Brolly Academy | AML & Compliance

Anti Money Laundering (AML)

What It Is, KYC, PMLA and Careers (2026)

A plain-English guide to anti money laundering in India: what AML means, how criminals launder money, the PMLA, FIU-IND and RBI KYC rules, the FATF standards, KYC vs AML, red flags, AML software, and how to build a career as an AML analyst.

Anti money laundering explained: how laundering works, AML laws in India (PMLA, FIU-IND, RBI KYC), KYC vs AML, red flags, AML analyst careers and certifications.

PMLA & FIU-IND KYC vs AML AML Analyst Career Updated 21 Oct 2026
Share

By Brolly Academy Team · Brolly Academy · Updated 21 October 2026

Anti money laundering explained: KYC, PMLA, red flags and AML careers in India, Brolly Academy

Quick answer

Anti money laundering (AML) is the set of laws, rules and checks that stop criminals from passing off illegal money as clean money. Banks, NBFCs, payment companies, stockbrokers, insurers and other "reporting entities" must know their customers, watch their transactions, screen names against sanctions lists and report suspicious activity to the government. In India, the main law is the Prevention of Money-laundering Act, 2002 (PMLA). Reports go to the Financial Intelligence Unit – India (FIU-IND), and banks follow the RBI's Know Your Customer (KYC) Directions.

  • Three stages of laundering: placement, layering and integration
  • Core AML processes: KYC and customer due diligence, transaction monitoring, sanctions screening, and reporting (STRs and CTRs)
  • Global standard-setter: the Financial Action Task Force (FATF), which India joined in 2010
  • Careers: KYC analyst, AML analyst, transaction monitoring analyst, investigator and compliance roles in banks, IT services and financial services firms

Key takeaways

  1. AML is a legal duty, not an option. Under the PMLA, reporting entities must verify customers, keep records and report to FIU-IND.
  2. KYC is one part of AML. KYC checks who the customer is; AML also watches what the customer does with the money over time.
  3. Suspicious transaction reports have no minimum amount. FIU-IND says an STR must be filed within seven working days of deciding a transaction is suspicious.
  4. The RBI's KYC rules were consolidated in November 2025. Commercial banks now follow the Reserve Bank of India (Commercial Banks – Know Your Customer) Directions, 2025.
  5. AML is a real entry point for graduates. You do not need a finance degree to start as a KYC or AML analyst, but you must learn the rules, the red flags and how to write a clear case note.

1. What is anti money laundering (AML)?

Short answer: Anti money laundering means all the steps a country and its financial institutions take to detect, prevent and report money laundering. Money laundering is the process of making money from crime look like it came from a legal source.

Think of a person who earns money from drug sales, fraud, bribes, tax evasion or cyber crime. If they deposit huge amounts of cash or buy a flat with it, questions follow. So they try to "wash" the money through bank accounts, shell companies, property or other assets until it looks like normal business income. That washing is money laundering.

AML works in three layers: laws that make laundering a crime (in India, mainly the PMLA), regulators and agencies that write rules, receive reports and investigate (the RBI, SEBI, IRDAI, FIU-IND and the Directorate of Enforcement), and controls inside each business, such as customer checks, monitoring software and a compliance officer.

You will also see AML/CFT. CFT means "countering the financing of terrorism", where even clean money may be used for crime. The same controls catch both, so banks run one combined programme.

Why AML matters: if crime money cannot be used, crime pays less. AML also protects banks from penalties and loss of trust, protects ordinary customers from mule-account and investment frauds, and protects the country's standing with the FATF.

2. How money laundering works: placement, layering and integration

Short answer: Money laundering usually happens in three stages. Placement puts the dirty money into the financial system. Layering moves it around to hide where it came from. Integration brings it back into the economy as money that looks legal.

These stages are a model, not a strict sequence. Criminals may skip or repeat a stage.

Stage What the criminal does Common methods What AML controls look for Placement Gets cash or illegal funds into a bank, wallet or business Many small deposits below reporting limits (structuring or "smurfing"), cash-heavy businesses, buying prepaid cards or gold Cash deposits that do not match the customer's profile, deposits split to avoid limits, new accounts with sudden activity Layering Moves money many times to break the audit trail Transfers across many accounts, shell companies, cross-border wires, trade invoices with false prices, crypto transfers Rapid in-and-out movement, round-tripping, complex structures with no business reason, high-risk jurisdictions Integration Uses the money as if it were legal Buying property, luxury goods or businesses; fake loans or salaries; investments Purchases that do not match known income, unclear source of funds, beneficial owners who stay hidden

A simple example

Suppose a fraud gang collects money from victims of a fake investment app.

