Regulatory Directory
The regulatory landscape for AML, compliance, data privacy, and data protection spans dozens of bodies across multiple jurisdictions. Understanding who regulates what — and where — is essential for compliance professionals operating in an increasingly global environment.
This directory provides an overview of the most significant regulatory and supervisory bodies worldwide, organised by region and discipline. Each entry includes the body's mandate, geographic scope, key powers, and areas of direct relevance to LetsTalkAML readers. Use the regional navigation to jump to your jurisdiction of interest.
📌 This directory is for informational purposes only and is updated regularly. Always consult official regulatory sources for the most current guidance and contact details.
FATF — Financial Action Task Force
Established: 1989
Headquarters: Paris, France
Website: fatf-gafi.org
Members: 40 member jurisdictions and 2 regional organisations
What it does:
The FATF is the global standard-setter for AML, CFT, and counter-proliferation financing. Its 40 Recommendations form the backbone of national AML regimes worldwide and are adopted — in whole or in part — by almost every country on earth. FATF conducts mutual evaluations of member countries, assessing both the technical compliance of their legislation and the effectiveness of their AML/CFT systems in practice.
Why it matters:
FATF maintains two key lists that directly affect compliance obligations globally. The grey list (Jurisdictions Under Increased Monitoring) identifies countries with strategic AML/CFT deficiencies committed to remediation. The black list (Call for Action) identifies high-risk jurisdictions subject to enhanced countermeasures. A country's placement on either list triggers enhanced due diligence requirements for firms dealing with that jurisdiction.
Key publications: 40 Recommendations, mutual evaluation reports, guidance on risk-based approach, typologies reports, virtual asset guidance, terrorist financing risk assessment guidance.
Areas of focus: AML/CFT standards, mutual evaluations, grey and black lists, virtual assets, beneficial ownership, correspondent banking, professional money laundering, terrorist financing.
Egmont Group
Established: 1995
Headquarters: Toronto, Canada
Website: egmontgroup.org
Members: 170+ Financial Intelligence Units
What it does:
The Egmont Group is an international network of Financial Intelligence Units (FIUs) that promotes cooperation and secure information sharing between national FIUs. It facilitates the exchange of financial intelligence on money laundering and terrorist financing through the Egmont Secure Web platform, enabling FIUs to share intelligence in near real-time with trusted counterparts.
Why it matters:
Cross-border money laundering investigations depend on effective FIU-to-FIU intelligence sharing. The Egmont Group provides the framework and secure channels through which national FIUs — including the UK's NCA, the US FinCEN, and Canada's FINTRAC — cooperate on complex international cases.
Areas of focus: FIU cooperation, financial intelligence sharing, capacity building, cross-border investigation support.
Wolfsberg Group
Established: 2000
Website: wolfsberg-principles.com
Members: Thirteen global financial institutions
What it does:
An association of thirteen of the world's largest financial institutions — including Barclays, Citigroup, Deutsche Bank, HSBC, and UBS — that develops financial crime compliance standards and guidance papers for the private sector. The Wolfsberg Group's principles and guidance are developed through consensus among leading global banks and represent best practice in financial crime compliance.
Why it matters:
Wolfsberg guidance is widely referenced by compliance professionals, regulators, and correspondent banks as a benchmark for financial crime controls. Adherence to Wolfsberg principles can support a firm's correspondent banking relationships and demonstrate the robustness of its AML programme.
Key publications: Wolfsberg Correspondent Banking Principles, KYC Questionnaire (WKYCQ), Trade Finance Principles, Anti-Bribery and Corruption Guidance, Guidance on Customer Risk Ratings, AML Programme Effectiveness Guidance.
Areas of focus: Correspondent banking, KYC, trade finance, payments transparency, sanctions, anti-bribery and corruption.
Basel Committee on Banking Supervision (BCBS)
Established: 1974
Headquarters: Basel, Switzerland (hosted by the Bank for International Settlements)
Website: bis.org/bcbs
Members: 45 members from 28 jurisdictions
What it does:
The BCBS is the primary global standard-setter for the prudential regulation and supervision of banks. It develops guidelines and standards on capital adequacy, liquidity, and risk management. Its guidance on the sound management of risks related to money laundering and terrorist financing is highly influential in shaping how banks approach AML risk within their broader risk management frameworks.
Why it matters:
The BCBS bridges the gap between prudential supervision and financial crime risk management, treating AML failures as a risk management issue with implications for capital, reputation, and systemic stability — not just a regulatory compliance matter.
