MLATs, Egmont, and the intelligence/evidence divide
Figure 2.1 · Cycle
Fourteen days from cash to legitimacy
A stylised laundering cycle. Elapsed time between deposit and re-entry rarely exceeds three weeks in mature networks.
Source · Composite of published FIU narratives
Every serious cross-border financial crime case eventually collides with the same structural problem: the evidence is somewhere else, and somebody else's law governs how you can get it. Officials who have only worked domestic files consistently underestimate how much this single fact shapes case strategy, which charges are viable, which timeline is realistic, and which cases quietly die not because the evidence doesn't exist but because it could not be obtained lawfully and in time.
Start with the fundamental distinction I drill into every cohort: intelligence is not evidence. The Egmont GroupEgmont GroupThe network of national Financial Intelligence Units enabling secure, rapid FIU-to-FIU exchange of financial intelligence, subject to strict onward-use and consent restrictions., the informal network of 170-plus Financial Intelligence Units founded in 1995, exists to let FIUs exchange financial intelligence with each other rapidly, FIU-to-FIU, without going through a formal mutual legal assistance channel. A South African FIC request to a Mauritian FIU counterpart under the Egmont Secure Web can produce a useful lead — an account number, a beneficial-owner name behind a shell, a pattern match to a known typology — often within days or weeks. But Egmont Principles for Information Exchange explicitly restrict how that intelligence can be used: it is for intelligence and analytical purposes, not as evidence in criminal proceedings, and re-dissemination to a third party (including, often, to the country's own prosecuting authority for direct evidential use) requires the consent of the originating FIU. Practitioners who forget this and try to tender Egmont-derived material directly at trial find it excluded, or find the originating FIU refusing all future cooperation because the condition was breached. The correct discipline is to use Egmont intelligence to build the investigative picture and to identify precisely which underlying records you then need to obtain through a channel that will produce admissible evidence.
That evidential channel, in the overwhelming majority of cases, is mutual legal assistance, a formal request made under a bilateral Mutual Legal Assistance Treaty (MLAT), a multilateral instrument (UNCAC Chapter IV for corruption-linked cases; the Council of Europe Convention on Mutual Assistance in Criminal Matters and its protocols for European partners; the Palermo Convention for transnational organised crime), or, absent any treaty, on the basis of reciprocity or comity under domestic law. The request is made central-authority to central-authority; typically Ministry of Justice to Ministry of Justice, rather than prosecutor to prosecutor, and it must satisfy the requested state's domestic procedural requirements, not merely the requesting state's own standard of relevance. This is the single most common cause of MLAT failure: a request drafted the way a domestic production order would be drafted, without regard to what the requested state's statute actually demands (dual criminalityDual criminalityA common MLAT precondition requiring that the conduct underlying the request be a criminal offence in both the requesting and requested state., a specified minimum penalty threshold, particularised facts rather than a fishing expedition, and — in civil-law systems especially — a formal legal characterisation of the offence under the requesting state's law).
The delay problem is real and it is structural, not incidental. Every credible study of MLAT practice, the World Bank/UNODC StAR Initiative's own practitioner guides prominent among them; records median response times in the twelve-to-eighteen-month range for financial-crime MLATs, with a meaningful tail extending past three years for complex, multi-jurisdictional requests routed through registries in secrecy-friendly intermediary jurisdictions. That delay is driven by a predictable set of causes: the requested state's central authority is under-resourced and processes requests in strict queue order regardless of urgency; the request is technically deficient (wrong legal basis cited, facts insufficiently particularised, dual-criminality analysis missing) and is returned for correction, restarting the clock; the request seeks material subject to bank secrecy or professional-privilege carve-outs in the requested state that require a judicial order rather than administrative production; or the requested state's own domestic proceedings (a linked confiscation action, a competing request from another state) take priority. I tell officials to build MLAT lead-time into the case plan from day one, not as an afterthought once the domestic evidence has run out, because by the time you realise you need the foreign bank records, you may already be inside the limitation period or facing a bail-review deadline the response cannot beat.