  1. Placement: Victims are told to transfer money to dozens of savings accounts. Many of these are "mule" accounts opened by students or daily-wage workers who were paid a small fee to hand over their account details.
  2. Layering: Within minutes, the money is moved from the mule accounts to other accounts, then to payment wallets, then split into crypto purchases or cross-border transfers.
  3. Integration: The final money lands in a company that shows it as "consulting income", or is used to buy property in a relative's name.

A good AML programme can stop this at account opening (KYC), when unusual credits arrive (monitoring) or when staff report it (STR). That is why the RBI's 2025 KYC Directions for commercial banks require banks to monitor for money mule accounts.

3. AML in India: PMLA, FIU-IND and RBI KYC Directions

Short answer: India's AML system rests on three pillars: the Prevention of Money-laundering Act, 2002 (the law), FIU-IND (the agency that receives and analyses reports) and the sector regulators such as the RBI, whose KYC Directions tell banks exactly how to check customers.

The Prevention of Money-laundering Act, 2002 (PMLA)

The PMLA is the main AML law in India. According to the text published on the FIU-IND website, it came into force on 1 July 2005.

Key points you should know:

  • Section 3 defines the offence. A person commits money laundering if they directly or indirectly try to, knowingly help, or are actually involved in any process or activity connected with the proceeds of crime. This includes hiding, possessing, acquiring or using it, and projecting or claiming it as clean property.
  • Section 4 sets the punishment. Rigorous imprisonment of at least 3 years, which can extend to 7 years, plus a fine. Where the proceeds relate to certain drug offences listed in the Schedule, the maximum goes up to 10 years (PMLA text on FIU-IND, checked October 2026).
  • Chapter IV sets duties for reporting entities. Banks, financial institutions, intermediaries and certain designated businesses and professions must verify clients, maintain records and furnish information to FIU-IND.
  • The PML (Maintenance of Records) Rules, 2005 give the detailed reporting and record-keeping rules.

The Directorate of Enforcement investigates and prosecutes money laundering offences under the PMLA.

FIU-IND: India's financial intelligence unit

FIU-IND was set up by the Government of India through an Office Memorandum dated 18 November 2004 (FIU-IND website, October 2026). It is the central national agency that receives, analyses and shares information about suspicious financial transactions with enforcement agencies, regulators and foreign FIUs. It reports directly to the Economic Intelligence Council, which is headed by the Finance Minister. Reporting entities file reports online through FIU-IND's FINGate 2.0 portal.

Reports reporting entities file with FIU-IND

This table summarises the main reports as listed in FIU-IND's FAQs (checked October 2026). Read the official FAQs for full conditions before you rely on them at work.

Report What triggers it When it is due Cash Transaction Report (CTR) Cash transactions above ₹10 lakh, or a series of integrally connected cash transactions within a month that add up to more than ₹10 lakh By the 15th of the following month Suspicious Transaction Report (STR) Any transaction, cash or not, including attempted ones, that gives reason to suspect proceeds of crime or terror financing. There is no minimum amount Promptly, and not later than 7 working days after being satisfied it is suspicious Counterfeit Currency Report (CCR) Cash transactions where forged or counterfeit notes were used, or forged securities or documents were involved By the 15th of the following month Cross-Border Wire Transfer Report (CBWTR) Cross-border wire transfers above ₹5 lakh where the origin or destination is in India By the 15th of the following month Non-Profit Organisation Transaction Report (NTR) Receipts by non-profit organisations above ₹10 lakh By the 15th of the following month

FIU-IND also lists reports on the purchase or sale of immovable property valued at ₹50 lakh or more by reporting entities that register such property.

Record keeping: Transaction records must be kept for five years from the date of the transaction. Client identity and account records must be kept for five years after the business relationship ends or the account is closed, whichever is later (FIU-IND FAQs, October 2026).

RBI KYC Directions

The RBI turns the PMLA duties into detailed rules for banks and other regulated entities. On 28 November 2025, the RBI issued a set of consolidated KYC Directions, one for each type of regulated entity. For commercial banks, the current text is the Reserve Bank of India (Commercial Banks – Know Your Customer) Directions, 2025, updated as on 1 October 2026 (RBI Master Directions page, checked October 2026). Separate KYC Directions exist for small finance banks, payments banks, regional rural banks, co-operative banks, all-India financial institutions and other entity types.

