Maintain a defensible control framework aligned to your regulatory obligations.
| Control | Category | Status | Priority | Owner | Last Review | Evidence |
|---|---|---|---|---|---|---|
Activity vs Expected Profile Monitoring Compares what a customer actually does on the account with what they told you they would do at sign-up, and flags when the two no longer match. | Transaction Monitoring | Not Started | High | Unassigned | Not set | 6 |
Rapid Movement / Pass-Through Detection Spots money that arrives and leaves almost immediately, where the account is being used as a channel to move funds on rather than to hold or spend them. | Transaction Monitoring | Not Started | High | Unassigned | Not set | 6 |
Money-Mule & Network Detection Finds accounts being used by other people to receive and pass on dirty or stolen money, and links them together when they are part of the same ring. | Transaction Monitoring | Not Started | High | Unassigned | Not set | 6 |
Crypto Blockchain Analytics Monitoring Uses blockchain analytics to check where crypto sent or received by a customer has been, and flags links to mixers, illicit services or sanctioned addresses. | Transaction Monitoring | Not Started | High | Unassigned | Not set | 5 |
Sanctions List Screening (Customer & Transaction) Checks every customer and payment against official sanctions lists before money moves, so the firm does not deal with a sanctioned person or entity. | Screening | Not Started | High | Unassigned | Not set | 6 |
Sanctions Screening Coverage & Calibration Testing Regularly tests the sanctions screening engine with known good and bad names to prove it actually catches what it should and is not silently letting hits through. | Screening | Not Started | Medium | Unassigned | Not set | 5 |
Name-Screening Fuzzy-Match Tuning Adjusts how loosely or tightly the screening engine matches names so it keeps catching real hits while cutting the flood of false alarms. | Screening | Not Started | Medium | Unassigned | Not set | 5 |
Account Takeover Detection The firm spots when someone other than the real customer has gained control of an account, by watching for sudden changes in device, login and payment behaviour. | Transaction Monitoring | Not Started | High | Unassigned | Not set | 5 |
Showing 1 to 8 of 8 controls
This tool produces a control specification for design and discussion. It is not legal advice; validate thresholds, ownership and status against your own risk assessment and the cited sources before implementing. Your register is kept in this browser (not on a server); we only store the contact details you provide when you request an export.