Banks Must Know Who is Behind the Money
Banks know our names. They store our identity numbers, addresses, occupations, incomes, telephone numbers, and even our transaction patterns. For corporate clients, banks are also required to identify the beneficial owner.
However, money laundering always stems from one simple weakness: the person whose name is recorded is not necessarily the person who actually controls the money. Between the two, there is space that can be filled by companies, accounts, shareholders, managers, proxies, nominees, cross-border transactions, and even multi-layered ownership structures. All of these can be administratively legal.
The problem arises when such legality is used to hide who is truly standing behind the wealth. This is where Indonesia’s 2026 National Risk Assessment (NRA) provides an important warning.
The NRA identifies corruption, narcotics, and technology-based scams as high-risk domestic predicate crimes. High-risk individual profiles include public officials, entrepreneurs, and private sector employees. Regarding business entities, limited liability companies—including State-Owned Enterprises (SOEs), Regional State-Owned Enterprises (BUMDs), and private companies—are classified as profiles requiring high attention. Commercial banks are also identified as a sector requiring strengthened supervision.
This raises an interesting question: Why do banks, a sector that has operated for the longest time with Know Your Customer (KYlo), Customer Due Diligence (CDD), transaction monitoring, and Anti-Money Laundering and Counter-Terrorism Financing (AML/CFT) compliance systems, remain on the risk radar? The answer may be precisely because banks are too important to be without risk.
The Heart of the Financial System
Almost every economic pulse touches a bank. Salaries enter accounts. Companies pay suppliers. Investors move capital. Credit is disbursed. International trade is settled. Corporations conduct transactions. Wealth moves from one owner to another. Most of this is, of course, legitimate economic activity. The challenge lies exactly there.
Money laundering does not operate by building a counter-financial system, like a ‘struggle’. It operates by hitchhiking on the legitimate financial system. Money from corruption is not red. Narcotics money does not smell. Money from fraud does not carry a stamp saying ‘proceeds of crime’. Once it enters the system, everything turns into numbers.
Therefore, the issue for banks is not merely moving money quickly and safely. Banks must find something very small and dangerous in the midst of something very large and legitimate. They must search for dirty money within an ocean of clean money.
The scale is immense. PPATK statistics show that in July 2026 alone, PPATK received 4.37 million reports of various types, a 9 per cent increase from the previous month. Volume is a challenge, but volume is not the greatest issue. The difficulty lies in the context.
From Forms to Stories
This is where the anti-money laundering regime enters a more difficult phase. For years, compliance has been easily translated into a series of administrative questions: Has the customer’s identity been verified? Is the risk profile available? Has the beneficial owner been identified? Have suspicious transactions been reported?
All of this is important. However, a system can have many forms and still lose the story. In May 2026, PPATTK even brought commercial banks together in a special forum to strengthen the quality of reporting. The standards discussed concerned not just the quantity of reports, but accuracy, relevance, completeness, and timeliness. PPATK also emphasised entity quality through aspects of validity, suitability, and responsiveness.
The message is vital: a high volume of reports does not necessarily mean good information. A transaction report is merely one piece of a story. An account is another piece. The beneficial owner, cross-border transactions, relationships with other accounts, changes in transaction patterns, and the profiles of the parties involved are the subsequent pieces.
If all these are read in isolation, nothing may appear extraordinary. When connected, the story can change. Therefore, the 2026 NRA encourages a crucial shift: from risk identification to risk anticipation, from reactive to preventive, and from transaction monitoring to network analysis. This is the future of banking defence against money laundering.
Compliance is Not the Finish Line
Indonesia has recorded progress in technical compliance. In the Third Enhanced Follow-Up Report published by FATF on 3 June 2026, Indonesia had seven Recommendations with ‘Compliant’ status, 30 ‘Largely Compliant’, and three ‘Partially Compliant’. Recommendation 1, regarding risk assessment and the implementation of a risk-based approach, is in the ‘Largely Compliant’ position. However, this achievement is an assessment of technical compliance. The next challenge is to prove effectiveness: whether these legal instruments, supervision, reporting, and analysis truly result in effective prevention and eradication of money laundering.
This is an achievement worth appreciating. But precisely because the regulatory framework is getting stronger, the battlefield is shifting. The focus is moving from ‘are rules available’ to ‘do rules work’. From technical compliance to effectiveness.
The 2026 NRA explicitly places this transformation as Indonesia’s work towards the FATF 2029 Mutual Evaluation Review: from technical compliance to effectiveness, from fragmented work to integrated collaboration, and from risk assessment to risk mitigation.
Therefore, banks should not be viewed as the defendants in this story. Banks are one of the fortresses. But a strong fortress is not enough to have high walls; it needs radar capable of knowing what is moving behind the horizon.
Who is Behind the Money?
For centuries, the task…