Professional intermediaries and layering logistics

Trust and company service providers, TCSPs, in FATF's terminology — are the professional class most structurally central to layering, because they are the only actor in the chain whose entire commercial function is the creation, administration and dissolution of the very legal vehicles that layering depends on. A TCSP forms companies, drafts trust deeds, provides registered office addresses, supplies nominee directors and nominee shareholders, and administers the ongoing corporate formalities — annual returns, minute-books, resolutions, that give a shell entity the outward appearance of a genuinely operating business. FATF designated TCSPs as a category of Designated Non-Financial Business or Profession (DNFBP) subject to AML obligations as far back as the 2003 revision of the Recommendations, yet TCSP supervision remains, in the FATF's own recurring mutual-evaluation findings, among the weakest-supervised sectors globally, including in several jurisdictions widely used for cross-border structuring.

The nominee-director model is worth understanding mechanically, because its legality varies enormously by jurisdiction and because the legal form conceals a spectrum of substantive arrangements. At one end sits a genuinely independent professional director who exercises real judgment, understands the underlying business, and can be held to ordinary directors' fiduciary duties; a lawful and unremarkable commercial arrangement common in fund administration and multinational group structuring. At the other end sits the "signature-only" nominee, who signs whatever documents a beneficial owner's instructing intermediary places in front of them, exercises no independent judgment, is frequently unaware of the underlying business at all, and is compensated a flat annual fee regardless of the company's activity level, sometimes serving simultaneously as the named director of hundreds or even thousands of entities, a pattern that leaked-document investigations (the Panama Papers of 2016, the Pandora Papers of 2021, and the FinCEN Files of 2020) have repeatedly documented at scale, identifying individual nominees associated with company counts running into the thousands.

Nominee shareholding follows a parallel logic, and here the drafting device of the declaration of trust or nominee agreement does the concealment work: the nominee holds legal title to the shares on the public register, while a separate, private, and typically unfiled document records that the nominee holds the shares "on trust for" or "as nominee for" the true beneficial owner, who retains all economic and control rights. Because company registries in most jurisdictions historically recorded only the legal shareholder of record, this device alone was sufficient, for decades, to defeat any registry-based beneficial-ownership search — precisely the gap that FATF Recommendation 24, most recently revised in March 2022, and Recommendation 25 (on the beneficial ownership of legal arrangements, revised February 2023) were designed to close, by requiring countries to maintain adequate, accurate and current beneficial-ownership information obtainable by competent authorities, with an explicit expectation (though not an absolute mandate) that this extend to central registries.

The picture in the European Union has been more complicated than the FATF standard alone suggests, because of the Court of Justice of the European Union's landmark ruling in Joined Cases C-37/20 and C-601/20 (Luxembourg Business Registers, 22 November 2022), which struck down the provision of the EU's Fifth Anti-Money Laundering Directive that had granted public, unrestricted access to beneficial-ownership registers, holding that unrestricted public access constituted a disproportionate interference with the fundamental rights to privacy and data protection under the EU Charter. The practical effect was immediate: several member-state registries suspended public online access within days of the ruling, reverting to restricted access requiring a demonstrated legitimate interest. The subsequent EU AML Package — Regulation (EU) 2024/1624 (AMLR) and Directive (EU) 2024/1640 (AMLD6), was drafted with this ruling firmly in mind, and settles on a "legitimate interest" access model intended to satisfy both the transparency objective and the proportionality concern the CJEU identified, though the precise contours of what constitutes a sufficient legitimate interest remain to be tested in practice as member states transpose the framework ahead of the regime's broader application from 2027, alongside the new EU AML Authority (AMLA), established by Regulation (EU) 2024/1620 and headquartered in Frankfurt.

