What is Partnership Risk in Anti-Money Laundering?
Partnership risk is the money laundering, terrorist financing and sanctions exposure a firm takes on through the businesses it works with, rather than through its own direct customers. Agents, introducers, distributors, white-label and banking-as-a-service partners, payment facilitators, correspondent institutions, marketplaces and joint ventures all place a third party between the firm and the end user. The regulatory obligation stays with the firm, while the partner often holds the customer relationship, the data and the commercial incentive to grow volume.
Where the exposure comes from
- Delegated onboarding, where the partner performs customer due diligence and the firm relies on it. Reliance is permitted under many frameworks, but responsibility for the adequacy of the checks generally remains with the relying firm.
- Nested or indirect access, where the partner's own customers, sub-merchants or downstream institutions reach the firm's rails without being individually visible to it.
- Information asymmetry: the firm observes payments but not the underlying commercial arrangement, the marketing, or who is actually being served.
- Misaligned incentives, where the partner is remunerated on volume and bears little of the compliance cost.
- Concentration, where one partner supplies a large share of flows and offboarding becomes commercially painful.
- Legal form, where a counterparty is itself a partnership. Control may be exercised through a partnership agreement rather than shareholdings, so identifying beneficial owners requires reading the constitutional documents rather than a share register.
Red flags
- Reluctance to share due diligence files, or resistance to contractual audit and inspection rights.
- Rapid growth in volume or value without a business explanation that matches the partner's stated model.
- Drift of the partner's customer base into sectors, products or geographies outside the agreed scope.
- Payment descriptors, merchant category codes or transaction patterns inconsistent with the activity the partner said it conducts.
- Chargeback, refund, return or fraud rates materially out of line with comparable partners.
- Frequent or opaque changes in the partner's ownership, management or licensing status, or adverse media and sanctions exposure among its principals.
- Evidence of undisclosed sub-merchants or downstream users processing through the partner's facility, a pattern usually described as transaction laundering.
Managing it
Partner due diligence goes beyond customer onboarding. It normally covers ownership and control, licensing and regulatory standing, the partner's own AML programme and reporting officer, its policies, screening and monitoring arrangements, and the results of any independent audit. Contracts carry AML and sanctions clauses, prohibited activity lists, data-sharing and audit rights, notification obligations for material change, and termination provisions. After onboarding, the relationship is reassessed periodically on a risk basis, with monitoring applied not only to the partner's own account but to the activity flowing through it, including sub-merchant or end-user level analysis where the model allows.
Governance and supervisory expectations
Partner exposure belongs in the enterprise-wide risk assessment rather than being treated as a procurement matter. Firms are generally expected to be able to demonstrate that they understand the risk each partner introduces, that controls are proportionate to it, and that they retain the ability to see and act on the activity being conducted in their name. Exit planning matters as much as onboarding: a firm that cannot terminate a partner without unacceptable disruption has, in practice, ceded control of its own risk appetite.