aml-cft-checklisted

# AML/CFT Check — MLPA 2012 / BFIU Config gate + criminal-exposure protocol: **anything suggesting an actual suspicious transaction, live investigation, or ACC/BFIU/CID contact → stop analysis, escalate to named senior counsel, preserve documents, remind about tipping-off prohibitions.** ## Review sequence 1. **Reporting-entity status** per MLPA 2012 s.2 definitions (banks, FIs, insurers, money changers, capital-market intermediaries, DNFBPs — real estate, dealers in precious metals, lawyers/accountants in specified transactions, NGOs/NPOs). The DNFBP perimeter has been widening via circulars — `[verify current BFIU circular set]`. 2. **If a reporting entity:** program adequacy — CAMLCO appointment, board-approved policy, KYC/CDD (+ e-KYC per BFIU e-KYC guidelines), beneficial-ownership drill-down, PEP handling, transaction monitoring, STR (suspicious transaction) and CTR (cash transaction, threshold per current circular `[verify]`) reporting rails to BFIU, record retention (5 years+), training cadence, independent audit. 3. **Sanctions/CFT:** AT Act 2009 UNSCR implementation — screening against UN lists per BFIU circulars; freeze mechanics. 4. **If not a reporting entity:** counterparty/AML hygiene — bank onboarding expectations, agent-network risk, cash-intensity flags, trade-based ML exposure for import/export businesses (over/under-invoicing is the classic Bangladesh TBML fact pattern — customs-value discipline matters). 5. **Predicate-