Brolly Academy | AML

AML Software

What AML Software Does, Top Tools by Function and What Analysts Should Learn (2026)

A plain-English guide to AML software in 2026: what it does at each step from onboarding to FIU-IND reporting, the main tools grouped by function, the names you will see in Indian job descriptions, how AI fits in, how banks choose a system, and the Excel and SQL skills that matter more for your first AML job than any single product.

AML software explained: what it does, top tools such as NICE Actimize, SAS AML, Oracle and World-Check grouped by function, AI in AML and what to learn.

5 Functions Top Tools Excel and SQL Updated 24 Oct 2026
Share

By Brolly Academy Team · Brolly Academy · Updated 24 October 2026

AML Software 2026 guide by Brolly Academy

Quick answer

AML software is the set of systems a bank or other regulated firm uses to know its customers, screen them against sanctions and risk lists, monitor their transactions for suspicious patterns, investigate the alerts in a case file and report to the regulator. In India, that final report goes to FIU-IND, the Financial Intelligence Unit under the Ministry of Finance. No single tool does everything well, so most banks run a stack: one tool for onboarding and KYC, one for screening, one for transaction monitoring and a case manager that ties them together. Well-known names include NICE Actimize, SAS Anti-Money Laundering, Oracle Financial Crime and Compliance Management, LSEG World-Check and LexisNexis Bridger Insight XG.

  • KYC and onboarding tools: collect and verify customer details and risk-rate the customer
  • Screening tools: check names against sanctions, PEP and adverse-media lists
  • Transaction monitoring tools: run rules and models over transactions and raise alerts
  • Case management tools: hold the alert, evidence, notes and decision in one place
  • Regulatory reporting tools: prepare STRs, CTRs and other reports for FIU-IND

Key takeaways

  1. AML software does five jobs: KYC and onboarding, screening, transaction monitoring, case management and regulatory reporting.
  2. The software raises alerts; a trained analyst still decides whether an alert is suspicious, and the bank's Principal Officer decides whether to file an STR.
  3. Indian job descriptions read in October 2026 named Actimize, Fircosoft, Mantas, World-Check, NetReveal and Oracle FCCM, but almost all listed them as context, not as an entry requirement.
  4. AI in AML mostly means risk scoring, linking related customers into networks and cutting false positives. It helps analysts; it does not replace the need to explain each decision.
  5. For a fresher, Excel, basic SQL and clear case writing are more useful than chasing a licence for any one product.

1. AML software at a glance

Short answer: AML software covers five functions, each with its own type of tool, and the output of one function feeds the next.

Here is the whole picture in one table. The example tools are named from each vendor's own product page as read in October 2026. Many vendors cover more than one function, so treat the last column as examples, not a strict category.

Function What it does Example tools KYC and onboarding Collects identity data, verifies documents, finds beneficial owners, risk-rates the customer Fenergo, Oracle FCCM (KYC), Quantexa (KYC) Screening Matches names against sanctions, PEP and adverse-media lists at onboarding and over time LSEG World-Check, LexisNexis Bridger Insight XG, Dow Jones Risk & Compliance, ComplyAdvantage, Napier AI Transaction monitoring Runs rules and models over transactions and raises alerts on unusual activity NICE Actimize, SAS Anti-Money Laundering, Oracle FCCM, Napier AI, ComplyAdvantage Case management Stores each alert with evidence, notes, decisions and an audit trail Hummingbird, case modules inside the large suites Regulatory reporting Prepares STRs, CTRs and other reports in the format the regulator needs Hummingbird (automated SAR/STR/CTR filing), reporting modules inside suites

Read this table as a flow from top to bottom. A customer is onboarded, screened, then monitored for as long as the account is open. Every alert goes into a case. Some cases end in a report to FIU-IND. The rest of this guide walks through each step.

2. What is AML software, and why do Indian banks need it?

Short answer: AML software automates the checks that Indian law and RBI rules require on every customer and transaction, because the volume is far too large for people to check by hand.

AML stands for anti-money laundering. It means the laws, controls and teams that stop criminals from making dirty money look clean. If you want the full basics first, including the three stages of laundering and the main Indian laws, read our pillar guide on anti-money laundering. Here we focus only on the software.

