It didn’t look suspicious. That was the problem.
What financial investigations reveal about money laundering — and why Tranche 2 matters
I started my career in anti-money laundering, conducting financial investigations for a law enforcement agency.
This was not compliance. There were no templates, no checklists, no policies to follow. It was about tracing real transactions, unpacking structures, and understanding how money moves when someone is trying to hide it.
And very quickly, one thing became clear.
The transactions that mattered most did not look suspicious. They looked normal. Structured. Documented. Commercial.
That’s where most people get it wrong
We are trained to look for red flags.
But in real cases, the risk rarely sits in a single transaction. It sits in how everything connects.
You stop asking, “Does this look unusual?”
And start asking, “Does this make sense when you step back?”
Because that is where things start to break down.
What this looks like in practice
Funds move from mule accounts into bank cheques, through professional channels, and into trust accounts. They are then used in transactions like property acquisitions. Everything appears formal and documented, yet the source of funds is obscured.
In other cases, funds are split, moved through multiple entities, and later reconverged. Each step appears to be a standard transaction. Taken together, there is no commercial logic.
Sometimes it is not complexity, but volume. Cash is deposited across multiple accounts, often within the same region and time period. Individually, they sit within thresholds. Collectively, they reveal coordination.
Value can also be moved through physical assets such as precious metals. Once sold, the proceeds enter the financial system and appear clean. The issue is not the transaction — it is what happened before it.
More subtly, international trade businesses can present clean financials while risks embedded in pricing, counterparties, or fund flows remain hidden in plain sight.
The common thread
Nothing looks wrong on its own.
The problem is how everything fits together.
Why this matters for Tranche 2
Tranche 2 is not just more rules. It is a shift in expectation.
Professionals are not the source of risk. But they are often involved in handling funds, setting up structures, and supporting transactions.
Which means they can be part of arrangements that look entirely normal.
So the question is simple: if nothing looks suspicious, why do more?
Because that is exactly how money laundering works.
It is designed to blend in. It sits within everyday services such as company formation, trust accounts, and transactional support.
The expectation is not to treat every client as suspicious. It is to look beyond the surface and ask:
“Who controls the structure?”
“Where do the funds come from?”
“Does it make sense?”
If that lens is not applied, the consequences are real. Regulatory breaches. Significant Penalties (up to $33 million). Public naming by AUSTRAC. Reputational damage.
The real challenge: you never see the full picture
Each engagement shows only a fragment.
Risk does not emerge from a single transaction. It emerges from patterns across services, clients, and structures over time.
Which means the real question is not:
“Does this transaction look right?”
It is:
“Where is our firm most likely to be exposed to patterns like this?”
Why a Firm-Wide Risk Assessment Matters
A Firm-Wide Risk Assessment provides that broader lens.
It allows firms to step back and understand where risk is more likely to arise across their services, clients, and operating model.
It does not replace engagement-level judgement. It strengthens it.
Without that context, assessments become inconsistent, indicators are missed, and controls do not reflect actual exposure.
A well-constructed FWRA leads to more consistent decisions, stronger escalation pathways, and a more defensible AML framework.
Where AML CoreComply fits
At DVT Mcleods, we built AML CoreComply to address this exact challenge.
Most tools focus on checklists. The real issue is understanding risk in a way that reflects how firms operate.
AML CoreComply helps firms build practical, defensible Firm-Wide Risk Assessments by connecting services, clients, and structures into a clear view of exposure.
Because effective AML frameworks are not built on isolated checks. They are built on understanding how risk shows up across the business.
Final thought
Financial investigations reveal something that is not always obvious from a compliance perspective.
Activities can be structured, documented, and commercially reasonable — and still form part of highly coordinated arrangements.
This is not just about intent. It is about how the pieces fit together.
Tranche 2 does not require professionals to become investigators. But it does require a shift in perspective — from assessing transactions in isolation to understanding how they fit into broader patterns of risk.
That shift starts with knowing where your exposure sits across the firm, before it becomes visible within a single engagement.
