[{"data":1,"prerenderedAt":523},["ShallowReactive",2],{"navigation_docs":3,"-concepts-how-aml-works":183,"-concepts-how-aml-works-surround":518},[4,25,60,81,153,168],{"title":5,"icon":6,"path":7,"stem":8,"children":9,"page":6},"Getting started",false,"\u002Fgetting-started","1.getting-started",[10,15,20],{"title":11,"path":12,"stem":13,"icon":14},"Introduction","\u002Fgetting-started\u002Fintroduction","1.getting-started\u002F1.introduction","i-lucide-house",{"title":16,"path":17,"stem":18,"icon":19},"Quickstart","\u002Fgetting-started\u002Fquickstart","1.getting-started\u002F2.quickstart","i-lucide-zap",{"title":21,"path":22,"stem":23,"icon":24},"Installation","\u002Fgetting-started\u002Finstallation","1.getting-started\u002F3.installation","i-lucide-server",{"title":26,"icon":6,"path":27,"stem":28,"children":29,"page":6},"Concepts","\u002Fconcepts","2.concepts",[30,35,40,45,50,55],{"title":31,"path":32,"stem":33,"icon":34},"How AML works","\u002Fconcepts\u002Fhow-aml-works","2.concepts\u002F1.how-aml-works","i-lucide-book-open",{"title":36,"path":37,"stem":38,"icon":39},"Events and decisions","\u002Fconcepts\u002Fevents-and-decisions","2.concepts\u002F2.events-and-decisions","i-lucide-activity",{"title":41,"path":42,"stem":43,"icon":44},"Rules","\u002Fconcepts\u002Frules","2.concepts\u002F3.rules","i-lucide-scale",{"title":46,"path":47,"stem":48,"icon":49},"Alerts, cases and reporting","\u002Fconcepts\u002Falerts-cases-reporting","2.concepts\u002F4.alerts-cases-reporting","i-lucide-folder-search",{"title":51,"path":52,"stem":53,"icon":54},"Entities and the graph","\u002Fconcepts\u002Fentities-and-graph","2.concepts\u002F5.entities-and-graph","i-lucide-network",{"title":56,"path":57,"stem":58,"icon":59},"Audit log","\u002Fconcepts\u002Faudit-log","2.concepts\u002F6.audit-log","i-lucide-scroll-text",{"title":61,"icon":6,"path":62,"stem":63,"children":64,"page":6},"Guides","\u002Fguides","3.guides",[65,70,75],{"title":66,"path":67,"stem":68,"icon":69},"Guides by role","\u002Fguides\u002Fby-role","3.guides\u002F1.by-role","i-lucide-users",{"title":71,"path":72,"stem":73,"icon":74},"Integration plan","\u002Fguides\u002Fintegration-plan","3.guides\u002F2.integration-plan","i-lucide-list-checks",{"title":76,"path":77,"stem":78,"icon":79,"badge":80},"Connecting a rail","\u002Fguides\u002Fconnecting-a-rail","3.guides\u002F3.connecting-a-rail","i-lucide-plug","Coming soon",{"title":82,"icon":6,"path":83,"stem":84,"children":85,"page":6},"API reference","\u002Fapi","4.api",[86,91,96,101,106,111,116,121,126,129,134,139,144,149],{"title":87,"path":88,"stem":89,"icon":90},"Authentication","\u002Fapi\u002Fauthentication","4.api\u002F01.authentication","i-lucide-key-round",{"title":92,"path":93,"stem":94,"icon":95},"Errors","\u002Fapi\u002Ferrors","4.api\u002F02.errors","i-lucide-circle-alert",{"title":97,"path":98,"stem":99,"icon":100},"Idempotency","\u002Fapi\u002Fidempotency","4.api\u002F03.idempotency","i-lucide-repeat",{"title":102,"path":103,"stem":104,"icon":105},"Health","\u002Fapi\u002Fhealth","4.api\u002F04.health","i-lucide-heart-pulse",{"title":107,"path":108,"stem":109,"icon":110},"Entities","\u002Fapi\u002Fentities","4.api\u002F05.entities","i-lucide-user-round",{"title":112,"path":113,"stem":114,"icon":115},"Events","\u002Fapi\u002Fevents","4.api\u002F06.events","i-lucide-send",{"title":117,"path":118,"stem":119,"icon":120},"Decisions","\u002Fapi\u002Fdecisions","4.api\u002F07.decisions","i-lucide-gavel",{"title":122,"path":123,"stem":124,"icon":125},"Alerts","\u002Fapi\u002Falerts","4.api\u002F08.alerts","i-lucide-bell",{"title":41,"path":127,"stem":128,"icon":44},"\u002Fapi\u002Frules","4.api\u002F09.rules",{"title":130,"path":131,"stem":132,"icon":133},"Screening","\u002Fapi\u002Fscreening","4.api\u002F10.screening","i-lucide-user-search",{"title":135,"path":136,"stem":137,"icon":138},"API keys","\u002Fapi\u002Fapi-keys","4.api\u002F11.api-keys","i-lucide-key",{"title":140,"path":141,"stem":142,"icon":143},"Overview","\u002Fapi\u002Foverview","4.api\u002F12.overview","i-lucide-layout-dashboard",{"title":145,"path":146,"stem":147,"icon":148,"badge":80},"Webhooks","\u002Fapi\u002Fwebhooks","4.api\u002F13.webhooks","i-lucide-webhook",{"title":80,"path":150,"stem":151,"icon":152,"badge":80},"\u002Fapi\u002Fcoming-soon","4.api\u002F14.coming-soon","i-lucide-clock",{"title":154,"icon":6,"path":155,"stem":156,"children":157,"page":6},"Security and