A few terms you will meet in this guide:

  • KYC (Know Your Customer): identifying and verifying who your customer is.
  • CDD (Customer Due Diligence): RBI defines it as identifying and verifying the customer and the beneficial owner using reliable and independent sources.
  • EDD (Enhanced Due Diligence): extra checks for higher-risk customers, such as PEPs.
  • PEP (Politically Exposed Person): someone entrusted with a prominent public function, such as a senior politician or senior government official, plus their family and close associates.
  • Sanctions: legal restrictions that bar dealing with listed people, groups or countries.
  • Alert: a flag the software raises when something matches a rule or a list.
  • False positive: an alert that turns out to be harmless after review.
  • STR (Suspicious Transaction Report): the report a bank files with FIU-IND when it suspects a transaction involves crime proceeds or terrorist financing.
  • CTR (Cash Transaction Report): a monthly report of large cash transactions.
  • L1, L2, L3: the levels of review. L1 analysts clear or escalate alerts, L2 analysts investigate escalated cases, and L3 or senior staff make the final call on complex cases.

The rules that drive the software

Indian rules create a long list of checks, and each one maps to a software function:

  • CDD at onboarding and above a threshold. Under the Reserve Bank of India (Commercial Banks – Know Your Customer) Directions, 2025, banks must do CDD at account opening and for occasional transactions of ₹50,000 or more, single or connected (RBI, page updated 1 October 2026). These Directions replaced the 2016 KYC Master Direction for commercial banks. Onboarding software enforces this.
  • Risk categories and periodic updation. The same RBI Directions require customers to be rated low, medium or high risk, and KYC to be updated at least every 2 years for high-risk, every 8 years for medium-risk and every 10 years for low-risk customers. KYC software tracks these due dates.
  • Beneficial ownership. For a company, the beneficial owner is a person holding more than 10 percent of shares, capital or profits, or who has control (RBI, October 2026). Onboarding tools capture ownership charts to find this person.
  • Sanctions. Under section 51A of the Unlawful Activities (Prevention) Act, banks must make sure no account exists for anyone on the UN Security Council's ISIL (Da'esh) and Al-Qaida and Taliban sanctions lists (RBI Directions, October 2026). Screening software does this.
  • Ongoing monitoring. RBI describes on-going due diligence as regular monitoring of transactions to make sure they match what the bank knows about the customer, their business, risk profile and source of funds. Transaction monitoring software does this.
  • Reporting deadlines. The FIU-IND FAQs say CTRs and several other reports are due monthly, by the 15th of the following month, and STRs must be filed not later than seven working days after the Principal Officer is satisfied a transaction is suspicious (FIU-IND, October 2026). Reporting tools help meet these dates.
  • Records. The same FAQs require transaction records to be kept for 5 years, and records of cash transactions above ₹10 lakh and cross-border wire transfers above ₹5 lakh where India is the origin or destination. Every AML system keeps an audit trail for this reason.

The volume problem

The numbers show why this cannot be done by hand. FIU-IND's Annual Report 2024-25 records 4,34,668 STRs, 1,73,13,368 CTRs and 1,02,73,512 cross-border wire transfer reports filed in FY 2024-25. Behind every STR there were many alerts that analysts reviewed and closed. Getting this wrong is costly too: FIU-IND says section 13 of the PMLA lets it fine a reporting entity ₹10,000 to ₹1 lakh for each failure (FIU-IND FAQs, October 2026), and its annual report lists 8 compliance orders with aggregate penalties of about ₹30.5 crore in FY 2024-25.

This guide is education, not legal advice. Rules change, so check the current RBI Directions, FIU-IND notifications or a lawyer for your own case.

3. How the five functions work together

Short answer: A customer flows through onboarding, screening and monitoring, every alert becomes a case, and a small share of cases become STRs filed on FIU-IND's FINnet system.

Here is the lifecycle as a numbered flow. Picture this as the diagram an AML team would draw on a whiteboard.

  1. Onboarding (KYC tool): the customer submits identity documents, through a branch, a digital channel or V-CIP, RBI's video-based customer identification process. The tool checks documents and pulls existing records from CKYCR, the Central KYC Records Registry.
  2. Risk rating (KYC tool): the tool scores the customer as low, medium or high risk, using factors such as occupation, location, products and channel.
  3. Screening (screening tool): the customer's name, date of birth and nationality are matched against sanctions, PEP and adverse-media lists. Possible matches go to an analyst.
  4. Ongoing screening (screening tool): whenever a list changes, the whole customer base is screened again, and payments are screened in real time.
  5. Transaction monitoring (TM tool): every day, or in real time, the system runs rules and models over transactions and raises alerts.
  6. Alert review (case tool, L1): an analyst checks the alert against the customer profile and either closes it with a reason or escalates it.
  7. Investigation (case tool, L2): a senior analyst gathers evidence, looks at linked accounts and writes a case narrative.
  8. Decision and reporting (reporting tool): if the case is suspicious, the Principal Officer approves an STR, which is filed on FIU-IND's FINnet system. Every reporting entity must register on FINnet and name a Designated Director and Principal Officer (FIU-IND FAQs, October 2026).
  9. Feedback loop: case outcomes feed back into rule tuning, so the system learns which alerts were useful.