Key publications: Guidelines on Sound Management of Risks related to ML/TF (2020), Guidance on Correspondent Banking (2016), Core Principles for Effective Banking Supervision.
Areas of focus: Banking supervision, AML risk management, correspondent banking due diligence, prudential treatment of financial crime risk.
United Nations Office on Drugs and Crime (UNODC)
Established: 1997
Headquarters: Vienna, Austria
Website: unodc.org
What it does:
UNODC is the UN body responsible for assisting member states in combating illicit drugs, crime, and terrorism. It administers the key UN conventions on money laundering and organised crime — including the Palermo Convention and the Vienna Convention — and provides technical assistance to countries developing AML/CFT frameworks.
Why it matters:
UNODC publishes influential research on the scale of money laundering globally, organised crime typologies, and the nexus between financial crime and other serious crimes including drug trafficking, human trafficking, and environmental crime.
Areas of focus: UN conventions, organised crime, drug trafficking proceeds, capacity building, typologies research.
FCA — Financial Conduct Authority
Established: 2013
Headquarters: London, UK
Website: fca.org.uk
Regulated firms: Approximately 50,000
What it does:
The FCA is the UK's primary conduct regulator for financial services firms and the lead AML supervisor for the majority of the UK's regulated financial sector, including banks, building societies, investment firms, insurance companies, payment institutions, and money service businesses. The FCA sets out its AML expectations in its Financial Crime Guide and through supervisory engagement, thematic reviews, and enforcement action.
Key powers:
Impose unlimited financial penalties on firms and individuals
Withdraw or vary regulatory authorisations
Issue public censures and warnings
Pursue criminal prosecutions for serious financial crime
Conduct skilled person reviews (Section 166 reviews) of firms' systems and controls
Issue supervisory notices restricting or requiring specific actions
Recent enforcement focus: Transaction monitoring effectiveness, correspondent banking due diligence, financial crime in retail banking, sanctions compliance, and crypto-asset AML controls.
Key publications: Financial Crime Guide (FCG), Dear CEO letters on financial crime, thematic reviews on AML and sanctions, Financial Crime Annual Report.
Areas of focus: AML supervision, financial crime, KYC/CDD, sanctions, consumer protection, payment services, crypto-assets.
PRA — Prudential Regulation Authority
Established: 2013 (part of the Bank of England)
Headquarters: London, UK
Website: bankofengland.co.uk/prudential-regulation
Regulated firms: Approximately 1,500
What it does:
The PRA is responsible for the prudential supervision of banks, building societies, credit unions, insurers, and major investment firms in the UK. While the FCA leads on AML supervision, the PRA has a direct interest in financial crime risk as a component of its broader mandate to promote the safety and soundness of regulated firms and the stability of the financial system.
Key powers:
Set prudential standards and capital requirements
Approve senior management under the Senior Managers and Certification Regime (SMCR)
Issue enforcement notices and financial penalties
Direct changes to firms' governance and risk management arrangements
Areas of focus: Prudential supervision, systemic risk, financial stability, safety and soundness of deposit-takers and insurers.
NCA — National Crime Agency
Established: 2013
Headquarters: London, UK
Website: nationalcrimeagency.gov.uk
What it does:
The NCA is the UK's lead law enforcement agency for serious and organised crime, including money laundering, financial crime, cybercrime, and modern slavery. Its UK Financial Intelligence Unit (UKFIU) is the designated recipient of all suspicious activity reports (SARs) submitted by UK regulated firms and law enforcement agencies. The UKFIU analyses SAR intelligence and disseminates it to law enforcement partners.
Key functions:
Receive and analyse SARs from approximately 8,000 regulated firms annually
Grant consent for transactions that are the subject of a SAR (the "consent regime")
Conduct financial crime investigations and support law enforcement operations
Lead on asset recovery and confiscation
Publish annual SAR statistics and strategic intelligence assessments
Operate the Joint Money Laundering Intelligence Taskforce (JMLIT)
Why it matters for compliance:
The NCA is the primary point of contact for UK firms' SAR obligations. Understanding the NCA's intelligence priorities and the way it uses SAR data helps compliance professionals file higher-quality, more actionable reports.
Key publications: Annual SARs Report, JMLIT intelligence alerts, strategic assessments on money laundering threats.
Areas of focus: SAR regime, financial intelligence, asset recovery, serious and organised crime, law enforcement cooperation.
