CFT
CFT (Counter-Terrorist Financing) covers the regulatory obligations and internal controls that financial institutions and payment service providers use to detect, prevent, and report attempts to finance terrorist activity through the financial system. It complements AML controls but focuses on stopping funding for violence rather than detecting criminal proceeds.
AML and CFT are typically grouped together (AML/CFT) because they share common control infrastructure: KYC, transaction monitoring, sanctions screening, and suspicious activity reporting. They address different risk typologies, though. AML focuses on detecting and preventing the laundering of criminal proceeds. CFT focuses on preventing funds, which may be entirely legitimate in origin, from being used to fund terrorist operations.
CFT presents specific challenges because the amounts involved are often small, the transaction patterns may not resemble typical criminal activity, and the intent (funding violence) is not apparent from transaction data alone. Effective CFT relies heavily on sanctions and designated-entity screening: checking transaction counterparties against lists of designated terrorist organizations and individuals maintained by governments, such as OFAC, the EU, and the UN.
Regulatory CFT obligations for payment service providers include: KYC to identify customers, sanctions screening on all transactions, transaction monitoring calibrated for terrorist financing typologies, and suspicious activity reporting when CFT indicators are identified. Failure to implement effective CFT controls exposes businesses to severe regulatory penalties, including license revocation.
Terrorist financing is a primary financial crime risk that payment service providers must address explicitly. Regulators view CFT failures as particularly serious. Inadequate CFT controls have resulted in multibillion-dollar fines for global banks. For cross-border payment infrastructure, the risk is significant given the volume of transactions across diverse jurisdictions where designated organizations operate.
- Terrorist financing amounts are often small and indistinguishable from legitimate transactions by transaction characteristics alone
- High false positive rates in sanctions screening require significant compliance team resources for alert review
- CFT risk typologies evolve as terrorist organizations adapt their financing methods
- Cross-border transactions require screening against sanctions lists from multiple jurisdictions
- New payment methods (stablecoins, mobile money) require adapted CFT controls
A cross-border payment provider implements enhanced CFT transaction monitoring for high-risk corridors, adding typology-based rules specifically calibrated for known terrorist financing patterns: small, frequent transfers to specific destination countries structured below reporting thresholds, targeting specific beneficiary categories. The enhanced monitoring generates 15 Suspicious Activity Reports in the first quarter, two of which result in law enforcement engagement.
Related Concepts
Nium's global compliance program includes dedicated CFT controls: sanctions screening on all transactions, CFT-specific transaction monitoring rules, and policies for high-risk corridors and counterparties. Nium's CFT program meets the requirements of financial regulators across all operating jurisdictions.
Answers you didn't know you needed.
What is the difference between AML and CFT?
AML focuses on detecting and preventing the processing of criminal proceeds. CFT focuses on preventing funds from being used to finance terrorism. The controls overlap significantly but CFT addresses cases where funds may be of legitimate origin but destined for illicit use.
What are terrorist financing typologies?
Typologies are known patterns of terrorist financing activity. Common typologies include: collecting small donations from many individuals, using charities as conduits, exploitation of informal value transfer (hawala), and in recent years, use of cryptocurrency.
Who maintains the sanctions lists relevant to CFT?
Key lists include: OFAC (US Treasury) SDN list, EU Consolidated Sanctions List, UN Consolidated List, and UK Treasury lists. Each designates terrorist organizations and individuals whose assets must be frozen and transactions blocked.
What happens if a payment to a designated terrorist organization is identified?
The payment must be blocked and assets frozen. A report must be filed with the relevant financial intelligence unit. The circumstances must be investigated and relevant law enforcement agencies notified.
Is CFT compliance the same globally?
The underlying FATF standards apply globally, but implementation varies by jurisdiction. Sanctions lists differ. Reporting thresholds and suspicious activity definition vary. Global payment providers must maintain compliance with each jurisdiction's specific CFT requirements.