AML compliance does not end when a client is on-boarded.

Ongoing monitoring is the process of reviewing clients, transactions and risk profiles over time to ensure the firm’s understanding of the client remains current and appropriate.

Under a risk-based AML framework, firms are expected to continue monitoring higher-risk relationships after onboarding.

Why Ongoing Monitoring Matters

A client who initially appears low risk may later present elevated risk indicators. For example:

ownership structures may change;
new jurisdictions may become involved;
transaction behaviour may change;
sanctions exposure may emerge; or
source of funds concerns may arise later.

Without ongoing monitoring, those changes may never be identified.

Monitoring Is Risk-Based

Not every client requires the same level of review. Higher-risk clients generally require more frequent review, additional scrutiny and stronger oversight.

Lower-risk clients may require less intensive monitoring. This is why monitoring frequency is often linked to the client’s risk ratings.

What Does Ongoing Monitoring Include?

Monitoring may involve periodic KYC reviews, updating client information, reviewing ownership structures, reassessing risk ratings, reviewing transaction patterns, checking sanctions or PEP status and documenting review outcomes.

The extent of monitoring should reflect the level of risk.

Why Monitoring Often Fails

Many AML failures occur not at onboarding, but afterwards. Common problems include review dates being forgotten, inconsistent review processes, poor record keeping, unclear responsibilities and lack of escalation procedures.

This becomes particularly difficult for smaller firms managing reviews manually.

Monitoring and Audit Trails

A strong monitoring framework should create a clear record showing when reviews occurred, who completed them, what changes were identified, whether risk ratings changed and what actions were taken.

Regulators often focus heavily on whether firms can demonstrate ongoing oversight, rather than simply initial onboarding.

Monitoring Is Part of Governance

Ongoing monitoring is not just an administrative reminder system. It forms part of the broader governance framework of an AML program. It helps demonstrate that risks are actively managed, escalation pathways exist, reviews are occurring consistently and compliance obligations are operationalised in practice.

A Practical Approach for Smaller Firms

Many firms worry that monitoring requires large compliance teams or expensive enterprise systems. In reality, effective monitoring often depends more on consistency, structured workflows, proper scheduling and clear accountability.

A practical, repeatable process is usually more valuable than a highly complicated system that staff struggle to use consistently.

A good starting point is to build monitoring into the same structured onboarding workflow so review triggers and responsibilities are clear from day one.

By Amira Ward and Daniel Ward

Flagship AML

Published May 2026 • Estimated reading time: 4 minutes

What Is Ongoing Monitoring in AML/CTF Compliance?