Source of funds vs source of wealth — the difference
These two are treated as synonyms in a surprising number of AML procedures, and they are not. Source of funds asks where this money came from. Source of wealth asks how the customer came to have money at all. Regulation (EU) 2024/1624 — the AML Regulation — keeps them distinct, and reaches them by three different routes with three different strengths of obligation. This piece sets out where each route bites, the transaction trigger most procedures miss, what an evidenced file actually contains, what happens when the customer will not answer, and which rules apply now as against from 10 July 2027.
1. Two different questions
| Source of funds | Source of wealth | |
|---|---|---|
| Question | Where did the money in this transaction or relationship come from? | How did the customer accumulate their overall wealth? |
| Scope | Transaction-level or relationship-level | Person-level, over time |
| Typical evidence | Account statements showing the originating account, sale or settlement documentation, payroll records for the relevant period | Employment and remuneration history, company sale or dividend documentation, inheritance or gift documentation, asset disposal records, tax filings |
| Failure mode | Tracing to the immediately preceding account and stopping there | Accepting a narrative with no supporting record |
2. Three routes into the obligation, and they are not equally strong
The most common drafting error in an AML procedure is a single rule saying “obtain SoF and SoW for high-risk customers”. The Regulation is more differentiated than that, and the differences decide what an examiner will accept.
| Route | Applies to | Strength |
|---|---|---|
| Article 34(4)(c) | Higher-risk cases generally | A menu — EDD “may include” obtaining additional information on source of funds and source of wealth |
| Article 41 | Applicants for residence by investment schemes | Mandatory — “as a minimum” Article 34(4) points (a), (c), (e) and (f) |
| Article 42(1)(b) | Politically exposed persons | Mandatory — “take adequate measures to establish” both |
Article 34(4) is the general enhanced due diligence provision, and it is expressly a menu: in higher-risk cases firms apply EDD measures proportionate to the risk, “which may include” seven listed measures. Point (c) is additional information on the source of funds and source of wealth of the customer and of the beneficial owners — a limb frequently dropped, since a corporate customer’s beneficial owner is a person whose wealth may never have been examined at all.
Article 41 converts part of that menu into a floor. For third-country nationals applying for residence rights in a member state in exchange for investment — transfers, purchase or renting of property, government bonds, investment in corporate entities, donation or endowment of an activity contributing to the public good, or contributions to the state budget — firms must apply as a minimum the measures in Article 34(4) points (a), (c), (e) and (f). Point (c) is the source-of-wealth limb, so for a golden-visa applicant it stops being optional.
Article 42(1) does the same for politically exposed persons, and phrases it differently again: firms must take adequate measures to establish the source of wealth and source of funds involved, alongside senior management approval and enhanced ongoing monitoring. “Establish” is a stronger verb than “obtain additional information on”, and it is the wording most supervisory findings are written against.
3. The trigger most procedures miss: Article 34(2)
Every route above is a customer trigger. Article 34(2) is a transaction trigger, it is drafted as a duty rather than a menu, and it is not conditioned on the customer being high-risk at all.
Obliged entities shall examine the origin and destination of the funds involved in, and the purpose of, all transactions meeting at least one of four conditions: the transaction is of a complex nature; it is unusually large; it is conducted in an unusual pattern; or it has no apparent economic or lawful purpose.
The practical consequence is that a standard-risk customer can generate a source-of-funds obligation through a single payment, with no risk reclassification anywhere in the file. A procedure that reaches source-of-funds work only through the EDD gate will not fire here — and because these examinations are usually raised by transaction monitoring rather than by onboarding, the finding often surfaces as an alert with no documented outcome.
Note also what Article 34(2) asks for that the customer-level routes do not: destination, and purpose. Tracing where money came from and stopping there does not discharge it.
Article 34(3) tells firms what to weigh when assessing whether higher risk exists in the first place: at least the potential higher-risk factors in Annex III, the AMLA guidelines to be adopted under Article 32, and other indicators including FIU notifications and the findings of the business-wide risk assessment under Article 10.
4. What “adequate measures” looks like
The Regulation says adequate rather than prescribing documents, so the standard is proportionate to risk. Four things make a file defensible in practice.
- Two answers, recorded separately. A single free-text field labelled “SoF/SoW” is the most common structural cause of a weak file, because it lets one answer stand for both. Separate fields also make the gap visible to a reviewer who is not the person who onboarded the customer.
- Corroboration, not assertion. The customer’s explanation is the claim; the document is the evidence. Where a document cannot be obtained, the record should say what was sought, what was received, and why the residual position was accepted.
- Arithmetic that closes. The wealth narrative should plausibly produce the observed funds. A declared salary history that generates EUR 60,000 of lifetime savings does not explain a EUR 400,000 transfer, and that gap is itself the finding — not a documentation gap to be chased, but an inconsistency to be assessed.
- The beneficial owner, not only the customer. Article 34(4)(c) names both. For a corporate customer, wealth questions asked only of the entity leave the limb unaddressed.
Where the answer is unsatisfactory, Article 21 governs. If the entity is unable to comply with the customer due diligence requirements in Article 20(1), it shall refrain from carrying out the transaction or establishing the relationship, shall terminate an existing relationship, and shall consider reporting a suspicious transaction to the FIU under Article 69. Three carve-outs matter operationally: termination does not prohibit the receipt of funds due to the obliged entity; where the firm has a duty to protect the customer’s assets, termination does not require disposing of them; and for life insurance contracts the firm may instead refrain from performing transactions, including payouts to beneficiaries, until the requirements are met.
