Which statement best describes the Risk Based Approach (RBA) in AML?

• A. The risk-based approach is used to automatically comply with all sanctions
• B. Allocating resources based on risk level
• C. Eliminating all risk
• D. Allocating resources based on risk level (Correct)

Answer: (D)

RBA in AML means applying controls and resources in proportion to the risk a customer, product, or activity presents. The idea is to assess risk factors—such as customer type, geography, product or service, channel, and transaction patterns—and then allocate attention and resources accordingly. High-risk relationships get enhanced due diligence, more intensive ongoing monitoring, and more frequent review; lower-risk cases receive lighter controls. This approach helps ensure effective safeguarding while using resources efficiently and allows adjustments as risk levels change.

So, allocating resources based on risk level is the best description because it captures the core idea of scaling controls to risk, rather than promising automatic compliance with sanctions or aiming to eliminate all risk, which isn’t feasible.