Nesting refers to the practice in which a financial institution, typically a smaller or less-regulated bank or payment intermediary, gains indirect access to the international financial system by using the correspondent banking services of another institution without fully disclosing its downstream clients or transactional risks.
In AML/CFT terms, nesting creates a concealed layer of activity inside an established correspondent relationship, materially increasing exposure to money laundering, terrorist financing, sanctions evasion, fraud, and regulatory arbitrage.
At its core, nesting obscures the true originators and beneficiaries of transactions by embedding one institution’s customers within another institution’s correspondent account.
This opacity weakens the effectiveness of due diligence controls, hampers traceability, and can result in unintended facilitation of illicit financial flows.
Nesting is sometimes referred to as “downstream clearing” or “nested correspondent banking.”
The practice becomes problematic when the correspondent bank is unaware of the respondent bank’s sub-respondent clients or has insufficient visibility to assess their risk profiles.
Financial crime actors exploit nested structures to take advantage of weak AML programmes, less rigorous onboarding requirements, limited regulatory supervision, or jurisdictional gaps.
Once inserted into the payment chain, these actors can use high-velocity, cross-border channels to layer and integrate illicit proceeds.
A common pattern involves a small regional bank, MSB, PSP, or foreign FI using another institution’s USD, EUR, or GBP clearing access to route transactions that would otherwise be heavily scrutinised or rejected.
Because the correspondent assesses only the immediate respondent, it may not have the data, transparency, or controls necessary to detect suspicious patterns originating at lower tiers.
Key risks arise when:
Nesting intersects with multiple pillars of AML/CFT oversight:
Correspondents must understand not only the respondent institution but also whether it allows downstream clients and how those clients are supervised.
Nesting presents elevated ML/TF risk because it introduces entities and customer segments over which the correspondent has little to no visibility.
Data gaps created by nested activity limit the correspondent bank’s ability to detect anomalies, particularly in cross-border, high-velocity corridors.
Hidden downstream actors may involve sanctioned persons, embargoed jurisdictions, or prohibited industries.
FATF, BIS, and national regulators expect clear governance, contractual controls, and ongoing oversight of any respondent that can itself offer correspondent services.
Nesting often arises from legitimate needs (for example, small banks requiring access to major currency clearing) but becomes high-risk when exploited for illicit purposes.
Drivers include:
Nesting typically includes the following elements:
Nesting can manifest in various operational and structural configurations:
A respondent bank quietly allows another institution to route transactions through its account without informing the correspondent.
Multiple intermediaries create a chain of transfers that makes it difficult to identify the originator.
Downstream fintechs or money service businesses may use nested access to avoid direct regulatory scrutiny.
High-volume commercial payments are combined with suspicious transfers, complicating detection.
Nested institutions may exploit jurisdictions with weak beneficial-ownership, CDD, or reporting requirements.
Certain patterns may indicate the presence of a nested correspondent relationship:
A regional bank in a high-risk jurisdiction uses a correspondent’s USD account.
Without approval, it grants sub-respondent access to a money service business dealing in high-risk remittance corridors.
The MSB routes large flows through the regional bank, masking true customers and triggering regulatory concerns.
A payments firm integrates with a respondent bank to issue IBANs or facilitate multi-currency transfers.
The PSP onboards downstream clients, including high-risk merchants, without informing the correspondent.
Elevated fraud and money laundering alerts appear at the correspondent level, but granular customer data is unavailable.
An offshore corporate services provider uses nested arrangements to route funds through multiple intermediaries.
The complexity of the structure obscures beneficial ownership, making it difficult for the correspondent to identify whether transfers relate to shell companies or illicit proceeds.
Unchecked nesting exposes institutions to substantial AML/CFT, operational, and reputational risks:
Nesting remains difficult to detect due to factors such as:
Supervisory expectations regarding nesting continue to intensify:
Require correspondents to assess respondents for downstream access and understand the nature of their business, controls, and customer base.
Increasingly mandate enhanced due diligence, periodic reviews, and clear disclosure of sub-respondents.
Must include board-level oversight of correspondent banking risk, clear policies prohibiting unauthorised downstream access, and documented escalation mechanisms.
Should define whether downstream access is allowed and, if so, the transparency and monitoring obligations attached.
Effective management of nesting risk enables institutions to:
Institutions that proactively identify, monitor, and control nested relationships build a more resilient compliance posture and support global efforts to reduce financial system misuse.
Move at crypto speed without losing sight of your regulatory obligations.
With IDYC360, you can scale securely, onboard instantly, and monitor risk in real time—without the friction.