Meanwhile, in the United States, the Corporate Transparency Act's beneficial-ownership reporting regime; intended, when enacted in 2021 and implemented via FinCEN rulemaking from 2022 onward, to require most US-formed and foreign entities registered to do business in the US to report beneficial-ownership information to a non-public FinCEN registry, was substantially narrowed by FinCEN's March 2025 interim final rule, which limited mandatory reporting to entities formed under foreign law and registered to do business in the United States, exempting the overwhelming majority of domestically-formed US companies and their beneficial owners from the reporting requirement altogether. For a practitioner tracing a layering scheme with a US-incorporated shell in the chain after that rule change, the realistic expectation must be recalibrated: US domestic-entity beneficial ownership is, as at 2026, considerably less discoverable through the FinCEN registry route than the original 2021 statutory design contemplated, and alternative discovery routes — state-level registered-agent records, litigation discovery, or MLA to a cooperating US enforcement agency — become correspondingly more important.

For a working official assessing a TCSP-heavy structure, I recommend building a simple two-axis mental map for every entity in the chain: first, is the nominee arrangement, on the facts available, a genuine independent-director relationship or a signature-only proxy, and second, does the entity's home jurisdiction's beneficial-ownership regime actually make the underlying owner discoverable in practice, given the post-CJEU EU access model, the narrowed US CTA scope, or the (often weaker still) regime of the many smaller offshore centres that dominate the TCSP industry's client base. That two-axis map, more than any single legal citation, is what determines whether a given corporate layer in a scheme is a meaningful obstacle to your investigation or a mere formality you can walk through with the right request.

The law-firm client account occupies a uniquely powerful position in the layering toolkit, for a reason that has nothing to do with legal cleverness and everything to do with market structure: a solicitor's or attorney's client (or "trust") account, held at a mainstream regulated bank, benefits from a level of counterparty trust that few other conduits enjoy, precisely because banks have historically treated legal-profession client accounts as inherently lower risk, reasoning that the professional's own regulatory obligations provide a layer of assurance the bank need not independently replicate. That assumption has proven, repeatedly, to be exploitable. A launderer who can persuade or coerce a lawyer to receive and disburse funds through the firm's client account obtains, in a single step, the appearance of a bona fide legal transaction (conveyancing, litigation settlement, escrow for a corporate deal) wrapped around what may be an entirely fictitious underlying matter.

The FATF's own typology reports and numerous national enforcement actions document a recurring pattern: a launderer approaches a lawyer with an ostensibly routine instruction; act as escrow agent for a property purchase, receive settlement funds for a commercial dispute, hold a deposit pending completion of an investment, and the funds move through the client account with minimal scrutiny because CDD on client-account transactions has traditionally been lighter than CDD on the firm's own commercial banking relationship. Some lawyers are unwitting; a smaller but significant number are complicit, deliberately structuring fictitious retainers specifically to launder funds, and in several jurisdictions this pattern has produced criminal convictions of legal professionals for money laundering rather than merely regulatory sanction.

This vulnerability sits directly against the profession's other defining feature: legal professional privilege (LPP), also called attorney-client privilege, which protects confidential communications between a lawyer and client made for the purpose of seeking or giving legal advice, and which most legal systems treat as close to inviolable, subject only to narrow exceptions such as the "crime-fraud" exception recognised in most common-law systems, under which privilege does not attach to communications made in furtherance of an ongoing or contemplated crime or fraud. The tension between AML transparency demands and LPP protection is one of the most contested boundaries in this entire field, and it has been litigated at the highest level in the European context.

The CJEU's ruling in Case C-694/20, Orde van Vlaamse Balies and Others v Vlaamse Regering (8 December 2022), is the essential authority here, though officials frequently misstate what it actually decided. The case concerned DAC6DAC6The EU's mandatory disclosure regime for cross-border tax arrangements bearing specified hallmarks, requiring intermediary reporting., the EU's mandatory disclosure regime for cross-border tax arrangements bearing specified hallmarks, which required "intermediaries" — including lawyers — to report such arrangements to tax authorities, with a narrower fallback obligation for lawyer-intermediaries subject to LPP to notify any other non-privileged intermediary of their own reporting obligation, effectively outsourcing the disclosure. The CJEU held that even this fallback notification obligation infringed Article 7 of the EU Charter (respect for private life, including protection of professional secrecy), because it required the privileged lawyer to disclose to a third-party intermediary, and, indirectly, to the tax authority via that third party; the fact that they had been consulted and the substance of the advice sought, which the Court found undermined the very confidentiality relationship LPP exists to protect. It is critical to state precisely what this ruling did and did not do: it struck down the specific DAC6DAC6The EU's mandatory disclosure regime for cross-border tax arrangements bearing specified hallmarks, requiring intermediary reporting. notification-to-other-intermediaries mechanism as applied to LPP-covered lawyers; it did not abolish DAC6DAC6The EU's mandatory disclosure regime for cross-border tax arrangements bearing specified hallmarks, requiring intermediary reporting. reporting obligations generally, did not exempt lawyers from AML customer due diligence or suspicious-transaction reporting obligations (which rest on a different, non-privileged basis and involve reporting a suspicion rather than disclosing privileged advice), and did not create a general lawyer exemption from beneficial-ownership or transparency regimes. Officials who cite this case as establishing that "lawyers are exempt from DAC6DAC6The EU's mandatory disclosure regime for cross-border tax arrangements bearing specified hallmarks, requiring intermediary reporting." or "lawyers are exempt from AML reporting" are misreading it, and this is precisely the kind of citation error this course trains you to avoid.

