Glossary term
Transaction Monitoring
Subject: Financial Crime, AML/CFT Framework and Standards
Also known as: Suspicious activity monitoring, Transaction Monitoring Systems
Transaction monitoring is the review of customer payments and account activity, usually by software, to spot patterns that look unusual or suspicious so staff can investigate and report where needed.
Explanation
Rules and models scan transactions against what is known about the customer and typical behaviour. A rule might flag cash deposits just under a reporting limit, rapid movement of funds in and out, or payments to high-risk countries. More advanced systems use statistical models or machine learning to compare a customer with peers. When a rule fires it produces an alert. Analysts review it, decide whether it is explained by the customer's profile and, if not, escalate for investigation and a suspicious activity report. Calibration of thresholds is a constant task: too low floods staff with false alerts, too high misses real cases. Teams test the settings against sample data and adjust them. Specific variants include wire transfer monitoring, enhanced rules for private banking clients with large and varied flows, and screening of payment parties against sanctions lists. Large penalties against banks have often followed monitoring that was switched off, badly tuned or too thin for the risk the firm ran.
Example
Over three days, a small business account at a bank receives 40 transfers from unrelated individuals, each under a set amount, and then sends the total abroad. The system flags it. The analyst compares this with the account's stated purpose, finds no explanation, and escalates. Investigators conclude the account is a collection point and the bank files a report.
Not to be confused with
- Sanctions Screening
- Screening matches names and details against sanctions lists. Monitoring looks at behaviour and patterns across transactions over time.