The decisions that carry legal weight or could tip someone off. AML investigators should never let an agent decide whether to report suspicion, contact a subject about an investigation, release or freeze funds, exit a customer, lower a risk rating, close a case on the customer’s own explanation, or alter the case record. Each needs accountable human judgement.
What are the red lines, and why does each stay with a person?
| Never let the agent | Why it stays with a person |
|---|---|
| Decide whether to file a suspicious report | Reporting is a legal judgement about suspicion, owned by an investigator or reporting officer who answers for it |
| Send anything to the subject that could reveal an investigation | AML rules in many markets prohibit tipping off; even a well-meant explanation can breach it |
| Release frozen funds or lift a restriction | Holds are often tied to reports or legal orders the agent may not see |
| Exit a customer relationship | It affects the customer’s access to services and may itself signal an investigation |
| Lower a customer’s risk rating | A downgrade relaxes future monitoring; the reasoning must be a person’s |
| Close a case on the customer’s explanation alone | The explanation is declared, not proven; closing on it accepts the customer’s word |
| Edit or delete the case record | Investigations must be reconstructable; the record is append-only for that reason |
Why not let a well-certified agent handle some of these?
Because the issue is accountability and hidden context, not accuracy. An agent can be certified to read cases well, flag patterns and draft narratives. Its authority is bounded by five things at once: role scope, certificate, sources, the firm’s own limits and the platform guardrails. But a suspicious report is a personal judgement by someone the law recognises. Tipping off depends on context the agent may not have, such as a request from law enforcement. A frozen account may be frozen because of a report filed by someone else.
The FATF Recommendations, which national AML rules follow, rest on a risk-based approach with suspicious transaction reporting at its centre. That approach assumes people make the calls.
Where does the line blur, and how should investigators handle it?
In three places.
Alert closure. Many firms allow an agent to close alerts that match pre-agreed benign patterns at depth 3. That is acceptable within strict limits and with sampling. What it must never do is close an alert because the customer explained it. A declared explanation is a lead, not a resolution.
Customer messages. An agent may send routine service messages to a customer who happens to be under review. Those messages must be checked against a rule that nothing references restrictions, delays or reviews. If in doubt, the agent should hold the message.
Requests for information. An agent may draft a request to the customer for documents. Whether to send it, and how it is worded, is the investigator’s call during an active case.
What does a red line look like when it reaches an investigator?
Take an investigator at a payments firm. A held item proposes a reply to a customer who has emailed asking why a transfer is delayed. The draft is polite and accurate: it says the payment is “under review by our compliance team”. The account is the subject of an open case.
The investigator declines. The reply would tip off the customer. They escalate to the reporting officer, who agrees a neutral holding response, and note the case so the agent owner adds a rule: no reference to reviews in replies on accounts with open cases.
The method for checking held items is set out in how AML investigators review an AI agent’s decisions. Front-line staff face related but different lines; see what customer support agents should never let an agent do.
How should a team build these lines into daily work?
Put them in the firm’s own limits so the agent refuses or holds them automatically. Train investigators on examples of each from past cases. Sample closures and customer messages from the record weekly. And make sure the agent’s certification is current: certificates lapse after 90 days, and a run that clears no depth drops the agent to depth 1 the same day, at which point all closures return to people.
A structured plan helps; see the AI agent training plan template for AML investigators. Market rules shape the detail, as in AML investigator training in Canadian payments and in Brazil. The full role map is in AI agent skills by role.
Questions people ask
Can the agent draft the suspicious report?
Yes, at depth 2. The investigator or reporting officer reviews, rewrites where needed and decides whether to file.
Can the agent screen names against sanctions lists?
It can run screening and present matches. Deciding whether a possible match is true stays with a person.
What if regulators ask how a case was closed?
The record shows the facts, their sources, the verdict and who decided. That is why it must never be edited.