What is AML, and how is it different from KYC?
KYC asks who you are once. AML watches what you do forever.
KYC happens at a moment. AML never stops.
The difference in one line
KYC is a photograph. AML is the film.
Verification happens at a moment: documents checked, identity confirmed, customer admitted. Anti-money-laundering runs continuously afterwards, watching what that verified customer actually does, for as long as they remain a customer.
A perfectly verified customer can still launder money. That sentence is the entire reason AML exists as something larger than KYC.
Five things that run while you are asleep
Customer due diligence, which includes KYC but also risk-rating each customer, with enhanced checks for higher-risk profiles.
Transaction monitoring, a set of rules and models watching for patterns: sudden volume changes, structuring amounts to sit under reporting thresholds, funds moving straight through an account without stopping, activity that does not match the stated purpose.
Sanctions and PEP screening, checking names against government lists at onboarding and continuously afterwards, because lists change while customers do not.
Reporting, filing suspicious activity reports with the financial intelligence unit. Notably, the institution files a suspicion, not a conclusion. It is not required to prove anything.
Record keeping and governance, because a regulator examining you will assess your process, not only your outcomes.
The tension nobody escapes
Every AML system produces false positives, and the ratio is worse than outsiders imagine. Tighten the rules and you block innocent customers, freeze legitimate transfers, and generate alert volumes no team can clear. Loosen them and you miss real activity and face a fine that can exceed a year of profit.
There is no setting that avoids both. Every institution is choosing a point on that curve, and the choice is a business decision dressed as a technical one.
Checking a passport at the door is KYC. Noticing that the guest who came for dinner has been carrying identical crates out of the back entrance every night for a month is AML.
Where you meet it
Every time a transfer was held for review, every request for proof of source of funds, and every account frozen with an explanation nobody was permitted to give you.