SystemTrade Finance & Correspondent Banking

Trade-Based Money Laundering Detection

Trade-based money laundering, shown as a price and a route before anyone reads a document

Every trade alert decided in days, with the evidence that decided it.

See one case, screen by screen ↓
demo8red flagson the sample alert, each with the rule it comes from and the exhibit that proves it
demo5.1×the top of the 12-month market band — USD 18.40 a kilogram against a band of USD 2.10 to 3.60
target3 in 4alerts cleared by an agent with a written innocent explanation and the document that proves it
target4daysmedian from alert to a decided outcome, against a 30-day clock
In short

What is Trade-Based Money Laundering Detection?

Trade-based money laundering detection is how a bank finds value being moved through its trade business — over- and under-invoicing, phantom or circular trades, routes that make no commercial sense, and payers with no recorded relationship to the trade. This solution screens every presentation, documentary collection and reimbursement against 86 cited red flags, then has six agents reason across price, route, parties and documents and write the case, with a named person deciding every outcome.

AI use cases in banking: a buyer's guide to agentic AI for bank and credit union operations →

Updated

The problem

Why trade-based money laundering is the hardest alert on the desk

A bank sees the documents, never the goods. An invoice for polyester filament yarn at USD 18.40 a kilogram looks exactly like one at USD 2.40 unless somebody knows what that yarn costs. FinCEN said as much when it issued its trade-based money laundering advisory in 2010, and the FFIEC manual still tells examiners to ask whether the bank reviews trade documents for anomalies and red flags, not only for compliance with the credit. Trade finance AML is therefore a reasoning problem: is this price plausible for these goods, does this route make commercial sense, and do these parties keep paying each other in a circle?

Today that reasoning is manual. An investigator looks up a trade statistic, scrolls a shipping site, searches the bank's own systems for the parties, and then types a paragraph — a median of 19 days against a 30-day clock. And the risky half is the clearances, because an examiner samples the alerts that were closed. A closure with no written reason and no evidence behind it is the finding, however correct the judgment was.

typical17,000+ reportsdescribed trade-based money laundering in five years, covering more than $276 billion
typical30daysto file a suspicious activity report from the date of initial detection
estimated19daysmedian from alert to a decided outcome, worked by hand
Where a trade alert's days goestimated
By hand19 days
With the solution4 days
  • Reading the presentation, the credit and its amendments1 → 0.1 d
  • Finding what the goods are actually worth4 → 0.2 d
  • Checking the route, the transshipments and the vessels3 → 0.2 d
  • Linking the parties across 18 months of trade and payments5 → 0.3 d
  • Writing the case and gathering its exhibits4 → 0.2 d
  • Deciding, getting the second signature, packing the evidence2 → 3 d

Estimated split of the 19-day median from alert to a decided outcome at the demo bank, by hand and with the solution. The 30-day clock is the bank's own policy, matched to the reporting clock.

How it works

How an alert moves

Six agents check the price, the route, the parties and the documents, then argue the innocent explanation; two named people decide.

What comes in
Trade in6 sources an alert · documents, payments, market prices, voyages, history, rules
Agents at work
Document agentevery field compared
Pricing agentband and history
Then
Route agentvoyage against the direct service
Party agentlinks and third-party payers
Then
Challenger agentthe innocent explanation
Then
Case writernarrative, numbered exhibits
A person decides
Investigator and BSA Officerthe investigator proposes; the BSA Officer approves
What comes out
Cleared, with the explanation that proved it
Escalation with 11 cited exhibits
Evidence pack for the examiner
One case, step by step

One trade-based money laundering alert, from overnight to a signed escalation

Corvane National Bank holds import letter of credit ILC-2026-004871 for USD 2,208,000 in favor of Lanmere Textiles Pte Ltd, on the account of Brightwater Textile Supply LLC in Houston: 120,000 kg of polyester filament yarn, HS 5402.33, at USD 18.40 a kilogram. Here is what happens next, screen by screen, in the working solution.

