How to Conduct Source of Funds Checks

A client says the money came from “business income”. Another provides a bank statement showing a recent transfer from a personal account. On paper, both may look acceptable at first glance. Under regulatory scrutiny, neither explanation is enough on its own. That is why knowing how to conduct source of funds checks properly matters. It is not a paperwork exercise. It is a control that helps firms make defensible onboarding decisions, identify inconsistencies early, and protect the business from avoidable exposure.

For regulated firms, source of funds checks sit at the point where customer due diligence becomes operationally meaningful. You are not simply collecting documents. You are assessing whether the funds involved in a transaction or business relationship are consistent with what you know about the client, their risk profile, and the purpose of the relationship. Done well, this supports stronger AML controls and clearer escalation routes. Done poorly, it creates exactly the kind of weakness regulators tend to find during reviews.

What source of funds checks are really meant to prove

Source of funds refers to the specific origin of the money being used in a transaction or made available within the business relationship. That is different from source of wealth, which looks at how a client accumulated their overall wealth over time. The distinction matters because firms often blur the two and either ask for too little or ask for the wrong evidence.

If a client is investing, depositing, purchasing, or moving funds through your service, your task is to understand where that particular money came from. In some cases, the answer is straightforward, such as salary savings built up in a mainstream bank account. In others, it may involve dividends, sale proceeds, inheritance, crypto-related activity, intercompany transfers, or funds received from third parties. Each scenario requires evidence that matches the explanation given.

The objective is not to eliminate every uncertainty. It is to obtain enough reliable information to form a reasonable view that the funds are legitimate and consistent with the client’s profile and the nature of the activity.

How to conduct source of funds checks using a risk-based approach

The most effective way to conduct source of funds checks is to avoid a one-size-fits-all process. A low-risk domestic salaried client should not face the same level of challenge as a complex corporate structure, a high-risk jurisdiction exposure, or a politically exposed person. The standard should be consistent, but the depth of enquiry should reflect risk.

Start with the context of the relationship. What product or service is the client using? What is the expected transaction size, frequency, and purpose? Does the activity align with the client’s occupation, business model, geographic footprint, and known wealth indicators? These questions determine whether a basic source of funds review is sufficient or whether enhanced due diligence is required.

From there, obtain a clear client explanation in plain terms. Vague descriptions such as “savings”, “investments”, or “business revenue” should be treated as starting points, not final answers. You need enough detail to understand the path of funds. For example, if the money comes from a property sale, when was the property sold, who was the seller, what amount was received, and into which account were the proceeds paid?

The next step is evidence gathering. The key is relevance, reliability, and traceability. A bank statement may show funds arriving, but on its own it may not explain the underlying origin. A sale agreement may support an asset disposal, but you may still need proof that the proceeds were actually received by the client. Strong source of funds checks often rely on more than one document because one document explains the event and another shows the movement of money.

What evidence is usually appropriate

Appropriate evidence depends on the source claimed. Employment income may be supported by payslips, employment contracts, tax records, and bank statements showing salary credits. Business income might require company financial statements, dividend vouchers, shareholder resolutions, invoices, or proof of distributions. An inheritance could call for probate documents, a solicitor’s letter, and evidence of receipt into the client’s account. Sale proceeds may be supported by contracts, completion statements, and bank records.

Corporate and higher-risk structures usually require deeper review. If funds are coming from a company account, you may need to understand the company’s activity, ownership, and why that company is funding the transaction. If money is moving through multiple accounts or jurisdictions, the path should be followed with care. The more layers there are, the stronger your rationale should be for accepting the explanation.

There is also a judgement call around document quality. Originals are preferable where possible, but digital copies are common in onboarding. What matters is whether the documents are credible, internally consistent, and sufficiently current. Screenshots, cropped extracts, or incomplete statements rarely provide enough assurance unless supported by stronger evidence elsewhere.

Red flags that should change your assessment

Good source of funds checks are not only about collecting documents. They are about testing plausibility. If the documents do not fit the story, or the story keeps changing, that is where risk becomes clearer.

Warning signs include unexplained third-party payments, sudden large deposits inconsistent with the client’s profile, circular movement of funds between related parties, use of cash without a convincing rationale, and reluctance to provide basic supporting evidence. Jurisdictional exposure can also shift the risk position, particularly where funds pass through countries associated with sanctions concerns, corruption exposure, or weak AML oversight.

Some cases are not clearly acceptable or clearly suspicious. They sit in the middle. A client may provide documents that look authentic but still leave gaps around beneficial ownership, the commercial rationale for a transfer, or the true economic source behind a payment. In those cases, escalation is more important than speed. Pushing an incomplete file through onboarding creates downstream risk that is far harder to unwind later.

Documentation, rationale, and audit defensibility

One of the most common failings in source of funds reviews is not that the firm asked no questions. It is that the file does not show how the final decision was reached. Regulators and internal audit teams want to see the reasoning, not just the documents.

Your records should show what the client stated, what evidence was obtained, what risks were identified, how inconsistencies were resolved, and why the outcome was considered acceptable, rejected, or escalated. If enhanced due diligence was applied, the file should explain what triggered it. If exceptions were allowed, the approval route and rationale should be explicit.

This is where operational discipline matters. A source of funds check should not depend entirely on individual judgement without a documented framework. Firms need clear procedures, escalation thresholds, and guidance on acceptable evidence types. That does not mean every case can be reduced to a checklist. It means the judgement exercised is structured, consistent, and capable of standing up to challenge.

Common mistakes firms make when conducting source of funds checks

The first is confusing collection with assessment. Gathering documents is not enough if nobody tests whether they make sense together. The second is accepting generic explanations because the client is commercially attractive or operational teams are under pressure to onboard quickly. The third is failing to revisit source of funds where activity changes materially after onboarding.

There is also a tendency to over-rely on single documents. A bank statement can confirm receipt, but not necessarily legitimacy. A company registration document may show that a business exists, but not that it genuinely generated the funds in question. A sensible review looks at the full picture.

Another frequent weakness is poor internal calibration. Front-line teams, compliance analysts, and approvers may all apply different standards if procedures are unclear. That creates inconsistent decisions and weakens your control environment. Firms that perform well in this area usually have practical guidance, sample scenarios, and quality assurance over decisions.

Building a stronger source of funds control framework

If your business is reviewing how to conduct source of funds checks more effectively, focus on process design as much as case handling. Define what triggers a check, when enhanced review is required, what evidence is generally acceptable by scenario, and when a case must be escalated to compliance or the MLRO. Align this with your customer risk assessment and transaction monitoring approach so source of funds is not treated as a standalone exercise.

Training is equally important. Staff need to understand the difference between source of funds and source of wealth, how to identify gaps, and how to document conclusions. Templates can help, but only if they prompt meaningful analysis rather than formulaic wording.

For firms operating in complex or high-growth environments, periodic independent review adds value. External challenge can identify where procedures look adequate on paper but are applied inconsistently in practice. This is often where advisory support from specialists such as Complipal can help strengthen both day-to-day decision-making and long-term audit readiness.

A well-run source of funds process does more than satisfy a regulatory expectation. It gives your business a firmer basis for deciding who you are prepared to deal with, on what terms, and with what level of confidence. That is not friction for its own sake. It is part of building a compliance framework that protects reputation, supports sustainable growth, and holds up when decisions are tested.