The 19 men who carried out the attacks of 11 September 2001 opened their accounts "in their own name, using passports and other identification documents", according to the 9/11 Commission's Monograph on Terrorist Financing (p. 140). About 300,000 dollars passed through those accounts, sent by "three primary and unexceptional means": wires from abroad, cash and traveler's checks carried in, and cards drawing on foreign accounts (p. 13). It paid for flight training, travel and living costs (p. 3). The plot money came almost entirely from al Qaeda, which relied on diversions from Islamic charities and on facilitators who gathered money from donors, and no foreign government provided substantial funding (p. 13).
Nothing about that money needed hiding. That puts the case outside the three stage model of money laundering and inside terrorist financing.
The Commission's staff found that no bank filed a suspicious activity report on the hijackers' accounts and that, "even with benefit of hindsight, none of them should have" (p. 53). A reverse laundering case is usually invisible from inside the account. What makes it reportable is information joined from outside it, such as a law enforcement request, a counterparty already under review or a beneficiary in a conflict zone, so the alert review has to record where the money went, not only where it came from.
Which payment patterns point to reverse money laundering?
Table 1. Patterns to review, with the logic a monitoring rule would test (as of October 2026).
| Pattern | Logic | Why it is reverse | Note |
|---|---|---|---|
| Round sums from a salary or business account to a new beneficiary near a conflict area | Outflows to a new counterparty, scored by destination | The source is the customer's own earnings | ISIS supporters' money "generally comes from legal means, often personal savings" (Treasury 2024, p. 9) |
| Savings drawn down before travel to a conflict zone | Balance falls, cash or virtual asset purchases, travel spend, savings transferring abroad | Legal savings pay for the trip | The same Treasury page names virtual assets, MSB wires and couriers |
| Donations in, cash or prepaid card loads out | Many small donors, fast cash out | Gifts are clean; the use may not be | Nonprofits abused this way are a form of charity fraud |
| Company payments to a consultant with no deliverable | Payments with no matching contract or output | The revenue is legitimate; the payment buys a bribe | In the Siemens bribery and corruption case below, the SEC found "a system of business consultants and intermediaries" |
Each row is a lead, never proof. Most payments to a new beneficiary are what they seem. The rows score the destination, so reverse laundering needs transaction monitoring rules that test where money goes, not only where it came from.
A rule built this way weighs the beneficiary's country, how new the payee is and how far the payment departs from the customer's usual payees. The analyst who reviews the alert writes down what the payment was for and who received it, because that note is what a later request from law enforcement will be matched against.
How is reverse money laundering different from money laundering?
Money laundering starts with dirty money and makes it look clean, until the proceeds of crime can no longer be traced to the crime. Reverse money laundering works the other way round: it starts with clean money that terrorists or bribe payers then put to a criminal use, so the question flips from origin to destination.
That flip is why a source of funds check clears the case instead of catching it. Picture a salaried customer (illustrative) who sends 4,000 dollars of savings to a cousin abroad. The payslips prove every dollar. The record is true, and it says nothing about the person who receives the money or what it will pay for.
Unlike a laundering case, the source needs no disguise, although the layering stage can still appear when a group hides who receives the funds.
Why is terrorist financing called reverse money laundering?
Terrorism financing is sometimes called, or described as, reverse money laundering because terrorist funding often runs on legal money. The FATF writes this into its standard: terrorist financing offenses "should extend to any funds or other assets, whether from a legitimate or illegitimate source" (FATF Recommendations, Interpretive Note to Recommendation 5, para 5, June 2026).
The US Treasury's 2024 National Terrorist Financing Risk Assessment makes the same point about domestic violent extremists: most of their attacks are self funded "through legitimate sources", so the "associated transactions may not appear suspicious" (p. 5). The ISIS supporters' savings in Table 1, sent abroad as virtual assets, through an MSB wire or by courier (p. 9), look like any other personal transfer. The 9/11 staff had reached the same point in 2004: SARs do "not work very well to detect or prevent terrorist financing" (p. 54), because a bank's AML controls can see laundering in its data but not the intent behind a clean payment.
Where else is the term used?
Siemens is a real life case outside terrorism. The SEC found that Siemens kept slush funds and off books accounts at unconsolidated entities and made "at least 4,283 payments, totaling approximately $1.4 billion, to bribe government officials" (SEC release 2008-294, 15 December 2008). Across the cases of the Justice Department, the SEC and the Munich prosecutor, Siemens agreed to pay "more than $1.6 billion" in fines, penalties and disgorgement (Justice Department release 08-1105).
The money came from the company's own revenue. The crime was the bribe at the end, and the off books accounts existed so that no ledger would show where it went. Tax evasion can follow the same direction, when legally earned income moves into cash or accounts abroad so that it is never declared.
What changed in 2026?
The June 2026 edition of the FATF Recommendations keeps the "legitimate or illegitimate source" wording of the Interpretive Note to Recommendation 5. On 29 October 2026, Treasury's national risk assessments page still lists the February 2024 assessment as its newest on terrorist financing, so the US figures here come from it.
Back to 2001: after the attacks, Title III of the USA PATRIOT Act brought in the information sharing behind 314(a) requests, under which FinCEN "may require any financial institution to search its records" for accounts of named persons (31 CFR 1010.520). A request like that is the outside information the hijackers' accounts lacked; nothing in the record says it would have stopped the plot.
Related terms
- Money laundering. Making the proceeds of crime look legitimate.
- Charity fraud. Abuse of donations or of a charity's name, including funds diverted from legitimate purposes.
- Source of funds and source of wealth. Where a customer's money for one transaction, and the customer's wealth overall, came from.
- Trade based money laundering. Moving value through false trade documents and prices.
- Terrorist financing. Raising, moving or using funds for terrorism, from any source.
- Layering. The stage of money laundering in which transfers hide where the funds came from.
How this entry was checked. No statute gives a definition of reverse money laundering, so this entry uses the term as typology guides do and grounds every fact in a primary text. Javid Khasayev, Senior Anti Fraud Specialist at GoldenPay, compared the draft by Sinan Tekin (Regional Sales Manager, complead) with the 9/11 Commission's Monograph on Terrorist Financing (2004), the FATF Recommendations (June 2026, Interpretive Note to Recommendation 5), Treasury's 2024 National Terrorist Financing Risk Assessment, 31 CFR 1010.520 and the SEC and Justice Department releases on Siemens of 15 December 2008. The salaried customer is illustrative. Last reviewed: 30 October 2026.
