Correspondent Banks and Payment Agents: Who Knows the Customer Behind the Transfer?

Correspondent banking money laundering evidence connects the customer behind a transfer to the banks and payment agents that moved it, and to the people who decided it could continue. The bank processing a dollar payment may know its foreign-bank customer while another institution holds the underlying customer’s identity. An operations employee may know why a name disappeared from a payment message. A compliance reviewer may know who approved the exception. Those are different views of the same transfer, and putting them together can expose the decision that kept the money moving.

What Is Correspondent Banking in AML?

Correspondent banking lets a bank use another bank’s accounts and services to receive deposits, make payments and reach financial institutions with which it has no direct relationship. The bank providing those services is the correspondent. The bank using them is the respondent.

The correspondent’s customer is therefore another bank. The person or business sending the money may be that respondent’s customer, or farther down the chain. The correspondent’s account file and the sender’s customer file sit in different places.

That separation is central to correspondent banking fraud. The respondent describes its business, customers and controls to the bank providing access. The correspondent processes activity against that understanding. False assurances can preserve access even when the respondent’s own staff know its customers and controls look very different.

The services extend beyond wires. The Senate’s 2001 investigation of correspondent banking described deposit accounts, check clearing, foreign exchange, trade services and settlement. Its account of funds transfers is useful for an insider: electronic instructions trigger debits and credits in the participating banks’ ledgers. The message carries the instruction. The account records show the entries.

Nested Banks and Payable-Through Accounts

A nested correspondent relationship gives a downstream bank access through another bank’s correspondent account. The U.S. correspondent can be processing that downstream bank’s payments without having opened an account for it directly.

The Senate investigation found a particularly sharp example. First Union rejected British Trade and Commerce Bank’s request for a correspondent account, then learned that it had already been providing that bank wire-transfer services through an account belonging to Banque Francaise Commerciale. The bank it turned down was already using the service.

Payable-through accounts give a different kind of access. The Senate report described arrangements allowing the respondent’s customers to write checks directly against its correspondent account. With nesting, another bank uses the relationship. With payable-through access, an underlying customer can draw on the account.

For either arrangement, the useful comparison is between who the account-opening file says will use the account and who actually uses it. Ownership files, customer information and transaction records fill different parts of that comparison. The same historical investigation described shell banks operating without an office or staff and relying on correspondents for their banking operations. An institution’s name on an account tells much less than its business, owners and actual users.

Correspondent Bank Records Showing Hidden Originator Information

Correspondent bank records showing hidden originator information can include the original payment instruction, the message sent onward and the account entry recording the transfer. Comparing them can show where identifying information disappeared and who controlled that change.

Under its criminal deferred prosecution agreement, HSBC admitted that overseas group banks removed sanctioned entities’ identifying information from payment messages sent to U.S. banks. Its agreed statement of facts describes messages carrying this instruction:

Those messages entered a repair queue. Employees removed the references and sent the payments onward without the names that would have prompted sanctions scrutiny. The same criminal document describes group compliance ordering the practice stopped, then granting extensions after HSBC Europe appealed on business grounds. The instruction, the edited message and the permission to continue each explain a different part of the conduct.

A monthly statement can also leave information out that remains in the original wire documentation. The Senate’s historical investigation described Security Bank software that removed originator and beneficiary names from monthly statements, leaving transaction identifiers. Investigators had to compare those statements with the underlying wire records to recover the missing detail. The information existed, but the monthly statement used to review the account no longer showed it.

That makes payment operations knowledge valuable. Someone who understands the message fields, the repair process or the statement software can explain exactly where the customer’s identity became harder to see.

The Records That Reconnect the Payment

The most useful evidence connects what the institution was told, what the payment records show and what staff did with the difference. These records answer different questions:

HSBC’s criminal statement of facts describes sanctions filters stopping possible matches for review, and message editing that kept those filters from seeing the relevant names.

Trade payments add another comparison. HSBC’s criminal statement of facts describes peso brokers using drug dollars to buy legitimate goods for Colombian businesses. The goods gave the payment a commercial destination. In that setting, customer ownership, invoices, shipping records and the source of the payment help explain whose money bought the goods.

Remittance Agents Split the Evidence Across the Network

Remittance agent settlement records can provide evidence for an AML whistleblower by connecting the accepting agent, the principal money-transfer business, its banks and the payout side of the transaction. The useful account follows both the customer’s payment and the records explaining how the participants accounted for it.

An accepting agent deals with the sender. A payout agent deals with the recipient. The principal connects the network through its banking arrangements and agent relationships. Identity, transaction purpose and the facts known at each end can therefore sit with different participants. Operations staff may understand a reconciliation that the compliance reviewer never sees. The reviewer may know about complaints that never reached the people responsible for keeping an agent in the network.