The distinction the CJEU is drawing, and the one every practitioner needs to hold clearly — is between disclosing that legal advice was sought and its general subject matter (protected, subject to narrow exceptions) and reporting an objective suspicion of money laundering arising from a transaction the lawyer is asked to execute in a non-advisory, transactional capacity (not protected, and squarely within AML obligations in essentially every jurisdiction with a functioning AML regime, including under the EU's new AMLR, Regulation (EU) 2024/1624, which retains lawyers, notaries and other independent legal professionals as obliged entities when carrying out specified activities such as real estate transactions, company formation, and managing client funds or accounts). A lawyer acting as escrow agent for a property transaction is performing a transactional, not an advisory, function, and the STR obligation attaches without LPP protection; a lawyer advising a client on the legality of a proposed structure, even an aggressive one, is performing an advisory function that LPP protects far more robustly, subject to the crime-fraud exceptionCrime-fraud exceptionThe doctrine that privilege does not attach to communications made in furtherance of an ongoing or contemplated crime or fraud. where the advice itself is sought in furtherance of an ongoing fraud.

For an investigator, the practical consequence is that a suspicious transaction moving through a law-firm client account is not insulated by LPP merely because a lawyer is involved; the correct approach is to identify precisely which capacity the lawyer was acting in for the specific transaction under review, request the firm's own AML file for that specific client-account transaction (which the firm is independently obliged to maintain and which is not privileged), and reserve any LPP argument for the narrower category of genuine legal-advice communications that the crime-fraud exceptionCrime-fraud exceptionThe doctrine that privilege does not attach to communications made in furtherance of an ongoing or contemplated crime or fraud. may in any event override where the advice itself furthered the offence.

This closing lesson steps back from any single instrument or professional category and asks a deliberately practical question: how is a sophisticated layering scheme actually run, day to day, by the people who build it? Understanding layering as a managed logistics operation, with roles, timelines, cost budgets and risk-mitigation decisions; sharpens investigative instincts far more than studying any single typology in isolation, because it lets you anticipate the next move rather than merely explain the last one.

A professionally-run layering scheme resembles, in structure, an ordinary consulting engagement. There is a client (the beneficial owner seeking to obscure the origin or destination of funds), an architect (typically a lawyer or accountant who designs the overall structure, which jurisdictions, which vehicle types, which nominee arrangements, in what sequence), and a set of executing intermediaries (TCSPs who form and administer the entities, bankers who open and operate the accounts, and, where crypto rails are used, VASPs or OTC brokers who execute the exchange legs). The architect's core value proposition to the client is not secrecy in the abstract but jurisdictional arbitrageJurisdictional arbitrageThe deliberate selection of jurisdictions offering the weakest current practical discoverability for a given fact pattern.: knowing, current, and granular knowledge of which jurisdictions' registries, banking supervisors, and information-exchange treaty networks currently offer the weakest practical discoverability for a given fact pattern, and — crucially — how that landscape has shifted since the CJEU's 2022 ruling, since FinCEN's March 2025 rule, and since the EU AML Package's phased application. A well-resourced architect maintains something close to a living map of exactly the reforms covered across this entire module, updated continuously, because the entire commercial value of the service depends on knowing where the current gaps are before regulators close them.