Before this, the main rulebook was the Master Direction – Know Your Customer (KYC) Direction, 2016, first issued on 25 February 2016. Many job descriptions still mention it, so know both names.

Key rules every AML or KYC analyst should know:

  • Customer due diligence (CDD) means identifying and verifying the customer and the beneficial owner using reliable, independent sources. It is required when opening an account, for occasional transactions of ₹50,000 or more, and for international money transfers.
  • Beneficial owner: for a company, any natural person holding more than 10% of shares, capital or profits, or who controls it. For a partnership firm, more than 10% of capital or profits. For an unincorporated association or body of individuals, more than 15%.
  • Risk categorisation: banks must classify customers as low, medium or high risk, based on identity, status, business, geography, products and channels. The risk category must stay confidential.
  • Periodic KYC updation: at least once every 2 years for high-risk customers, every 8 years for medium-risk and every 10 years for low-risk customers.
  • Politically exposed persons (PEPs): accounts are allowed only with systems to identify PEPs, steps to establish source of funds or wealth, senior management approval and enhanced ongoing monitoring.
  • Video-based Customer Identification Process (V-CIP): a live, consent-based audio-visual process with liveness checks, which can replace face-to-face verification.
  • Central KYC Records Registry (CKYCR): stores KYC records centrally, and each customer gets a KYC Identifier.
  • Principal Officer and Designated Director: every bank must name a Principal Officer (who reports to FIU-IND) and a Designated Director (responsible for overall PMLA compliance). One person cannot hold both roles.

SEBI and IRDAI issue similar AML rules for securities intermediaries and insurers.

4. FATF and the global AML framework

Short answer: The Financial Action Task Force (FATF) is the global money laundering and terrorist financing watchdog. It sets the 40 Recommendations that countries such as India build their AML laws on, and it checks how well each country applies them.

According to the FATF website (October 2026):

  • The FATF was established in 1989 and is based in Paris.
  • It is a 40-member body, and more than 200 countries and jurisdictions have committed to implementing its standards.
  • India has been a member since 2010.

The 40 FATF Recommendations

The FATF Recommendations are often called the FATF Standards. The FATF groups the 40 Recommendations into seven areas:

  1. AML/CFT policies and coordination
  2. Money laundering and confiscation
  3. Terrorist financing and financing of proliferation
  4. Preventive measures (this is where customer due diligence, record keeping and suspicious transaction reporting sit)
  5. Transparency and beneficial ownership of legal persons and arrangements
  6. Powers and responsibilities of competent authorities
  7. International cooperation

The cornerstone is the risk-based approach: put more effort where the risk is highest. That is why Indian banks rate customers as low, medium or high risk.

Mutual evaluations and the "grey list"

The FATF and its regional bodies, such as the Asia/Pacific Group on Money Laundering (APG), run mutual evaluations: in-depth reviews of each country's AML/CFT system. The FATF also publishes "high-risk jurisdictions subject to a call for action" (the black list) and "jurisdictions under increased monitoring" (the grey list). Banks use these lists to rate country risk.

India's latest FATF assessment was published in September 2024. The FATF summary says India's AML/CFT framework is "achieving good results" (FATF India page, October 2026).

5. Key AML processes: KYC, CDD, EDD, monitoring, screening and reporting

Short answer: An AML programme runs on five core processes: know your customer (KYC), customer due diligence (CDD) with enhanced due diligence (EDD) for high-risk customers, transaction monitoring, sanctions and PEP screening, and reporting to FIU-IND. Most AML jobs sit inside one of these processes.