  1. 01Overnight

    The night's trade, read and scored

    Six agents

    The screening reads 44 presentations and collections and 61 reimbursements against 86 trade red flags, raises 10 alerts, and the Challenger agent clears 7 of them with a written explanation and the document that proved it. Three reach a person's queue, each with its own 30-day clock running from the date of detection.

    The queue also says what it could not confirm: “Vessel tracking data has not refreshed since 04:10. Route checks on 4 alerts are marked unconfirmed, and no alert has been closed on a route flag since.”

  2. 029:10

    One shipment, told in two pictures

    Marisol Okonjo · Trade AML Investigator

    Alert TBM-2026-0418 opens on the shipment itself, not on a list. A route strip runs from Ningbo through Jebel Ali to Houston with the paying and paid bank above each leg, and below it the unit price sits as a single dot on the 12-month market band for this goods code, with the customer's own nine shipments as gray ticks inside the band.

    “47 days in all — the direct Ningbo to Houston service sails weekly and takes 30, so this voyage adds 17 days through a free-trade zone.”

  3. 03The first flag

    Over-invoicing, with the rule it comes from

    Pricing agent · 94% confidence

    The band for HS 5402.33 runs from USD 2.10 to USD 3.60 a kilogram, median USD 2.74, from 4,186 observations. USD 18.40 is 5.1 times the top of that band and 6.7 times the median; the customer's own nine shipments of the same code over 18 months ran from USD 2.35 to USD 3.05. The flag names FinCEN's over-invoicing red flag and the two exhibits behind it.

  4. 04One click

    Every number opens the source that produced it

    Marisol Okonjo · Trade AML Investigator

    Clicking the band opens the market price band exhibit at the highlighted passage: the goods code, the 4,186 observations, the 5th percentile, the median and the 95th percentile, and the USD 18.40 declared on this presentation. Nothing on that view can be edited, and one control adds the exhibit to the evidence pack.

  5. 05Behind the pictures

    Price, route, parties and documents, each citing its source

    Four agents in parallel

    The Document agent compared every field of the credit, both amendments and all six presented documents and found three mismatches. The Pricing agent built the band and the customer's history. The Route agent pulled both voyage records. The Party agent linked five parties across 23 transactions. Each panel shows what it read, what it found, its confidence and who it handed to.

    The Route agent says why it stopped at 81%: “the Jebel Ali berth record is from the carrier, not the port.”

  6. 06The parties

    A third-party payer, and value that comes back

    Party agent · 88% confidence

    The USD 2,208,000 reimbursement reached the bank from Velmara Holdings FZE in the Jebel Ali Free Zone, a party the credit never names. Over the previous 11 months the beneficiary sent that same party USD 1,960,000 in four wires, and the notify party on nine of eleven presentations shares its registered address. Every link opens the transactions behind it.

  7. 07Before anything escalates

    An agent whose job is to clear the alert

    Challenger agent

    Three innocent explanations are written and tested. A specialty high-tenacity grade would carry a premium — but the mill certificate and specification sheet are not in the file, and the packing list and certificate of origin both describe the ordinary 150D/48F semi-dull. A landed, duty-paid price would explain part of it — but the invoice is FOB Ningbo. A group-treasury payer would explain the money — but no affiliate outside Singapore is recorded.

    The agent may never clear a flag on the customer's say-so, and never when the proving document is absent.

  8. 0816:40

    The person decides, with a reason code

    Marisol Okonjo · Trade AML Investigator

    The Case writer recommends escalation under reason code TBML-OVP-01 and shows the clock: detected October 6, 2026 at 23:52, so a decision is due November 5. Marisol chooses to escalate, picks the reason code, writes her own sentence for the record, and signs.