Two functions people forget

Most guides stop at screening and monitoring, but analysts spend much of their day in the other two tools. A case manager is your workspace: it holds the alert, the customer profile, transaction extracts, notes from open-source research and the final decision, with an audit trail that auditors and regulators check. Reporting tools turn a completed case into an STR in the format FIU-IND needs and compile monthly reports such as CTRs; Hummingbird, for example, describes automated SAR, STR and CTR filing on its product page (October 2026). To see how onboarding checks fit into the wider AML process, read our guide on KYC and AML.

4. AML tools grouped by function

Short answer: The large suites from NICE, SAS and Oracle cover monitoring and more; LSEG, LexisNexis and Dow Jones are best known for screening data; and newer platforms such as ComplyAdvantage, Napier AI, Quantexa, Feedzai, Fenergo and Hummingbird focus on specific jobs.

Every description below comes from the vendor's own product page as read in October 2026. We do not rank vendors. Market shares and "leader" claims are not verified, so they are left out on purpose.

Full AML and financial crime suites

Tool Owner What the vendor says it does NICE Actimize NICE AI-driven fraud prevention and AML solutions to detect financial crime and meet compliance SAS Anti-Money Laundering SAS A risk-based approach to uncovering illicit activity in line with AML and CFT rules Oracle Financial Crime and Compliance Management (FCCM) Oracle A suite with AI, machine learning and analytics for AML, KYC and sanctions compliance

NICE Actimize is the name you will meet most often in Indian job listings, which is why people often search "Actimize" on its own. CFT means combating the financing of terrorism.

Screening and risk data

Tool Owner What the vendor says it does World-Check LSEG (formerly under Refinitiv) Risk intelligence for KYC, AML and due diligence screening Bridger Insight XG LexisNexis Risk Solutions Automated compliance and account screening WorldCompliance Data LexisNexis Risk Solutions A risk-entity database used for screening Dow Jones Risk & Compliance Dow Jones Risk data and due diligence for AML, CTF, sanctions, anti-bribery and trade compliance

Note the difference between a data product and a screening engine. A database such as World-Check or WorldCompliance Data is the list of risky names. A screening engine is the software that matches your customers against that list. Many banks buy the data from one company and run it through a screening engine from another.

Newer AI-led platforms

Tool Owner What the vendor says it does ComplyAdvantage ComplyAdvantage AI-driven fraud and AML risk detection, including screening and monitoring, with an aim to cut false positives Napier AI Napier AI An AI-powered AML platform for transaction monitoring and sanctions screening Quantexa Quantexa A decision-intelligence platform that links data into entity networks, with AML and KYC solutions Feedzai Feedzai An AI-native fraud and financial crime prevention platform

Onboarding and operations

Tool Owner What the vendor says it does Fenergo Fenergo Client lifecycle management and KYC software for financial institutions Hummingbird Hummingbird Risk and compliance operations: investigations and case management, customer profiles, automated SAR, STR and CTR filing

5. Transaction monitoring software in brief

Short answer: Transaction monitoring software runs rules and models over account activity, scores the results and creates alerts for analysts, either in daily batches or in real time.

Here is a short summary. The full explanation lives in our transaction monitoring guide.

  • Data in: transactions from core banking, cards, UPI and wire systems, plus the customer's KYC profile and risk rating.
  • Scenarios: rules such as large cash deposits, many deposits just below a threshold (structuring), sudden activity in a dormant account, round-amount transfers or payments to high-risk places.
  • Scoring and alerts: each hit gets a score, and hits above a set level become alerts.
  • Batch or real time: many scenarios run overnight in batches; payment screening and some fraud checks run in real time.
  • Tuning: the team adjusts thresholds so the system catches real risk without burying analysts in false positives.

A simple illustration: a fictional customer, a salaried clerk in Pune, receives fifteen UPI credits from different senders in one evening and moves the money out within an hour. A velocity rule flags it. The L1 analyst sees the activity does not match the customer's profile, and escalates. The L2 analyst finds the account looks like a money mule account, one used to pass on fraud proceeds, which RBI's KYC Directions warn about. That case may end in an STR.

