Compliance Is the Function That Costs Money Until the Year It Saves Everything
The role exists to keep a financial institution within rules that carry enormous penalties. It generates no revenue, is measured by things not happening, and has become one of the largest cost centres in banking.
Why the Function Grew
Financial institutions operate under extensive rules covering money laundering, sanctions, market conduct, client suitability, data protection, and capital requirements.
Penalties for breaching them became severe enough to matter at the level of the whole institution. Fines in the billions, restrictions on business activity, and in serious cases criminal liability for individuals transformed compliance from paperwork into a genuine risk function.
The function is measured entirely by absence. A good year is one where nothing happened, which is the hardest possible thing to defend in a budget discussion.
What Compliance Actually Covers
| Area | Concern |
|---|---|
| Anti money laundering | Detecting funds from criminal activity |
| Sanctions | Transactions with prohibited parties |
| Know your customer | Verifying who clients actually are |
| Market conduct | Manipulation, insider dealing, fair dealing |
| Suitability | Products appropriate for the client |
Sanctions compliance deserves particular note because it is close to strict. An institution processing a transaction involving a prohibited party faces serious consequences regardless of intent, which is why screening is automated, aggressive, and generates large volumes of false positives that humans must review.
The False Positive Economics
Detection systems are deliberately tuned to over flag, since missing a genuine case is far more costly than reviewing an innocent one.
The consequence is enormous review volume, most of it resolving to nothing. That is the origin of much of the cost, and it is why machine learning has been applied here energetically, with the constraint discussed in automated decision making generally: a system that cannot explain why it flagged or cleared something is difficult to defend to a regulator.
The Tension With Business
Compliance says no to revenue, which creates structural friction. A client relationship that is profitable and carries elevated risk puts the function directly against the people generating income.
How an institution handles that tension is the clearest indicator of its culture. Where compliance reports independently and has genuine authority to decline, the function works. Where it reports into business lines or can be overridden routinely, it becomes documentation rather than control, and the enforcement record is full of institutions in the second category.
Derisking as a Side Effect
Faced with severe penalties and uncertain rules, institutions have exited entire categories of client rather than manage the risk: money transfer businesses, clients in certain jurisdictions, some charities.
That is rational for the institution and produces a policy outcome nobody intended, cutting legitimate users off from the financial system. It is a good example of a rule achieving its stated aim while generating consequences elsewhere.
Why It Is a Reasonable Career
Demand has grown persistently and the work has become more analytical. Roles range from transaction monitoring through advisory work with business lines to regulatory relationship management.
It suits people comfortable with rules and with being unpopular occasionally. It suits people badly if they need visible wins, since the output is problems that did not occur.
The Bottom Line
Compliance keeps institutions inside rules whose penalties are severe enough to threaten the whole firm, and it is measured by things not happening. Its effectiveness depends almost entirely on whether it has genuine independence and authority to decline business, and its costs include both direct expense and the legitimate customers institutions abandon rather than assess.