Some structural fixes exist and are worth knowing. Joint Investigation Teams (JITs), used extensively within the EU under the 2000 EU Convention on Mutual Assistance and Council Framework Decision 2002/465/JHA, and increasingly by ad hoc arrangement outside the EU (Eurojust has supported JITs with African and Latin American partners in major corruption and trafficking cases), dispense with the request-and-response formality altogether: investigators and prosecutors from both states operate under a single team agreement, sharing evidence directly and in real time, with admissibility questions negotiated up front in the team agreement rather than litigated case by case afterward. Where a JIT is available, it should almost always be preferred over sequential MLAT requests for cases with an ongoing evidence-gathering phase. Spontaneous exchangeSpontaneous exchangeThe unprompted transmission of information by one state's authority to a foreign counterpart, without a prior formal request. is the other underused tool: many treaties and the FATF standards permit — and in some regimes require — a state that comes across information relevant to another state's investigation, without being asked, to transmit it unprompted. FIUs and tax administrations that build a culture of spontaneous exchangeSpontaneous exchangeThe unprompted transmission of information by one state's authority to a foreign counterpart, without a prior formal request. (flagging a suspicious pattern to a counterpart the moment it is noticed, rather than waiting for a formal request) materially shorten the intelligence-to-action cycle across the network, and it costs the sending state very little.
The last practical point concerns sequencing evidence with charge strategy. Because a laundering charge is autonomous of the predicate in most modern statutes, prosecutors facing a slow-moving MLAT for predicate-offence evidence (say, records proving a bribe was paid abroad) can often proceed on the laundering count using domestic evidence of the unexplained pattern of receipt and concealment, while continuing to pursue the foreign evidence for the predicate as a parallel, non-blocking track. This is not a technicality, it is often the only way to keep a prosecution alive within domestic limitation periods when the foreign channel is, realistically, running on its own eighteen-month clock regardless of anyone's urgency.
Egmont intelligence exchange vs. formal MLAT
Use Egmont to build the picture; use MLAT to obtain the evidence you will actually tender.
Key terms
- Egmont Group
- The network of national Financial Intelligence Units enabling secure, rapid FIU-to-FIU exchange of financial intelligence, subject to strict onward-use and consent restrictions.
- Mutual Legal Assistance Treaty (MLAT)
- A bilateral or multilateral instrument governing formal, central-authority-to-central-authority requests for evidence usable in criminal proceedings.
- Dual criminality
- A common MLAT precondition requiring that the conduct underlying the request be a criminal offence in both the requesting and requested state.
- Joint Investigation Team (JIT)
- A team of investigators/prosecutors from two or more states operating under a single agreement, sharing evidence directly without sequential mutual-assistance requests.
- Spontaneous exchange
- The unprompted transmission of information by one state's authority to a foreign counterpart, without a prior formal request.
Exercise
Draft the fact-particularisation paragraph (250-350 words) of a mutual legal assistance request seeking bank records from a fictitious offshore jurisdiction, structured to satisfy a dual-criminality test against a domestic money-laundering statute of your choosing.
Mark complete (sign-in) →Sources
Last reviewed 2026-08-01
- 01Egmont Group Principles for Information Exchange — Egmont Group of Financial Intelligence Units, 2013.Governs onward-use restrictions on FIU-to-FIU exchanged intelligence.
- 02UNCAC Chapter IV (International Cooperation) — United Nations, 2003.Multilateral basis for mutual legal assistance in corruption-linked cases.
- 03EU Convention on Mutual Assistance in Criminal Matters (2000) and Framework Decision 2002/465/JHA — Council of the European Union, 2002.Legal basis for Joint Investigation Teams.
- 04StAR Initiative Mutual Legal Assistance practitioner guides — World Bank / UNODC, 2011.Empirical documentation of MLAT delay and drafting failure modes.