5. Three scenarios
The EMI customer with a documented transfer and an undocumented life. A retail customer receives EUR 400,000 from an account in their own name at another EU bank, and the file closes on the counterparty statement. Facts to rule: the statement evidences source of funds only; the size and the mismatch with the declared profile engage Article 34(2) as an unusually large transaction, requiring examination of origin, destination and purpose. What the analyst does: record the source-of-funds answer as already held, open a separate source-of-wealth question, and ask specifically for the event that generated the wealth — a property sale, a company disposal, an inheritance — with the document that evidences it. If none is forthcoming, the outcome is an Article 21 decision, recorded, not an open case left to age.
The golden-visa applicant treated as ordinary high-risk. A third-country national opens an account while applying for residence in a member state in exchange for a property purchase. The firm rates them high-risk and applies its standard EDD menu, taking additional customer information and senior management approval but not source of wealth. Facts to rule: Article 41 requires, as a minimum, Article 34(4) points (a), (c), (e) and (f) — so source of wealth (c) and enhanced monitoring (f) are not discretionary here. What the compliance officer does: add a residence-by-investment flag at onboarding that hard-wires the four points, rather than relying on a risk rating that permits the menu to be sampled.
The corporate customer whose beneficial owner was never asked. A trading company is onboarded as higher risk; the file documents the company’s revenue and banking history thoroughly. Facts to rule: Article 34(4)(c) extends to the source of funds and source of wealth of the beneficial owners, and where a beneficial owner is a PEP, Article 42(1)(b) applies to them directly. What the reviewer does: run the wealth question against each identified beneficial owner as a separate record, and check the PEP screening result before concluding that the general menu, rather than the mandatory PEP route, applies.
6. What applies now, and what applies from 10 July 2027
One timing point governs how any of this should be read today. The AML Regulation was adopted on 31 May 2024, but it applies from 10 July 2027 — and from 10 July 2029 for the obliged entities in Article 3, points (3)(n) and (o). Until then, firms operate under national law transposing the earlier directives, which is why obligations still differ between member states even though the Regulation will not permit that.
Two consequences follow. First, a procedure rewritten today should be written against both: the national rule that binds now, and the Regulation article that will bind from July 2027, so the second is a change of citation rather than a change of process. Second, some detail is still coming. Under Article 42(2), AMLA is to issue guidelines by 10 July 2027 on the criteria for identifying close associates and on the level of risk attaching to categories of PEP, family member and close associate — including how risk is assessed once a person is no longer entrusted with a prominent public function. Firms with a fixed cooling-off rule for former PEPs should expect to revisit it.
What is the difference between source of funds and source of wealth?
Source of funds identifies the origin of the specific money in a transaction or relationship — typically evidenced by statements or settlement documents. Source of wealth explains how the customer came to hold wealth at all, over time, and is evidenced by remuneration history, a company sale, an inheritance or an asset disposal. A file can fully document one and say nothing about the other.
Do we always need both?
Both are mandatory for politically exposed persons under Article 42(1)(b), and source of wealth is mandatory for residence-by-investment applicants through Article 41. In other higher-risk cases Article 34(4) presents them as one option among seven, so the answer is risk-driven — but a file evidencing only the originating account is usually incomplete where enhanced due diligence is engaged.
Is a bank statement enough for source of wealth?
Rarely. A statement evidences where funds moved from, which is source of funds. Source of wealth needs documentation of how the wealth was generated — remuneration, a company sale, an inheritance, an asset disposal.
Can a standard-risk customer trigger a source-of-funds requirement?
Yes. Article 34(2) requires examination of the origin and destination of the funds and the purpose of any transaction that is complex, unusually large, in an unusual pattern, or without apparent economic or lawful purpose. It is not conditioned on the customer’s risk rating.
Does the obligation extend to beneficial owners?
Yes for the general enhanced due diligence route: Article 34(4)(c) refers to the source of funds and source of wealth of the customer and of the beneficial owners. Where a beneficial owner is a politically exposed person, Article 42 applies in its own right.
What if the customer will not provide documents?
Article 21 applies: refrain from the transaction or from establishing the relationship, terminate an existing one, and consider reporting a suspicion to the FIU under Article 69. Termination does not prevent receiving funds owed to the firm, does not require disposing of customer assets the firm has a duty to protect, and for life insurance may be replaced by refraining from transactions and payouts until compliance is achieved.
When does the AML Regulation actually apply?
From 10 July 2027, and from 10 July 2029 for the obliged entities listed in Article 3, points (3)(n) and (o). Until then national law transposing the earlier directives governs, so procedures should cite both.
7. What to do, today
- Split the source-of-funds and source-of-wealth fields in the customer record if they share one box; nothing else on this list works until they are separate.
- Wire Article 34(2) into transaction monitoring rather than onboarding, so a complex, unusually large, unusually patterned or purposeless transaction opens an examination of origin, destination and purpose regardless of the customer’s rating.
- Add a residence-by-investment flag that hard-wires Article 34(4) points (a), (c), (e) and (f), instead of leaving them to a risk-based menu.
- Extend the wealth question to beneficial owners as separate records, and check PEP screening before deciding which route applies.
- Require the file to state the arithmetic: what wealth the narrative generates, against the funds observed, with the gap named where one exists.
- Record refusals as Article 21 decisions with a documented outcome and a considered suspicion assessment — an unevidenced acceptance is the weakest outcome available.
- Cite both the national rule and the AMLR article in the procedure now, so 10 July 2027 is a citation change rather than a rewrite.
- Flag any fixed cooling-off rule for former PEPs for review against the AMLA guidelines due by 10 July 2027.
Related: Enhanced due diligence · Politically exposed persons · Ongoing monitoring · The EU AML package timeline
