Claude AI for AML and Financial Crime Compliance: SAR, KYC, OFAC, and Alert Triage

Claude AI for AML, BSA, and Financial Crime Professionals

Financial crime compliance is one of the most documentation-intensive disciplines in banking. A single SAR narrative can take 2–4 hours to write. A KYC file for a complex entity requires assembling 15–20 documents, performing beneficial ownership mapping, and producing a risk-rated summary. OFAC screening generates hundreds of false positives that each require documented analysis. Claude AI with ClaudeFinLab's AML & RegTech templates reduces this documentation burden dramatically.

AI adoption in AML is accelerating: 70% of financial institutions are increasing AI investment for AML compliance, and use of AI in anti-fraud programs is expected to triple. Global RegTech market exceeded $22 billion by mid-2025. The opportunity is not replacing compliance judgment — it's freeing analysts from manual documentation so they can focus on the investigative work that actually catches financial crime.

SAR Narrative Writing with Claude AI

The Suspicious Activity Report narrative is the most critical document a compliance officer writes. It must answer who, what, when, where, and why in clear, factual language that supports law enforcement action. FinCEN has published guidance that SAR narratives are often inadequately documented — Claude AI helps analysts write narratives that meet FinCEN standards.

• "SAR narrative for structuring: Customer XYZ LLC (business checking account, customer since 2019) made the following cash deposits over 7 days: March 3 $9,800, March 4 $9,500, March 5 $9,700, March 7 $9,400, March 8 $9,900, March 10 $9,600, March 11 $9,850. Total: $67,750. No CTR was filed as each deposit was below $10,000. Customer is a landscaping company with expected cash deposits of $2,000–$5,000/week. When queried by the branch manager, the owner said he 'didn't want to fill out paperwork.' Write a complete SAR narrative following FinCEN 5W format: who, what, when, where, why suspicious. Include the structuring analysis."
• "SAR narrative for business email compromise: Customer ABC Corp received wire transfer instructions via email purporting to be from their CFO directing a $185,000 wire to an account at a bank in Hong Kong. The wire was executed by an AP clerk before the instructions could be verified. Subsequently, the customer's actual CFO denied sending the instructions — the email was a spoof. The Hong Kong account received the funds and was immediately emptied. Write the SAR narrative covering: (1) the fraud typology (BEC), (2) the sequence of events with specific dates and amounts, (3) the red flags, (4) investigation steps taken, (5) law enforcement contact."
• "SAR narrative for structuring + layering (complex): Individual customer deposited $48,000 in cash over 6 weeks in amounts averaging $7,800. Funds were immediately transferred to three different cryptocurrency exchanges (Coinbase, Kraken, Binance) in equal thirds. Customer is stated occupation: food truck operator, expected cash volume $3,000–$5,000/week. Crypto conversions were to Bitcoin and then transferred to an unhosted wallet. Write the SAR covering both the structuring element and the layering through crypto."

KYC and Customer Due Diligence with Claude AI

Know Your Customer (KYC) and Customer Due Diligence (CDD) requirements under FinCEN's CDD Rule mandate that banks collect beneficial ownership information and perform risk-based due diligence on all customers. For complex entities — multi-layer LLCs, trusts, foreign entities — this is extremely time-consuming. Claude AI structures the ownership mapping, risk rating, and file assembly.

• "KYC file assembly for a complex business entity: Customer: Westbrook Holdings LLC. Managing Member: Sunrise Capital Management LLC (another LLC). Sunrise Capital is owned 60% by John Davis (DOB 1965, US citizen) and 40% by Clearview International Ltd (a Cayman Islands company). Clearview is owned by a Liechtenstein foundation whose beneficiaries are not disclosed. Map the ownership structure. Which individuals reach the 25% beneficial owner threshold? What additional due diligence is required for the Cayman/Liechtenstein structure? Is this a high-risk structure requiring EDD?"
• "Risk rating for a new commercial customer: Landscaping company, cash-intensive, annual revenue $2.4M. Owner is a naturalized US citizen born in Mexico. Business operates in a border state (Texas). Prior adverse media: owner was named (not charged) in a 2019 local news story about a labor contractor dispute. No OFAC matches. No prior SAR history. Apply the risk rating matrix: score geography risk, business type risk, product risk, customer risk, adverse media factor. Produce the overall risk rating and list all EDD triggers."
• "CDD refresh analysis: Existing customer — money services business (check casher/remittances), annual transaction volume has grown from $800K to $3.2M since onboarding 3 years ago. No KYC refresh done. New FinCEN guidance on MSBs requires enhanced scrutiny for high-volume remittances to Mexico, Guatemala, El Salvador. List all the documents and information that need to be collected in the CDD refresh. Draft the outreach email to the customer requesting the information."

