Skip to main content

Lesson 05 of 25

Terrorist Financing & Proliferation Financing

4 min read · CFCS

Understand why TF flips the question from source to use, how funnel accounts and charity abuse work, and the UN and FATF standards behind targeted financial sanctions.

Why TF is different from ML

  • ML hides illicit source; TF hides licit-or-illicit use
  • TF amounts are often small
  • Source of funds may be perfectly legal
  • Detection focuses on destination, not just origin

Terrorist financing looks like money laundering's mirror image, and the exam loves that contrast. Money laundering hides where money came from. Terrorist financing hides where money is going.

With laundering, the source is dirty by definition. With terrorist financing, the source can be perfectly legal, a salary, a charity donation, a small business, and what's illicit is the intended use. Amounts are often small, which makes traditional threshold-based detection weak.

So the focus shifts: less on the origin of funds and more on the destination, the network, and the purpose. A common exam distractor insists terrorist financing always involves dirty money; remember it often does not. Because the sums can be a few hundred dollars and the source legitimate, transaction-monitoring rules tuned for large laundering flows will miss them, which is why intelligence about the recipient and the connections around an account matters more here than the dollar figure.

How terrorist financing moves

  • Self-funding, donations, and charity abuse
  • Small wires, prepaid cards, crypto, cash couriers
  • Front charities and legitimate-looking NGOs
  • Funnel accounts collecting many small inflows

How does the money move? Often through ordinary channels precisely because the sums are modest. Cells may be self-funded through jobs or petty crime, financed by donations, or supported through the abuse of charities and non-profits.

Movement methods include small wire transfers, prepaid cards, virtual assets, and old-fashioned cash couriers. A recurring red flag is the funnel account: one account collecting many small inflows from unrelated senders, then forwarding the pooled funds onward. Front charities and NGOs that solicit broadly but spend opaquely are another classic vector.

The lesson: in TF, the pattern and counterparties matter more than the dollar amount. Concretely, watch for a charity that raises money in one region but disburses it, with little documentation, into a conflict zone, or an account receiving many small structured deposits from people with no apparent relationship to one another. FinCEN advisories repeatedly flag funnel accounts and the misuse of non-profits, so train yourself to ask who is on the receiving end of these modest flows.

The legal and sanctions backbone

  • UN Resolutions 1267 (lists) and 1373 (criminalize, freeze)
  • FATF Recommendations 5–8 cover TF and PF
  • Targeted financial sanctions: freeze without delay
  • Designated-party screening is mandatory

The legal backbone is international. United Nations Security Council Resolution 1267 created the listing regime for individuals and entities tied to terrorism, and Resolution 1373 obliges every state to criminalize terrorist financing and freeze terrorist assets. FATF Recommendations 5 through 8 translate these into operational standards, requiring countries and institutions to apply targeted financial sanctions, freezing the funds of designated parties without delay, and to protect non-profit organizations from abuse without choking legitimate ones.

For an institution, the practical duty is screening: checking customers and transactions against terrorist-designation lists and acting immediately on a match. Note the distinction the exam draws between the two resolutions: 1267 created a specific United Nations sanctions list maintained by a committee, while 1373 obliges each state to build its own listing and freezing regime. Both demand that a match be frozen without delay, meaning before you seek further approval, not after a leisurely review.

Proliferation financing

  • PF = funding weapons of mass destruction programs
  • Evasion via front companies, dual-use goods, deceptive shipping
  • FATF R.7 + UN proliferation sanctions
  • Trade and sanctions controls overlap here

Closely related is proliferation financing, the funding of weapons-of-mass-destruction programs in breach of international sanctions. Proliferation networks rely on front companies, falsified end-user documents, dual-use goods that have both civilian and military uses, and deceptive shipping practices like turning off vessel transponders or transshipping through third countries. FATF Recommendation 7 and a web of UN proliferation sanctions govern this space, and you'll see it overlap heavily with trade controls and sanctions screening, two later lectures.

The takeaway: proliferation financing sits where sanctions, export controls, and trade-based laundering meet. A signature red flag is a customer ordering dual-use goods, items like certain pumps, valves, or electronics with both civilian and weapons applications, shipped to an end user that does not match the stated purpose. Watch too for vessels going dark by switching off their automatic identification systems, and for transshipment through a third country whose only role is to obscure the true destination.

Recap and red-flag mindset

  • TF/PF hide use, not source
  • Small amounts, funnel accounts, charity and trade abuse
  • UN 1267/1373, FATF R.5–8, targeted sanctions
  • Screen, freeze, and report without delay

Let's recap. Terrorist and proliferation financing flip the usual question from where did this money come from to where is this money going and why. Watch for small, structured, networked flows, funnel accounts, charity and trade abuse, and deceptive shipping.

Anchor your reasoning in the United Nations regime, Resolutions 1267 and 1373, and FATF Recommendations 5 through 8, all enforced through targeted financial sanctions you must screen for, freeze on, and report. On the exam, when the source looks clean but the destination looks like a network, think terrorist financing. And when you see sanctioned weapons programs, dual-use goods, and deceptive shipping in the same scenario, think proliferation financing.

Hold on to the contrast at the heart of this lecture: laundering asks where money came from, while terrorist and proliferation financing ask where it is going and what it will be used to do. Test yourself, then we move into the world of fraud.

Sources

  • FATF Recommendations 5–8 (terrorist financing and proliferation financing)
  • UN Security Council Resolutions 1267 and 1373
  • FinCEN advisories
  • USA PATRIOT Act

Test your knowledge

A few CFCS questions on this material — pick an answer to see the explanation.

  1. Q1. A customer makes nine cash deposits of $9,900 each across three consecutive days. The pattern is consistent and deliberate. What offense has most likely been committed?

  2. Q2. An importer pays $500,000 for a shipment invoiced at $800,000. The goods are actually worth $500,000 at market price. Who benefits from the over-invoicing, and what does it accomplish?

  3. Q3. A money launderer routes drug proceeds through a hawala network rather than a bank wire. Which characteristic of hawala makes this attractive and what does it leave behind?

  4. Q4. Which red flag most specifically signals a smurfing scheme rather than ordinary structuring by a single individual?

Ready to practice?

Put this lesson to work on real CFCS questions.

Drill the full CFCS bank →