6. Sanctions screening software

Short answer: Sanctions screening software checks customers and payments against official sanctions lists, such as the UN Security Council lists Indian banks must screen under UAPA, and against commercial PEP and adverse-media data.

What it screens against

  • UN Security Council lists: RBI's KYC Directions require banks to make sure no account exists for anyone on the ISIL (Da'esh) and Al-Qaida and Taliban sanctions lists, and freezing follows the UAPA Order dated 2 February 2021 (RBI, October 2026). The UN Security Council Consolidated List is public.
  • The MHA list of individual terrorists under UAPA: linked from FIU-IND's home page.
  • Foreign lists: banks with US, UK or EU business also screen lists such as the US Treasury's OFAC Specially Designated Nationals (SDN) list. Job descriptions read in October 2026, such as Wise's Hyderabad analyst role, asked for awareness of OFAC, EU and UK sanctions.
  • PEP and adverse-media data: usually bought from data providers such as those in section 4.

How screening works, step by step

  1. The customer or payment data enters the screening engine.
  2. The engine cleans the name (removes titles, standardises spelling).
  3. It runs fuzzy matching against the lists and gives each possible match a score.
  4. Matches above the threshold become alerts for an analyst.
  5. The analyst compares secondary details such as date of birth, nationality, address and ID numbers.
  6. The analyst discounts the match as a false positive or escalates it as a possible true match, and writes the reason.

A fictional worked example

A new customer, "Rahul Mehta", born 1994 in Hyderabad, triggers an alert against a listed person named "Rahul Mehtaa" born 1961 with a foreign nationality. The names nearly match, but the date of birth, nationality and ID details do not. The analyst discounts the alert and notes the three mismatches in the case. That five-minute decision, repeated hundreds of times, is most of what a screening analyst does. It is also why vendors such as ComplyAdvantage talk about cutting false positives.

Learn the AML tools banks use, the right way

You do not need a software licence to start an AML career. You need to understand what each tool does and how an analyst reviews its alerts. Brolly Academy's 45-day AML Course in India introduces transaction monitoring and screening tools such as NICE Actimize, SAS AML, Oracle OFSAA and World-Check, alongside Excel and SQL, with capstone projects on transaction monitoring and compliance reporting. Join a free demo class before you decide.

7. AML tools you will see in Indian job descriptions

Short answer: Indian AML listings read on 24 October 2026 named Actimize, Fircosoft, Mantas, World-Check, NetReveal, Oracle FCCM and Pega Smart Investigate, but operations roles usually treated tool knowledge as a plus, while technology roles asked for it directly.

Job descriptions tell you which names matter in India. Here is what we saw in listings on Naukri and LinkedIn on 24 October 2026. These are listings seen on that date, not hiring commitments.

Tool named Where we saw it Type of role Actimize, Fircosoft, Mantas Deutsche Bank AML monitoring and screening role, 0 to 3 years, Jaipur and Bengaluru Operations (L1 alert review) World-Check and "Prime" search tools State Street AML Senior Associate, Hyderabad Operations (KYC reviews) Actimize NICE Sr Business Analyst (Actimize AML expert), Pune; Infosys Actimize AML Developer via Nityo Infotech, Pune Business analyst and developer FircoSoft TCS FircoSoft Developer, Hyderabad Technology (screening) NetReveal Kiya.ai AML Application Developer, Chennai Technology Oracle AML FCCM algoleap Oracle AML FCCM Developer, Hyderabad Technology Pega Smart Investigate Capgemini Pega specialists, Hyderabad Technology (case management) Excel, SAS, SQL, Python, R Bank of America AML analytics role, Hyderabad and Mumbai Analytics

The Deutsche Bank listing is a useful example for freshers. It asks for a bachelor's degree, describes reviewing APAC transaction-monitoring alerts and deciding whether to close or escalate them, and names the Actimize, Fircosoft and Mantas platforms (Naukri, seen 24 October 2026).

What the pattern tells you:

  • Operations roles (KYC analyst, L1 or L2 alert reviewer) mention tools, but they hire for judgement, regulation knowledge, Excel and writing. You learn the bank's tool on the job.
  • Technology roles (developer, business analyst, tuning analyst) ask for deep, hands-on tool skills, often with 4 to 13 years of experience.
  • Analytics roles ask for SAS, SQL or Python, because they test and tune the models behind the alerts.

To see how these tools fit into an analyst's working day, read our guide on what an AML analyst does.

8. AI and machine learning in AML, in plain words

Short answer: AI in AML mostly means scoring risk, linking related customers into networks and ranking alerts so analysts spend time on the riskiest ones, while people still make and explain the final decision.

