A Systematic Review of Anti-Money Laundering and Anti-Bribery Compliance Regimes Across Emerging and Developed Markets

point. The second category is the set of applied conceptual papers drawn from practitioner-oriented outlets, discussed further in the Discussion and Limitations sections below, which were included on the basis of their stated publication year and cited only for the general subject matter their titles indicate. Where a reported penalty figure varied across secondary sources, as occurred for several of the settlements summarized in Table 1, this review adopted the figure most consistently reported across independent accounts and, where sources diverged in a manner suggesting they were measuring different components of a single global resolution, such as separate criminal and civil components of the same overall settlement, this review reports the combined figure and notes the distinction in the surrounding text rather than presenting a single component as if it were the whole. This approach prioritizes consistency and transparency of sourcing over precision to the last reported dollar, an appropriate tradeoff given that this review's purpose is to characterize broad comparative patterns in enforcement activity rather than to serve as an authoritative record of any individual settlement's exact terms. 3. Regulatory and Institutional Architecture 3.1 The Global Anti-Money Laundering Framework The FATF Forty Recommendations constitute the primary international standard against which national AML frameworks are assessed. FATF itself has no direct enforcement power; instead, it relies on a network of FATF-style regional bodies and a mutual evaluation process to assess member compliance, with the results feeding into the FATF's public lists of jurisdictions under increased monitoring, commonly known as the grey list, and jurisdictions subject to a call for action, known as the black list. Placement on either list has historically been disproportionately drawn from emerging and developing economies, reflecting the underlying capacity asymmetries this review examines (FATF, n.d.). , www.iiardpub.org Underpinning these standards is a risk-based approach, formally adopted by the FATF in the 2012 revision of its Recommendations, which requires institutions to calibrate the intensity of customer due diligence to the assessed money laundering and terrorist financing risk of a given relationship, rather than applying uniform controls across all customers and jurisdictions. FATF Recommendation 13 extends this logic specifically to correspondent banking relationships, requiring enhanced due diligence on respondent institutions rather than blanket avoidance of entire regions or customer classes, a distinction that becomes central to the de-risking debate examined later in this review (FATF, n.d.). 3.2 The Evolution of the FATF Recommendations, 1990 to 2012 The FATF's standards did not emerge fully formed; their scope expanded through a series of discrete revisions that map closely onto the growth of AML compliance obligations documented throughout this review. The original 1990 Forty Recommendations were narrowly targeted at drug trafficking proceeds and imposed obligations primarily on banks. A 1996 revision broadened the predicate offense base beyond drug trafficking to other serious crimes and extended customer identification obligations to non-bank financial institutions. Following the September 2001 terrorist attacks in the United States, the FATF issued a parallel set of Special Recommendations on terrorist financing in October 2001, formally merging the AML and counter-terrorist-financing agendas that continue to operate jointly today. The 2003 revision then extended coverage for the first time to designated non-financial businesses and professions, including casinos, real estate agents, dealers in precious metals and stones, and, subject to professional privilege protections, lawyers, notaries, and accountants, reflecting a recognition that financial crime risk was not confined to regulated banking channels. The most consequential revision for the purposes of this review is the 2012 update, which consolidated the AML and counter-terrorist-financing Recommendations into a single set of forty standards and formally introduced the risk-based approach described above. This shift moved the FATF's expectations away from prescriptive, uniform controls and toward a supervisory model in which institutions are expected to identify, assess, and mitigate their own money laundering and terrorist financing risk, calibrating the intensity of due diligence accordingly. The practical effect, documented throughout the literature reviewed in Sections 4 through 6, has been to place a substantially greater analytical and resourcing burden on individual institutions and their supervisors, a burden that developed and emerging market institutions have been differently equipped to absorb. The mutual evaluation process that underpins this entire architecture proceeds on a rolling cycle, under which each member jurisdiction is periodically assessed against the full set of Recommendations by a team of assessors drawn from other member states and the FATF secretariat, producing a detailed mutual evaluation report that scores both technical compliance, meaning whether the