Definition
An AML business risk assessment is the documented analysis a regulated business must produce and keep current of the money-laundering and terrorist-financing risks it faces across its customers, products and services, geographies, delivery channels and transaction types. It rates each risk area, explains the reasoning, and drives the design of the AML programme — which controls apply where, what triggers enhanced due diligence, how transaction monitoring is calibrated, and how resources are allocated.
Regulators expect it to be specific to the actual business, reviewed periodically and after material changes, and demonstrably used rather than a document that sits on a shelf.
For gambling operators, the assessment covers product-specific risks (fast, high-value, cross-border play; anonymous-feeling payment routes; peer-to-peer formats), the markets served, and the operator's own customer base and channels.
In context
For affiliates, the AML business risk assessment is background but it explains why different operators, products and markets carry different levels of verification friction, and why a well-run operator's controls feel calibrated rather than arbitrary. It is the document behind the risk-based approach: the reason source-of-funds requests trigger at particular thresholds, why certain payment methods get extra scrutiny, and why players in some jurisdictions face more checks.
Whether an operator has a genuine, current, business-specific AML risk assessment is exactly the kind of thing regulators probe in enforcement, and it is part of what distinguishes a properly licensed operator. For affiliates doing due diligence on operators, and for larger affiliates who may themselves face AML obligations in some capacity, the concept matters as a marker of whether an operator's compliance is real or nominal.
For affiliate-facing content, the framing is that the AML business risk assessment is the documented, kept-current analysis of an operator's money-laundering risks that drives the design of its whole AML programme, that it is why verification and monitoring are calibrated to product, market and customer risk rather than uniform, and that a genuine current assessment is part of what makes a licensed operator's compliance credible.
Worked example
An affiliate's operator due-diligence notes explain that a properly licensed operator maintains a current, business-specific AML risk assessment that drives its controls — which is why source-of-funds thresholds, payment scrutiny and per-market checks differ in a calibrated way. It treats the existence of a real assessment (as required by the licence) as part of confirming an operator's compliance is genuine.
Related terms
Frequently asked questions
Browse the full iGaming & affiliate glossary — hundreds of EN/RU terms with examples.
← Back to glossary