HMRC — His Majesty's Revenue and Customs (AML Supervision)
Website: gov.uk/hmrc
Supervised sectors: Money service businesses, accountants, tax advisers, estate agents, high-value dealers, trust or company service providers, art market participants, insolvency practitioners, letting agents
What it does:
HMRC acts as one of the UK's largest AML supervisors for businesses outside the mainstream financial sector. It supervises compliance with the Money Laundering Regulations 2017 for firms in its supervised sectors through registration, compliance visits, desk-based reviews, and enforcement action.
Key powers:
Register and deregister businesses in supervised sectors
Conduct compliance visits and request documentation
Issue financial penalties and prohibition orders
Publish details of non-compliant businesses
Why it matters:
Many businesses in HMRC-supervised sectors — including accountants and estate agents — are at risk of being used as gatekeepers by money launderers. HMRC's supervision, while often less visible than that of the FCA, carries significant consequences for non-compliance.
Areas of focus: AML supervision for non-financial sector businesses, registration, compliance examination, enforcement.
ICO — Information Commissioner's Office
Established: 1984 (originally as the Data Protection Registrar)
Headquarters: Wilmslow, Cheshire, UK
Website: ico.org.uk
What it does:
The ICO is the UK's independent regulator for data protection and information rights. It enforces the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), the Network and Information Systems (NIS) Regulations, and the Freedom of Information Act 2000. The ICO handles complaints from individuals, conducts investigations and audits, issues guidance, and takes enforcement action against organisations in breach of their data protection obligations.
Key powers:
Issue fines of up to £17.5 million or 4% of global annual turnover (whichever is higher) for serious UK GDPR breaches
Issue enforcement notices requiring organisations to change their practices
Conduct compulsory and consensual audits
Issue information notices and assessment notices
Pursue criminal prosecutions for offences under the DPA 2018
Recent enforcement focus: Data breaches in healthcare and financial services, direct marketing violations, cookie compliance, biometric data, children's online privacy, and AI and automated decision-making.
Key publications: UK GDPR guidance, codes of practice (children, direct marketing, employment, AI), data breach reporting guidance, international transfers guidance, annual report.
Areas of focus: UK GDPR enforcement, data breaches, direct marketing, cookies and tracking, freedom of information, children's privacy, AI.
The Law Society and Legal Sector AML Supervisors
Website: lawsociety.org.uk
What it does:
The Law Society of England and Wales and related bodies (including the Solicitors Regulation Authority) supervise AML compliance for solicitors and law firms in the UK. The legal sector is recognised as a high-risk AML gatekeeper and has been the subject of significant supervisory scrutiny in recent years.
Areas of focus: AML compliance in the legal sector, professional ethics, CDD for legal transactions, SRA enforcement.
European Union
National Data Protection Authorities (DPAs) — Key EU Members
Ireland — Data Protection Commission (DPC)
Germany — Datenschutzkonferenz (DSK) and State DPAs
France — Commission Nationale de l'Informatique et des Libertés (CNIL)
Luxembourg — Commission nationale pour la protection des données (CNPD)
AMLA — Anti-Money Laundering Authority
Established: 2024 (operational: 2025)
Headquarters: Frankfurt, Germany
Website: amla.europa.eu
What it does:
AMLA is the EU's new dedicated AML supervisory authority, established under the 2024 EU AML Package. It became operational in 2025 and represents the most significant structural reform of EU AML supervision in decades. AMLA directly supervises the highest-risk obliged entities operating across multiple EU member states and coordinates and oversees the AML/CFT supervisory work of national competent authorities across the EU.
Key functions:
Direct supervision of selected high-risk financial institutions operating cross-border within the EU
Development of binding technical standards and guidelines for AML/CFT supervision
Coordination of the College of AML/CFT Supervisors across EU member states
Peer reviews of national supervisory authorities
Maintenance of a central AML/CFT database
Acting as the focal point for FIU cooperation within the EU
Why it matters:
AMLA fundamentally changes the EU's AML supervisory landscape. For the first time, certain obliged entities will be supervised directly at EU level rather than through national authorities. This is expected to significantly increase the consistency and intensity of AML supervision across the single market.
Areas of focus: Direct AML supervision, supervisory convergence, regulatory standard-setting, FIU cooperation.
EBA — European Banking Authority
Established: 2011
Headquarters: Paris, France
Website: eba.europa.eu
What it does:
The EBA is the EU's banking regulator, working to ensure effective and consistent prudential regulation and supervision across the EU banking sector. It has played a significant and growing role in AML/CFT supervisory convergence, including maintaining a central AML/CFT database, conducting peer reviews of national supervisors, and publishing guidelines and opinions on AML/CFT topics.
