Transaction monitoring
Transaction monitoring is the ongoing review of a client's payments to spot activity that could point to money laundering, terrorist financing or fraud. Banks and EMIs must do it under EU AML law. Systems compare each payment with the client's expected activity and raise alerts for a compliance analyst to review.
How it works
When you open an account, your provider records what activity to expect: typical amounts, currencies, countries and counterparties. Monitoring checks actual payments against that profile and against known patterns of financial crime.Most systems combine fixed rules (for example, a payment far above your usual size, or many payments just under a threshold) with statistical or machine learning models that spot unusual behaviour. Some checks run before a payment leaves; others run after, across days or weeks of activity.An alert doesn't mean wrongdoing. Most alerts are false positives that an analyst closes after a look, sometimes after asking you a question. If the analyst still has a suspicion, the provider must file a suspicious transaction report with the national financial intelligence unit.
What tends to trigger a review
- a sudden jump in volume or payment size
- payments to or from a new country, especially a high-risk third country
- money that comes in and goes straight out (pass-through)
- many small payments that look split to stay under a limit (structuring)
- counterparties or payment references that don't match your stated business
How to avoid holds
Tell your provider before a change, such as a new market, a large contract or a funding round. Use clear payment references that match invoices. Answer review questions with documents, such as an invoice, contract or source of funds evidence, rather than descriptions. Fast, complete answers are what shorten a review.Monitoring vs screening
Sanctions screening checks names against sanctions and watch lists, usually in real time before a payment goes out. Transaction monitoring looks at patterns and behaviour over time. Providers run both, as part of a risk-based approach.FAQ
Usually because it didn't fit your expected activity. The provider may not be able to tell you the exact reason.
No. EU law forbids "tipping off" a client that a suspicious transaction report was filed or an investigation is under way.
Anything from minutes to several days, mostly depending on how quickly the provider gets the information it asks for.
Last reviewed October 21, 2026Disclaimer
This publication is provided for general information purposes and does not constitute legal, tax, or other professional advice from Narvi Payments Oy Ab or its affiliates, and it is not intended as a substitute for obtaining advice from a financial advisor or any other professional.
This publication is provided for general information purposes and does not constitute legal, tax, or other professional advice from Narvi Payments Oy Ab or its affiliates, and it is not intended as a substitute for obtaining advice from a financial advisor or any other professional.
What We Offer
IBAN Accounts For Your Business
Support & Compliance
Narvi Knowledge Center
Alternative Investment Funds [whitepaper]Family Offices [whitepaper]Shipping Industry [whitepaper]How to Open a Business Account in FinlandNarvi vs. Wise, Revolut, N26, and other alternativesNarvi vs. Stable.comNarvi vs. payabl.Narvi vs. ConnectPayNarvi vs. IBAN4UNarvi vs. GenomePayments BlogPayments Glossary
Narvi Payments Oy Ab is an Authorized Electronic Money Institution (EMI). Narvi’s EMI license is granted by the Finnish Financial Supervisory Authority (FIN FSA) with the registration number 3190214-6. Narvi’s license is passportised to all European Union countries.
Built and regulated in Finland© 2026 Narvi. All Rights Reserved.
v1.322.0