Advanced: proliferation financing.

What proliferation financing is

Proliferation means the spread of nuclear, chemical and biological weapons, the missiles and other systems that deliver them, and the materials and technology used to make them. Proliferation financing (PF) is the money and financial services that make it possible.

There is no single international definition, and the FATF uses the term in two ways. You need to keep them apart.

• The broad working definition. In 2010 the FATF described PF as providing funds or financial services used, in whole or in part, to make, acquire, possess, develop, export, tranship, broker, transport, transfer, stockpile or use these weapons, their means of delivery and related materials, including dual-use goods and technology used for non-legitimate purposes, in breach of national law or international obligations. The FATF itself called this provisional.
• The narrow definition in the FATF Standards. Since October 2020, Recommendation 1 requires countries and institutions to assess and reduce PF risk, but in that Recommendation the term has a precise meaning. It covers only the potential "breach, non-implementation or evasion of the targeted financial sanctions obligations" in Recommendation 7. Firms may look at wider proliferation risk too, but that goes beyond what the FATF requires.

How PF differs from money laundering and terrorist financing:

• The money is often clean. FATF guidance notes that PF can be funded from legitimate trade, such as natural resources or dual-use goods, as well as from crimes such as smuggling of cash and gold, drug trafficking and cyberattacks. Money laundering laws may not bite if the funds are not criminal proceeds.
• What is hidden is the end user and the goods. The 2008 FATF typologies report observed that PF risk is highest when the money itself is lawful and what is concealed is the buyer or the true nature of the goods.
• There is no clear financial pattern. The FATF noted in 2010 that banks struggle because they lack technical expertise and information, the trade cycle is fragmented, and PF leaves no financial pattern unique to it.
• The consequence is extreme. The 2021 guidance compares the potential harm with the loss of life associated with terrorism, rather than with ordinary financial crime.

Dual-use goods are items with both civilian and military or proliferation uses. The 2008 report gives the example of machine tools that can repair cars but also make missile parts, and lists items such as centrifuges, special steels, mass spectrometers, fermenters and gyroscopes. Identifying them needs specialist knowledge, and proliferators increasingly buy basic components rather than complete systems, which makes each purchase look ordinary. Export control lists maintained by groups such as the Nuclear Suppliers Group, the Australia Group and the Missile Technology Control Regime are the reference point.

The UN and FATF framework

The UN works on two levels, which FATF guidance calls a two-tiered approach.

• Everyone, everywhere: resolution 1540 (2004). All states must stop non-state actors from obtaining nuclear, chemical or biological weapons and their means of delivery, including by financing them. States must also control exports and transhipment, and that control explicitly reaches the financing and other services connected with those exports. In 2008 the FATF noted that no earlier international instrument had banned helping proliferation by financing it. Resolution 1540 links to FATF Recommendation 2 (national cooperation), not to Recommendation 7.
• Specific countries: targeted financial sanctions. For the Democratic People's Republic of Korea (DPRK), resolution 1718 (2006) and later resolutions require states to freeze immediately the funds, financial assets and economic resources of designated persons and entities. Later resolutions confirm, for example, that vessels count as economic resources and limit each DPRK diplomatic mission to one bank account. For Iran, see the time-sensitive note below.

FATF Recommendation 7 turns these sanctions into an operational rule. Countries must make sure that funds and other assets of designated persons and entities are frozen without delay, and that no funds are made available to them or for their benefit, directly or indirectly. The Interpretive Note adds that:

• the freeze happens without prior notice to the person concerned;
• it covers assets the designated person owns or controls, alone or jointly, directly or indirectly, assets derived from them, and assets of anyone acting on their behalf or at their direction;
• institutions must report frozen assets and attempted transactions to the authorities, and there must be public procedures for delisting and for people wrongly matched.

The FATF Glossary defines without delay as "ideally, within a matter of hours" of a UN designation, so that funds cannot be moved or dissipated first.

Two features are easy to miss. First, Recommendation 7 is rule-based, not risk-based: the freeze applies in every case, and the risk-based work under Recommendation 1 supports it rather than replacing it. Second, the FATF Standards themselves do not require a suspicious transaction report for PF, although many countries do.

