Counter-Terrorism Financing
Counter-terrorism financing is the set of duties and controls that stop money reaching terrorist organisations — screening against designated lists, monitoring for the patterns that fund terrorism, reporting suspicions — enforced alongside anti-money-laundering rules under the same FATF standards. It differs in what it looks for: laundering hides large criminal sums; terrorist financing moves small, often clean sums to a prohibited end.
- Also known as
- CTF, CFT, Terrorist financing controls
- Used at
- every regulated financial firm — banks, payment and e-money institutions, crypto exchanges, remittance companies — as part of the AML/CTF programme required by law
- Binding
- yes — the FATF's recommendations, the EU's AML directives and the coming AML regulation, the UK's Terrorism Act and Money Laundering Regulations, the US Bank Secrecy Act and OFAC sanctions; penalties for failure are criminal as well as regulatory
- Typical controls
- screening of customers and payments against terrorism and sanctions lists (the UN, the EU, OFAC's SDN list, national lists); transaction monitoring rules for CTF typologies (many small payments to one beneficiary, transfers to high-risk jurisdictions, charity and crowdfunding flows); suspicious activity reports; asset freezing on a match
- Typical difficulty
- the sums are small and the sources clean, so the signals are the destination, the pattern and the counterparty — not the amount
- Parties
- the firm's compliance function and MLRO, the financial intelligence unit that receives reports, sanctions authorities, and law enforcement
How counter-terrorism financing controls work in practice
A payments company's AML programme is also its CTF programme, and the difference is in the typologies. Screening runs every customer and every payment against the designated-person lists and stops a match before the money moves; a true match is frozen and reported, a false one — a namesake — is cleared by an analyst with a date of birth and a passport. Monitoring rules look for the shapes terrorist financing takes: a cluster of small transfers from many senders to one recipient; funds moving to or through jurisdictions on the high-risk lists; donations to an organisation whose registration does not match its activity; a customer whose transactions have no economic sense for their profile. A hit produces an alert, an investigation and, if suspicion remains, a report to the financial intelligence unit — and the firm may not tell the customer.
The regime's weight falls on fintechs for two reasons. The products — fast, borderless, low-value payments, prepaid cards, crypto — are exactly what a terrorist financier needs. And enforcement is strict liability in tone: a firm that missed a designated person because its screening list was a week stale has committed the breach, whatever it intended. The controls therefore run on the freshest lists, on every payment, and on both sides of a transaction.
For an acquirer, CTF is inside the AML diligence: list management, screening coverage, the alert backlog, and whether the firm has ever frozen an account and reported it — a firm that has not, in five years, has a screening problem or a very unusual customer base.
Example
A remittance fintech sends €400m a year in small transfers to forty countries. Its screening: real-time checks against UN, EU, OFAC and three national lists, refreshed daily; 0.9% of transfers generate a name match, of which 99.5% are cleared as false within an hour by secondary identifiers. Its monitoring: a rule flags recipients receiving from more than fifteen distinct senders in a month with no business registration; another flags corridors to high-risk jurisdictions above a threshold. In a year: 3,200 alerts, 41 reports to the financial intelligence unit, 2 asset freezes on true matches. Its regulator's inspection asks for the list-refresh logs and the two freeze files, and finds them; a competitor whose screening ran weekly is fined €2m for a designated person who moved €9,000 in the gap.
Common mistakes
- Screening lists refreshed weekly; designations take effect at once. - Treating CTF as AML with a different name and monitoring only for large sums. - Clearing name matches without secondary identifiers, or clearing them so slowly the payment has already gone. - No typologies for the firm's own products — a prepaid card programme monitored like a mortgage book. - Tipping off the customer, which is itself an offence.