  9. 09Signed

    Nobody approves their own escalation

    Marisol Okonjo and Yvonne Calderwood

    The maker card reads “Signed Oct 9, 16:40 · TBML-OVP-01”; the checker card waits for the BSA Officer. The approve control is unavailable to the person who proposed it, with the reason beside it. Below, everything that has happened to this alert sits on one trail — the agents' findings, the document requested from trade operations, the evidence pack previewed, the proposal signed.

    “You proposed this escalation. Approval is the BSA Officer's step — nobody approves their own.”

  10. 10The pack

    Eleven exhibits, one on every sentence

    Case writer

    The case narrative runs from the summary through the transaction, price, route, parties and payment, documents and the explanations considered, and every sentence carries a numbered exhibit that opens at its passage. A banner records that the case, and the fact that it exists, is not shown to trade operations, to relationship staff or on any customer-facing view, and that exports are redacted by rule.

Who it’s for

Built for everyone who carries a trade alert.

The same alert, seen by the four people it passes — what their month looked like, and what it looks like now.

MO
Marisol OkonjoTrade AML Investigator · proposes every escalation
Trade AML Investigator
Before
Looks up a trade statistic, scrolls a shipping site and searches the bank's systems for the parties, then types the case by hand.
Now
Opens the shipment already drawn as a price and a route, with eight flags, their rules and their exhibits, and spends her time on the decision.
TB
Theo BrandtAnalyst, trade · triages, gathers, recommends — cannot decide
Financial Crime Compliance Analyst (Trade)
Before
Works a queue where most alerts are nothing, with no way to tell which until each one has been researched.
Now
Reads a queue the agents have already thinned, with three in four alerts cleared and the explanation that cleared them on the record.
YC
Yvonne CalderwoodBSA Officer · approves every escalation, decides every report
BSA Officer
Before
Signs escalations whose reasoning lives in an investigator's head and a paragraph of free text.
Now
Receives a case with eleven cited exhibits, both signatures recorded and the clock on screen, and approves or returns it.
AL
Avery LinInternal audit · reads everything, changes nothing
Internal Audit
Before
Samples closed alerts and asks why each was cleared, often with no written answer to find.
Now
Opens any alert with the approve, escalate and close controls absent, and exports the pack with customer identifiers masked.
Built on the engine

6 agents. Each with one job, and hard limits.

Six agents check the price, the route, the parties and the documents, then argue the innocent explanation; two named people decide.

Pricing agent

Normalizes the declared price to a price per kilogram, builds the 12-month market band for the goods code from public trade statistics, and plots the customer's own 18 months against it. Reports the multiple of the band top and of the median, with the observation count.

  • Never scores a goods code with fewer than 40 observations in 12 months — it reports no market data and asks for an analyst
  • Never values a specialty grade without a document that names it
Route agent

Reads the bill of lading, pulls each voyage record, draws the route from the port of loading through every transshipment to discharge, and tests the total against the fastest scheduled direct service on that corridor and against the free-trade-zone and high-risk port lists.

  • Never calls a route illogical without naming the direct service it compared with
  • Says “vessel data unavailable” rather than guessing a voyage
Party agent

Links applicant, beneficiary, shipper, notify party and payer across 18 months of letters of credit, documentary collections and wires the bank already holds, and looks for third-party payers, value returning between the same parties and shared addresses.

  • Links only parties the bank holds a record for, and never infers ownership
  • Never shows a link without the record behind it
Document agent

Reads the credit, every amendment, the invoice, the bill of lading, the packing list and the certificate of origin, and compares description, grade, quantity, weight, parties, ports and dates field by field, listing each mismatch with both passages and each amendment with the reason given.

  • Never re-examines the presentation under UCP 600 — that decision belongs to trade operations
  • Never changes a trade record
Challenger agent

Writes the most likely innocent explanation for every flag, names the exact document that would prove it, searches the file for that document, and clears the flag when it is there — recording both the explanation and the proof.

