AML Learning Path: From Beginner to MLRO

A sequenced route from core AML/KYC terms to case review, evidence judgement and MLRO oversight.

1. The simplest explanation#

AML means anti-money laundering . It is the set of controls used to prevent a business or financial system from being used to move, hide, disguise or benefit from criminal money.

KYC means know your customer . It is the part of AML where a business identifies who the customer is, verifies key facts and understands the purpose of the relationship.

KYB means know your business . It applies the same idea to companies: what the company is, who owns or controls it, what it does and whether its structure or activity creates risk.

2. Why AML/KYC exists#

AML/KYC is not only paperwork. It answers a basic trust question:

Can this business reasonably understand who it is dealing with,
what risk exists,
and what evidence supports that understanding?

The purpose is to protect the financial system from misuse linked to money laundering, terrorist financing, proliferation financing, sanctions evasion, corruption, fraud and other predicate offences.

3. Five connected AML/KYC layers#

Think of AML/KYC as five connected layers:

If a beginner understands these five layers, most AML/KYC terms become easier to place.

4. The first 15 terms to learn

Definitions remain in the Beginner Glossary. The sequence connects the first concepts before CDD, screening and case work.

Keeping definitions in one glossary reduces drift: other pages should explain how concepts are used, not silently create competing definitions.

5. The beginner reading order#

Use this order if you are starting from zero:

• Beginner Glossary
• AML/KYC Map: From Customer to Evidence
• Core Concepts
• CDD / KYC
• Beneficial Ownership
• Enhanced Due Diligence
• PEP
• Sanctions / TFS / CPF
• Adverse Media
• Open AML Data Sources
• Open Source Limitations and Evidence Weight
• FATF Mutual Evaluations and Country Risk
• National Risk Assessment Source Map

After that, move to transaction monitoring, typologies, debarment sources, VASP/crypto AML, TBML and the advanced AML reference topics.

6. First control pattern#

A beginner should not try to memorise every red flag. First understand this pattern:

identify the subject
→ understand ownership and control
→ understand purpose and activity
→ check risk context
→ use reliable sources
→ preserve evidence
→ separate facts from assumptions

This pattern is safer than jumping straight into suspicious activity conclusions.

7. Reading source pages as evidence inputs#

Data sources are not automatic answers. They are evidence inputs.

A sanctions list entry, company registry filing, LEI record, offshore leak record, debarment listing or adverse media article should be read with source context:

• Is the source official, aggregator-based or investigative?
• Is the identity match strong or weak?
• Are identifiers available, or only a name?
• Is the information current, historical or incomplete?
• Does the source prove a fact, or only create a lead for review?

For this reason, AML Bible separates source-literacy pages from operational decision-making pages.

8. What AML/KYC is not#

AML/KYC is not:

• a simple checklist that makes every decision obvious;
• a blacklist-only exercise;
• a judgment based only on nationality or country of incorporation;
• a reason to treat all complex structures as suspicious;
• a substitute for local law, internal policy or responsible reviewer judgment.

AML/KYC is evidence-based risk understanding.

9. Learning and applied layers#

Use the learning layer for terminology, control logic and source literacy. Use the applied layer when a review needs clear role boundaries, expected outputs, evidence standards, governance mechanisms or jurisdiction-specific context.

The two layers stay connected: first understand AML/KYC logic, then use templates, matrices and other applied materials.

10. Core source basis#

• FATF Recommendations for the international AML/CFT/CPF control framework.
• FATF Glossary for core terminology.
• FATF Methodology for technical compliance and effectiveness concepts.
• FATF National Risk Assessment Guidance for national and sector risk assessment concepts.

11. Progression from beginner to MLRO#

The foundation material above is Level 1. Continue through the following levels in order. Each level adds practical output expectations and a clearer authority boundary.

Level 2 — Junior AML Analyst#

Capability focus

Understand how to gather, verify and record information without converting a signal into an unsupported allegation.

Reading set

1. Enhanced Due Diligence
2. PEP
3. Sanctions / TFS / CPF
4. Adverse Media
5. Source of Wealth and Source of Funds
6. Open AML Data Sources
7. Case File and Evidence Lifecycle
8. Discrepancy, Risk and Escalation Controls

Expected output

The learner can:

• collect approved customer and registry evidence;
• run screening using approved sources;
• identify missing or inconsistent information;
• distinguish verified fact, corroborated information, customer assertion and analyst inference;
• prepare a concise evidence-linked escalation note.

