All Collections
Knowledge Base
What is an Anti-Money Laundering Audit?
What is an Anti-Money Laundering Audit?

What you should expect from an anti-money laundering audit.

Admin avatar
Written by Admin
Updated over a week ago

An anti-money laundering audit will provide you with an independent assessment of your AML CFT risk assessment and program. It is an opportunity for you to consult with AML compliance professionals on how well your program and risk assessment are designed and working. The audit may also inform your AML CFT supervisor’s opinion about the adequacy and effectiveness of your program. Their opinion and assessment may influence the way in which your reporting entity is supervised.

To conduct the anti-money laundering audit it is necessary an AML auditor to have access to the following types of information –

  1. Your AML CFT risk assessment and documents;

  2. Your AML CFT program;

  3. Documents relating to the development of your risk assessment and program;

  4. Access to staff members and/or senior management;

  5. Access to files, customer identification records, transactions and/or outputs from your systems; and

  6. The results of your internal reviews.

Should you engage AML Consultants to complete your audit, your business obtains access to AML360's regulatory technology. AML360's technology will assist to remedy any potential compliance gaps, without your business incurring additional advisory fees.


Your business will be provided with an audit implementation plan. The plan will set the nature, scope and objectives of the audit, including techniques to be used for the audit. During the drafting of the audit plan, you will have the opportunity to identify any concerns to be included in the audit planning and to inform AML Consultants about any time constraints to be observed during the audit.


AML Consultants will obtain an overview of your business operations and policies. The information gathered in this step will generally arise from online questionnaires, discussions with your personnel and reviews of reports and files maintained.

The preliminary overview process is undertaken in stages over a 5-10 day period and will take no more than 2-3 hours of your time.

At the completion of this phase AML Consultants will set the amount of testing required to accomplish the audit’s objectives.


AML Consultants will begin the evaluation of internal controls by reviewing system records and capabilities. Particular emphasis will be placed on the assignment of duties, the approval process, and the reporting structure. This information is obtained primarily through interviews and flow charts.

AML Consultants’ opinion regarding the adequacy of internal controls has a direct relationship to the amount and depth of the second category of testing, namely customer due diligence and operational testing.

To determine if the reported controls are functioning as intended, AML Consultants will select samples of documents and inspect those documents for compliance with stated procedures and practices.

The results of these tests provide a degree of assurance regarding the reliability and adequacy of the controls, and a means of measuring operational effectiveness and accountability.

Through sample analyses, AML Consultants will determine if your entity is achieving the stated mission, namely to identify and mitigate the risk of money laundering and financing of terrorism.


We operate under a 'no surprises policy'.

AML Consultants will keep your management informed during the course of the audit process by discussing progress, audit test results, conclusions and recommendations.

The purpose of these discussions is threefold:

(i) To clarify any misunderstandings

(ii) Enlist management’s opinion and support in solving any problems discovered; and

(iii) Implementation of recommendations.


The auditor will arrange to have interviews with key staff who have responsibility for AML/CFT compliance. This will include the AML/CFT Compliance Officer and the AML/CFT Senior Manager. You should expect some support staff to also be interviewed.

These discussions will be for the purpose of clarifying policies, procedures and controls, as well as gauging the level of knowledge and understanding held by staff.


There is a two-phase approach to the audit report:

Discussion Draft

Final Draft

Following completion of the sample testing, AML Consultants will prepare a draft of the audit report.

The report will state the audit objective(s), the audit tests performed, the results of the audit tests, including findings and recommendations (if applicable).

Your business will have an opportunity to correct any factual errors and make further comment.

The final report is prepared based on the results of the discussion draft.

We use 5 ratings of (i) Compliant, (ii) Compliant with Recommendation, (iii) Partially Compliant, (iv) Non Compliant and (v) Not Applicable.

Any ratings of Non-Compliant include recommendations of how to strengthen controls.


Your business will receive an AML360 account from where you will receive and action audit requests. Should business demands interrupt your response, simply save and continue when time permits.

AML360's technology is designed to provide your business with additional insight in how to strengthen your internal procedures and controls. It achieves this by providing your business an advisory report, setting out the legal obligations and the practical applications of how your business can achieve compliance.

Following completion of the audit, you can continue to use the technology for a further six months, without incurring additional fees. This provides your business an opportunity to immediately remedy any weaknesses. The six month period will enable your business to establish its internal processes, with the software guiding you on how to achieve this.


If you are not ready to commit to an audit but would like to get a 'preview' of an audit outcome, you can undertake AML360's 'Pre-Audit HealthCheck'.

You have access to the Pre Audit HealthCheck for a period of 12-months and you can update the HealthCheck as often as required over that time. After completing the HealthCheck, you will receive a report with highlights of those areas that require strengthening.

Should you proceed with an audit from AML Consultants, the fee for the Pre-Audit HealthCheck will be deducted from the audit cost.

Did this answer your question?