Fintech Basics

A simplified knowledge hub covering essential fintech, banking, and digital finance terms. Clear explanations of key concepts, technologies, and industry fundamentals, all in one place.

KYC, KYB, AML, CFT — Full Compliance Dictionary

KYC, KYB, AML, CFT — Full Compliance Dictionary

KYC, KYB, AML, and CFT are the four foundational compliance pillars that every fintech, payment company, and digital bank must implement. These standards protect the platform from fraud, financial crime, and illegal activity while ensuring global regulatory alignment across EU, USA, GCC, LATAM, and other major regions. The explanations below are simple, practical, and designed for real operational use. KYC — Know Your Customer (Individual Verification) KYC is the process of verifying the identity of individual users before allowing them to access financial services. Those checks usually sit inside broader onboarding flows and verification models, where limits, retries, and escalations are decided. KYC includes:Passport or national ID validation Liveness and biometric checks Address verification (if required by local law) Mobile number verification Sanctions and PEP screening Risk scoring and onboarding limitsPurpose: Prevents identity fraud, account misuse, and unauthorized access. KYB — Know Your Business (Business Verification) KYB ensures that companies, merchants, and corporate clients are legitimate and compliant. KYB includes:Company registration verification Ownership and UBO checks Director identity verification Tax number validation Business activity classification Sanctions, PEP, and adverse media screeningPurpose: Prevents shell companies, corruption, and high-risk merchant onboarding. AML — Anti-Money Laundering AML focuses on monitoring and preventing the movement of illegally obtained funds. AML includes:Continuous transaction monitoring Pattern and velocity checks Cross-border activity analysis Suspicious activity detection Rule-based triggers and automated alerts SAR and STR reporting proceduresPurpose: Stops criminals from using financial platforms to move money. CFT — Countering the Financing of Terrorism CFT targets terrorist financing networks and related suspicious flows. CFT includes:OFAC, UN, EU, UK sanctions screening PEP monitoring High-risk corridor restrictions Enhanced monitoring for certain regions Behavior-based risk scoringPurpose: Prevents financial systems from facilitating terrorism-related activity. List and screening mechanics are expanded in sanctions, PEP, and watchlist screening. How These Layers Work TogetherLayer Focus Applies ToKYC Individual identity UsersKYB Business legitimacy Companies and merchantsAML Illegal transactions All financial activityCFT Terror financing detection Cross-border transactionsTogether, they create a complete compliance shield. When you need adjacent infrastructure vocabulary—ledgers, safeguarding, settlement—use core banking terms every fintech should know as a companion glossary. Real-Life Example (Germany to Brazil Business Payment) A German client sends a business payment to a Brazilian IT supplier.KYC (Germany) User submits national ID Liveness verification is completed Address validated via German digital ID records Sanctions and PEP lists checked against EU databasesKYB (Brazil) Supplier’s CNPJ checked with Receita Federal Directors’ CPF numbers validated Company cross-checked with Brazilian tax and regulatory lists Business screened for adverse mediaAML Monitoring System reviews transaction history FX conversion EUR to BRL scanned for abnormal behavior Pattern is normal, no AML alert triggeredCFT Screening Transaction re-scanned across OFAC, UN, and EU terrorism lists No matches, clear for payoutFinal result: Payment settles instantly into the supplier’s BRL account using the local payment rail. SummaryKYC verifies individuals KYB verifies businesses AML monitors transaction behavior CFT prevents terrorism financingThese four layers form the global standard for compliance and are essential for any fintech operating across borders.