Decision boundary

The learner does not resolve sanctions ownership/control questions, approve high-risk relationships, close material discrepancies or decide whether to file a SAR/STR.

Level 3 — AML/KYC Practitioner#

Capability focus

Understand how risk factors combine across customer, product, sector, geography, delivery channel and activity.

Reading set

1. Customer Risk Assessment & Risk Rating
2. Ongoing Monitoring & Periodic Review
3. Transaction Monitoring Source Map
4. Sector Risk Lens
5. Typologies & Red Flags
6. Trade-Based Money Laundering
7. Crypto / VASP AML
8. Decision Matrices

Expected output

The learner can:

• perform a structured customer or event review;
• explain why a factor increases, reduces or does not resolve risk;
• identify plausible innocent explanations;
• apply approved risk-rating logic without treating the score as a decision;
• recommend proportionate controls or escalation.

Decision boundary

Material overrides, exceptions, high-risk approvals and reporting decisions remain with the authorised reviewer or MLRO.

Level 4 — Senior Analyst / Reviewer#

Capability focus

Understand evidence sufficiency, consistency across cases, control effectiveness and the difference between a defensible rationale and a convenient conclusion.

Reading set

1. End-to-End AML Review Overview
2. Evidence Pack Templates
3. AML Review Examples
4. Name-Screening Calibration
5. AML Quality Assurance & Audit Readiness
6. Third-Party Reliance & Outsourcing
7. Data Protection & AML Recordkeeping
8. Role Tracks and Authority Boundaries

Expected output

The learner can:

• challenge weak evidence and unsupported assumptions;
• approve, return or escalate a case within delegated authority;
• identify recurring quality failures;
• distinguish case risk from programme weakness;
• create clear reviewer rationale and remediation actions.

Decision boundary

The reviewer does not exceed delegated approval, sanctions, reporting, legal or board authority. Escalation is a control, not a failure.

Level 5 — Compliance Officer / MLRO#

Capability focus

Understand how the AML programme operates as a system: risk assessment, policy, controls, governance, management information, quality assurance, reporting, remediation and independent assurance.

Reading set

1. AML Programme Design & Effectiveness
2. AML Governance & Three Lines of Defence
3. MLRO Review & Escalation Overview
4. STR / SAR & Tipping-Off
5. Rule-to-Action Map
6. FATF Mutual Evaluations and Country Risk
7. From FATF Standards to National AML Rules
8. How to Research an AML Jurisdiction
9. EU AML/CFT Framework, US AML/CFT Framework and UK AML/CFT Framework
10. Editorial & Source Policy

Expected output

The learner can:

• understand and challenge enterprise and business-line risk assessments;
• connect material risks to policies, controls, ownership and evidence;
• evaluate whether controls are designed and operating effectively;
• make or route decisions under the applicable legal and governance framework;
• report material risk, control weakness and remediation status to senior management or the board;
• preserve independence, confidentiality and an audit trail.

Decision boundary

MLRO responsibility is jurisdiction- and appointment-specific. It does not replace legal advice, sanctions counsel, the board, law enforcement or specialist functions.

Practice outputs#

Use existing AML Bible materials as exercises:

Training examples should be anonymised or synthetic and must not expose confidential customer or reporting information.

Role-based entry points#

The sequence remains the default, but experienced users can enter through:

• New analyst: Levels 1–2;
• KYC/KYB specialist: Levels 1–3;
• Transaction-monitoring analyst: Level 1, then monitoring and typologies in Level 3;
• Reviewer / QA: Levels 2–4;
• MLRO / Head of Compliance: Levels 3–5;

Completion test#

A reader has not completed a level merely by opening the pages. Completion means they can:

1. explain the relevant concept;
2. identify the correct source;
3. produce the stated output;
4. state the limitations of the evidence;
5. identify who owns the next decision.

That standard keeps the path operational rather than decorative.

See Also#

• Why AML Exists
• Beginner Glossary
• Customer-to-Evidence Map
• How to Use AML Bible
• Source Register

References#

• Beginner Glossary as the single source of beginner terms.
• Source Register for official source hierarchy.
• Editorial & Source Policy for scope and boundary.