Inpay Injunction: What New Customer AML Failings Mean
Payment firms do not get much room for error on onboarding. One weak check, one rushed approval, and the whole compliance stack starts to creak. The Inpay injunction story matters because it puts a bright light on new customer AML failings, and that is where many firms still get sloppy. You can have smart monitoring, good transaction rules, and decent reporting, but if the front door is broken, the rest of the house is at risk. Who wants to explain that to a regulator after the fact?
Look, this is not a niche problem. It sits at the point where growth pressure meets control failure, and that is usually where trouble starts. For payment providers, fintechs, and gambling operators that rely on fast onboarding, the lesson is plain. Speed is useful. Weak due diligence is not.
What the Inpay injunction tells us
The core issue is simple. If a firm opens the door to new customers without enough AML scrutiny, it can create exposure long before suspicious activity shows up. That is especially painful in payments, where funds can move fast and the trail can get messy.
Regulators do not only care about whether you filed reports later. They care about whether your controls stopped bad risk from entering in the first place. That is the real test. And it is a stricter one than many firms expect.
“Onboarding is not a sales step. It is a control step.”
That sounds blunt, but it reflects how supervisors think. If your customer checks are thin, your risk model is built on sand.
Why new customer AML failings happen
Most failures do not come from one giant mistake. They come from a string of smaller ones. A team wants to reduce drop-off. Product wants faster approval. Operations wants fewer manual reviews. Then the risk team gets asked to keep up with volume (on a budget, naturally).
Here are the usual weak points:
- Insufficient identity checks for individuals or businesses
- Poor beneficial ownership review for corporate accounts
- Weak source of funds checks where risk is higher
- Over-reliance on automated screening without human escalation
- Inconsistent risk scoring across products or markets
These flaws are common because they hide inside process design. They do not always look dramatic. But they compound fast. Like a football team giving away soft goals, the damage builds before anyone admits the defence is broken.
How the Inpay injunction should change onboarding
If your onboarding process still treats AML as a box-tick, that needs to change. The best firms build checks into the customer journey from the start, then keep tightening them as risk changes. That means more than adding another form field.
- Set risk-based tiers so low-risk customers move faster and higher-risk cases get deeper checks.
- Verify ownership and control for business customers before activation.
- Escalate mismatches immediately instead of letting exceptions pile up.
- Test your approval logic with sample cases, not just policy documents.
- Track rejection and referral rates to spot where staff are overriding controls too often.
And do not ignore recordkeeping. If you cannot show why a customer was approved, you have a problem even if the file looked fine at the time. Evidence matters. A lot.
Where payments teams usually miss the risk
Payments teams often focus on transaction monitoring because it is visible and measurable. That is useful, but it is only half the job. The other half sits in customer acceptance, where weak screening can let high-risk entities in before monitoring ever starts.
That split matters in sectors like gaming, where payment flows, player behaviour, and fraud signals can overlap. A gambling operator or its payment partner may see a clean transaction first and a problem later. By then, the account has already done damage.
Good AML starts before the first transfer.
What you should audit right now
If you run payments, compliance, or risk, this is the moment to sanity-check your controls. Not in a vague way. In a hard, specific way. Ask where you would struggle to defend your process if a regulator asked for the file tomorrow.
- How many customers were approved with manual overrides?
- What percentage of business accounts had verified beneficial owners?
- How often do analysts reject incomplete source of funds evidence?
- Are high-risk countries or sectors treated differently in practice, or only on paper?
- Do you test onboarding controls after product changes?
Use the answers to find drift. That is where the problems sit. Not in the policy deck. In the daily shortcuts.
Why this case will matter beyond one firm
The Inpay injunction is a reminder that regulators are watching the edges of compliance, not just the headline cases. They want to know whether firms can stop bad money at the door. They also want to see whether governance matches the risk the business has chosen to take.
For operators and payment providers, that means one thing. If your growth strategy depends on frictionless onboarding, your AML design has to be sharper than ever. Otherwise, you are just moving the bottleneck from sales to enforcement.
The next move for your team
Start with one question: if your newest customer failed a full AML review today, would you catch it before activation? If the answer is maybe, your process is not ready. Tighten the checks, review the overrides, and make sure your evidence trail can survive scrutiny. The firms that do this well will keep moving. The rest will keep explaining why they thought speed was enough.
