Skip to content
ESEN

Compliance that sees the money others miss.

Manage money laundering and terrorist financing risk end to end: SARLAFT risk matrix, AI-driven risk profiling, transaction monitoring and money mule detection with Cerebrito, all the way to an STR ready for the UIAF, Colombia's financial intelligence unit.

AML/CFT monitoring
LIVE
Customers assessed312,480
AML/CFT signals24
Cases to STR3
Money mule network detectedCerebrito · 7 linked accounts
>0%
fewer false positives with AI segmentation and rule tuning*
+0
sanctions lists, watchlists and sources for KYC/KYB and due diligence
$0
for the second module: fraud and AML on a single platform, with no duplicate licenses
0 months
from implementation to go-live, integrated with your core via API

Know. Monitor. Report.

The FRAML MS AML module covers the entire SARLAFT cycle (Colombia's AML/CFT risk management system) on a single platform, with Cerebrito as the intelligence layer that connects every signal.

01 · KNOW

Customer and risk

Risk-based due diligence
  • 360° profile of customers and counterparties
  • Inherent and residual SARLAFT risk matrix
  • AI-driven risk factor segmentation
  • PEPs, relatives and political campaigns
02 · MONITOR

AML/CFT signals + Cerebrito

Smart detection of unusual transactions
  • Configurable rules and AI models
  • Money mule and straw man detection
  • Network graphs and fund flows
  • Tiered escalation workflows
03 · REPORT

STRs and regulatory reports

Evidence ready for the regulator
  • STR documentation and UIAF certificates
  • Regulatory reports in the required file format
  • Traceable handling of court and law enforcement requests
  • International information-sharing agreements

Share transaction data with FRAML MS AntiFraud: a single customer view for fraud and AML/CFT.

The Compliance Officer's console, from risk matrix to report.

Every SARLAFT stage documented, rated and traceable in one place, with CSV and PDF reports for committees, auditors and supervisors.

Risk management · ISO 31000

Your SARLAFT matrix, live and measurable

Document, rate and monitor AML/CFT risks using your organization's own methodology, without spreadsheets.

  • Full configuration: stages, risk levels, impact, likelihood, causes, processes and factors.
  • Inherent and residual risk: controls linked to causes, with effectiveness assessment and bulk upload.
  • Action plans with follow-up for the risks that need them.
  • Heat map and comparison between the current and previous matrix.

Heat map · Residual riskCurrent

LowModerateHighExtremeX axis: impact · Y axis: likelihood
360° profile · AI-driven rating

Know your customer beyond the onboarding form

Every customer or counterparty with their financial history, international flows and a risk level calculated by artificial intelligence.

  • Basic data: individual or legal entity, economic activity and PEP status.
  • Automatic net worth variance: flags disproportionate increases between reported financial year-ends.
  • International transactions by country to detect triangulation through tax havens.
  • Profile risk level defined by your organization and calculated by the model.
RISKTECH S.A.S.Legal entity · Wholesale trade · Customer since 2021

Profile risk levelHIGH

Net worth variance+312%
Reported incomeCOP 1,840M
Outbound flows6 countries
High-risk jurisdictions2

Fictitious data for illustration purposes.

Risk factor segmentation

Segments that reflect how your portfolio really behaves

Segment customers, products, channels and jurisdictions manually or with artificial intelligence models, and compare each customer against their peer group.

  • Four factors: customer, product, channel and jurisdiction, as required by SARLAFT.
  • AI modeling: unsupervised clustering and outlier detection within each segment.
  • Reports by jurisdiction and customer distribution by segment.

Segmentation · Customer factorAI model

Red dots are customers whose behavior falls outside their segment.

Transaction monitoring

AML/CFT rules built by your team, no coding required

Design typologies with a visual builder and combine them with AI and graphs to detect unusual transactions.

  • Rule builder: field, operator, data type (date, number, lists, tables), value and logical operator.
  • Communication template linked to each rule.
  • Escalation workflows by tier and approval order.
  • Management reports: signals by status, rating and jurisdiction, in CSV and PDF.

Rule · Cash structuringHigh

tx.type='CASH_DEPOSIT'AND tx.amount<reporting_thresholdAND COUNT(tx) 72h≥4AND SUM(amount) 72h>reporting_threshold

Other active typologies

Pass-through funds (in and out < 24 h)
High
Multiple unrelated senders
Medium
Transaction with a high-risk jurisdiction
High
PEPs · Campaigns · International agreements

Customers who require enhanced due diligence, under control

Dedicated management for every sensitive population, with escalation workflows and reports by jurisdiction.

  • PEPs and relatives: documented flagging from the customer record, listing and case management.
  • Political campaigns and parties: identification and tracking of organizations and electoral processes.
  • International tax information-sharing agreements, configurable by country.
  • 3,000+ sanctions lists and watchlists and sources for KYC/KYB.

Enhanced due diligenceIn progress

PEP · National public office
Linked 1st-degree relative
Escalated
Political party · Regional campaign
Contributions under review
Tier 2
Tax information-sharing agreement
Customer with tax residency in 2 countries
Identified
Watchlist match
Name-match validation
Critical
STRs · Regulatory reports · Requests

Report on time, with every piece of evidence in place

From the analyzed case to regulatory evidence, without rebuilding case files or assembling report files by hand.