Most large vendors now describe their products as AI-driven. NICE calls Actimize "AI-driven", Oracle's suite lists AI and machine learning, Napier AI calls itself AI-powered and Feedzai calls itself AI-native (vendor pages, October 2026). Here is what that usually means, in plain words.

Rules vs models

  • A rule is a fixed instruction: "alert if cash deposits in 30 days exceed a set amount." It is easy to explain but blunt. It misses clever launderers and flags many honest customers.
  • A model learns patterns from past data. It might learn that a certain mix of account age, transaction speed and counterparties often appears in confirmed cases, and give a risk score instead of a yes or no.

Four common uses

  1. Alert scoring and prioritisation: the model ranks alerts so the riskiest reach an analyst first and low-risk ones can be handled faster.
  2. Cutting false positives: smarter matching and scoring aim to reduce harmless alerts. ComplyAdvantage, for example, says it aims to cut false positives (October 2026).
  3. Network or entity analysis: linking accounts that share a phone number, address, device or counterparty. Quantexa describes linking data into entity networks. This is how teams spot mule rings that look harmless one account at a time.
  4. Anomaly detection: spotting behaviour that is unusual for this customer compared with their own history or peers.

What AI does not change

  • An analyst still reviews the alert and writes the reason for the decision.
  • The bank must be able to explain why it closed or reported a case. A model whose output nobody can explain is hard to defend in an audit.
  • Models need clean data. Wrong KYC data in means wrong scores out.

For you, this means the future AML analyst works alongside models. Knowing why an alert fired, and being able to say whether the model got it right, is a stronger skill than clearing alerts quickly.

9. How banks choose AML software

Short answer: Banks choose AML software by matching it to their risk, size and regulators, then testing data fit, detection quality, false-positive rates, explainability, reporting support, cost and vendor support.

You will not buy AML software as an analyst, but knowing how banks choose helps in interviews and in project work. Here is a practical checklist.

Question the bank asks Why it matters Does it cover our risks and products? A retail bank with UPI volumes needs different scenarios from a trade-finance or custody business Will it work with our data? Core banking, cards, UPI and wire data must flow in cleanly, or alerts will be wrong How good is detection, and how many false positives? Too many false positives mean large teams and missed real cases Can we explain every alert and model? Auditors and regulators expect the bank to justify decisions Does it support Indian reporting? Reports must reach FIU-IND in the right format and on time Can it screen the lists we must screen? UN lists under UAPA are a must for Indian banks; global banks add OFAC, EU and UK lists Will it scale? Transaction volumes grow every year Cloud or on-premise, and where is data stored? Affects security reviews, cost and speed of rollout What does it cost over five years? Licence, implementation, data, hardware and tuning staff all add up How good is vendor support and the talent pool? A tool with few trained people locally is harder to run

The usual selection steps

  1. Write down the bank's risk assessment and the gaps in current tools.
  2. Shortlist vendors and send a request for proposal.
  3. Run a proof of concept on the bank's own historical data.
  4. Compare alerts, false positives and true cases found.
  5. Check security, data handling and contract terms.
  6. Plan the rollout, the data migration and staff training.
  7. Run the old and new systems side by side before switching over.

This is also why technology services firms in Hyderabad, Bengaluru, Pune and Chennai post Actimize, NetReveal, FircoSoft and Oracle FCCM developer roles: someone has to implement and maintain these systems.

10. Which AML tools should a fresher learn about, and how?

Short answer: Learn what each type of tool does and the names that appear in Indian job descriptions, then practise the analyst work behind the screens with Excel, SQL and written cases, because commercial AML software is licensed to banks and is not something you can install at home.

Commercial AML suites such as Actimize, SAS AML and Oracle FCCM are enterprise products licensed to banks and service firms. Be careful of anyone selling you "free versions" or cracked copies; we found no official free versions to recommend, and downloading pirated software is a risk you should not take. Instead, follow these steps.

A 6-step plan to learn AML tools without a licence

  1. Learn the five functions first. Be able to explain KYC, screening, monitoring, case management and reporting in one sentence each. Interviewers ask this.
  2. Know the names and their category. Actimize, SAS AML and Oracle FCCM are suites. World-Check, Bridger Insight XG and Dow Jones are screening data and engines. Fircosoft and Mantas appeared, with Actimize, in a monitoring and screening operations role. Read each vendor's own product page.
  3. Read 10 job descriptions. Note which tools, regulations and skills repeat. Our facts show most operations roles call tool knowledge a plus, not a must.
  4. Practise screening on public lists. The UN Security Council Consolidated List and the US OFAC SDN list are public. Take a few made-up customer names and practise deciding match or no match using date of birth and nationality.
  5. Build a mini monitoring project in Excel or SQL. Create a fictional transaction file and write simple rules, such as cash deposits just under a threshold or a dormant account suddenly active (section 11 shows how).
  6. Write case narratives. For each alert you build, write a short note: what fired, what you checked, what you found, your decision and why. This is the skill that shows on day one.