Process What happens Who does it KYC Collect and verify identity and address with officially valid documents (passport, driving licence, proof of possession of Aadhaar, Voter ID), PAN and CKYCR records; for companies, identify the people who own and control them Onboarding and KYC analysts CDD and EDD Understand the customer's business, source of funds and expected activity. Apply EDD to high-risk customers such as PEPs, complex ownership structures and cash-heavy businesses: more documents, source-of-funds checks, senior approval and closer monitoring KYC and CDD analysts Transaction monitoring Software scans transactions against rules and models and raises alerts; an analyst reviews each alert and closes it as a false positive or escalates it AML and transaction monitoring analysts Sanctions and PEP screening Names and payments are checked against sanctions, PEP and adverse media lists Screening analysts Reporting Suspicious cases go to the Principal Officer, who files an STR; systems generate monthly CTRs and CBWTRs Investigators and the Principal Officer's team

Three rules from the RBI's Commercial Banks KYC Directions are worth remembering:

  • Daily sanctions checks. Banks must check the UN Security Council sanctions lists daily under section 51A of the Unlawful Activities (Prevention) Act, 1967, and follow section 12A of the Weapons of Mass Destruction Act, 2005.
  • No tipping off. The customer's risk category and any STR must stay confidential.
  • An STR alone is not a reason to freeze an account. Banks should not restrict account operations only because an STR was filed.

AML does not end at onboarding. Profiles must be refreshed (re-KYC) on the schedule set by the risk category, and ratings reviewed when behaviour changes.

6. KYC vs AML: what is the difference?

Short answer: KYC is the process of verifying who a customer is and understanding their risk. AML is the wider framework that includes KYC plus monitoring, screening, investigation and reporting to stop money laundering. Every KYC check is part of AML, but AML is much more than KYC.

Point KYC AML Meaning Know Your Customer: identifying and verifying the customer and beneficial owner Anti Money Laundering: the full set of laws, controls and processes to stop money laundering Scope Mainly onboarding and periodic updates Onboarding, ongoing monitoring, screening, investigations and reporting Key question Who is this customer, and what risk do they carry? Is this customer's money or activity linked to crime? Typical tasks Document checks, CKYCR, V-CIP, beneficial ownership, risk rating, re-KYC Alert review, investigations, sanctions hits, STR drafting, CTR and CBWTR reporting Typical job titles KYC analyst, CDD analyst, client onboarding analyst AML analyst, transaction monitoring analyst, AML investigator, compliance officer Main Indian source RBI KYC Directions (and SEBI, IRDAI rules for their sectors) PMLA 2002, PML Rules 2005, FIU-IND guidelines, plus RBI KYC Directions

Many freshers start in a KYC role and later move into transaction monitoring or investigations. The skills overlap, so learning "KYC and AML" together is the practical route.

7. Components of an AML compliance programme

Short answer: A strong AML compliance programme has a clear policy approved by the board, a named Principal Officer and Designated Director, a risk assessment, KYC and CDD procedures, monitoring and screening systems, reporting processes, staff training, record keeping and independent audit.

Component What it means in practice Board-approved policy A written KYC/AML policy that sets the rules, roles and risk appetite Governance A Designated Director for overall compliance and a Principal Officer for reporting to FIU-IND Risk assessment A regular study of the money laundering risks from customers, products, channels and geographies Customer acceptance and CDD Rules on whom to accept, what documents to collect and when to apply EDD Monitoring and screening Transaction monitoring software, sanctions and PEP screening, and alert handling procedures Reporting Processes and timelines for STRs, CTRs, CCRs, CBWTRs and other reports Record keeping Keeping transaction and identity records for the required period Training Regular AML training for front-line staff, operations and management Independent testing Internal audit and concurrent audit to check that controls work

A simple way to remember this is: policy, people, process, technology and testing.

Start your AML and KYC career with Brolly Academy

Learn money laundering typologies, KYC, CDD and EDD, transaction monitoring, sanctions screening and STR writing in our 45-day AML course, with case studies and mock interviews. Join a free demo class online or at our Hyderabad centre to see the syllabus and batch timings.

8. Money laundering red flags

Short answer: Red flags are signs that a customer or transaction may be linked to money laundering. One red flag does not prove a crime, but it means the analyst must look closer, ask for more information or escalate the case.

Customer red flags

  • The customer is reluctant to give KYC documents or gives documents that do not match
  • The ownership structure is complex for no clear business reason, or the real owner is hidden
  • The customer is a PEP, or closely linked to one, and the source of wealth is unclear
  • A student, homemaker or low-income customer suddenly receives large or frequent credits

Transaction red flags

  • Many cash deposits just below ₹10 lakh, the CTR threshold (structuring)
  • Money comes in and goes out quickly, leaving a near-zero balance (pass-through or mule behaviour)
  • Sudden activity in a dormant account
  • Frequent transfers to or from high-risk jurisdictions
  • Many small credits from unrelated people followed by one large debit, a common pattern in online fraud

Trade and digital red flags

  • Invoices with prices far above or below market value (trade-based money laundering)
  • A business whose turnover does not match its size, staff or location
  • Accounts opened in bulk from the same device or IP address
  • Rapid movement between bank accounts, payment wallets and crypto exchanges

When you find red flags, write a case narrative: who the customer is, what happened, why it is unusual, what you checked and what you recommend.