Key publications: Guidelines on risk-based AML/CFT supervision, AML/CFT risk assessment templates, opinion on de-risking, guidelines on internal governance, annual risk assessment report.
Areas of focus: AML/CFT supervisory convergence, banking regulation, risk assessments, anti-de-risking, regulatory technical standards.
EDPB — European Data Protection Board
Established: 2018 (successor to the Article 29 Working Party)
Headquarters: Brussels, Belgium
Website: edpb.europa.eu
What it does:
The EDPB ensures the consistent application of GDPR across the EU. It is composed of representatives from the national data protection authorities (DPAs) of all EU member states, plus the European Data Protection Supervisor. The EDPB issues guidelines and recommendations on GDPR interpretation, adopts binding decisions in cross-border cases under the one-stop-shop mechanism, and contributes to the development of adequacy decisions for third countries.
Key publications: Guidelines on data transfers, consent, legitimate interests, data breach notification, automated decision-making, AI, children's data, and many sector-specific topics.
Why it matters:
EDPB guidelines represent the authoritative EU-level interpretation of GDPR provisions. Compliance professionals operating across EU jurisdictions should treat EDPB guidelines as the primary reference point for GDPR compliance questions.
Areas of focus: GDPR consistency and interpretation, cross-border enforcement, adequacy decisions, guidelines and recommendations, AI and emerging technologies.
EDPS — European Data Protection Supervisor
Established: 2004
Headquarters: Brussels, Belgium
Website: edps.europa.eu
What it does:
The EDPS is an independent EU institution that monitors and ensures compliance with data protection rules by EU institutions, bodies, offices, and agencies. It also advises EU institutions on the data protection implications of new policies and legislation, and cooperates with national DPAs and the EDPB on matters of common interest.
Areas of focus: Data protection in EU institutions, advisory role on EU legislation, supervisory tasks for EU bodies.
National Data Protection Authorities (DPAs) — Key EU Members
Ireland — Data Protection Commission (DPC)
Website: dataprotection.ie
The lead supervisory authority for many of the world's largest technology companies due to their EU headquarters being in Ireland. The DPC has issued several of the largest GDPR fines to date, including against Meta, WhatsApp, and LinkedIn.
Germany — Datenschutzkonferenz (DSK) and State DPAs
Germany operates a federal system with a national conference of data protection authorities (DSK) and individual state (Länder) DPAs. The Hamburg DPA has been particularly active in enforcement against global technology companies.
France — Commission Nationale de l'Informatique et des Libertés (CNIL)
Website: cnil.fr
One of the most active EU data protection authorities, with a strong track record of enforcement against both domestic firms and major international technology companies.
Luxembourg — Commission nationale pour la protection des données (CNPD)
Website: cnpd.public.lu
Another significant supervisory authority given Luxembourg's role as the EU headquarters for many global financial and technology firms.
FinCEN — Financial Crimes Enforcement Network
Established: 1990
Headquarters: Vienna, Virginia, USA
Website: fincen.gov
Parent body: US Department of the Treasury
What it does:
FinCEN is the primary US AML regulator and financial intelligence unit. It administers the Bank Secrecy Act, collects and analyses financial intelligence submitted through SARs and CTRs, maintains the beneficial ownership registry established under the Corporate Transparency Act, and issues regulations, advisories, and guidance on AML compliance for US financial institutions.
Key functions:
Administer and enforce the Bank Secrecy Act
Collect and analyse SAR and CTR filings from US financial institutions
Maintain the beneficial ownership database under the Corporate Transparency Act
Issue AML programme rules, guidance, and advisories
Share financial intelligence with law enforcement partners
Impose civil money penalties for BSA violations
Key publications: SAR activity reviews, advisories on specific typologies and geographic risks, BSA regulations, CDD rule, beneficial ownership regulations, national AML priorities.
Areas of focus: BSA administration, SAR/CTR reporting, beneficial ownership, AML rulemaking, financial intelligence, virtual assets.
OFAC — Office of Foreign Assets Control
Established: 1950
Headquarters: Washington DC, USA
Website: ofac.treas.gov
Parent body: US Department of the Treasury
What it does:
OFAC administers and enforces US economic and trade sanctions programmes based on US foreign policy and national security goals. It maintains a series of sanctions lists — most notably the Specially Designated Nationals and Blocked Persons (SDN) list — and publishes extensive guidance on sanctions compliance obligations for US persons and, significantly, for non-US persons operating in or through the US financial system.