Prepare to talk about tools in interviews too. Our AML interview questions guide includes questions on tools, alerts and Excel.

11. Excel and SQL skills for AML analysts

Short answer: Excel is in almost every AML job description, and basic SQL helps you pull and test transaction data; together they let you review alerts faster, spot patterns and prove your findings.

State Street's Hyderabad AML role asked for advanced MS Excel, and Bank of America's Hyderabad team leader role asked for strong Excel and large data sets (LinkedIn, seen 24 October 2026). Here is what to learn.

Excel skills that matter

Skill AML use Sorting, filtering and conditional formatting Highlight round amounts, cash deposits or a high-risk country in a transaction extract SUMIFS and COUNTIFS Total cash deposits per customer per month, or count transfers to one beneficiary XLOOKUP or VLOOKUP Match a customer ID from an alert to the KYC risk rating sheet Pivot tables Summarise credits and debits by customer, month or channel Date functions Find gaps in activity, such as a dormant account that suddenly comes alive Text functions (TRIM, UPPER, LEFT) Clean names before comparing them to a list Charts Show a spike in activity in your case narrative

A worked Excel example (fictional)

You get an alert on a customer with 40 transactions in a month. In five minutes you can:

  1. Filter the extract to cash deposits only.
  2. Use a pivot table to sum deposits by day.
  3. Add a conditional format to colour any deposit between ₹45,000 and ₹49,999.
  4. Notice eight deposits just under ₹50,000 across four branches in six days.
  5. Note that ₹50,000 is the RBI threshold for CDD on occasional transactions, and record a possible structuring pattern, meaning splitting cash to avoid checks.

That finding goes straight into your case narrative and supports an escalation.

SQL skills that matter

SQL lets you query transaction tables directly. Learn SELECT, WHERE, GROUP BY, HAVING, JOIN and basic date filters. Here is a simple fictional query that finds customers with several cash deposits just below ₹50,000 in a week:

SELECT customer_id, COUNT(*) AS deposits, SUM(amount) AS total
FROM transactions
WHERE txn_type = 'CASH_DEPOSIT'
  AND amount BETWEEN 45000 AND 49999
  AND txn_date >= DATE '2026-10-01'
  AND txn_date < DATE '2026-10-08'
GROUP BY customer_id
HAVING COUNT(*) >= 3;

This is the same logic a structuring scenario uses inside a monitoring tool. Writing it yourself shows an interviewer that you understand how alerts are built, not only how to click through them. Later, Python and SAS help if you move into analytics or tuning roles, as the Bank of America analytics listing showed.

12. How Brolly Academy helps

Short answer: Brolly Academy's 45-day AML course introduces the main AML tools and the Excel and SQL skills behind them, inside a full syllabus on KYC, CDD, monitoring, regulation and case work.

If you want a guided route into AML tools and analyst work, here is what the Brolly Academy AML Course in India offers, as stated on the course page (Brolly Academy, October 2026):

  • Duration and roadmap: 45 days, about 1.5 months. Weeks 1 to 2 cover money laundering basics and risks, Weeks 3 to 4 cover industries, rules and laws, Week 5 covers KYC, CDD and EDD, and Week 6 covers AML programs, technology, a final case study and the certificate assessment.
  • Tools covered: the page lists NICE Actimize, SAS AML, Oracle Financial Services (OFSAA), FICO TONBELLER, BAE Systems NetReveal, ComplyAdvantage, World-Check (Refinitiv), Excel and SQL. The course introduces these systems; it does not promise hands-on licences.
  • Technology module: Module 7, AML and Technology, covers AML solution types, monitoring software, AI, machine learning and blockchain.
  • Capstone projects: six, including a KYC verification case study, transaction monitoring, a fraud detection simulation, compliance reporting, a risk assessment and an end-to-end AML case.
  • Modes and fees: Video Recording ₹6,999, Online Course ₹14,999 and Classroom Training in Hyderabad ₹19,999. Weekday and weekend batches run, and a free demo class is offered before you enrol.
  • Eligibility: any stream, age 18 or above, with basic computer skills. The page says no finance or coding background is needed.
  • Certificate and support: a Brolly Academy course completion certificate, plus resume support, mock interviews and placement assistance. Third-party certifications such as CAMS or the IIBF AML and KYC certificate are issued by those bodies, with separate fees.