9. AML software and technology

Short answer: AML software automates the heavy work: verifying identity, screening names, monitoring millions of transactions, managing alerts and cases, and filing reports. Banks use a mix of tools, and AI and machine learning are now used to reduce false positives and find hidden networks.

The main categories of AML software:

Category What it does Who uses it Digital KYC and identity verification Captures and checks ID documents, runs liveness checks, supports V-CIP and CKYCR lookups Onboarding and KYC teams Name screening Matches customers and payments against sanctions, PEP and adverse media lists Screening analysts, payments teams Transaction monitoring Runs rules and models on transactions and raises alerts AML and transaction monitoring analysts Case management Stores alerts, evidence, notes and decisions in one audit trail Analysts, investigators, quality assurance Regulatory reporting Prepares CTR, STR and other reports in FIU-IND formats Principal Officer's team Customer risk scoring Calculates a risk rating from customer, product and geography data KYC and compliance teams Analytics and AI Network analysis, anomaly detection, machine learning to prioritise alerts Data and financial crime analytics teams

How AI is changing AML

Rule-based monitoring creates many false positive alerts. Banks are adding machine learning to score alerts, link related accounts into networks and spot patterns such as mule rings. For you, the basics (rules, red flags and judgement) still matter because a human signs off, and analysts who also know Excel and SQL have an edge. Our post on the application of AI in banking explains how banks use AI for fraud detection and identity checks.

10. AML analyst: role, skills and career path

Short answer: An AML analyst reviews alerts and customer activity to decide whether money laundering may be happening, documents the findings and escalates suspicious cases. It is an entry-level to mid-level role in banks, financial services firms, and the IT services and consulting companies that run AML operations for global banks.

What does an AML analyst do?

A typical day includes:

  • Reviewing alerts in the case management system
  • Checking the customer's KYC profile, past transactions and linked accounts
  • Searching adverse media and checking sanctions and PEP hits
  • Writing a clear case narrative and closing or escalating the alert for an STR (called a SAR in the US and UK)

Skills you need

Skill area What to learn AML knowledge Three stages of laundering, typologies, red flags, PMLA, FIU-IND reports, RBI KYC rules, FATF basics KYC and CDD Document checks, beneficial ownership, risk rating, EDD, PEPs Investigation Reading bank statements, following the money, linking accounts, adverse media search Writing Short, factual case narratives that another person can follow Tools Excel (filters, pivot tables, lookups), basic SQL, and familiarity with case management and screening tools Soft skills Attention to detail, scepticism, ethics, time management and clear communication

AML career path

A common path:

  1. KYC analyst or client onboarding analyst (entry level)
  2. AML analyst or transaction monitoring analyst
  3. Senior analyst or quality assurance analyst
  4. AML investigator or financial crime investigator (complex cases, STR decisions)
  5. Team lead or AML compliance manager
  6. Principal Officer, MLRO or head of financial crime compliance (senior level)

You can also move sideways into fraud risk, sanctions, regulatory reporting or financial crime analytics.

Is AML a good career? AML work is steady because the law requires it at every bank, NBFC, payment company, broker and insurer. Early roles can be target-driven and repetitive, so grow your investigation, writing and data skills and add a recognised certification.

11. AML certifications: CAMS, IIBF and more

Short answer: CAMS from ACAMS is the best-known global AML certification. In India, the IIBF Certificate Examination in AML/KYC is a low-cost, widely recognised option for banking staff and freshers. A practical course plus one certification is a good combination for your resume.

CAMS (Certified Anti-Money Laundering Specialist)

CAMS is awarded by the Association of Certified Anti-Money Laundering Specialists (ACAMS) and is often asked for in job descriptions at global banks and consulting firms. Eligibility is credit-based: you need an active ACAMS membership and enough credits from education, work experience and AML training. Holders must recertify on a fixed cycle. The price depends on the package and membership, so check the official ACAMS CAMS page before you budget. CAMS is most useful once you have some AML experience.

