10 Decrees on Compliance with Laws and Regulations in the Field of Anti-Money Laundering

 You must first verify and verify, then trust—never do the opposite.
 You must submit suspicious transaction reports (STRs) without fear or discrimination.
 You should never say, "We don't need customer authentication (KYC) for this customer."
 You should always keep track of regulatory updates (no matter how repetitive they are).
 You shouldn't trust a customer who says, "By God, money is clean!"
 You need to know the sudden requests for compliance immediately, because they always are.
 You have to remember: "I didn't know" is not a valid defense.
 You should not underestimate the importance of vetting political persons at risk (PEP).
 You need to train your colleagues (even if they resist regulatory training).
 You have to document everything all the time.
Special Commandment: Never underestimate the power of a good policy—it may one day save your job.