The Risk May Not Be in the Customer. It May Be in the Connections Between Customers

One customer may not look suspicious.

One company may not look suspicious.

One payment may not look suspicious.

One business relationship may even appear completely reasonable.

The problem can begin when they are looked at together.

Money laundering does not always depend on one obviously suspicious customer making one obviously suspicious transaction. In more organised schemes, activity can be divided between different companies, accounts, people and transactions so that each individual piece appears less concerning.

That makes one of the harder AML questions a simple one:

Are we looking at customers, or are we looking at a network?

A recent case shows why this matters

In August 2026, U.S. authorities announced charges against five people in connection with an alleged fraud and money-laundering scheme involving more than $7.4 million.

According to the indictment, 21 shell companies were created and linked to approximately 44 bank accounts. Funds obtained through alleged fraud were deposited through different channels and then rapidly moved through business accounts to overseas entities.

The significance is not simply the number of companies or accounts.

It is the structure.

The alleged activity was spread across multiple legal entities and financial relationships rather than being concentrated in one account.

That creates a different AML problem.

If every relationship is reviewed separately, the picture can become fragmented.

If the relationships are connected, the picture can change considerably.

The customer may be only one part of the story

Traditional AML controls often begin with a customer.

Who are they?

What is the business?

Who owns it?

What is the expected activity?

Those questions remain important.

But they do not always explain how that customer fits into the wider financial or commercial environment around them.

Consider a simple example.

Company A has a reasonable business profile.

Company B has a reasonable business profile.

Company C also appears legitimate.

Each company has its own ownership documents, accounts, invoices and stated business purpose.

But then several connections appear:

• the same individuals are involved in different companies
• payments move between apparently unrelated businesses
• the same addresses, phone numbers or professional advisers appear repeatedly
• funds enter one business and quickly move to another
• several companies have similar incorporation dates or business activities
• transactions are repeatedly connected to the same counterparties
• ownership changes occur without an obvious commercial explanation

None of these automatically proves money laundering.

But together, they can create a question that an individual customer review may never reveal:

Why are these relationships connected?

This is where AML becomes more than a checklist

A customer can pass KYC and still require further investigation later.

A company can have a genuine registration.

An invoice can look legitimate.

A transaction can have a commercial explanation.

A beneficial owner can be identified.

None of these facts, by themselves, explains the entire relationship.

The risk assessment needs to remain capable of changing when new information appears.

This is particularly important when a business relationship becomes more complicated over time.

A customer that initially has one straightforward business activity may later introduce new counterparties, new payment routes, related companies, unusual third-party payments or a much higher volume of activity.

The question should not only be:

“Is this transaction suspicious?”

It can also be:

“Does this transaction make sense when we look at everything connected to it?”

The connections can be the warning sign

This is particularly relevant when several entities appear independent on paper but behave as though they are connected.

For example, a compliance team may notice that:

Customer A sends funds to Customer B.

Customer B sends funds to Customer C.

Customer C pays a company associated with Customer A.

Individually, each transaction may have an explanation.

Together, the movement may deserve a much closer look.

The same principle can apply outside traditional banking.

A professional service provider may be asked to establish several companies for different clients.

A real estate professional may encounter multiple transactions involving related parties.

An accountant may see several businesses with overlapping ownership or unexplained transfers.

A payment business may see different customers repeatedly sending money to the same beneficiaries.

A corporate service provider may notice recurring directors, addresses or intermediaries across apparently unrelated companies.

The sector changes.

The underlying AML question does not.

What should businesses do when these connections appear?

The answer is not to automatically treat every connection as suspicious.

It is to investigate the connection.

First, establish whether the relationship is genuine.

If two companies share an owner, address, director or adviser, determine why.

Second, understand the commercial explanation.

A group structure, common service provider or shared office can have completely legitimate reasons.

Third, compare the explanation with the financial activity.

Does the transaction flow match the stated business purpose?

Fourth, look beyond the immediate customer where appropriate.

This may include beneficial owners, counterparties, related entities, intermediaries and source of funds or wealth.

Fifth, document the reasoning.

If the connection has a legitimate explanation, record it.

If the explanation is incomplete or inconsistent, record what was investigated and what additional information was obtained.

And where the facts create reasonable grounds for suspicion, follow the applicable internal escalation and reporting requirements.

For DNFBPs, the same principle matters

DNFBPs should not assume that network analysis is only a bank problem.

A property transaction, company formation, accounting engagement or other professional service can sit inside a much larger structure.

Where the activity involves multiple companies, representatives, beneficial owners or third parties, it can be useful to map the relationships rather than reviewing each document in isolation.

A practical review can ask:

Who owns whom?

Who controls whom?

Who pays whom?

Who receives the money?

Who introduced the parties?

Which individuals or professional intermediaries appear repeatedly?

Does the stated business purpose explain the relationships?

This does not mean every complex structure is suspicious.

Complexity can be perfectly legitimate.

The issue is unexplained complexity.

Good AML controls should be able to connect the dots

This is also where technology has a role, but technology alone is not the answer.

Systems can help identify common identifiers, linked customers, repeated counterparties, unusual transaction flows and relationships between accounts or entities.

But someone still needs to understand why those connections exist.

The objective is not to create more alerts.

It is to prevent important information from remaining trapped inside separate customer files.

A useful AML programme should therefore be capable of moving from:

Customer → Transaction

to:

Customer → Ownership → Counterparties → Related Entities → Transactions → Source of Funds → Wider Relationship

That broader view can reveal risks that are invisible when every relationship is treated as an isolated case.

The bigger lesson

Modern money laundering does not always try to make one transaction look legitimate.

Sometimes it makes the entire structure look ordinary.

Different companies.

Different accounts.

Different transactions.

Different people.

Different explanations.

The challenge for compliance is recognising when those separate pieces form a single picture.

Because sometimes the strongest warning sign is not what one customer is doing.

It is who they are connected to.

Source: U.S. Department of Justice, “Five men indicted for laundering fraud proceeds tied to ‘tech support,’ government, and financial institution imposter scams,” August 28, 2026.

DOJ source: Five men indicted for laundering fraud proceeds