IIBF Certificate Examination in AML/KYC

The Indian Institute of Banking & Finance (IIBF) runs a Certificate Examination in Anti-Money Laundering & Know Your Customer. The fee listed on the IIBF website is ₹1,100 for IIBF members and ₹1,600 for non-members for each attempt, plus GST (IIBF website, October 2026). It is popular with bank employees and graduates who want to show basic AML/KYC knowledge.

Certification Best for Level IIBF AML/KYC Certificate Freshers, bank staff and career switchers in India Foundation CAMS (ACAMS) Analysts and investigators aiming for global banks and senior roles Professional Advanced and specialist ACAMS certifications Experienced professionals moving into leadership or a specialist area Advanced

12. AML jobs and salary in India

Short answer: AML jobs in India are concentrated in banks, global banks' captive centres, IT services and consulting firms, BPOs and fintech companies, mainly in Bengaluru, Hyderabad, Chennai, Mumbai, Pune and Gurugram. According to AmbitionBox (October 2026), the typical AML analyst salary range is ₹5.8–6.4 lakh a year for people with 1–7 years of experience.

Employers include Indian and foreign banks, global banks' captive centres, IT services and consulting firms that run AML operations for overseas banks, BPO firms, fintech and payment companies, NBFCs, insurers and stockbrokers. Common job titles include KYC analyst, CDD analyst, AML analyst, transaction monitoring analyst, sanctions screening analyst, AML investigator, quality analyst and compliance officer.

AML and KYC salaries (AmbitionBox, October 2026)

Role Typical salary range Basis AML Analyst ₹5.8–6.4 lakh a year 1–7 years' experience, based on 3.3k salaries, updated 21 October 2026 Transaction Monitoring Analyst ₹5.4–6.0 lakh a year 1–6 years' experience, based on 821 salaries, updated 19 October 2026 KYC Analyst ₹4.5–5.0 lakh a year 1–6 years' experience, based on 8.8k salaries, updated 21 October 2026

KYC analyst pay rises with experience: about ₹3.8–4.2 lakh a year at 1–3 years, ₹4.8–5.3 lakh at 3–6 years and ₹6.3–7.0 lakh at 6–9 years (AmbitionBox, October 2026). Industry matters too: AML analysts earn ₹7.1–7.8 lakh a year in banking and ₹7.2–7.9 lakh in financial services, against ₹4.1–4.5 lakh in IT services and ₹4.5–4.9 lakh in BPO (AmbitionBox, October 2026).

City AML Analyst salary range (AmbitionBox, October 2026) Bengaluru ₹5.4–6.0 lakh a year Mumbai ₹5.5–6.1 lakh a year Chennai ₹4.9–5.5 lakh a year Hyderabad ₹4.7–5.2 lakh a year

AmbitionBox data is self-reported, so treat it as a guide.

How to get your first AML job

  1. Learn the basics: the three stages, PMLA, FIU-IND reports, KYC rules and red flags.
  2. Practise case work: spot red flags in sample bank statements and write short case narratives.
  3. Build Excel skills and add a certificate such as IIBF AML/KYC; plan CAMS later.
  4. Tailor your resume and prepare for interviews: use job-description words (KYC, CDD, EDD, transaction monitoring, STR) and expect a short case scenario.

13. How Brolly Academy helps

  • Our AML Course in India is a 45-day programme with 7 modules: understanding money laundering, AML risks and typologies, AML in specific sectors, the regulatory framework (FATF, Basel Committee, RBI, SEBI and reporting), CDD, KYC and EDD, AML compliance programmes, and AML and technology.
  • You work on capstone projects such as a KYC verification case study, transaction monitoring, a fraud detection simulation, compliance reporting, customer risk assessment and an end-to-end AML case.
  • The course introduces AML tools named on the course page, including NICE Actimize, SAS AML, Oracle Financial Services (OFSAA), FICO TONBELLER, NetReveal, ComplyAdvantage and World-Check, along with Excel and SQL.
  • It is taught by Ravi Rama Chandran, an AML and compliance trainer with 8+ years of experience in AML, KYC and compliance.
  • Choose from recorded video (₹6,999), live online classes (₹14,999) or classroom training in Hyderabad (₹19,999), as listed on the course page in October 2026. No finance or IT background is needed.
  • You get 100% placement assistance, resume building and mock interviews, with access to our network of 75+ hiring partners. Book a free demo class online or at our Hyderabad centre, or explore all courses at Brolly Academy. For more preparation material, see our interview questions section.