AML Red Flags, Risk Indicators & Typologies

AML Red Flags, Risk Indicators & Typologies

Anti–Money Laundering (AML) systems protect fintech platforms from financial crime, fraud, terrorism financing, and illicit cross-border movement of funds. A modern fintech must detect suspicious patterns early, block high-risk activity, and escalate cases based on global AML typologies. This post explains the main AML red flags, behavioral risk indicators, transaction typologies, and real-life examples across Germany, Sweden, USA, Brazil, Saudi Arabia, and Oman. 1. Identity and Onboarding Red Flags These are early warning signs during registration or KYC and KYB checks. Common identity red flagsMismatched user information (name does not match ID) Unclear or altered documents Excessive use of VPN or proxy for identity verification Multiple failed verification attempts Mobile number not matching country of residence High-risk nationality with no economic justification Address unverifiable or frequently changed Business owners unwilling to disclose shareholders or UBOsReal-life example — Germany A user in Berlin uploads a passport photo with inconsistent fonts and an altered expiration date. System detects document tampering, KYC is escalated, and the account is rejected. 2. Transaction Behavior Red Flags Transaction-level indicators often reveal patterns of laundering, structuring, or concealment. Key transaction red flagsUnusually high transaction velocity Repeated same-amount transfers Transactions just below reporting thresholds Sudden activity after long dormancy Multiple transfers between unrelated users Frequent transfers to newly onboarded accounts Round-number transfers (for example EUR 10,000 repeatedly) High-volume cross-border activity without a clear source of incomeReal-life example — Sweden A user with a monthly income of SEK 22,000 suddenly receives 15 inbound transfers of SEK 5,000 each from unrelated accounts. System flags velocity and unclear purpose, account is frozen pending review. 3. Cross-Border Risk Indicators Cross-border movement is a major AML focus, especially in multi-rail fintech ecosystems. High-risk cross-border patternsSending or receiving funds from high-risk jurisdictions Rapid movement between multiple countries Frequent corridor switching to avoid monitoring FX conversions with no clear economic purpose Unexplained remittance flows from corporate to personal accounts Routing funds through multiple intermediaries (layering)Real-life example — USA A user in New York receives USD 9,800 from a sender in a high-risk jurisdiction. Five minutes later, he sends USD 9,750 to Brazil. Pattern matches classic layering and is escalated as STR. 4. Merchant and Business Red Flags Businesses often present unique risks due to their transaction volume and patterns. Corporate AML red flagsCash-heavy activity inconsistent with business model Fake or non-operational business addresses Unusually high chargeback or refund pattern Mismatched MCC category (wrong business type) Circular payments between related companies Businesses with no website or online presence Shareholders listed in multiple unrelated companies Sudden large-volume settlement requests from new merchantsReal-life example — Brazil A newly onboarded Brazilian merchant claims to be an IT consultancy but receives 300 micro-payments in one day, similar to gambling operations. System flags MCC mismatch and unusual activity, merchant is paused. 5. Treasury, FX, and Liquidity Red Flags AML applies beyond user transactions. Treasury operations also carry risk. FX and treasury red flagsRepeated FX conversion between same currencies FX arbitrage attempts on small spreads liquidity pools receiving unexplained inflows Mismatched settlement instructions Treasury activity inconsistent with business volume Frequent cancellations or reversalsReal-life example — Saudi Arabia A corporate client repeatedly converts SAR to USD to SAR without business justification. System identifies FX-looping behavior, blocks activity, and investigates. 6. Payment Flow and Structuring Red Flags Structuring is intentional splitting of transactions to avoid reporting. Indicators of structuringMultiple small transactions slightly below reporting thresholds Multiple users sending same amounts to same recipient Transaction bursts followed by inactivity Fragmentation of large payments into dozens of small onesReal-life example — Oman An Omani user attempts to avoid OMR reporting thresholds by sending 18 transfers of OMR 490 each (threshold OMR 500). System flags structuring and an STR is raised. 7. Fraud and Social Engineering Indicators Money laundering often overlaps with fraud behavior. Fraud-related red flagsDevice fingerprint mismatch Multiple accounts from the same device or IP Login attempts from multiple countries in a short time User unable to explain transaction origins Sudden change in user behavior (new device, new IP, new country) Account accessed by third-party device fingerprintsReal-life example — Sweden A Swedish account shows login attempts from Stockholm, then four minutes later from Dubai using the same credentials. System triggers device mismatch, immediate freeze, and anti-fraud review. 8. High-Risk Product Usage Patterns Certain financial behaviors automatically raise suspicion. Product-level red flagsHeavy use of prepaid cards with no salary or income Rapid cash-in followed by instant cash-out Use of multiple virtual accounts for the same user Merchants requesting early settlement repeatedly Misuse of wallet-to-wallet transfersReal-life example — Germany A user makes repeated EUR 2,000 top-ups from multiple cards, then instantly transfers everything to a newly created virtual account. Pattern triggers rapid in and rapid out, flagged as a laundering attempt. 9. Typical AML Typologies (Global Standards) Major international AML typologies include:Placement: introducing illicit funds into the financial system Layering: moving funds repeatedly to obscure origin Integration: reintroducing funds as legitimate income Trade-Based Money Laundering (TBML): inflated or fake invoices between companies Terrorist Financing: small, repeated payments to high-risk individuals or unknown groups Abuse of Digital Platforms: using fintech apps for micro-laundering at scale10. Real-Life Regional Typology ExamplesBrazil: criminals use PIX to move illicit funds through hundreds of micro-transactions. Fintech must detect micro-structuring and high-velocity patterns. USA: payroll fraud schemes route money through fintech wallets before exiting via crypto or offshore accounts. Germany: fake online shops collect money from victims and quickly distribute via multiple SEPA Instant transfers. Saudi Arabia: shell companies invoice each other to hide the origin of funds used for prohibited activities. Oman: personal accounts used for business payments without documentation, classic smurfing behavior.11. How Fintech Systems Detect Red Flags Advanced AML engines use behavioral analytics, real-time transaction scoring, machine-learning anomaly detection, device fingerprinting, sanctions and PEP screening, velocity and pattern analysis, corridor profiling, rule-based thresholds, and automated case escalation workflows. High-risk transactions are flagged, frozen, reviewed manually, and escalated to regulators (SAR or STR) if needed. 12. SummaryAML red flags are specific behaviors that indicate potential financial crime. Risk indicators are patterns that signal increased suspicion. Typologies are globally recognized laundering methods.Fintech platforms must detect all three in real time, across all corridors, using automated systems and strict compliance controls.