The next batch listed on the page starts on Monday, 2 November 2026.

Frequently asked questions

What is AML software?

AML software is the set of systems banks and other regulated firms use to fight money laundering. It verifies customers at onboarding, screens names against sanctions and PEP lists, monitors transactions for suspicious patterns, stores alerts and evidence in case files, and prepares reports such as STRs and CTRs for FIU-IND. Analysts use it every day, but the software only raises alerts; people make the final decisions.

How does AML software work?

AML software works as a flow. Onboarding tools collect and verify customer data and assign a risk rating. Screening tools match names against sanctions and PEP lists. Monitoring tools run rules and models over transactions and raise alerts. Analysts review each alert in a case manager, close or escalate it, and suspicious cases are reported to FIU-IND as STRs.

What are the main types of AML tools?

There are five main types of AML tools. KYC and onboarding tools verify customers and rate their risk. Screening tools check sanctions, PEP and adverse-media lists. Transaction monitoring tools raise alerts on unusual activity. Case management tools hold the investigation and audit trail. Regulatory reporting tools prepare STRs, CTRs and other reports for the regulator.

Which AML software do Indian banks use?

We do not name the systems of specific banks, because we have no verified source for them. Indian job listings seen in October 2026 named NICE Actimize, Fircosoft, Mantas, World-Check, NetReveal and Oracle FCCM. Most banks run a mix of products, often one for onboarding, one for screening, one for transaction monitoring and a case manager that connects them.

What is the best AML software?

There is no single best AML software for every firm. The right choice depends on the bank's risks, products, size, data, budget and regulators. Banks run a proof of concept on their own data and compare detection quality, false positives, explainability and reporting support. Market rankings and leader claims are not verified here, so we do not rank vendors.

What is NICE Actimize?

NICE Actimize is a financial crime product family from NICE. Its website describes AI-driven fraud prevention and AML solutions to detect financial crime and meet compliance needs. It is one of the names you will see most often in Indian AML job descriptions, including in operations roles for alert review and in developer and business analyst roles in Pune.

What is transaction monitoring software?

Transaction monitoring software checks customer transactions against rules and models to spot unusual activity, such as many cash deposits just under a threshold or a dormant account that suddenly becomes active. It raises alerts that L1 analysts review. RBI describes ongoing monitoring as checking that transactions match what the bank knows about the customer, their business and risk profile.

What is sanctions screening software?

Sanctions screening software compares customer names and payment details against official sanctions lists and commercial risk data, using fuzzy matching to catch spelling variations. Indian banks must screen against the UN Security Council lists under section 51A of UAPA. Each possible match becomes an alert that an analyst confirms or discounts using details like date of birth and nationality.

What is the difference between World-Check and a screening engine?

World-Check, from LSEG, is a risk intelligence database of names used for KYC, AML and due diligence screening. A screening engine is the software that matches your customers against such a database and raises alerts. Many banks buy list data from one provider and run it through a screening engine from another, so the two are often separate products.

What is Mantas in AML?

Mantas is the name of a monitoring platform that appeared in an Indian AML job listing alongside Actimize and Fircosoft in October 2026. The Deutsche Bank AML monitoring and screening role for 0 to 3 years named all three platforms. Freshers should know it as a transaction monitoring tool name and learn its details on the job.

What is Fircosoft used for?

Fircosoft is a name linked to sanctions screening in Indian job listings. In October 2026 we saw a TCS FircoSoft Developer role in Hyderabad, a screening technology role, and a Deutsche Bank AML monitoring and screening role naming Fircosoft with Actimize and Mantas. Analysts review its screening alerts, while developers configure and maintain it.

Do I need to learn AML software to get an AML job?

No, you usually do not need hands-on software experience for an entry-level AML operations job. Listings read in October 2026 mostly asked for a degree, regulation knowledge, Excel and good writing, with tools listed as a plus. Banks train you on their own system. Technology and tuning roles are different and do ask for deep tool skills.

Can I download AML software for free to practise?

Commercial AML suites such as Actimize, SAS AML and Oracle FCCM are licensed to banks and are not something you can install at home. Avoid anyone offering free or cracked copies. Instead, practise the analyst work with public sanctions lists, fictional transaction data in Excel or SQL, and written case narratives for each alert you build.

How is AI used in AML software?

