Key Takeaways

  • Financial institutions spend an estimated $200 billion annually on anti-money laundering (AML) compliance, yet criminal transactions have held steady at 2% to 5% of global GDP since the 1990s.
  • The Financial Action Task Force (FATF), founded at the 1989 Paris G7 summit, designed Suspicious Activity Reports (SARs) as real-time tracking tools, but banks now use them as liability shields.
  • Overwhelmed law enforcement units receive millions of unread SARs every year while criminals combine cash and stablecoins to move illicit funds undetected.
  • Aggressive AML mandates create severe collateral damage, triggering the mass debanking of hundreds of thousands of innocent people and businesses.

The $200 Billion Paper Shield

Global anti-money laundering rules fail because they measure compliance activity rather than criminal outcomes. Banks face multi-billion-dollar regulatory penalties if they miss suspicious behavior. To protect themselves, compliance teams flood authorities with defensive paperwork. They file millions of Suspicious Activity Reports every year, knowing law enforcement lacks the staff to read them.

Author Oliver Bullough points out the staggering misallocation of capital: “The estimates from LexisNexis is that global compliance with AML legislation costs something like $200 billion a year. If you look at what you could do with that money if you weren't using it for this, that would be enough to solve world hunger and to provide clean water and sanitation to everyone on earth with about 50 billion left over.”

The original regulatory design never anticipated these defensive incentives. As Bullough explains, “The original idea with suspicious activity reports, which grew out of the creation of the Financial Action Task Force at the Paris G7 in 1989, was they would be a source of real-time intelligence for law enforcement agencies, that they would receive these reports that would allow them to essentially see money laundering as it was happening.”

Instead of real-time tracking, the current apparatus created an administrative moat. Illicit money flows have remained flat at 2% to 5% of global GDP for thirty years. Modern syndicates move between physical cash, European VAT carousel schemes, trade misinvoicing, and stablecoins, operating far outside the view of backlogged compliance analysts.

Why Compliance Traps the Wrong People

When compliance rules turn into defensive checklists, ordinary customers pay the price. Financial institutions manage risk by severing ties with entire customer segments rather than investigating individual accounts.

Bullough highlights this human cost: “We haven't talked about debanking, but that is a serious issue both in politics, but I think more broadly, globally, that affects hundreds of thousands of people, mostly Muslims, but others too, as a really grotesque side effect of anti-money laundering and anti-terrorist financing restrictions.”

A system built on defensive reporting creates inverted priorities. If a bank files a report, it shields itself from a regulatory fine. If a bank onboards a customer in a higher-risk demographic or cross-border trade, it risks enterprise survival. The easiest move for the bank is simple: drop the customer and send the regulator another unread form.

Fixing this broken loop requires shifting from defensive volume to targeted enforcement. As Bullough notes, “It would be far better to have fewer suspicious activity reports that were actually being read, and then you could have a system where financial criminals were actually being prosecuted and you would get a feedback loop that would then restrict the ability of financial criminals to move their money.”

What to Do With This

If you build fintech products or manage business treasury, audit your banking exposure today. Split your operating capital across at least two distinct banking partners so a single automated AML false positive cannot freeze your payroll. If you manage an internal compliance team, track your operations by actual illicit activity identified rather than the raw volume of SARs submitted.