Frequently asked questions

What is anti money laundering in simple words?

Anti money laundering (AML) means the laws, rules and checks that stop criminals from making illegal money look legal. Banks and other financial firms verify customers, watch transactions, screen names against sanctions lists and report suspicious activity to the government. In India, reports go to FIU-IND under the PMLA, 2002.

What are the three stages of money laundering?

Placement, layering and integration. Placement puts illegal money into the financial system, layering moves it through many transactions to hide its source, and integration brings it back as money that looks legitimate, such as property or business income.

What is the difference between KYC and AML?

KYC (Know Your Customer) is the process of identifying and verifying a customer and understanding their risk. AML is the wider framework that includes KYC plus transaction monitoring, sanctions screening, investigations and reporting. KYC is one part of AML.

Which law governs anti money laundering in India?

The Prevention of Money-laundering Act, 2002 (PMLA), which came into force on 1 July 2005, along with the PML (Maintenance of Records) Rules, 2005. Regulators such as the RBI, SEBI and IRDAI issue detailed rules for their sectors, and FIU-IND receives the reports.

What is the CTR limit in India?

Reporting entities must report cash transactions above ₹10 lakh, and integrally connected cash transactions within a month that together exceed ₹10 lakh, to FIU-IND by the 15th of the following month. Suspicious transaction reports have no minimum amount.

What does an AML analyst do?

An AML analyst reviews transaction monitoring alerts, checks the customer's KYC profile and history, looks for red flags and adverse media, writes a case narrative and escalates suspicious cases for a suspicious transaction report. Most roles are in banks, financial services firms, IT services and BPO companies.

What is the CAMS certification?

CAMS (Certified Anti-Money Laundering Specialist) is a global AML certification from ACAMS. Eligibility is based on credits from education, work experience and training, and holders must recertify on a fixed cycle. Check the official ACAMS page for the current price.

Is AML a good career for freshers in India?

Yes, for many graduates. KYC and AML analyst roles are open to freshers from commerce, arts, science and engineering backgrounds, and AML work is required by law. AmbitionBox shows a typical KYC analyst range of ₹3.8–4.2 lakh a year at 1–3 years' experience (October 2026), with growth into investigation, quality and compliance roles.

Why is anti money laundering important?

Anti money laundering is important because crime pays less when criminals cannot use their illegal money. AML controls also protect banks from penalties and loss of trust. They protect ordinary customers from mule-account and investment frauds. At the country level, a strong AML system protects India's standing with the FATF, the global body that sets AML standards and reviews how well each country applies them.

What is anti money laundering in banking?

In banking, anti money laundering means the checks a bank runs to stop its accounts from being used to move crime money. The bank verifies customers through KYC, rates them as low, medium or high risk, monitors transactions with software, screens names against sanctions and PEP lists, and reports suspicious cases to FIU-IND. In India, commercial banks follow the RBI's KYC Directions along with the PMLA.

What is the punishment for money laundering in India?

Under Section 4 of the PMLA, money laundering is punished with rigorous imprisonment of at least 3 years, which can extend to 7 years, plus a fine. Where the proceeds relate to certain drug offences listed in the Schedule, the maximum goes up to 10 years. The Directorate of Enforcement investigates and prosecutes money laundering offences under the PMLA.

What is FIU-IND and what does it do?

FIU-IND is India's central agency that receives, analyses and shares information about suspicious financial transactions. It was set up by the Government of India in November 2004 and reports to the Economic Intelligence Council, which is headed by the Finance Minister. Banks and other reporting entities file reports such as STRs and CTRs with FIU-IND online through its FINGate 2.0 portal.

When must a suspicious transaction report be filed?

A suspicious transaction report (STR) must be filed promptly, and not later than 7 working days after the reporting entity is satisfied that a transaction is suspicious. There is no minimum amount, and attempted transactions also count. In a bank, suspicious cases go to the Principal Officer, who files the STR with FIU-IND. The customer must not be told about the STR.

How long should AML records be kept in India?

Transaction records must be kept for five years from the date of the transaction. Client identity and account records must be kept for five years after the business relationship ends or the account is closed, whichever is later (FIU-IND FAQs, October 2026). The detailed record-keeping rules are in the PML (Maintenance of Records) Rules, 2005.

How often is KYC updated for bank customers?