AI in AML software is mainly used to score and prioritise alerts, cut false positives, link related accounts into networks and spot behaviour that is unusual for a customer. Vendors such as NICE, Oracle, Napier AI and Feedzai describe AI in their products. Analysts still review alerts and must be able to explain every decision they make.

Will AI replace AML analysts?

AI is unlikely to remove the need for AML analysts. It changes the work toward reviewing scored alerts, checking whether a model got it right and explaining decisions to auditors and regulators. Someone must still own each decision and file STRs on time. Analysts who understand why an alert fired will be more valuable, not less.

What is a false positive in AML?

A false positive is an alert that turns out to be harmless after review. For example, a new customer's name may nearly match a sanctioned person, but the date of birth and nationality do not. Screening and monitoring tools produce many false positives, so reducing them without missing real risk is one of the main goals of tuning.

What is case management software in AML?

Case management software is the analyst's daily workspace. It stores each alert with the customer profile, transaction extracts, research notes, the decision and an audit trail of who did what and when. It links screening and monitoring alerts in one place and supports escalation from L1 to L2 and on to STR reporting.

How do banks choose AML software?

Banks choose AML software by checking whether it covers their risks and products, works with their data, detects real cases with fewer false positives, explains its alerts, supports Indian reporting and required sanctions lists, scales with volume and fits the budget. They usually run a proof of concept on historical data and run old and new systems side by side before switching.

What Excel skills does an AML analyst need?

An AML analyst needs sorting, filtering and conditional formatting, SUMIFS and COUNTIFS, XLOOKUP or VLOOKUP, pivot tables, date functions and text cleaning functions. These help you total deposits by customer, match alerts to KYC ratings, spot dormant accounts and present patterns. Job descriptions from State Street and Bank of America in Hyderabad asked for strong or advanced Excel.

Is SQL useful for AML jobs?

Yes, SQL is useful, especially as you grow. It lets you query transaction tables, group activity by customer and test patterns such as several cash deposits just below ₹50,000 in a week. Operations roles mostly ask for Excel, while analytics and tuning roles, like a Bank of America AML analytics role, asked for SQL along with SAS, Python or R.

What does FIU-IND reporting software need to do?

Reporting tools must turn completed cases into STRs and compile monthly reports such as CTRs in the format FIU-IND needs. FIU-IND says STRs are due within seven working days after the Principal Officer is satisfied a transaction is suspicious, and CTRs by the 15th of the following month. Reports are filed through FIU-IND's FINnet system.

Why do banks need AML software instead of manual checks?

Banks need AML software because the volume is far too large to check by hand. FIU-IND's Annual Report 2024-25 records 4,34,668 STRs and 1,73,13,368 CTRs filed in that year alone. Rules also require CDD, periodic KYC updation, sanctions screening, ongoing monitoring and five-year record keeping, all of which software makes reliable and auditable.

What happens if a bank's AML controls fail?

If a bank's AML controls fail, it can face penalties and closer regulatory scrutiny. FIU-IND says section 13 of the PMLA lets it fine a reporting entity ₹10,000 to ₹1 lakh for each failure. Its Annual Report 2024-25 lists 8 compliance orders with aggregate penalties of about ₹30.5 crore. Check the current rules or a lawyer for specific cases.

Which AML tools does Brolly Academy's course cover?

Brolly Academy's AML Course in India introduces NICE Actimize, SAS AML, Oracle OFSAA, FICO TONBELLER, BAE Systems NetReveal, ComplyAdvantage, World-Check, Excel and SQL, as listed on the course page in October 2026. The course introduces these systems rather than providing hands-on licences, and includes capstone projects on transaction monitoring and compliance reporting.

How long does it take to learn AML tools for a job?

You can learn the concepts behind AML tools, the main product names and the Excel and SQL basics through a short structured course plus your own practice. Brolly Academy's AML course, for example, runs for 45 days and covers AML technology in its final week. Deep, hands-on mastery of a specific product usually comes on the job.

Learn with Brolly Academy

Review the syllabus, practical projects and batch timings, and book a free demo before you enrol.

Related Articles

AML Analyst

Role, skills and career path.

Read Article

Continue Your Learning

AML Course in India

45-day programme in KYC, customer due diligence, transaction monitoring, AML regulations and compliance, with case studies, capstone projects and placement assistance.

View Course

Business Analyst Course in Hyderabad

Learn requirements, process mapping, documentation and stakeholder skills used by analysts in banks and financial services teams.

View Course

Data Analytics Course in Hyderabad

Build Excel, SQL and dashboard skills that help in alert analysis, reporting and data-driven compliance roles.

View Course