jurisdiction's laws and regulations meet the Recommendations on paper, and effectiveness, meaning whether the jurisdiction's AML and counter-terrorist-financing system actually achieves defined outcomes in practice. The introduction of a separate effectiveness assessment, alongside the older technical compliance assessment, is itself a direct product of the shift toward the risk-based approach, since it reflects an acknowledgment that a jurisdiction can score well on technical compliance while still functioning poorly in practice, precisely the pattern this review documents repeatedly across both developed and emerging markets. A sufficiently poor combination of technical compliance and effectiveness scores, left unaddressed, can result in a jurisdiction being placed under increased monitoring, the grey list discussed in Section 3.1, or, in more severe and persistent cases, being made subject to a formal call for action, the black list. , www.iiardpub.org 3.3 The Global Anti-Bribery Framework The anti-bribery architecture is somewhat more fragmented than its AML counterpart. The OECD Anti-Bribery Convention, in force since 1999, obligates its signatories to criminalize the bribery of foreign public officials in international business transactions and is monitored through a multi- phase peer review process conducted by the OECD Working Group on Bribery (OECD, n.d.-a). The United States Foreign Corrupt Practices Act of 1977 predates the Convention and remains the most actively enforced anti-bribery statute globally, combining anti-bribery provisions with accounting and internal control requirements for issuers of US-listed securities. The United Kingdom Bribery Act 2010, by contrast, introduced a broader corporate offense of failing to prevent bribery, shifting the burden onto companies to demonstrate that they had adequate procedures in place, and applies extraterritorially to any organization that carries on business in the United Kingdom regardless of where the underlying conduct occurred (Kroll, 2019). The OECD Working Group on Bribery's peer review process proceeds through successive phases, each examining a different dimension of a signatory's implementation. Phase One reviews whether a signatory's domestic legislation adequately implements the Convention's requirements on paper. Phase Two examines whether that legislation is being applied in practice and whether the signatory's institutions, including law enforcement, judiciary, and private sector, are structurally capable of detecting and prosecuting foreign bribery. Later phases return to examine a signatory's actual enforcement record and its progress on recommendations issued in earlier phases. This phased structure closely parallels the technical compliance and effectiveness distinction the FATF introduced into its own mutual evaluation methodology in 2012, described in Section 3.2, suggesting a broader convergence across the AML and ABC standard-setting architectures toward assessing practical outcomes rather than formal legal adoption alone, even though, as Section 5.1 documents, that convergence in assessment methodology has not by itself produced convergence in actual enforcement outcomes across the Convention's membership. These frameworks overlap but do not align perfectly. Conduct permitted under one regime, such as certain facilitation payments tolerated in limited circumstances under the FCPA, may constitute an offense under the UK Bribery Act, which recognizes no such exception. Multinational organizations operating across both jurisdictions typically adopt the more stringent of the two standards as an internal policy floor (Kroll, 2019). The 2021 OECD Recommendation for Further Combating Bribery of Foreign Public Officials updated this architecture further, introducing new guidance on non-trial resolutions, incentivizing corporate compliance programs, and strengthening whistleblower protection, reflecting a shift toward encouraging voluntary corporate self-policing alongside traditional criminal enforcement (OECD, 2021). 4. Findings: Anti-Money Laundering Compliance across Market Categories 4.1 Developed Markets Developed market jurisdictions, particularly the United States and the United Kingdom, maintain the most extensively resourced AML supervisory regimes in the world, supported by dedicated financial intelligence units, sophisticated transaction monitoring infrastructure, and enforcement agencies with substantial civil and criminal authority. Compliance spending reflects this intensity: industry studies place aggregate US and Canadian financial crime compliance spending at over sixty billion dollars annually, with mid-market banks typically devoting between fifteen and forty million dollars per year to AML functions alone, the majority of which is absorbed by personnel costs (LexisNexis Risk Solutions, 2021). , www.iiardpub.org This resourcing advantage is structural as well as financial. The United States' Financial Crimes Enforcement Network and the United Kingdom's National Crime Agency both operate as centralized financial intelligence units capable of aggregating suspicious activity reports across the entire regulated sector, cross-referencing them against law enforcement databases, and disseminating actionable intelligence back to supervised institutions, a coordination function