Under the RBI's KYC rules, banks must update KYC at least once every 2 years for high-risk customers, every 8 years for medium-risk customers and every 10 years for low-risk customers. This periodic re-KYC is an important link between KYC and AML, because customer profiles must stay current for monitoring to work. Banks should also review a customer's risk rating when their behaviour changes.

What is the FATF and is India a member?

The Financial Action Task Force (FATF) is the global money laundering and terrorist financing watchdog. It was established in 1989, is based in Paris and sets the 40 Recommendations that countries build their AML laws on. India has been a member since 2010. India's latest FATF assessment was published in September 2024, and the FATF summary says India's framework is achieving good results.

What are common red flags in anti money laundering?

Common red flags include many cash deposits just below the ₹10 lakh CTR threshold, money that comes in and goes out quickly, sudden activity in a dormant account and frequent transfers to high-risk jurisdictions. Customer red flags include reluctance to give KYC documents, hidden owners and large credits to a student or low-income customer. One red flag does not prove a crime, but the analyst must look closer.

What is AML software and how does it work?

AML software automates the heavy work in an AML programme. It verifies identity, screens names against sanctions and PEP lists, runs rules and models on transactions, raises alerts, stores cases in one audit trail and prepares reports in FIU-IND formats. Banks are now adding machine learning to score alerts and find mule rings, but a human analyst still reviews the alert and signs off.

Which AML tools should a beginner learn?

Start with Excel, including filters, pivot tables and lookups, and basic SQL, because analysts use them to review transactions. Then get familiar with case management and screening tools. AML tools named on the Brolly Academy course page include NICE Actimize, SAS AML, Oracle Financial Services (OFSAA), FICO TONBELLER, NetReveal, ComplyAdvantage and World-Check. Employers still care most about your judgement on red flags.

What is the salary of an AML analyst in India?

According to AmbitionBox (October 2026), the typical AML analyst salary in India is ₹5.8–6.4 lakh a year for people with 1–7 years of experience. Pay is higher in banking (₹7.1–7.8 lakh) and financial services (₹7.2–7.9 lakh) than in IT services (₹4.1–4.5 lakh) and BPO (₹4.5–4.9 lakh). AmbitionBox data is self-reported, so treat it as a guide.

Where are AML jobs in India?

AML jobs in India are mainly in Bengaluru, Hyderabad, Chennai, Mumbai, Pune and Gurugram. Employers include Indian and foreign banks, global banks' captive centres, IT services and consulting firms that run AML operations for overseas banks, BPO firms, fintech and payment companies, NBFCs, insurers and stockbrokers. Common titles are KYC analyst, AML analyst, transaction monitoring analyst, sanctions screening analyst and AML investigator.

What is the AML analyst salary in Hyderabad?

AmbitionBox shows a typical AML analyst salary range of ₹4.7–5.2 lakh a year in Hyderabad (October 2026). This is a little lower than Bengaluru at ₹5.4–6.0 lakh and Mumbai at ₹5.5–6.1 lakh. Hyderabad is still one of the main cities for AML jobs in India, with many employers hiring KYC and AML analysts.

Can I become an AML analyst without a finance degree?

Yes. You do not need a finance degree to start as a KYC or AML analyst, and graduates from commerce, arts, science and engineering can enter these roles. Learn the three stages of laundering, the PMLA, FIU-IND reports, KYC rules and red flags. Practise writing short case narratives, build Excel skills and add a certificate such as IIBF AML/KYC. Many people start in KYC and then move into monitoring.

Should freshers take CAMS or the IIBF AML/KYC exam first?

Most freshers should start with the IIBF Certificate Examination in AML/KYC and plan CAMS later. The IIBF fee is ₹1,100 for members and ₹1,600 for non-members for each attempt, plus GST (IIBF website, October 2026). CAMS certification needs an active ACAMS membership and enough credits from education, work experience and training, so it is most useful once you have some AML experience.

How long does it take to learn AML?

You can learn the basics of AML in a few weeks of focused study, covering the three stages, the PMLA, FIU-IND reports, KYC rules and red flags. Brolly Academy's AML course, for example, is a 45-day programme with 7 modules, case studies and capstone projects. Deeper skill in investigations and case writing grows on the job, which is how an AML career moves from analyst to investigator.

Learn with Brolly Academy

Review the syllabus, practical projects and batch timings, and book a free demo before you enrol.

Continue Your Learning

AML Course in India

KYC, CDD, transaction monitoring, sanctions screening and AML compliance with case studies.

View Course