For a particular transfer, we examine how the receiving record, payout record and any settlement or reconciliation entries connect. The questions are concrete: which agent accepted the payment, which agent paid it out, what the principal recorded, and which bank entries correspond to it. We also examine who could suspend the agent or end the relationship. That is how remittance agent fraud becomes a story about the network’s own decisions.

Under its 2012 criminal deferred prosecution agreement, MoneyGram admitted aiding and abetting wire fraud and failing to maintain an effective anti-money laundering program. The Justice Department’s account of the admissions describes managers rejecting fraud staff’s recommendations to terminate agents. Information did not flow adequately between fraud and anti-money laundering staff, and the company failed to file suspicious activity reports on agents known to be involved in fraud.

Fraud victims sent money through agents the company had been warned about. The complaint history and the termination recommendation explain why an agent’s continued access matters. The payment records show the transfers. The rejected recommendation shows a decision to keep the channel open.

The Management Decision Behind the Blind Spot

A budget decision, a policy exception or a false assurance can explain why the same activity kept passing through the system. Those decisions often appear in records far from the payment itself.

In its guilty plea, Danske Bank admitted misleading U.S. correspondent banks about its Estonian branch’s customers and anti-money laundering controls to preserve dollar access. Its executive board had canceled a centralized technology migration because of its cost. Internal warnings and audits later exposed problems, but the bank continued misrepresenting its controls and customer risk. The assurance given to the correspondent and the information circulating inside the respondent told different stories.

HSBC’s criminal agreed statement of facts shows another management choice. The bank froze staffing to cut costs and improve return on equity, combined compliance jobs and failed to replace departing senior officers. An internal review then found wire monitoring significantly understaffed. Employees reported that requests for additional resources were discouraged and eventually stopped making them.

For an insider, the important connection is between the warning and the response. A reviewer who remembers an unresolved escalation may know why a weakness continued. A systems employee may know which transactions a management decision left outside monitoring. A relationship manager may know what the correspondent was told after those decisions had been made.

What Are the Red Flags for AML Transaction Monitoring?

Red flags for AML transaction monitoring include activity that conflicts with the customer’s stated business, missing party information and transaction categories left outside review. An insider’s evidence becomes more specific when it connects those conditions to the bank’s customer files, model settings, testing and escalation decisions.

Bank of America’s 2026 consent order from the Financial Crimes Enforcement Network supplies a concrete example. The bank admitted deficiencies in due diligence for correspondent accounts held by its own foreign branches and affiliates. Files lacked sufficient information about expected account activity and purpose. Some contained stock-price graphs for the parent company instead.

The agency found that the relevant branches and affiliates held accounts for more than 250 nonbank financial institutions, including money services businesses or their foreign equivalents. Their payments did not fit the bank’s focus on interbank settlements and bulk flows between banks. A review of the parent company’s stock price could not explain whose payments were passing through the account.

The order also describes an outside review finding that some correspondent-monitoring models were too narrow and missed key risks. The customer population, the written account description and the monitoring model belonged in the same review. Each showed something the others missed.

What De-Risking Means for Remittance Access

De-risking means cutting off customers or services rather than managing their associated risks. A 2024 paper, Anti-Money Laundering: Opportunities for Improvement, published by the Wharton Initiative on Financial Policy and Regulation, explains the incentive: institutions may exclude customers when compliance costs exceed the perceived benefit of serving them.

The paper identifies remittances as a particularly clear consequence:

Families sending money home depend on those connections. A bank needs to understand the customers and activity behind those transfers. An insider who can explain the actual use of an account adds something a broad country or customer label leaves out.

The People Who Know Why the Payment Went Through

Payment operations, correspondent relationship management, agent oversight, systems and compliance each see different parts of this story. We work with you to connect what you know about the customer, the transfer and the decision that allowed it to continue. Questions about the confidentiality of suspicious activity reports belong in that conversation with our whistleblower experts.

The Financial Crimes Enforcement Network’s whistleblower program covers Bank Secrecy Act violations and specified sanctions violations. Its award statute provides qualifying whistleblowers collectively 10% to 30% of qualifying collections from covered actions exceeding $1 million. The False Claims Act is a separate route. A whistleblower case under the False Claims Act can pay 15% to 30% of what the government recovers. We assess the route that fits the conduct with you.

When You Know Why the Channel Stayed Open

If you know why a correspondent account or payment agent kept handling transfers after warnings, speak to one of our Whistleblower Experts about the decisions that kept those payments moving. We build your strongest money laundering whistleblower case with you around the customers, the money and the people who controlled access. We bring in money laundering whistleblower lawyers who understand correspondent banking and remittance networks, and stay beside you throughout the case.