  • Never clears a flag on the customer's say-so, or when the proving document is absent
  • A cleared alert keeps its explanation on the record for the examiner
Case writer

Assembles the case narrative in the unit's template — summary, the transaction, price, route, parties and payment, documents, the explanations considered and the recommendation — with a numbered exhibit on every sentence, and drafts the escalation memo.

  • Never writes a sentence without an exhibit, and never marks a draft final
  • Never writes or files a report — the BSA Officer decides and files
Trade AML Investigator

Decides; the BSA Officer approves and files. The agents propose; a named person decides.

Ask in plain words

Ask about any alert, party, price or rule

Ask the assistant in plain words — or tell it what to change. Every answer points at the exhibit it came from.

Why is this price a red flag?

USD 18.40 a kilogram is 5.1 times the top of the band for this goods code. The 12-month band for HS 5402.33 is USD 2.10 to 3.60, median 2.74, from 4,186 observations, and the customer's own nine shipments of the same code over 18 months ran USD 2.35 to 3.05 — so it is out of character for them as well as for the market. The only reading that would explain it is a specialty grade, and the packing list and certificate of origin both describe the ordinary 150D/48F semi-dull.

Which alerts could miss the 30-day clock?

Three. TBM-2026-0384, Tallowbridge Chemicals Inc, is on day 27 of 30 and its escalation summary is drafted. TBM-2026-0388, Orrin Cold Chain LLC, is on day 24 and must be with the BSA Officer tomorrow. TBM-2026-0391, Sutterfield Auto Parts LLC, is on day 22 and the second bank has not answered the request. The queue is filtered to them.

Could a specialty grade explain the price?

No, and two documents say so. The invoice calls it a specialty high-tenacity grade, but packing list PL-26-3318 and certificate of origin CO-SG-26-1140 both describe 150D/48F semi-dull, the ordinary grade. A mill certificate and a specification sheet would settle it, and neither is in the file. Even a true specialty grade trades within about 1.6 times the band top on this code.

Raise the price alert threshold to three times the band

Proposed, not applied. Over the last 12 months, moving that rule from 2.0× to 3.0× would have raised 388 fewer flags and would have missed 2 of the 61 escalations that became cases. A threshold change needs the BSA Officer's approval, so it has been sent to her with those two cases attached.

Every screen

The working solution, as it ships.

13 screens from the working solution, on its sample data. Pick one to see it large.

One shipment, told in two picturesThe route strip from Ningbo through Jebel Ali to Houston with the paying and paid bank above each leg, and the unit price as one dot on the 12-month market band, with the customer's own nine shipments as gray ticks inside it.
Every red flag names its ruleFlag F1, over-invoicing, attributed to FinCEN's trade-based money laundering advisory and raised by the Pricing agent at 94% confidence, with the band, the median, the observation count and its two exhibits.
Click a number, the source opensThe market price band exhibit for HS 5402.33, open at the highlighted passage: 4,186 observations, 5th percentile USD 2.10, median USD 2.74, 95th percentile USD 3.60, declared USD 18.40.
Four specialists in parallelEach agent shows what it read, what it found, its confidence and who it hands to — and a person can reject any finding with a reason, which removes it from the case and goes on the trail.
Five parties, 23 transactionsUSD 8,640,000 of credits from applicant to beneficiary, USD 1,960,000 returning from the beneficiary to the payer in four wires, USD 4,412,000 of reimbursements back to the bank, and a notify party sharing the payer's address.
The agent that argues the other wayThree innocent explanations with what would prove each and what the file actually says — two disproved at 4% and 2%, one unproved at 19%, and a control to request the missing document.
A cleared alert is evidence tooThe seven alerts the Challenger agent cleared last night, each with the reason and the document that proved it — a unit note, a carrier schedule, a group structure chart, a mill certificate.
The decision, with a reason codeThe recommendation and its exhibits on the left; on the right, escalate, close or send back, with the reason code list, the investigator's own sentence for the record, and the due date in view.
Nobody approves their ownThe maker signed at 16:40, the checker waiting, the approve control unavailable to the person who proposed it, and the whole trail of the alert below — agents and people together.
A case with an exhibit on every sentenceThe narrative under a confidentiality banner, the clock if it escalates, and the eleven exhibits from the commercial invoice to the party link report, each opening at the passage it supports.
The queue, on the clockWhat last night's screening read, raised and cleared; chips for mine, unassigned, at risk of the 30-day clock and high risk; a clock bar on every row; and a banner naming the checks it could not confirm.
Eighty-six red flags, every one citedEach trade red flag with its source — FinCEN, the FFIEC manual, FATF, the Wolfsberg Group — its threshold, its version, how often it fired in 12 months, how often it was cleared, and its last tuning review.
One trail, and a pack for each readerWho, what, when, why and which evidence, for agents and people alike, with export packs for examiners, for internal audit with identifiers masked, and for the BSA Officer.
Governance