OFAC Sanctions Screening with Claude AI

OFAC screening generates thousands of false positives — common names, phonetic similarities, and partial matches that each require documented analysis. The penalty for blocking a true hit without reporting is severe; equally, blocking a customer transaction based on a false positive creates legal exposure and customer harm. Claude AI structures the match quality analysis and documents the clearance or escalation decision.

• "OFAC false positive analysis: Our screening system flagged 'Mohammed Al-Hassan' (wire recipient, DOB unknown, UAE address) against an SDN entry for 'Mohammed Ali Hassan' (Iranian national, DOB 1962, Tehran Iran). Compare: Name similarity: partial (first and middle name transposed). DOB: no match (we have no DOB for our customer). Nationality: UAE vs Iran — different. Address: UAE vs Iran — different. Is this a false positive? Document the analysis following OFAC compliance guidance and state the disposition: CLEAR / ESCALATE."
• "OFAC true hit analysis: Our customer 'Sinaloa Export Services LLC' is flagged against an OFAC SDNTK designation (Specially Designated Narcotics Trafficker) for 'Sinaloa Exportaciones SA de CV' (a Mexican entity). Both are in the same sector (import/export). Same geographic origin (Sinaloa, Mexico). Our customer was opened 2 years ago. OFAC designation date: 18 months ago. Our customer's account shows $2.4M in cross-border wire transfers to Mexico in the past 18 months. Document: (1) the match analysis, (2) whether this is a true hit, (3) blocking requirement (must block and file report within 10 business days if true hit), (4) required reporting to OFAC."

Transaction Monitoring Alert Triage

Transaction monitoring systems generate enormous alert volumes — many financial institutions face false positive rates of 90–95%. Level 1 and Level 2 analysts spend most of their time on alerts that will ultimately be cleared. Claude AI helps analysts make disposition decisions faster by structuring the typology analysis and documenting the rationale.

• "Alert triage: Transaction monitoring alert — Rule 'Structuring Indicator' triggered on account 12345 (ABC Restaurant LLC). Transactions: six ACH debits to 'US FOODS' between $8,200 and $9,600 over 10 days totaling $51,400. Customer profile: Full-service restaurant, expected payment size $8,000–$15,000 to food distributors, monthly basis. Is this structuring? What is the difference between legitimate recurring vendor payments and structuring? What additional information do I need to make the disposition? Write the investigation report if this is a false positive."
• "High-priority alert triage: Customer (auto dealer, sole proprietor) received 12 cash deposits totaling $95,000 in 30 days from 8 different individuals. Amounts range from $5,000 to $12,000. Customer explanation: 'customers are paying car deposits in cash.' Auto dealers do receive cash deposits — but what are the red flags here? Apply the 'funnel account' typology: multiple individuals depositing cash that is then consolidated. Draft the Level 2 investigation report with a SAR recommendation."

Regulatory Exam Management with Claude AI

BSA/AML examinations by the OCC, Federal Reserve, FDIC, or FinCEN are high-stakes events. Exam preparation, document production organization, and management response drafting all benefit from structured AI assistance.

• "BSA exam preparation: Our bank is undergoing a federal BSA/AML examination next month. The examiners have provided a pre-exam document request list. Key items: BSA/AML Policy (current, board-approved), Risk Assessment (latest), SAR filing log (12 months), CTR filing log (12 months), training completion records, OFAC screening procedures, and sample of 20 customer files across risk tiers. Organize these requests into a tracking table with: document name, owner, due date, status (not started/in progress/complete), and location. Identify any gaps — which documents typically cause exam failures?"
• "Draft a management response to an examiner finding: Finding: The bank's Customer Due Diligence procedures do not require collection of beneficial ownership information for all legal entity customers in compliance with FinCEN's CDD Rule (31 CFR 1010.230). Specifically, sole proprietorships were exempted from the CDD rule in the bank's procedures, but this is incorrect — sole proprietorships are not legal entities and are exempt from the BO collection requirement, but the procedures were poorly written and created confusion. Write the management response: root cause, corrective action plan with timeline, and validation method."

Getting Started with ClaudeFinLab's AML Tools

ClaudeFinLab's AML & RegTech category provides seven SKILL.md templates covering SAR narrative writing, KYC/CDD file assembly, OFAC screening analysis, transaction monitoring alert triage, regulatory exam management, model risk governance, and financial crime investigation reporting. Each template is designed for immediate use — copy into Claude's Projects system prompt and start with your next alert or case file.