An AML compliance officer is the person a regulated firm designates to manage its anti-money laundering and counter-terrorist financing program day to day. Banks, money transmitters, payment and e-money institutions, crypto exchanges, casinos and other covered businesses must have one. The officer oversees customer checks, monitoring, suspicious activity reporting, training and record keeping, and is usually the firm's main contact with financial intelligence units and supervisors.
The role has different names. In the US it is commonly called the BSA officer or BSA/AML compliance officer, after the Bank Secrecy Act. In the UK the equivalent is the money laundering reporting officer or nominated officer. It overlaps with, but is narrower than, a chief compliance officer, who covers all regulatory obligations; in small firms one person often holds both roles.
AML compliance officer in plain terms
Think of the safety officer on a building site. Everyone on site is expected to work safely, but one named person writes the safety rules, checks that people follow them, trains newcomers, investigates near-misses and talks to the inspector when they visit. If the site is unsafe, that person is expected to say so to the owners, even when they would rather not hear it.
An AML compliance officer plays that role for financial crime. Every employee should spot and report suspicious behaviour, but the officer designs the checks, decides which concerns are reported to the authorities, keeps the records in order and tells senior management where the firm is exposed. Regulators expect this person to have real authority, enough staff and direct access to the board.
Legal basis
- United States. The BSA requires covered institutions to have an AML program with internal controls, independent testing, training and a designated compliance person. For money services businesses, 31 CFR 1022.210 requires a person "to assure day to day compliance"; national banks must designate a qualified individual to coordinate and monitor day-to-day compliance under 12 CFR 21.21. In April 2026 FinCEN proposed a revised AML/CFT program rule, replacing a July 2024 proposal; as of late 2026 it had not been finalized.
- United Kingdom. The Money Laundering Regulations 2017 require firms to appoint a nominated officer to receive internal suspicion reports and make reports to the National Crime Agency. FCA-authorized firms must also allocate overall responsibility to a director or senior manager and appoint an MLRO, a senior management function under the Senior Managers and Certification Regime.
- European Union. The Anti-Money Laundering Regulation (EU) 2024/1624, which applies from 10 July 2027, requires obliged entities to name a member of the management body as compliance manager and to appoint a compliance officer who can report directly to that body.
Main responsibilities
- Risk assessment. Leading the firm-wide AML risk assessment and keeping the program aligned with the risk-based approach.
- Policies and procedures. Maintaining the compliance manual covering customer due diligence, enhanced due diligence, record keeping and escalation.
- Monitoring and screening. Overseeing transaction monitoring systems and screening against each relevant sanctions list, including tuning rules and reviewing alert quality.
- Reporting. Deciding on and filing suspicious activity reports and currency transaction reports, and answering law enforcement requests.
- Training and agents. Training staff and, for money transmitters, overseeing agents appointed under each money transmission agreement.
- Reporting to the board. Telling senior management and the board where the program falls short and what resources it needs.
The program itself is tested by someone else. An independent AML review or AML audit, carried out by internal audit or an outside reviewer, checks whether the officer's controls work, and the officer remains accountable for fixing what it finds.
Independence, resources and personal liability
Supervisors look for an officer who is qualified, independent of the business lines being monitored, and has enough staff, systems and access to information. Enforcement actions frequently cite compliance functions that were understaffed or overruled by sales and senior management, and US examination guidance from the FFIEC treats the competence and authority of the BSA officer as a core test of the program.
Officers can also be held personally liable. In May 2017 FinCEN and the US Attorney for the Southern District of New York settled their case against MoneyGram's former chief compliance officer, Thomas Haider, who agreed to pay a $250,000 penalty and to a three-year bar from compliance roles at money transmitters, after being accused of failing to terminate outlets linked to consumer fraud. In the UK, MLROs are individually accountable under the senior managers regime. Officers who see their concerns ignored may turn to internal whistleblowing channels or, in some cases, regulators.
Skills and career path
AML compliance officers usually come from compliance, audit, law enforcement or banking operations. Certifications such as those from ACAMS and the International Compliance Association are common, and growing use of data analytics means many officers now work closely with technology teams. In fintech and payment firms the officer is often among the first senior hires, because a credible compliance lead is needed to obtain licenses and bank partnerships. The role sits within the firm's wider compliance management system and its broader AML compliance obligations.