A reporting entity must monitor its customers to appropriately identify, assess, manage and mitigate its ML, TF and proliferation financing risks, and (for Australian establishments) monitor for unusual transactions and behaviours that may give rise to a suspicious matter reporting obligation. Unusual includes unusually large or complex transactions, unusual patterns, activity with no apparent economic or lawful purpose, and activity inconsistent with what the entity knows about the customer, the relationship, the customer's risk or source of funds or wealth. Rules 6-35: monitoring must cover all s 41(1)(d) to (j) grounds and, for offences, at least money laundering, terrorism and its financing, proliferation financing, sanctions breaches, organised crime, hate groups, human trafficking and people smuggling, sexual exploitation, drug, arms and goods trafficking, corruption and bribery, counterfeiting, fraud including scams and identity theft, tax crime, extortion, forgery, piracy, insider trading and market manipulation, environmental crime, robbery, kidnapping, smuggling, murder and grievous bodily harm, cybercrime and any offence the program rates high risk. Intermediary institutions must monitor item 31 services likewise (s 39F(2)). Civil penalty per service.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.