Time-sensitive, as at June 2026. In 2024 a Russian veto (13 votes for, Russia against, China abstaining) stopped the renewal of the UN Panel of Experts that monitored DPRK sanctions; the sanctions themselves remain in force. For Iran, on 28 August 2025 three parties to the 2015 nuclear deal, France, Germany and the United Kingdom, notified the Council of Iran's non-performance, starting the "snapback" process under resolution 2231. The Security Council did not adopt resolutions to continue sanctions relief, and the pre-2015 UN measures, including the targeted sanctions of resolution 1737, were treated by the UN Secretariat and most Council members as restored from late September 2025. Russia, China and Iran dispute this. The FATF's October 2025 Standards list resolutions 1737, 1747, 1803 and 1929 as the Iran sanctions resolutions. Always check the current UN Security Council Consolidated List and your national authority's instructions.

How sanctions are evaded

Proliferation networks spread their activity across many countries on purpose. FATF guidance warns that a country with no cases of its own is not therefore low risk: UN investigators found DPRK-linked payments routed through countries in Africa and Europe, far from the DPRK itself.

Companies and people

• Front and shell companies that are quick to set up and used briefly. In one case UN investigators found at least five front companies, a different one for each transaction; in another, companies were closed as soon as investigators started asking questions.
• Renaming: after a designation, networks re-register under new names, or use several names for one company.
• Intermediaries, brokers and strawmen, and companies in third countries where controls are weak.
• Diplomats: the UN limited DPRK missions to one account each, and the Panel reported gold smuggling by DPRK diplomatic staff between two countries in the Middle East.

Payments and trade documents

• Layering through correspondent banks, where the bank clearing the payment has little insight into who is really behind it.
• Wire stripping: deliberately removing or changing information in a payment message so that screening misses it.
• Trade finance fraud: forged documents, false end-use certificates, misdescribed parties, and goods routed through transhipment hubs and free trade zones so that the real destination is hidden.

Shipping. The UN Panel's final report in March 2024 and a 2020 advisory from the US Treasury, State Department and Coast Guard describe the same set of tricks:

• switching off or falsifying the AIS transponder that broadcasts a ship's identity and position, or broadcasting another ship's identity (ship spoofing) or a false position (geo-spoofing);
• ship-to-ship transfers, often at night or at dawn and dusk, sometimes using small vessels with no IMO number;
• vessel identity laundering: a ship takes a new IMO number by posing as newly built, leaving its old identity for another ship to use;
• painting over names and numbers, false flags and flag-hopping, fraudulent registry certificates and falsified cargo documents;
• complex and frequently changing ownership and management.

Virtual assets. The UN Panel's 2024 report said it was investigating 58 suspected DPRK cyberattacks on cryptocurrency companies between 2017 and 2023, worth about US$3 billion, and that one member state estimates about half of the DPRK's foreign currency income comes from cyber activity. These are the Panel's and member states' estimates, not court findings. The stolen funds are moved at speed through hundreds or thousands of addresses, across blockchains and through mixers, before being cashed out through over-the-counter brokers.

Red flags and controls

FATF guidance groups the warning signs. In summary:

• Customer: vague answers about the business; owners or managers linked to sanctions lists, export-control denied-party lists or negative news; dealing in dual-use goods without the technical background or outside the stated business; a commercial account behaving like a remitter, with large flows and little left at the end of the day; links to a university or research institute alongside dual-use trade.
• Account and transaction: parties in the DPRK or Iran or connected to them; shell or front companies; dormancy followed by a surge; trading parties that share owners, addresses, phone numbers or IP addresses; roundabout payment routes; cash paid for industrial items; payment by a party other than the buyer.
• Shipping and goods: a freight forwarder named as final destination; a destination that differs from the importer's location; goods that do not fit the destination's industry; a declared value low compared with the cost of shipping; routes through weak-control countries; flag-hopping or old, small fleets.
• Trade finance: a letter of credit requested for dual-use goods before the account is approved; documents that do not match the payment flows; payments to or from parties not named in the letter of credit.