that depends on sustained government investment in data infrastructure rather than on private compliance spending alone. Developed market prosecutorial agencies similarly benefit from established case law, experienced financial crime units within their justice departments, and, in the United States in particular, a well-developed deferred prosecution and non-prosecution agreement framework that allows authorities to extract structural and financial remedies from institutions without necessarily pursuing the resource-intensive path of a full criminal trial. Emerging market authorities, discussed in Section 4.2, frequently lack a directly comparable combination of centralized intelligence infrastructure and negotiated-resolution tools, a distinction that recurs throughout the comparative findings of this review. A prominent theme within the developed market literature concerns the integration of artificial intelligence and machine learning into transaction monitoring systems. Reviews of this literature find that artificial intelligence adoption in AML is concentrated in jurisdictions with the data infrastructure and regulatory sandboxes to support experimentation, reinforcing the technological advantage already held by developed market institutions (Han et al., 2020). A parallel applied and practitioner-oriented literature has begun to model these dynamics in more granular terms, including predictive analytics approaches to AML detection in commercial banking (Atakpa, 2021), forensic analytics models applied to voice-over-internet-protocol channels for financial fraud detection and regulatory compliance monitoring (Mbonu et al., 2021), and risk-based business intelligence architectures proposed specifically for financial technology platforms (Mbonu et al., 2021a). This cluster of applied work suggests that developed market institutions are extending detection capability beyond conventional transaction monitoring into a wider range of communication and platform-level data sources, a trajectory consistent with the underlying resourcing advantage documented above. Detection capability of this kind has not, in practice, been sufficient to prevent large-scale compliance failure at some of the most heavily resourced institutions in the world, a pattern examined in detail in Section 4.4 below. 4.2 Emerging Markets The emerging market AML literature is shaped less by technological sophistication than by structural and institutional constraints. Conceptual work in this space has proposed data-driven risk evaluation models tailored specifically to emerging market financial institutions (Akomolafe & Agu, 2019b) and reconciliation and financial workflow control frameworks suited to emerging market organizational contexts (Dogbatsey et al., 2019), reflecting a recognition that formally adopted AML controls require complementary internal design work to function effectively in resource-constrained institutional settings. This structural constraint extends beyond individual financial institutions to public financial management more broadly: a systematic review of budget compliance and statutory reporting frameworks across Sub-Saharan Africa documents persistent gaps between formal reporting requirements and their practical implementation, a pattern consistent with the institutional capacity gap identified throughout the emerging market AML literature (Dogbatsey & Ebhojie, 2018). , www.iiardpub.org Related applied literature situates this capacity gap within the broader data governance environment that AML compliance now depends on. Comparative reviews of data protection regulation and secure cloud implementation across jurisdictions (Mbonu et al., 2019) and security audit and enterprise risk assessment frameworks for resilient information systems (Dosunmu & Ogundele, 2019) both point to a common finding: AML controls increasingly rely on data infrastructure and cybersecurity foundations that, in many emerging market institutions, are themselves still maturing. Proposed frameworks for embedding IT risk and ISO compliance controls within supply chain digital transformation programs (Mbonu et al., 2020a) illustrate one applied response to this dependency, extending risk-based principles from the AML function narrowly defined into the broader technology environment that supports it. A further constraint concerns the practical operation of financial intelligence units once a suspicious transaction report has been filed. Where a developed market financial intelligence unit can draw on integrated law enforcement databases and specialized financial crime prosecutors to convert a suspicious activity report into an actionable investigation, emerging market financial intelligence units frequently operate with smaller analytical staffs, more limited access to cross- agency data, and less developed working relationships with the prosecutorial authorities that would ultimately need to act on referred cases. The result, consistent with the broader institutional capacity findings developed further in Section 7.1, is that the formal reporting obligation and the practical capacity to act on the resulting reports can diverge substantially even where an emerging market jurisdiction's legal framework for suspicious transaction reporting is, on its face, closely aligned with FATF standards. A further complication specific to emerging markets is exposure to FATF grey-listing and its downstream financial consequences. An International Monetary Fund working paper estimated that newly grey-listed jurisdictions experience an average reduction in capital inflows equivalent to 7.6 percent of GDP, driven largely by the elevated compliance costs and de-risking behavior that grey-listing triggers among global correspondent banks (International Monetary Fund, 2021). This finding indicates that the practical cost of a deficient AML regime in an emerging market is borne substantially through exclusion from international capital markets rather than through direct enforcement penalties of the kind more commonly observed in developed markets. 