  • STR documentation: supporting evidence, due diligence and certificates issued by the UIAF.
  • Regulatory reports: select the period and download the file ready to upload to the UIAF.
  • Court and law enforcement requests: logging, persons named, handling and response, with reports by requesting authority.
  • Full audit trail of who did what, when and from where.

Regulatory reports · Current periodUp to date

STR · Case 2026-0147
Evidence: 12 · UIAF certificate attached
Filed
Cash transactions
File generated · ready to upload
Generated
Court request · Attorney General's Office
3 persons named · response in progress
In progress
Products offered
Due in 5 days
Pending
DashboardsAlert management by day, month and analyst
Customer profile360° view of customers and counterparties
Risk matrixInherent, residual and action plans
ControlsEffectiveness and bulk CSV upload
SegmentationRisk factors, manual or AI-driven
Customer riskAI-driven profile rating
Transaction monitoringRules, alerts and escalation
Graph analyticsRelationships and transaction flows
STR reportsEvidence and UIAF certificates
PEPsManagement, listings and jurisdiction
Campaigns and partiesOrganizations and electoral processes
Court requestsAuthorities, persons and responses
International agreementsTax information sharing
Regulatory reportsUIAF files by period
SecurityUsers, profiles and audit trail

An AI-powered AML/CFT analyst that never stops investigating.

Cerebrito brings its cognitive layer to AML/CFT risk: it talks with the Compliance Officer in plain language, connects accounts, devices and counterparties, and flags money mule networks before the money disappears.

AI compliance chat

“Which PEP customers had unusual transactions this month?” Instant answers and summaries.

Money mule detection

Correlates inflows, outflows, devices and identities to prioritize the accounts acting as pass-throughs.

Forensic rule monitor

Measures the efficiency of each AML/CFT typology and suggests recalibrating, loosening or retiring ineffective rules.

Model audit

Assesses data quality and the behavior of segmentation and rating models.

Cerebrito AML● Connected to FRAML MS AML
Ask Cerebrito anything…
AML/CFT network analysis

Follow the money from end to end.

The graph engine maps senders, pass-through accounts, devices, IPs and ultimate beneficial owners in real time to expose laundering structures, straw men and money mule networks.

Pass-through funds: money comes in and goes out within hours, unrelated to the declared activity.
Many-to-one: multiple seemingly unrelated senders pay into the same account.
Shared device: the same phone or IP operates accounts belonging to different identities.
Structuring: withdrawals and transfers kept below reporting thresholds.

A complete case, from signal to report, in a single case file.

Every alert arrives with the context the analyst needs, and every decision is documented for the committee, the auditors and the UIAF.

Step 1 · Detection

AML/CFT red flag

Rules, AI models and graphs identify the unusual transaction and score it.

Step 2 · Analysis

Investigation in context

360° profile, net worth variance, relationship network and Cerebrito's summary on the same screen.

Step 3 · Escalation

Tiered decision

The case moves up the approval workflow defined by your organization, all the way to the Compliance Officer.

Step 4 · Reporting

Documented STR

Evidence, due diligence and the UIAF certificate filed with a full audit trail.

Case file · Case 2026-0147Possible money mule network
HIGH RISK
Pass-through funds in under 24 hoursCOP 186M received from 23 senders · dispersed to 5 accounts
Rule
Profile inconsistent with activityReported income of COP 2.1M per month · account opened 45 days ago
Profile
Linked network identified7 accounts and 2 shared devices across 5 identities
Graph
Cerebrito summaryPattern consistent with a dispersal money mule account. Escalation recommended.
AI
Escalated and approvedAnalyst → Coordinator → Compliance Officer
Approved
STR filed with the UIAFEvidence and certificate stored in the case file
Closed

Fictitious case for illustration purposes.

Proprietary technology + AML/CFT expertise.

With roots going back to 2002 and AMLRISK experience since 2007, we support banks, fintechs, credit unions, trust companies, insurers and brokerage firms in Colombia and Latin America.

Fraud and AML on a single platform

The second module at no extra cost: one integration, one customer view.

go-live in 4 months

Core integration via API and Dynamic Message Mapping; value you can see from the pilot run.

Your data stays with you

No transfer to third parties, in compliance with Colombia's data protection law (Law 1581 of 2012).

World-class infrastructure

Runs on Oracle Cloud (OCI), with a 99.9% availability commitment.

Ongoing support

Rule and model calibration, monthly continuous-improvement committees and expert support.

Regional regulation, understood

Terminology, workflows and reporting adapted to each country's framework.

Colombia SARLAFT · SAGRILAFT · SFC · UIAF Ecuador UAFE · Superintendencia de Bancos Costa Rica Legitimación de Capitales · SUGEF 12-21 Mexico PLD-FT · CNBV Panama Law 23 of 2015 · UAF · Superintendencia de Bancos Dominican Republic Law 155-17 · UAF · Superintendencia de Bancos
ISO/IEC 27001:2022 certified, Bureau Veritas ISO 9001:2015 certified, Bureau Veritas

From the first meeting to production, with a clear plan.

Discovery

Assessment of your SARLAFT, risk factors and data sources.

Segmentation and model

Design of segments, risk matrix and AML/CFT typologies.

Testing and tuning

Validation, calibration, training and handover.

go-live

Production launch with ongoing support and continuous-improvement committees.

See how FRAML MS AML and Cerebrito detect a money mule network and take it all the way to the STR.

Book a 45-minute demo with our AML/CFT compliance specialists. We'll walk you through the full cycle using scenarios from your organization.

Talk to an expert