Counter-Proliferation Financing

Counter-proliferation financing (CPF) is the effort by governments, regulators and financial institutions to prevent money, assets and financial services from being used to develop, acquire or transport nuclear, chemical or biological weapons and their delivery systems. It targets proliferation financing, which covers paying for weapons programmes, for the materials and technology they need, and for the networks of companies and agents that procure them.

CPF sits alongside anti-money laundering and counter-terrorism financing as the third main pillar of financial crime compliance. It relies heavily on targeted financial sanctions adopted by the United Nations Security Council and on national sanctions regimes, and it is overseen internationally by the Financial Action Task Force (FATF).

UN Security Council Resolution 1540, adopted in 2004, requires all states to prevent non-state actors from obtaining weapons of mass destruction, including by controlling related financing. Country-specific resolutions impose targeted financial sanctions on persons and entities linked to the weapons programmes of the Democratic People's Republic of Korea and, historically, Iran. FATF Recommendation 7 requires countries to implement these targeted financial sanctions without delay, meaning that the assets of designated persons must be frozen and no funds made available to them. In 2020 the FATF revised its standards to require countries and private firms to identify, assess and mitigate the risk of breaching or evading these sanctions.

Many countries also maintain their own lists and powers. In the United States, the Office of Foreign Assets Control designates weapons of mass destruction proliferators, and export control agencies regulate the sale of sensitive goods.

Proliferation networks seldom look like weapons buyers. Typical features include:

• Front and shell companies in trading hubs that buy goods on behalf of the real end user.
• Purchases of dual-use goods, which have civilian uses but can also serve weapons programmes, such as certain machine tools, electronics and chemicals.
• Complex trade routes with transshipment through third countries to hide the final destination.
• Use of correspondent accounts, foreign exchange and, increasingly, cryptoassets, including funds stolen in hacks attributed to state-linked groups.
• Ship-to-ship transfers, flag changes and falsified documents in maritime trade.

Because the individual transactions are often small and commercially plausible, proliferation financing is hard to detect with tools built for money laundering, which focus on the source of funds rather than their use.

Banks, payment firms and crypto businesses manage CPF risk through:

• Sanctions screening. Screening customers, counterparties, vessels and payments against UN and national lists, using sanctions screening tools and the 50 percent rule where it applies.
• Risk assessment. Including proliferation financing in the firm's business-wide risk assessment, with attention to trade finance, shipping and high-risk jurisdictions.
• Due diligence. Understanding customers' business, end users and goods, particularly in trade finance, and applying enhanced due diligence where red flags appear.
• Reporting. Freezing assets, reporting matches to the authorities and filing suspicious activity reports where proliferation activity is suspected.

Public reports by UN panels of experts and national authorities have described large thefts of cryptoassets attributed to groups linked to the Democratic People's Republic of Korea, with the proceeds said to support its weapons programmes. These cases have pushed exchanges, custodians and other virtual asset service providers to treat proliferation financing as a concrete risk. Controls include screening wallet addresses linked to designated actors, using blockchain analytics to trace stolen funds, freezing assets where possible and cooperating quickly with law enforcement after major hacks. Laundering of such proceeds often moves through mixers, cross-chain bridges and over-the-counter brokers, so firms that provide these services are expected to monitor for related patterns.

CPF depends on information that banks often do not have, such as the technical nature of goods or the real end user. Lists change frequently, and designated networks quickly create new companies. Trade documents can be forged, and payments may pass through several banks that see only part of the transaction. Public-private partnerships and shared typologies, published by the FATF and national authorities, help firms understand current methods. Supervisors increasingly expect firms to show that CPF is treated as a distinct risk rather than folded into general sanctions compliance.

• Financial Action Task Force
• United Nations Security Council