Key functions:
Administer US sanctions programmes (comprehensive country sanctions and targeted individual/entity designations)
Maintain and update the SDN list and other sanctions lists
Issue general and specific licences for authorised transactions
Investigate potential sanctions violations
Impose civil money penalties for sanctions violations
Publish guidance, FAQs, and enforcement actions
Why it matters for non-US firms:
OFAC has broad extraterritorial reach and regularly imposes significant penalties on non-US financial institutions for facilitating transactions that touch the US financial system in violation of US sanctions. Any institution that clears US dollars through a US correspondent bank is exposed to OFAC jurisdiction.
Areas of focus: US sanctions programmes, SDN and other lists, licences and authorisations, enforcement actions, sanctions compliance frameworks.
DOJ — US Department of Justice (Financial Crime Enforcement)
Website: justice.gov
Relevant divisions: Criminal Division, Asset Forfeiture and Money Laundering Section (AFMLS), National Security Division
What it does:
The DOJ is the principal federal agency responsible for enforcing US federal law and prosecuting financial crimes including money laundering, sanctions violations, and BSA offences. Working alongside FinCEN and OFAC, the DOJ pursues both corporate and individual criminal accountability for serious financial crime failures. The DOJ's Deferred Prosecution Agreements (DPAs) and Non-Prosecution Agreements (NPAs) with major financial institutions are closely studied by compliance professionals for the standards they set.
Key publications: Corporate enforcement policy, FCPA Resource Guide, annual money laundering threat assessment.
Areas of focus: Criminal prosecution of ML/TF offences, corporate accountability, asset forfeiture, FCPA enforcement, DPAs and NPAs.
FTC — Federal Trade Commission
Established: 1914
Headquarters: Washington DC, USA
Website: ftc.gov
What it does:
The FTC is the primary US consumer protection and competition regulator. In the absence of a comprehensive federal data privacy law, the FTC plays a significant data privacy enforcement role under Section 5 of the FTC Act, which prohibits unfair or deceptive acts or practices. The FTC has pursued enforcement action against companies for inadequate data security practices, deceptive privacy policies, and failure to honour privacy commitments.
Key publications: Privacy and data security updates, enforcement actions, guidance on data security, Health Breach Notification Rule guidance.
Areas of focus: Data privacy enforcement, consumer protection, data security, unfair or deceptive practices, competition law.
OCC — Office of the Comptroller of the Currency
Established: 1863
Headquarters: Washington DC, USA
Website: occ.gov
What it does:
The OCC charters, regulates, and supervises national banks and federal savings associations in the US. It has joint jurisdiction with FinCEN and the Federal Reserve over AML compliance in national banks and is a frequent co-signatory to enforcement actions against major US financial institutions for BSA/AML failures.
Areas of focus: National bank supervision, BSA/AML examination, enforcement actions, fintech charters.
FINTRAC — Financial Transactions and Reports Analysis Centre of Canada
Established: 2000
Headquarters: Ottawa, Ontario, Canada
Website: fintrac-canafe.gc.ca
What it does:
FINTRAC is Canada's FIU and AML regulatory body. It collects and analyses financial intelligence from reporting entities across Canada — including banks, credit unions, money service businesses, insurance companies, real estate agents, accountants, and dealers in precious metals — and discloses actionable financial intelligence to law enforcement and national security agencies.
Key functions:
Receive and analyse suspicious transaction reports (STRs), large cash transaction reports (LCTRs), and electronic funds transfer reports (EFTRs)
Disclose financial intelligence to the RCMP, CSIS, and other partners
Conduct compliance examinations of reporting entities
Issue administrative monetary penalties for non-compliance
Publish compliance guidance and notices to reporting entities
Publish annual reports and strategic intelligence assessments
Key publications: Annual report, compliance assessment reports, notices to reporting entities, FINTRAC typologies and trends reports.
Areas of focus: Canadian AML/CFT regime, suspicious transaction reporting, compliance examinations, financial intelligence, terrorist financing.
OPC — Office of the Privacy Commissioner of Canada
Established: 1983
Headquarters: Gatineau, Quebec, Canada
Website: priv.gc.ca
What it does:
The OPC is Canada's federal privacy regulator, overseeing compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) for private sector organisations and the Privacy Act for federal government institutions. The OPC investigates complaints, conducts audits, publishes guidance, and makes recommendations on privacy matters.