licensing","\u002Fsecurity","5.security",[158,163],{"title":159,"path":160,"stem":161,"icon":162},"Data flows","\u002Fsecurity\u002Fdata-flows","5.security\u002F1.data-flows","i-lucide-shield-check",{"title":164,"path":165,"stem":166,"icon":167,"badge":80},"Licensing and metering","\u002Fsecurity\u002Flicensing","5.security\u002F2.licensing","i-lucide-file-badge",{"title":169,"icon":6,"path":170,"stem":171,"children":172,"page":6},"Reference","\u002Freference","6.reference",[173,178],{"title":174,"path":175,"stem":176,"icon":177},"Glossary","\u002Freference\u002Fglossary","6.reference\u002F1.glossary","i-lucide-book-a",{"title":179,"path":180,"stem":181,"icon":182},"FAQ","\u002Freference\u002Ffaq","6.reference\u002F2.faq","i-lucide-circle-help",{"id":184,"title":31,"body":185,"description":511,"extension":512,"links":513,"meta":514,"navigation":515,"path":32,"seo":516,"stem":33,"__hash__":517},"docs\u002F2.concepts\u002F1.how-aml-works.md",{"type":186,"value":187,"toc":493},"minimark",[188,192,197,209,212,219,247,251,254,412,415,419,426,432,436],[189,190,191],"p",{},"You don't need a compliance background to use Sentinel. This page covers the basics.",[193,194,196],"h2",{"id":195},"the-problem","The problem",[189,198,199,200,204,205,208],{},"Criminals make money from fraud, scams, theft, corruption and drugs. That money is risky to spend while it's obviously dirty, so they push it through the financial system until it looks ordinary. That's ",[201,202,203],"strong",{},"money laundering",". Using the financial system to move money to terrorists is ",[201,206,207],{},"terrorist financing",".",[189,210,211],{},"Fintechs attract launderers. Accounts open in minutes, money moves instantly, and there are lots of small transfers to hide among. A wallet opened yesterday can receive money from 20 scam victims and cash it all out by tonight.",[189,213,214,215,218],{},"So governments require every company that moves money to run an ",[201,216,217],{},"anti-money laundering (AML) programme",". In practice that means four things:",[220,221,222,229,235,241],"ul",{},[223,224,225,228],"li",{},[201,226,227],{},"Know your customers."," Find out who they are and whether they're risky.",[223,230,231,234],{},[201,232,233],{},"Watch the money."," Look for patterns that suggest crime.",[223,236,237,240],{},[201,238,239],{},"Investigate and report."," When something looks wrong, look into it. If it's still suspicious, tell the authorities.",[223,242,243,246],{},[201,244,245],{},"Prove it."," Keep records that show a regulator you did all of the above.",[193,248,250],{"id":249},"the-loop","The loop",[189,252,253],{},"Every AML programme follows roughly the same loop, whatever software it uses.",[255,256,258,263,270,274,277,297,300,304,315,340,344,354,358,368,372,382,386,405,409],"steps",{"level":257},"3",[259,260,262],"h3",{"id":261},"onboard","Onboard",[189,264,265,266,269],{},"When someone signs up, you collect their details: name, date of birth, ID number, address, occupation. This is ",[201,267,268],{},"Know Your Customer (KYC)",". An identity verification provider usually checks that the ID is real. Sentinel doesn't do that part; it uses the result.",[259,271,273],{"id":272},"screen","Screen",[189,275,276],{},"You check the customer's name against lists of people you mustn't deal with, or must be careful with:",[220,278,279,285,291],{},[223,280,281,284],{},[201,282,283],{},"Sanctions lists:"," people and companies governments have banned (UN, US OFAC, EU, UK, plus your own country's list).",[223,286,287,290],{},[201,288,289],{},"PEP lists:"," politically exposed persons, such as ministers, senior officials and their families. Dealing with them is allowed, but they get extra scrutiny because of bribery risk.",[223,292,293,296],{},[201,294,295],{},"Adverse media:"," news reports linking someone to crime.",[189,298,299],{},"Names are messy, so screening gives each possible match a score and a person decides.",[259,301,303],{"id":302},"monitor","Monitor",[189,305,306,307,310,311,314],{},"Every transaction is checked against ",[201,308,309],{},"rules"," that describe suspicious patterns, which the industry calls ",[201,312,313],{},"typologies",". For example:",[220,316,317,328,334],{},[223,318,319,320,323,324,327],{},"23 different people send money to one brand-new wallet in 40 minutes (",[201,321,322],{},"fan-in",", typical of scam proceeds collected by a ",[201,325,326],{},"mule",").",[223,329,330,331,327],{},"Someone makes nine transfers of 4,900 when anything over 5,000 gets reported (",[201,332,333],{},"structuring",[223,335,336,337,327],{},"A card is tried with dozens of small purchases to see if it works (",[201,338,339],{},"card testing",[259,341,343],{"id":342},"alert","Alert",[189,345,346,347,349,350,353],{},"When rules fire, the system raises an ",[201,348,342],{},". Most alerts turn out to be innocent. These are ",[201,351,352],{},"false positives",", and the more a system produces, the more analyst time it wastes.",[259,355,357],{"id":356},"investigate","Investigate",[189,359,360,361,364,365,208],{},"An ",[201,362,363],{},"analyst"," looks at the alert. Who is this, what else have they done, who are they connected to? Related alerts are grouped into a ",[201,366,367],{},"case",[259,369,371],{"id":370},"decide","Decide",[189,373,374,375,378,379,208],{},"The analyst proposes an outcome: close as innocent, keep watching, or report. Because this is serious, a second person, the ",[201,376,377],{},"reviewer",", has to approve it. This is called ",[201,380,381],{},"four-eyes",[259,383,385],{"id":384},"report","Report",[189,387,388,389,392,393,396,397,400,401,404],{},"If it's still suspicious, the company files a ",[201,390,391],{},"Suspicious Transaction Report (STR)"," with the country's ",[201,394,395],{},"Financial Intelligence Unit (FIU)",", the government agency that collects these reports. Many FIUs receive reports through ",[201,398,399],{},"goAML",", a system from the UN. Some countries also require a ",[201,402,403],{},"Cash Transaction Report (CTR)"," for every cash transaction above a threshold, suspicious or not.",[259,406,408],{"id":407},"keep-records","Keep records",[189,410,411],{},"Everything is logged and kept for years. Regulators, auditors and partner banks will ask you to prove the programme works: which rules you run, how many alerts you had, how fast you closed them, which reports you filed.",[189,413,414],{},"Sentinel is built to run every step from screening to records. Today it covers screening, monitoring, alerts and the audit log. Cases and reporting are planned.",[193,416,418],{"id":417},"two-hard-rules","Two hard rules",[420,421,422,425],"warning",{},[201,423,424],{},"Don't tip them off."," Telling a customer you've reported them is a crime in most countries. Customers see a generic error, never a reason.",[189,427,428,431],{},[201,429,430],{},"The report goes to your FIU, not the police."," The FIU decides what happens next.",[193,433,435],{"id":434},"where-each-part-of-sentinel-fits","Where each part of Sentinel fits",[437,438,439,452],"table",{},[440,441,442],"thead",{},[443,444,445,449],"tr",{},[446,447,448],"th",{},"Loop step",[446,450,451],{},"Sentinel part",[453,454,455,463,469,477,485],"tbody",{},[443,456,457,460],{},[458,459,262],"td",{},[458,461,462],{},"Uses your KYC provider's result, sent as entity attributes",[443,464,465,467],{},[458,466,273],{},[458,468,130],{},[443,470,471,474],{},[458,472,473],{},"Monitor, alert",[458,475,476],{},"Monitoring and Rules",[443,478,479,482],{},[458,480,481],{},"Investigate, decide",[458,483,484],{},"Alerts today; Cases (planned)",[443,486,487,490],{},[458,488,489],{},"Report, keep records",[458,491,492],{},"The audit log today; Reporting (planned)",{"title":494,"searchDepth":495,"depth":495,"links":496},"",2,[497,498,509,510],{"id":195,"depth":495,"text":196},{"id":249,"depth":495,"text":250,"children":499},[500,502,503,504,505,506,507,508],{"id":261,"depth":501,"text":262},3,{"id":272,"depth":501,"text":273},{"id":302,"depth":501,"text":303},{"id":342,"depth":501,"text":343},{"id":356,"depth":501,"text":357},{"id":370,"depth":501,"text":371},{"id":384,"depth":501,"text":385},{"id":407,"depth":501,"text":408},{"id":417,"depth":495,"text":418},{"id":434,"depth":495,"text":435},"The loop every anti-money laundering programme follows, and where Sentinel fits in it.","md",null,{},{"icon":34},{"title":31,"description":511},"CAKCqimOmaO9WbNJKfdhZ-yIIklC7JoC4eFbLLPNY0I",[519,521],{"title":21,"path":22,"stem":23,"description":520,"icon":24,"children":-1},"What a Sentinel install runs, how to deploy it with Docker or from source, and how to configure and operate it.",{"title":36,"path":37,"stem":38,"description":522,"icon":39,"children":-1},"What happens between sending an event and getting allow, review or block back.",1792169656545]