Guidelines (Guideline 9), FinCEN's proposed rule of 10 April 2026 and the FCA's PS26/1. Emirhan Akgün (Software Engineer, complead) drafted it and Javid Khasayev, Senior Anti Fraud Specialist at GoldenPay, checked it against those texts; the two lenders and the EUR 60,000 loan are illustrative. Last reviewed: 30 October 2026.
