Proportionality, prioritisation, and effectiveness –

The risk-based approach (RBA) has long been the cornerstone of effective financial crime risk management. Yet as financial institutions face growing expectations to demonstrate effectiveness, support financial inclusion, respond to evolving threats and harness new technologies, applying an RBA in practice has become both more important and more challenging.

Today, the Wolfsberg Group publishes its updated Guidance on the Risk-Based Approach, setting out the collective view of the twelve member banks on how financial institutions can design and maintain financial crime risk management programmes that are proportionate, prioritised and effective. Building on the Group’s longstanding work in this area, the guidance updates our work on the RBA dating back to 2006, providing a practical framework for embedding risk-based decision-making across policies, controls, governance and resource allocation.

At a time when regulators, supervisors and industry participants are increasingly focused on outcomes rather than process alone, the guidance reinforces a simple principle: a focus on everything is a focus on nothing. Financial institutions should direct attention and resources towards the highest-priority risks while stopping, reducing or redesigning activities that do not materially strengthen the fight against financial crime.

The Wolfsberg Group believes that an effective RBA requires more than risk assessments and controls. It depends on strong governance, clear risk appetite, collaboration between the public and private sectors, and a supervisory environment that enables institutions to move beyond tick-box compliance. The guidance therefore not only outlines the core elements of proportionality, prioritisation and effectiveness, but also highlights the critical role of risk-based supervision, training and culture in achieving better outcomes.

As the global standard-setting and regulatory agenda continues to evolve, this guidance reaffirms the Wolfsberg Group’s commitment to advancing a genuine risk-based approach: one that enables financial institutions to focus resources where they matter most and make a demonstrable contribution to preventing, detecting and disrupting financial crime.

You can access the full guidance here.