Current developments:
Canada is in the process of significantly modernising its private sector privacy law through Bill C-27 (the Digital Charter Implementation Act), which proposes to replace PIPEDA with the Consumer Privacy Protection Act (CPPA), introduce a new Personal Information and Data Protection Tribunal, and enact an Artificial Intelligence and Data Act (AIDA).
Areas of focus: PIPEDA compliance, Privacy Act, data breach reporting, cross-border transfers, AI and privacy, privacy by design.
OSFI — Office of the Superintendent of Financial Institutions
Established: 1987
Headquarters: Ottawa, Ontario, Canada
Website: osfi-bsif.gc.ca
What it does:
OSFI is the primary prudential regulator and supervisor of federally regulated financial institutions in Canada, including banks, insurance companies, and trust companies. OSFI works alongside FINTRAC on AML matters affecting federally regulated financial institutions and has published its own AML-related guidance for the institutions it supervises.
Areas of focus: Prudential supervision, financial stability, AML risk management for federally regulated financial institutions.
MAS — Monetary Authority of Singapore
Established: 1971
Headquarters: Singapore
Website: mas.gov.sg
What it does:
Singapore's central bank and integrated financial services regulator. MAS regulates and supervises financial institutions across banking, insurance, securities, and payments, and is widely regarded as one of the most sophisticated and active AML regulators in the Asia Pacific region. Singapore's strategic position as a major international financial centre makes MAS's approach to AML supervision particularly significant for global financial institutions.
Key powers:
License and supervise financial institutions in Singapore
Issue AML/CFT notices with the force of law (MAS Notices 626, 824, 1014 etc.)
Issue civil and criminal penalties for AML failures
Withdraw licences and impose business restrictions
Recent enforcement focus: Significant enforcement action following the 2023 Singapore money laundering case — one of the largest in the country's history — with increased scrutiny of wealth management, private banking, and real estate sectors.
Key publications: MAS AML/CFT Notices and Guidelines, Technology Risk Management Guidelines, annual supervisory priorities.
Areas of focus: AML/CFT supervision, virtual assets, wealth management, private banking, payments, fintech regulation.
AUSTRAC — Australian Transaction Reports and Analysis Centre
Established: 1989
Headquarters: Sydney, Australia
Website: austrac.gov.au
What it does:
AUSTRAC is Australia's primary AML/CFT regulator and FIU. It supervises compliance with the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (AML/CTF Act) for approximately 15,000 regulated entities, collects and analyses financial intelligence, and discloses intelligence to law enforcement and national security agencies.
Key enforcement history:
AUSTRAC has pursued some of the most significant AML enforcement actions globally, including record-breaking penalty settlements with Commonwealth Bank of Australia (AUD 700 million, 2018) and Westpac (AUD 1.3 billion, 2020) for systemic AML failures. These cases fundamentally reshaped AML expectations for Australian financial institutions.
Current developments:
Australia is currently implementing the most significant reforms to its AML/CTF regime since 2006 — the Tranche 2 reforms — which will extend AML obligations to lawyers, accountants, real estate agents, and other professional services sectors for the first time.
Areas of focus: Australian AML/CFT regime, financial intelligence, enforcement, Tranche 2 reforms, virtual assets, correspondent banking.
JFIU — Joint Financial Intelligence Unit (Hong Kong)
Website: jfiu.gov.hk
What it does:
The JFIU is a joint unit of the Hong Kong Police Force and the Hong Kong Customs and Excise Department, responsible for receiving and analysing suspicious transaction reports (STRs) from financial institutions and other reporting entities in Hong Kong. It also conducts financial intelligence analysis and cooperates with overseas FIUs through the Egmont Group.
Areas of focus: SAR regime in Hong Kong, financial intelligence, cross-border cooperation.
Reserve Bank of India (RBI) and Financial Intelligence Unit — India (FIU-IND)
Website: rbi.org.in | fiuindia.gov.in
What they do:
The RBI is India's central bank and primary financial regulator, issuing AML/CFT guidelines for banks and financial institutions. FIU-IND is India's FIU, responsible for receiving and analysing suspicious transaction reports and coordinating with law enforcement on financial crime matters.
Areas of focus: AML compliance in the Indian banking sector, suspicious transaction reporting, cross-border cooperation.
This directory is maintained by LetsTalkAML and updated regularly to reflect regulatory changes and new enforcement developments. Last reviewed: 2025. For queries or suggested additions, use the Contact page.