4.3 Cross-Cutting Theme: Correspondent Banking De-Risking Perhaps the most consequential cross-cutting theme in the comparative AML literature is the phenomenon of de-risking, whereby global banks terminate or decline correspondent relationships with institutions in higher-risk jurisdictions rather than manage that risk through enhanced due diligence, as the risk-based approach formally envisions. The FATF has explicitly characterized wholesale de-risking as inconsistent with its Recommendations, noting that it can reduce transparency and paradoxically increase money laundering and terrorist financing exposure by pushing financial activity into unregulated informal channels (FATF, n.d.). The consequences fall disproportionately on emerging and developing economies, including reduced remittance corridors to fragile states and slower, more costly trade settlement, effects consistent with the capital flow impact of grey-listing documented by the International Monetary Fund (2021). Remittance corridors are a particularly consequential channel through which de-risking affects emerging market economies, since remittances from diaspora populations working in developed markets represent a substantial share of national income for a number of smaller and lower-income economies. Where correspondent banks decline to service the money transfer operators that handle the bulk of retail remittance volume, the practical effect is either to concentrate remittance flows , www.iiardpub.org through a smaller number of surviving providers, raising transaction costs for the underlying senders and recipients, or to push remittance activity toward informal value transfer systems that operate entirely outside the regulated financial system and are correspondingly invisible to the suspicious transaction reporting regime that AML controls are designed to generate. This dynamic illustrates concretely how a compliance decision made for entirely rational, institution-level reasons within a developed market bank can generate a financial inclusion cost borne almost entirely by households in emerging markets who have no direct relationship with the institution making the decision. 4.4 Landmark Pre-2021 Money Laundering Enforcement Actions The comparative findings above are illustrated concretely by a series of landmark enforcement actions against developed market institutions between 2012 and 2020, each of which shaped subsequent supervisory expectations. In December 2012, HSBC agreed to pay 1.9 billion dollars to US authorities after admitting that inadequate anti-money laundering controls had allowed drug cartel and sanctioned-jurisdiction funds to move through its US operations, a case widely credited with elevating AML compliance from a narrow legal obligation to a board-level risk management priority across the global banking industry. In 2014, BNP Paribas agreed to pay approximately 8.9 billion dollars, then the largest sanctions-related penalty in US history, after US authorities found the bank had deliberately concealed thousands of transactions routed through the United States on behalf of clients in Sudan, Iran, and Cuba between 2002 and 2012, disguising the transactions to evade sanctions screening. Subsequent cases extended this pattern beyond the United States. In February 2009, Swiss bank UBS paid approximately 780 million dollars to US authorities after admitting that it had helped thousands of American clients conceal assets and evade taxes through undisclosed offshore accounts, a case that, while framed primarily around tax evasion rather than money laundering in the narrower sense, established many of the account-concealment typologies that later AML cases would draw upon and contributed directly to the subsequent global push for automatic tax information exchange between jurisdictions. Deutsche Bank was fined approximately 630 million dollars in 2017 by US and UK regulators after more than ten billion dollars in transactions linked to Russian clients moved through the bank's correspondent banking operations via a mirror-trading scheme, and Dutch authorities fined ING approximately 900 million dollars in 2018 after finding serious and sustained shortcomings in the bank's AML controls. Later in 2018, French bank Société Générale agreed to pay approximately 1.4 billion dollars to resolve charges that it had processed transactions on behalf of clients in Cuba, Iran, Sudan, and Libya between 2003 and 2013 in violation of US sanctions, a case decided in parallel with a separate 585 million dollar FCPA settlement connected to bribery in Libya, illustrating