Interchange Fees, MDR & Merchant Pricing Models

Interchange Fees, MDR & Merchant Pricing Models

Interchange fees, MDR (Merchant Discount Rate), and pricing models form the financial backbone of card payments. These determine how much merchants pay for accepting card transactions and how acquirers, processors, and fintechs generate revenue. Understanding these concepts is essential for building or operating any payment, acquiring, or merchant-focused fintech product. Below is a clear, full, production-ready explanation with real-life examples using Germany, USA, Brazil, Sweden, Saudi Arabia, and Oman. 1. Interchange Fees (Paid to Issuing Banks) Interchange fees are the fees the acquirer pays to the issuing bank (the customer’s bank) for every card transaction. Merchants do not pay interchange directly, it is deducted inside the MDR fee. Interchange is set by:Visa and Mastercard National schemes (for example Mada in Saudi Arabia) Regulation (EU interchange caps)Interchange depends on:Card type (debit, credit, premium) Region (EU, US, Brazil, GCC) Transaction type (online, POS) MCC (merchant category code) Domestic vs. international transactionTypical interchange ranges:EU (Germany, Sweden): 0.20% (debit), 0.30% (credit) USA: 1.15% to 2.50%+ Brazil: 0.80% to 2.00% Saudi Arabia (Mada): around 0.50% Oman: 0.90% to 1.80%EU is the cheapest due to regulation. USA and Brazil are the most expensive. 2. MDR (Merchant Discount Rate) MDR is what the merchant actually pays per transaction. MDR includes:Interchange fees (goes to issuing bank) Scheme fees (Visa, Mastercard, Mada) Acquirer markup Payment gateway or PSP markup Risk, fraud, and compliance costsFormula: MDR = Interchange + Scheme Fees + Acquirer Margin + PSP or Fintech Margin Typical MDR ranges:EU (Germany, Sweden): 1.2% to 2.0% USA: 2.2% to 4.0% Brazil: 2.5% to 4.0% Saudi Arabia and Oman: 1.5% to 2.5%Local regulations and card types influence pricing heavily. 3. Blended vs. Interchange++ Pricing Models a) Blended Pricing Merchant receives one single rate for all cards. Example:MDR = 2.5% (all Visa and Mastercard transactions)Simple for SMEs, but less transparent. b) Interchange++ Pricing Merchant pays actual interchange plus fixed markup. Example:Interchange (varies by card) 0.30% Acquirer Fee EUR 0.10 per transactionUsed by enterprises for transparency. c) Tiered Pricing (USA Model) Three tiers: Qualified, Mid-Qualified, Non-Qualified. Common with US acquirers. 4. Domestic vs. International Pricing Domestic cards are lower fees, international cards are higher fees. Example: A Saudi merchant accepting:Mada (domestic) at around 0.5% to 1.0% International Visa or Mastercard at 2.0% to 3.0%International transactions carry higher fraud risk, FX conversion, and cross-border scheme fees. 5. Scheme Fees (Visa, Mastercard, Mada) Scheme fees are paid directly to card networks. They include network fees, cross-border fees, compliance fees, authorization and settlement fees, and brand usage fees. These vary by country and card type. Examples:EU: low USA: moderate Brazil and GCC: higher6. Processor Fees and PSP Fees Beyond interchange and scheme fees, processors add authorization fees, settlement fees, dispute or chargeback fees, monthly merchant fees, POS rental or gateway fees. PSPs and gateways add their markup on top. 7. Real-Life Example (Germany Merchant Serving USA and Saudi Arabia) Merchant: An online electronics store in Berlin uses a German acquirer. Scenario: Customers pay from Germany, USA, and Saudi Arabia (Mada and Visa). Step-by-step:A German customer (domestic debit card, EU regulated): Interchange: 0.20% Scheme: 0.05% Acquirer and PSP: 0.70% Total MDR: around 0.95%A US customer paying with credit card: Interchange: around 1.80% Scheme fee: 0.40% Cross-border fee: 0.60% Acquirer and PSP: 0.80% Total MDR: around 3.60%A Saudi Arabia customer paying with Visa: Interchange: 1.30% Scheme fee: 0.50% FX and cross-border: 0.50% Acquirer and PSP: 0.70% Total MDR: around 3.00%A Saudi customer using Mada (domestic): Interchange: around 0.50% Scheme: low Acquirer and PSP: 0.70% Total MDR: around 1.30%Mada is far cheaper than Visa or Mastercard for Saudi merchants. 8. How Acquirers and Fintechs Make Money They earn from margin added on top of interchange, gateway fees, POS rental fees, fixed transaction fees, foreign card surcharges, FX spreads for international payments, chargeback fees, and settlement acceleration fees (Brazil). 9. How Merchants Choose Pricing Models SMEs prefer blended pricing, simple onboarding, and one rate for all cards. Enterprises prefer interchange++ for lower cost on domestic cards, full transparency, and negotiable volume pricing. 10. SummaryInterchange is paid to the issuing bank. MDR is what the merchant actually pays. Pricing models include blended, interchange++, and tiered. Costs vary by region and card type. International cards always cost more. Acquirers, PSPs, and fintechs earn from the margin.This is the core structure behind all card payment economics worldwide.