Compliance Glossary

Correspondent banking is a bank-to-bank arrangement in which one institution (the correspondent) provides payment, settlement, or account ...

Counter-Financing of Terrorism (CFT) is a regulatory and compliance framework that requires financial institutions to detect, prevent, and ...

A critical business service is a service that a financial firm delivers to external customers which, if disrupted, could cause intolerable ...

Cryptocurrency laundering is a money laundering method that uses digital assets like Bitcoin to disguise the origin of criminal proceeds, ...

A cryptocurrency mixer is a service that pools and scrambles digital assets from many users, then redistributes equivalent amounts to break ...

CSAM Detection is a fraud and financial crime compliance process that identifies payment transactions and account activity connected to ...

A Currency Transaction Report (CTR) is a mandatory AML filing that U.S. financial institutions must submit to FinCEN whenever a customer ...

A custodial wallet is a cryptocurrency wallet in which a third-party service provider holds and controls the private keys on behalf of the ...

A darknet market is an illicit online marketplace, hosted on anonymizing networks like Tor, where vendors and buyers trade drugs, stolen ...

Data lineage is a metadata practice that tracks how data moves and changes from its origin through every transformation, system, and ...

Data minimization is a data-privacy principle that requires organizations to collect, process, and retain only the personal data strictly ...

A Data Protection Officer (DPO) is a designated compliance role that oversees an organization's data protection strategy, monitors GDPR ...

Data residency is a data-privacy requirement that dictates the physical or geographic location where an organization's data is stored, ...

De-risking is a practice in banking and financial services in which institutions exit or restrict business relationships with entire ...

Decentralized Finance (DeFi) is a category of financial services built on public blockchain networks that replicate banking and trading ...

Deduplication is a KYC data management process that identifies and consolidates duplicate customer records across one or more systems, so ...

Deemed Export is a U.S. export control rule that treats the release of controlled technology or source code to a foreign national inside ...

Denied Party Screening (DPS) is a compliance process that checks customers, counterparties, and transaction participants against ...

A Designated Non-Financial Business or Profession (DNFBP) is a category of non-bank business, such as lawyers, accountants, real estate ...

Disaster Recovery (DR) is an operational resilience discipline that defines the plans, procedures, and technologies a financial institution ...