how a single institution can face simultaneous AML, sanctions, and ABC exposure arising from related underlying conduct. In 2018, revelations emerged that Danske Bank's Estonian branch had processed approximately 200 billion dollars in payments of largely non-resident origin between 2007 and 2015, a substantial share of which was later assessed as suspicious, triggering investigations by Danish, Estonian, and United States authorities and the resignation of the bank's chief executive; the case is frequently cited in the literature as the largest documented money laundering scandal centered on a European financial institution. Most recently within the review's timeframe, Goldman Sachs agreed in 2020 to pay approximately 2.9 billion dollars across multiple national regulators to resolve charges connected to its role in the 1MDB Malaysian sovereign wealth fund scandal, a matter that combined both bribery of foreign officials and the laundering of , www.iiardpub.org the resulting proceeds within a single enforcement action, illustrating the practical convergence of the AML and ABC agendas that this review treats as a unifying theme. Read together, these cases reinforce the developed market finding introduced in Section 4.1: enforcement scale and penalty severity, however substantial, have not prevented repeated large- scale control failure at some of the most heavily resourced and closely supervised financial institutions in the world, a pattern this review returns to in the Discussion below. 5. Findings: Anti-Bribery Compliance across Market Categories 5.1 Developed Markets: Enforcement Concentration Enforcement of foreign bribery law under the OECD Anti-Bribery Convention has historically been concentrated in a small number of signatory states. Civil society monitoring conducted by Transparency International found that only a small minority of Convention signatories, historically around eleven countries, could be characterized as significant enforcers, while roughly two-thirds of Parties demonstrated limited, little, or no enforcement activity despite formal ratification, meaning that more than half of global export value originated from jurisdictions that in practice failed to punish foreign bribery (Transparency International, 2018). This concentration persisted despite the broadly comparable formal legal commitments undertaken by all signatories, underscoring that treaty ratification alone is a poor predictor of enforcement outcomes. The compliance response to this asymmetry has been shaped substantially by the extraterritorial reach of the FCPA and the UK Bribery Act. Because both statutes can reach conduct with only a limited jurisdictional nexus to the United States or United Kingdom, multinational organizations headquartered elsewhere have faced pressure to adopt anti-corruption compliance systems modeled on these two regimes in order to remain competitive for business with counterparties subject to either one (Kroll, 2019), partially compensating in practice for the comparatively weak enforcement documented elsewhere among OECD Convention signatories. The design of the FCPA itself contributes to the enforcement concentration documented above. The statute combines anti-bribery provisions, which prohibit the corrupt offer or payment of anything of value to a foreign official, with a separate set of accounting provisions that require issuers of US-listed securities to maintain accurate books and records and a system of internal accounting controls sufficient to prevent bribery from being concealed within ordinary financial statements. This dual structure gives US authorities two independent legal bases on which to pursue the same underlying conduct, one criminal and one predominantly civil, and allows the Securities and Exchange Commission to bring accounting-provision cases even where establishing every element of a criminal bribery charge would be more difficult. Few other OECD Convention signatories have replicated this dual anti-bribery and accounting-control structure in their own domestic legislation, which the literature identifies as one structural reason the United States has been able to sustain a substantially higher enforcement caseload than most other signatories over the life of the Convention. 5.2 Emerging Markets: Enforcement Gaps and Demand-Side Corruption The emerging market anti-bribery literature emphasizes a persistent implementation gap between formal criminalization and practical enforcement. Many emerging economies are not Parties to the OECD Convention at all, leaving foreign bribery by their domiciled firms subject only to domestic legislation of varying rigor, or to extraterritorial enforcement by the United States or the United Kingdom where jurisdictional nexus exists. Where emerging markets are the site of bribery rather than the home jurisdiction of the bribe payer, the compliance literature increasingly highlights the , www.iiardpub.org demand side of the transaction, that is, solicitation and acceptance of bribes by public officials, as an under-addressed dimension of the anti-corruption agenda. The 2021 OECD Recommendation explicitly calls on Parties to address demand-side solicitation and to better support companies facing bribe solicitation risk in the jurisdictions where they operate (OECD, 2021), reflecting an