As with every indicator list, one sign alone is rarely enough, and some can only be seen with customs or market data.

What institutions are expected to do

• Screen, but do not stop at names. Sanctions apply to anyone acting for, owned by or controlled by a designated person, so list screening alone is not enough. Know the beneficial owners and the controllers.
• Keep screening current. FATF guidance names the usual causes of breaches: weak due diligence, delays in screening, out-of-date lists and poor name matching. Where national law allows, new UN designations can be applied in monitoring before they are transposed nationally.
• Ask more where the risk is higher: the purpose of the transaction, the end use and end user, the source of funds, beneficial ownership, and export licences or end-user certificates.
• Act on what you find: consult the authorities, pause the transaction while you wait for information, refuse it, or end the relationship.
• Do not de-risk blindly. The 2021 guidance says avoiding risk is not the same as managing it, and asks for correspondent relationships to be assessed case by case.

Be realistic about what a bank can see. The FATF noted in 2008 that banks have far less information than exporters and customs about end users, and that goods descriptions are often vague or need technical knowledge to interpret. The guidance does not expect zero failures: even strong controls may not catch every attempt, which is why the record of what was checked and why matters.

Cases and lessons

These cases are described in FATF publications.

• Spark gaps for Pakistan (FATF, 2008). A businessman running a South African company ordered 200 triggered spark gaps, which can serve as detonators for a nuclear device, from a US manufacturer for re-export to Pakistan. US agents learned of the order and the manufacturer disabled the items before they were shipped through Dubai. The deal was paid for by letter of credit. He was arrested in 2004 and sentenced to 36 months.
• Nuclear equipment from a medical supplier (FATF, 2008). A US medical-supply company exported nuclear power plant equipment without a licence, through the Netherlands to Cyprus, for onward shipment to Iran. The warning signs were a business that did not fit the goods, cargo marked for re-export with no consignee, vague answers to the freight forwarder, and ten containers declared at US$20,000 when shipping one empty container cost about US$2,000. Cypriot authorities inspected the cargo.
• A network that renamed itself (FATF, 2018). A procurement network used front companies in several countries to buy sensitive machinery. When it was designated in January 2009, it switched to new company names within months and moved money through facilitators in another country. Coordinated work by justice, customs and commerce agencies led to arrests in 2013 and guilty pleas for sanctions evasion and money laundering conspiracy.
• The same address and phone number (FATF, 2018). Banks' due diligence flagged suspicious payments, and the account-opening papers of a front company used the same address and telephone number as an already designated company. That link led to the front companies being designated too.

What the cases teach:

• Fit is the first test. A medical supplier shipping reactor parts, or a declared value lower than the freight, is visible to a well-run due diligence process.
• Designation is the start, not the end. Networks rename and rebuild quickly, so screening must look at ownership, control and shared details, not only names.
• Cooperation finds what one institution cannot. Customs, export control, law enforcement and banks each hold part of the picture.

In Kenya: the 2022 ESAAMLG mutual evaluation rated Kenya non-compliant on Recommendation 7 and low on effectiveness, finding no legal framework for proliferation sanctions and that many institutions confused them with terrorism sanctions. Kenya then amended its laws in 2023 to cover proliferation financing, giving the Counter Financing of Terrorism Inter-Ministerial Committee the job of implementing the UN resolutions, with the Director-General of the Financial Reporting Centre as its secretary. Under regulations made in 2023, as described by ESAAMLG in 2024, "without delay" means within 24 hours of a UN designation, the Centre circulates the UN lists to reporting institutions, frozen assets must be reported to the Committee within 24 hours, and attempted transactions are reported to the Centre as suspicious transaction reports. ESAAMLG re-rated Kenya partially compliant on Recommendation 7 in 2024. Check the current law and ratings.

Your certificate of completion

Enter your name as you want it to appear, then save the certificate as a PDF. In the print window, choose Save as PDF. A certificate is issued once per completion of the course.

Saolix does not record who takes this course, so it cannot verify these certificates. The certificate confirms completion of a free self-paced course and is not an accredited qualification.