The Wolfsberg Group – Guidance on the Risk-Based Approach (Updated)

Reported by The Wolfsberg Group

(Summary shared below. To read full report, go to: https://db.wolfsberg-group.org/assets/6c32b34b-bc02-4e8b-9b3f-f36e9bd109c3/Wolfsberg%20Group%20-%20Risk%20Based%20Approach%20Guidance%20_June2026.pdf)

Global financial institutions should rethink how they manage financial crime risk by focusing less on rigid compliance checklists and more on risk-driven decision making, according to new guidance released by the Wolfsberg Group. The 2026 update argues that effective anti-money laundering and financial crime programs should concentrate resources where risks are highest while reducing or redesigning controls that add little value.

The guidance is built around three principles: proportionality, prioritization and effectiveness. Rather than applying identical controls across all customers and business lines, banks are encouraged to tailor their financial crime programs to their size, business model, geographic footprint and risk appetite. The report also calls for greater use of national risk assessments, public-private collaboration and technology to strengthen risk management.

The Wolfsberg Group says institutions should direct attention toward higher-risk customers, industries, products and jurisdictions instead of treating every relationship the same. Customer ownership structures, exposure to higher-risk countries, unusual transaction patterns, inconsistent customer information and abnormal product usage are among the factors banks should evaluate when determining where enhanced controls are warranted.

The report also urges regulators, supervisors and auditors to move away from a “tick-box” approach to compliance. Instead of measuring success by the volume of documentation or expecting zero compliance failures, examinations should focus on whether institutions produce meaningful outcomes, maintain effective governance and provide useful intelligence that helps authorities combat financial crime.

The guidance concludes that a genuine risk-based approach depends as much on organizational culture as on policy. Senior leadership should establish a strong tone from the top, employees should receive targeted, risk-based training, and institutions should foster critical thinking rather than mechanical rule-following. According to the Wolfsberg Group, financial crime programs that prioritize proportionality, effective resource allocation and measurable outcomes will be better equipped to address increasingly complex and evolving financial crime threats.

Leave a Reply