Sequencing and time management are the architect's other central concerns, and they are frequently underappreciated by investigators trained to think in terms of static structures rather than dynamic build processes. A multi-jurisdictional structure is typically built in a deliberate order: the ultimate holding entity in the most opaque available jurisdiction is formed first, followed by intermediate holding layers in jurisdictions chosen for treaty access or banking convenience, followed last by the operating or receiving entity closest to the underlying transaction, precisely so that if any single layer is compromised or subject to disclosure, the layers "above" it in the ownership chain remain, for the time being, undiscovered. This build sequenceBuild sequenceThe deliberate order in which layers of a corporate structure are formed, typically most opaque/upstream first, operating entity last. has a direct evidentiary implication: an investigator who obtains the operating entity's records first should expect, and actively search for, an upstream holding structure that was built earlier and with greater care, rather than treating the operating entity's own disclosed information as the full picture.

Cost budgeting matters more than most training materials acknowledge. Every layer in a structure carries an ongoing cost, TCSP annual administration fees, registered-agent fees, nominee-director fees, bank account maintenance charges, professional fees for periodic corporate housekeeping, and a rational architect designs the minimum number of layers that achieves the client's discoverability-reduction objective, not the maximum. This has a useful investigative corollary: schemes that appear needlessly complex, with layers that add no discernible jurisdictional-arbitrage or tax benefit, are themselves a red flag, because a rational cost-conscious architect would not have built them absent a specific concealment objective for that particular layer, meaning the "unnecessary" layer is often exactly the one hiding the most sensitive fact, such as the true beneficial owner's identity or a link to a sanctioned or politically-exposed counterparty.

Risk mitigation, from the architect's perspective, increasingly focuses on precisely the reforms this course has covered: anticipating enhanced correspondent-bank scrutiny by choosing entities and jurisdictions less likely to trigger nested-correspondent or de-risking exposure; anticipating travel-rule and CARF/DAC8 exposure by timing crypto off-ramps and selecting VASPs in jurisdictions with immature travel-rule implementation, and anticipating beneficial-ownership disclosure by exploiting the precise post-CJEU access-restriction model in the EU, the narrowed FinCEN scope in the US, and the generally weaker registry regimes that persist across much of the offshore TCSP industry's core client base. A sophisticated architect treats every regulatory reform covered in this module and the two preceding it not as a static rulebook but as a moving target to be continuously re-optimised against — which is exactly why your own professional competence must be continuously updated in the same way, rather than frozen at the point of initial training.

The EU AMLR's obliged-entity scope, set out comprehensively in Regulation (EU) 2024/1624, is worth studying closely as a capstone for this module because it is the most comprehensive single articulation of exactly which professional categories a well-designed AML regime expects to instrument: credit and financial institutions, TCSPs, lawyers and notaries performing specified transactional activities, accountants and tax advisers, real estate agents, high-value goods dealers above specified thresholds, art market participants, crypto-asset service providers (aligned with MiCA's CASP definition), and — reflecting recognition of state-capture risk, certain categories of professional football intermediaries and clubs above specified transaction thresholds, a provision that has drawn attention for extending obliged-entity status into a sector not traditionally considered part of the AML perimeter. Reading the obliged-entity list as a map of "where a professionally-run layering scheme must eventually surface" is, in my experience, one of the most useful single exercises a working official can do: every professional category on that list exists on the list precisely because enforcement experience across multiple jurisdictions demonstrated that layering schemes route through it, and a scheme that appears to avoid every category on the list entirely should itself prompt closer scrutiny of what alternative, currently uninstrumented channel it may be using instead.

The core lesson of this module, and of this entire Layering unit, is therefore not any single citation or technique but a discipline of mind: treat every layering scheme as a managed project with a budget, a sequence, an architect and a risk-mitigation logic that tracks regulatory reform in close to real time, and read every new instrument covered in this course; from R.16's 2025 revision to MiCA's phased application to the AMLR's obliged-entity list, as both a closing of one gap and, almost certainly, the opening of pressure on the next one. That is the honest, unglamorous reality of this work, and it is exactly why the profession requires continuous study rather than a fixed body of knowledge learned once.