Africa's anti-money laundering problem is not weak controls but missing connections between the institutions that already have them, according to analysis published by GhanaWeb on October 19, 2026. Chanal Subramoney, Group Senior Compliance Manager at Yellow Card, argues that banks and virtual asset service providers across Eastern and Southern Africa have independently built near-identical compliance systems, yet have no lawful channel to share what they each observe.
That gap, she writes, is the region's most consequential unaddressed AML vulnerability and its clearest near-term opportunity for regulators to act.
Identical controls, zero coordination
Subramoney's finding comes from preparatory discussions ahead of a panel at ESAAMLG's ninth Public-Private Sector Dialogue in Kigali in September 2026. The session brought together compliance leaders from Commercial Bank of Mauritius, BPR Bank Rwanda Plc, and Yellow Card, a pan-African virtual asset service provider.
Three institutions, three industries, three regulators. The controls each described were, in substance, close to identical: risk-based customer due diligence, tiered onboarding, transaction monitoring built to flag anomalies, and escalation into dedicated financial crime functions. None of them had coordinated with the others.
That convergence is the good news. The capability already exists in the region. What does not exist is the connective layer, and the consequences are measurable.
What the compliance gap costs African families
The numbers are stark. Sub-Saharan Africa's average cost of sending remittances runs close to 7.9%, more than double the United Nations' Sustainable Development Goal target of 3%, according to the GhanaWeb piece. Sierra Leone, Uganda, Angola, Botswana, and Zambia all exceed 7% outright.
A material share of that cost is compliance friction passed down a shrinking correspondent banking network. The top twenty correspondent banks now handle roughly 80% of global cross-border payment value, a concentration driven by de-risking as global banks withdraw from relationships they judge risky or costly. African institutions have absorbed the steepest reductions.
This is where the human cost lands. Absent shared visibility, institutions compensate by defaulting to broader caution, and that caution hits hardest the ordinary, low-value activity that constitutes the overwhelming majority of financial inclusion use cases: the remittance, the savings deposit, the small transfer from a cousin abroad.
Why legislation alone has not closed the gap
Regulation has moved, but operationally it has stalled. FATF's most recent targeted update found that 83% of surveyed jurisdictions have enacted Travel Rule legislation, up from 73% a year earlier. Yet most still struggle to convert that legislation into effective supervision, and many cannot even identify which entities within their borders are conducting virtual asset activity at all.
Legislative adoption has outpaced operational interoperability, region-wide. A single illicit flow that moves through a bank account, into a VASP wallet, and back through a second bank passes through three individually competent compliance programmes. None of the three sees the full pattern, because there is no structured, lawful channel for them to exchange what each has observed.
A proven model already exists
The financial system has already shown that shared infrastructure works. SWIFT's KYC Registry reduces duplication in correspondent due diligence globally by giving institutions a common, verified data source rather than requiring each to rebuild the same picture independently.
No equivalent, purpose-built mechanism exists in the ESAAMLG region for banks and VASPs operating under different licensing regimes to share compliance-relevant information in a structured, lawful way. That is the gap regulators are being asked to fill.
The private sector is ready, and regulators are listening
The signals of readiness are real. Since the Kigali dialogue, ESAAMLG has invited continued engagement from Yellow Card on awareness and training, and more than one national financial intelligence unit has approached the company directly for input on drafting its own virtual asset regulation. The private sector is being invited into the design of these frameworks, not merely consulted once they are finished.
Subramoney's recommendation is specific. Central banks, financial intelligence units, and regional standard-setters such as ESAAMLG should convene and build a shared, cross-sector, cross-border compliance information-sharing mechanism that licensed banks and VASPs can use to support joint investigations, calibrate risk-based monitoring collectively, and align emerging Travel Rule data standards with the operational reality of institutions at very different levels of technical maturity.
Regulators are best placed to set the legal basis, data protection safeguards, and participation rules such a mechanism requires. Industry has already shown it can converge on compatible control design, and it is positioned to help build the connective layer quickly once regulators choose to lead.
For Ghana, the lesson is direct. As the