Fraud & Compliance / Learning brief
Money laundering explained
Your notes
In simple terms / 01
What this means in plain language
Money laundering moves criminal proceeds through three classic stages so the funds appear lawful. This article explains placement, layering, and integration, and how terrorist financing differs, so controls can detect each stage.
Money laundering is the process of making the proceeds of crime look as if they came from a lawful source. Analysts usually describe it in three stages. Placement puts illicit cash into the financial system, for example through deposits or the purchase of assets. Layering then moves the money through many accounts, currencies, or products to break the link to its origin. Integration finally returns the funds to the criminal as apparently clean wealth, such as a property sale or a business investment. Terrorist financing can follow the same steps, but the money is often small in amount and may start from legitimate sources, so the goal is to hide the destination and purpose rather than the origin. Understanding these stages helps controls decide where to watch, what patterns look unusual, and when to escalate a case for review.
Complete lesson / 02
Understand the full idea, step by step
Criminal proceeds have a problem: cash that cannot be explained. Money laundering is the attempt to solve that problem — and each stage of the attempt leaves something a control is built to look for.
Money laundering — moving criminal proceeds so the funds appear lawful
Money laundering takes the proceeds of crime and moves them through the financial system so they end up looking legitimate. It is worked in three classic stages — placement, layering, and integration — and understanding the shape of each is what lets a control detect it rather than merely react to it.
Predicate offence — the underlying crime that generated the proceeds
Laundering always sits on top of another crime — the predicate offence — such as fraud, drug trafficking, corruption, or theft. That crime produced the money; laundering is the separate offence of disguising where it came from. The distinction matters because a control is not trying to solve the predicate crime, only to notice the funds that flow from it.
The three classic stages
Placement — criminal proceeds, usually cash, enter the regulated system: cash deposits, high-value goods, or mixing illicit takings with the revenue of a cash-intensive business. This is the riskiest stage for a launderer, so controls concentrate here.
Layering — funds are moved through many steps to separate them from their origin: rapid transfers between accounts, conversions between currencies or assets, and intermediary companies whose only role is to pass funds onward. Complexity is the goal.
Integration — the laundered funds return as apparently legitimate wealth: property, business investment, loan repayments, or invoices for services that were never delivered. By now the money often looks ordinary.
| Stage | What the launderer attempts | What controls look for |
|---|---|---|
| Placement | Get cash into the system | Deposits just below a reporting threshold, cash volumes inconsistent with a stated occupation, several small deposits across branches in a day |
| Layering | Obscure the trail with movement | Velocity — funds in and out within a short window — and chains routing through parties with no clear commercial relationship; linked accounts sharing addresses, devices, or counterparties |
| Integration | Re-enter the funds as clean wealth | Whether the asset matches the customer's known profile, and whether documentation holds together under enhanced due diligence |
Structuring — breaking deposits to keep each one below a reporting threshold
When cash is split so no single deposit crosses a reporting threshold, that is structuring — and monitoring is built to notice it. The point for a control is that the amounts staying just under the threshold is itself the signal, not a reason to treat each deposit as unremarkable. This is described here as what a control detects, never as a method.
Terrorist financing differs
Terrorist financing shares some mechanics but differs in intent and shape. The amounts are frequently small, the funds may come from legitimate earnings or donations rather than crime, and the concern is where the money is going and what it will support, rather than where it came from. That reverses the usual emphasis: controls watch for destinations linked to sanctioned or high-risk parties, for collection-and-forwarding patterns, and for values that seem minor yet route to concerning endpoints.
Does one odd deposit prove that money is being laundered?
No. None of these signals prove wrongdoing on their own — they raise a question a human analyst answers. An alert is the control asking the account holder, in effect, to account for funds that do not match the expected picture. This is why layering matters most in aggregate: each individual transfer can look unremarkable, so controls examine flows over time and across linked parties, then escalate a coherent pattern to an investigator rather than acting on a single payment.
REMEMBER IT
Hold the three stages as a single motion: placement puts it in, layering moves it around, integration brings it out looking clean. Controls are strongest at placement, cleverest at layering, and most reliant on consistency checks at integration.
STRICTLY SPEAKING
Strictly speaking, real reporting thresholds and detection rules vary by jurisdiction, and the stages can overlap or repeat in a real case rather than run neatly once. What does not vary is the disciplined response: an analyst reviews the case, gathers context, and where suspicion remains files a suspicious activity report to the relevant authority.
FOR NOW, REMEMBER
- Money laundering disguises criminal proceeds through three stages: placement, layering, and integration.
- It always sits on a predicate offence — the underlying crime that produced the money.
- Each stage leaves signals a control looks for; none proves wrongdoing alone, and layering is visible mainly in aggregate.
- Terrorist financing reverses the emphasis toward where funds are going, but the disciplined response — review, then report if suspicion remains — is the same.
TRY IT YOURSELF
Maya sees an account take several cash deposits on the same day across different branches, each one just under the cash-reporting threshold. What is the sound, defensive read?
You have seen the crime these controls exist to detect. The next lesson meets the body that sets the global standard against it — the Financial Action Task Force, its 40 Recommendations, and the country lists that raise the risk temperature.
KEEP GOINGKey takeaways / 03
Three things to remember
- 01
Laundering typically moves through placement, layering, and integration.
- 02
Each stage leaves different signals that monitoring can detect.
- 03
Terrorist financing hides purpose and destination, not only origin.
Practical use cases / 04
Where you would use this
Compliance analysts map alerts to a suspected stage to focus review.
Model designers build monitoring scenarios around known stage behaviours.
Investigators use the three stages to structure a case narrative for reporting.
Worked example / 05
Put the idea into a real situation
Illustrative example: a fictional courier deposits EUR 9,500.00 in cash across three branches of a fictional bank, Meridian Trust, on the same day (placement). Over two weeks the balance is sent through 14 transfers between 6 accounts in 3 currencies (layering). A final payment of EUR 27,000.00 buys a share in a fictional consultancy, returning the funds as apparent business income (integration). Monitoring flags the same-day cash pattern and the rapid multi-account movement for an analyst to review.
Evidence & review / 07
Evidence & review
The placement-layering-integration model of money laundering and the contrast with terrorist financing, taught defensively.
What this brief simplifies: Presents the three stages as a neat sequence though real cases overlap or repeat; reporting thresholds and rules vary by jurisdiction. Red flags are framed only as what controls detect, never as method.
Sources for this brief2
- Official requirement
The FATF Recommendations: International Standards on Combating Money Laundering and the Financing of Terrorism & Proliferation ↗ — Financial Action Task Force · Money laundering, predicate offences, customer due diligence, and suspicious-transaction reporting
Adopted in 2012 and updated regularly since; the June 2025 FATF plenary agreed revisions to Recommendation 16 on payment transparency. Consult the live consolidated text for the current wording.
- Simplified educational illustration
Payments Signal editorial teaching models — Payments Signal · Placement scenario, stage table, and structuring framed as a detection signal
Used wherever diagrams, scenarios, figures, or example values are didactic constructions rather than sourced facts; every such use carries a simplifications disclosure. All people, companies, banks, and list entries in examples are fictional.