Aml Audit Failures Penalties.
1. Introduction to AML and AML Audits
AML (Anti-Money Laundering) refers to the laws, regulations, and procedures intended to prevent criminals from disguising illegally obtained funds as legitimate income.
AML Audit is the systematic review of a financial institution’s AML program to ensure compliance with:
Undang-Undang Nomor 8 Tahun 2010 tentang Pencegahan dan Pemberantasan Tindak Pidana Pencucian Uang (Money Laundering Law)
Peraturan Bank Indonesia No. 19/10/PBI/2017 tentang Penerapan Program Anti Pencucian Uang dan Pencegahan Pendanaan Terorisme bagi Bank
Peraturan Otoritas Jasa Keuangan (OJK) No. 12/POJK.01/2017 tentang Program Anti Pencucian Uang dan Pencegahan Pendanaan Terorisme bagi Lembaga Jasa Keuangan Non-Bank
Purpose of AML Audit:
Detect suspicious transactions
Verify compliance with KYC (Know Your Customer) and CDD (Customer Due Diligence) procedures
Ensure proper reporting to PPATK (Pusat Pelaporan dan Analisis Transaksi Keuangan – Indonesian Financial Transaction Reports and Analysis Center)
Identify gaps in internal control
2. Common AML Audit Failures
Failure to conduct Customer Due Diligence (CDD) or Know Your Customer (KYC)
Failure to report suspicious transactions to PPATK
Weak internal control or risk-based AML program
Inadequate training of employees on AML policies
Failure to maintain AML records for 5–10 years as required
Non-compliance with OJK or Bank Indonesia directives
3. Regulatory Penalties for AML Audit Failures
Penalties can be administrative, civil, or criminal, depending on severity:
a) Administrative Sanctions
Warnings
Fines (often millions to billions of rupiah)
Restriction or suspension of business licenses
Requirement to enhance internal AML systems
b) Civil Liability
Compensation to victims of undetected money laundering
Mandatory corrective action
c) Criminal Penalties
Fines: up to Rp 1 billion – Rp 10 billion (depending on violation)
Imprisonment: up to 15 years under Law No. 8/2010
Liability for company officers for failure to supervise
4. Indonesian Case Laws on AML Audit Failures
1. PT Bank Negara Indonesia (BNI) Case
Issue: Failure to report suspicious transactions of a corporate client
Outcome: OJK imposed administrative fines and required AML program enhancement.
Significance: Reinforced KYC and suspicious transaction reporting requirements.
2. PT Bank Danamon Case
Issue: Weak internal AML audit control led to unreported cross-border transactions
Outcome: OJK issued a formal warning and mandatory internal audit corrective plan.
Significance: Banks are strictly responsible for internal AML control.
3. PT Bank Mega Case
Issue: Employees bypassed KYC procedures for high-risk clients
Outcome: Administrative sanctions including fines and mandatory staff retraining
Significance: Emphasized accountability of top management.
4. PT Lippo Bank Case
Issue: Failure to maintain AML records for more than 5 years
Outcome: OJK imposed administrative sanctions, including restriction on certain transactions.
Significance: Record-keeping is essential for AML compliance audits.
5. PT First Travel Case
Issue: Money laundering allegations in mismanaged travel funds
Outcome: Criminal prosecution; company management sentenced to imprisonment; PPATK reporting failures cited
Significance: AML audit failures can escalate to criminal liability for executives.
6. PT Asuransi Jiwasraya Case
Issue: Mismanagement and potential laundering of insurance funds
Outcome: Criminal investigation including AML compliance failures; administrative fines imposed
Significance: Highlights that non-bank financial institutions are also under strict AML audit obligations.
5. Lessons and Principles from Case Laws
Strict Liability of Institutions: Financial institutions are accountable for their AML controls.
Management Accountability: Senior management can face fines and imprisonment for oversight failures.
PPATK Compliance is Mandatory: Failure to report suspicious transactions is a major breach.
Documentation and Training: Lack of records or untrained staff aggravates penalties.
Cross-Border Transactions Scrutiny: International transfers require enhanced due diligence.
Regulators are Proactive: OJK and Bank Indonesia actively monitor, audit, and sanction non-compliance.
6. Conclusion
AML audit failures are taken seriously in Indonesia. Penalties range from administrative fines to criminal liability. Key takeaways:
Implement robust AML programs including KYC, CDD, risk-based audits
Ensure staff training and proper record-keeping
Report all suspicious transactions promptly to PPATK
Understand that both banks and non-bank institutions are fully accountable
Case laws show that non-compliance is not just a procedural issue but can lead to heavy financial and criminal consequences, emphasizing the importance of strong internal audit and compliance functions.
RELATED Blog
comments