Jonas Adam Mohamed Osman (Yonas Osman)

Banking compliance series

Correspondent Banking Compliance: Managing Nested and Indirect Risk

Correspondent banking supports international trade and payments but can expose a bank to customers and institutions it does not directly onboard. Compliance therefore depends on understanding the respondent's business, controls and downstream access.

By Jonas Adam Mohamed Osman, known as Yonas Osman · Published 5 October 2026 · Independent educational analysis

Regulatory and risk context

Due diligence should cover ownership, management, licence, supervisory history, markets, customer base, products, AML controls, sanctions exposure and payable-through or nested arrangements. The purpose of the relationship and expected transaction profile should be explicit.

Implementation architecture

Ongoing monitoring should compare activity with the assessed profile and investigate unusual routes, payment transparency gaps and unexpected third-party access. Periodic review is only one trigger; adverse information, ownership change, control failures or rapid volume shifts require earlier action.

Where programmes fail

Questionnaires become ineffective when answers are accepted without evidence or copied forward for years. Banks also fail when they monitor the direct respondent but cannot identify material nested institutions or the origin of incomplete payment data.

Board and senior-management evidence

The board risk view should show concentration by region and respondent, nested exposure, material data gaps, overdue reviews, restrictions, exits and contingency implications. De-risking decisions should be controlled and proportionate rather than automatic.

Five-step control checklist

  1. Define the legal and regulatory scope.
  2. Assign accountable business and compliance owners.
  3. Map obligations to data, systems, procedures and evidence.
  4. Test design and operating effectiveness.
  5. Escalate limitations and verify remediation.
Important: This article is educational analysis. Banks must apply the complete rules, local law, supervisory guidance and institution-specific obligations relevant to their activities.

Primary regulatory references

Related banking-compliance articles

About the author

Jonas Adam Mohamed Osman, known as Yonas Osman, writes evidence-led analysis on banking risk, compliance, quantitative finance and governance.