Compliance Glossary

The Payment Card Industry Data Security Standard (PCI DSS) is a security standard that sets technical and operational requirements for any ...

The Payment Services Directive 2 (PSD2) is a European Union regulation that governs electronic payment services, requiring banks to open ...

Peer Group Analysis is an AML detection technique that benchmarks a customer's transaction behavior against a cohort of statistically ...

Personally Identifiable Information (PII) is any data that can identify a specific person, either on its own or when combined with other ...

Placement is the first of three money laundering stages in which criminal proceeds, typically cash, are introduced into the formal ...

Politically Exposed Person (PEP) is a compliance risk classification that designates anyone who holds or has recently held a prominent ...

Precision is a classification model metric that measures the proportion of positive predictions that are correct, calculated as true ...

Predicate offense is a criminal act that generates proceeds subject to money laundering. It is the foundational offense prosecutors must ...

Primary Account Number (PAN) is a payment card identifier, typically 13 to 19 digits long, that uniquely identifies a cardholder account ...

Pseudonymization is a data protection technique that replaces identifying fields in a record with artificial identifiers, or pseudonyms, so ...

Purple Team is a cybersecurity methodology in which offensive security specialists (the red team) and defensive security specialists (the ...

A ransomware payment is a ransom transfer, usually in cryptocurrency, that a victim sends to attackers to regain access to encrypted data ...

Real-Time Payments (RTP) is a payment system that clears and settles funds between bank accounts within seconds, around the clock, every ...

Recall (sensitivity) is a classification model performance metric that measures the proportion of actual positive cases a model correctly ...

Record linkage is a data processing technique that identifies when records across separate databases represent the same real-world entity, ...

A red flag is a warning indicator in anti-money laundering compliance that signals a transaction, customer, or behavior may involve money ...

Red team is an adversarial testing practice in which an independent group simulates realistic attack scenarios against an organization's ...

Remittance is a payment transfer that moves funds from a sender to a named beneficiary, most commonly across international borders using a ...

Residual risk is a risk management concept that quantifies the level of exposure remaining after an organization's controls and mitigation ...

A respondent bank is a financial institution that receives banking services, including cross-border payment clearing and foreign currency ...