Over-compliance (de-risking)

Over-compliance, in its banking form often discussed as de-risking, is a private or regulated-intermediary decision to exceed a legal minimum by refusing otherwise lawful business with broad customer classes, sectors or jurisdictions. FATF distinguishes risk management from wholesale exit. The concept therefore separates the formal prohibition, licence or exemption from a firm's own compliance cost, enforcement fear, commercial risk and reputational judgement.

Mechanism

Over-compliance can be a rational response to asymmetric payoffs. The profit on a marginal transaction with a higher-risk counterparty may be small, while enforcement exposure can be severe. In 2014, BNP Paribas agreed to plead guilty and pay USD 8.9736 billion for a long-running conspiracy to process transactions through the US financial system for sanctioned Sudanese, Iranian and Cuban entities. Ambiguity, fixed compliance costs and low expected revenue can lead a bank to withdraw well inside the legal boundary by closing correspondent accounts, exiting money-service businesses or declining humanitarian payments that formal exemptions permit. The dynamic can scale into the compliance cascade as each withdrawal changes other firms' risk assessments.

Application

For the financial-warfare planner, over-compliance is an important amplification mechanism. Formal measures bind persons within the sanctioning jurisdiction, while third-party institutions may cut ties pre-emptively to protect market access. That private response helped a Section 311 finding against one Macau bank in 2005 generate a wider retreat from North Korean business. Zarate's practitioner account describes US officials deliberately using market risk perception to amplify formal measures. In Economic Kill Chain (EKC) terms, part of a strike's yield may therefore be delivered at the amplification phase by actors the state does not command.

Costs and contestation

The 2014 BNP Paribas resolution, 2015 World Bank surveys and 2019 Financial Stability Board decline estimate are historical evidence with different units and purposes. They help explain incentives and aggregate trends, but do not show that every account closure was legally required, caused by sanctions or directed by a state.

The same mechanism generates serious externalities. World Bank surveys in 2015 confirmed that large banks were restricting or terminating correspondent relationships and services to money-transfer operators. The Financial Stability Board reported in 2019 that active correspondent relationships had declined cumulatively by 19.3 per cent since 2011. These aggregate trends have several causes and should not be attributed to sanctions alone. Humanitarian organisations also report payment channels closing even where exemptions exist, a pathway of the humanitarian cost of sanctions. Whether that wider caution is useful amplification or avoidable collateral harm remains contested, especially where withdrawal pushes flows into less transparent channels.

Assessment should compare the legal obligation with the institution's written policy and transaction decision. It should then test whether documentation, pricing, correspondent access or commercial appetite, rather than the formal rule, caused withdrawal. That sequence separates state action from private adaptation and identifies where guidance, licensing or risk sharing could reopen lawful access.

See also

Compliance cascade · Correspondent banking de-risking · Amplification (EKC Phase 5) · Smart (targeted) sanctions · Humanitarian cost of sanctions · Financial exclusion · Public-private coordination (aligning incentives) · Economic statecraft

Sources

• Financial Action Task Force, "FATF Clarifies Risk-Based Approach: Case-by-Case, Not Wholesale De-Risking" (2014; accessed 30 July 2026).
• Financial Action Task Force, *Guidance on Correspondent Banking Services* (accessed 30 July 2026).
• Financial Action Task Force, FATF Recommendations (accessed 30 July 2026).
• US Department of the Treasury, *A Framework for OFAC Compliance Commitments* (2019; accessed 30 July 2026).
• Financial Stability Board, correspondent-banking progress report (29 May 2019; accessed 30 July 2026).