Built for an examination: cited, signed, confidential, on the record.

Separation of duties, in the screenThe analyst triages and recommends but cannot decide. The investigator closes an alert or proposes an escalation but cannot approve her own. The BSA Officer approves every escalation and decides every report. The auditor reads everything and can act on nothing — the approve, escalate and close controls are simply not there.
Maker-checker with a reason codeEvery escalation, every closure above USD 1,000,000, every threshold change and every role change needs a second named person, a reason code from the list and a signature whose meaning is recorded. A bulk closure writes a separate signed entry for every alert it touches.
Confidentiality, and no tipping offNo case, alert or filing indicator reaches trade operations, relationship staff or any customer-facing view, as 31 CFR 1020.320(e) requires. Trade operations open the same shipment and see the credit, the documents and their five-banking-day clock — nothing else. No agent may contact a customer in any channel.
A numbered exhibit on every sentenceThe Case writer cannot write a claim without an exhibit, and clicking an exhibit opens the document at the passage that supports it. The narrative, the escalation memo, the examiner pack and the audit trail all come off the same record, so they cannot disagree.
Clocks that are watched, not rememberedEvery alert runs a 30-day policy clock from the date of detection. The owner is warned at day 20, the escalation summary is drafted at day 25, and the case must be with the BSA Officer by then. The reporting clock itself is 30 calendar days from initial detection, 60 where no suspect has been identified.
Agents are versioned, pinned and auditedEach agent's prompt and model version is pinned and changed only with the BSA Officer's approval. A confidence floor of 65% stops anything being called likely below it, every override carries a reason code, and every agent action sits on the same trail as every person's, kept five years from the alert decision.
Configuration

Your thresholds, your clocks, your approvers

The red flags come from FinCEN, the FFIEC manual, FATF and the Wolfsberg Group and are cited on screen; what they are set to is yours, versioned, and approved by a named person before it takes effect.

SettingDefaultChoose from
Band window12 months12 · 18 · 24 months
Minimum observations before a band is used40 observations40 · 60 · 100 observations
Raise a flag above2.0× the band top2.0 · 2.4 · 3.0× the band top
Recommend escalation above5.0× the band top4.0 · 5.0 · 6.0× the band top
Transshipment days over the direct service10 days7 · 10 · 14 days
Party look-back18 months18 · 24 · 36 months
Confidence floor65%60 · 65 · 70%
With the BSA Officer byDay 25Day 22 · 25 · 27
Connections

Works with the systems a trade desk already runs on

Trade finance systempresentations, credits, amendments and documentary collections
Payments hubreimbursements and wires, with the ordering customer
Public trade statisticsmarket unit-value bands by goods code, rebuilt monthly
Vessel tracking datavoyages, berths, ports and direct-service schedules
Customer due diligence systemparties, affiliates and expected activity
Case management and filingescalated cases, and filing by the BSA Officer alone
What it changes

The difference, in numbers.

Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.

target
4days
median from alert to a decided outcome, against a 30-day policy clock matched to the SAR clock
Decided on day 4
policy clock 30 days
target
Every
alert closed or escalated with a reason code, the evidence considered and a named person on the record
target
3 in 4
alerts cleared by the Challenger agent with a written innocent explanation and the document that proves it, before a person opens them
Cleared with an explanation
157 of 210 alerts a month at the demo bank

“demo” = seen in the working solution, on its sample trade data · “target” = the design goal, measured in the live solution · “estimated” = our estimate from the demo bank's design volumes · “typical” = published figures (FinCEN Advisory FIN-2010-A001, February 18 2010 — over 17,000 suspicious activity reports describing trade-based money laundering between January 2004 and May 2009, covering more than $276 billion; 31 CFR 1020.320(b)(3) — a report no later than 30 calendar days after the date of initial detection, 60 where no suspect is identified; 31 CFR 1020.320(e) on confidentiality; FFIEC BSA/AML Examination Manual, Trade Finance Activities; FATF trade-based money laundering risk indicators; Wolfsberg Group, ICC and BAFT Trade Finance Principles). People, companies, banks, vessels and references named on this page are fictional — characters and sample data in the working solution.

Questions

What trade and financial crime teams ask us.

What is trade-based money laundering detection?

Trade-based money laundering detection is how a bank finds value being moved through its trade business — over- and under-invoicing, phantom or circular trades, routes that make no commercial sense, and payers with no recorded relationship to the trade. This solution screens every presentation, documentary collection and reimbursement against 86 cited red flags, then has six agents reason across price, route, parties and documents and write the case, with a named person deciding every outcome.

What are the red flags for trade-based money laundering?

The library on screen carries 86 of them, each cited to FinCEN's trade-based money laundering advisory, the FFIEC BSA/AML manual's trade finance section, FATF's risk indicators or the Wolfsberg, ICC and BAFT Trade Finance Principles — among them a unit price outside the market band, a third-party payer the credit does not name, an amendment that widens the goods description with no reason, a transshipment beyond the direct service, and goods described differently across documents.

How does it tell whether a price is plausible?

The Pricing agent normalizes the declared price to a price per kilogram, builds a 12-month band for the goods code from public trade statistics, and plots the customer's own shipments of that code against it. On the sample alert, USD 18.40 a kilogram sits 5.1 times above a band of USD 2.10 to 3.60 while the customer's own nine shipments all sit inside it. The agent never scores a code with fewer than 40 observations; it says there is no market data and asks for an analyst.

Does a trade AML alert change the decision on the letter of credit?

No. Examining a presentation under UCP 600 is trade operations' decision, on their own five-banking-day clock, and the Document agent is explicitly barred from re-examining it. The financial crime case runs alongside and is never visible on that screen.

Can trade operations or relationship staff see that a case exists?

No. As 31 CFR 1020.320(e) requires, no case, alert or filing indicator appears on a trade operations screen, a relationship screen or any customer-facing view, and exports are redacted by rule. In the working solution you can switch to the trade operations role and open the same shipment: the credit, the documents and the clock are there, and nothing else is.

What happens to the alerts the agents clear?

They close with the innocent explanation the Challenger agent wrote and the document that proved it, both kept for five years and both visible to an auditor. That matters because an examination samples the closed alerts first: a clearance with a written reason and its proof reads as a decision, not a dismissal.

Do people stay in control of every decision?

Yes. Agents read, compare, draft and propose; they never close, escalate or file. The investigator decides, the BSA Officer approves every escalation and decides and files every report, and neither can take the other's step. Every closure carries a reason code, the evidence considered and a signature whose meaning is recorded.

How does a solution like this go live on our own trade book?

The Agentic Solution Engine builds and deploys it from your requirements, your documents and your rules — the typologies and their thresholds, the clocks, the reason codes, the approvers and the roles — and it goes live once every quality gate has passed. The red flags ship cited; what they are set to, and who signs what, is configured to your policy.

See it on
your trade book.

We'll run Trade-Based Money Laundering Detection on a sample of your own past presentations and alerts.