The remittance business of money changers has changed dramatically over the past decade. What was once a largely bilateral, corridor-based activity—cash in, cash out, correspondent to correspondent—has increasingly become platform-driven, digitally intermediated, and cross-jurisdictional by design. Money changers today rely on foreign fintech platforms, global settlement engines, shared AML utilities, and, in some cases, joint ventures to remain competitive on price, speed, and reach.
From a regulatory perspective, however, this evolution raises a deceptively simple question: when does a remittance partnership become outsourcing? The answer matters because outsourcing triggers enhanced governance, oversight, and supervisory expectations. Regulators do not accept contractual labels at face value; instead, they examine how the business actually operates and where responsibility truly sits within the regulated entity.
Core remittance functions as regulated activities
In the remittance context, supervisors start from first principles. Remittance execution, customer onboarding, transaction screening, settlement, and recordkeeping are not peripheral activities for a money changer; they are the core of the licensed business and central to financial integrity and consumer protection. When any of these functions are performed by a third party, the regulator’s concern is not efficiency or innovation, but whether accountability remains clearly anchored in the licensed entity and whether risk controls remain effective on a risk-based basis.
International standards such as the general principles for international remittance services and guidance on money or value transfer services emphasise that providers must maintain effective governance, transparent responsibilities, and robust AML/CFT controls even when elements of the value chain are outsourced or delegated. This means the money changer cannot “outsource” responsibility for customer due diligence, sanctions screening, or transaction monitoring simply by placing them contractually with a third-party service provider.
Vendor platforms as de facto outsourcing
Vendor platforms are the most common source of regulatory misunderstanding. Many money changers integrate with overseas or regional platforms that provide access to multiple destination corridors, automate transaction routing, perform sanctions screening, and manage settlement with foreign payout partners. Commercially, these arrangements are often described as “technology partnerships” or “network access agreements,” positioning the platform as a neutral intermediary rather than a critical operational dependency.
From a supervisory lens, however, if the platform is integral to completing the remittance transaction, the arrangement looks very much like outsourcing, irrespective of how the contract is labelled. The money changer may not own the system, but it depends on it to deliver a regulated service to its customers; in such cases, regulators expect the money changer to demonstrate effective oversight, audit and access rights, business continuity planning, data and record retention, and a credible exit strategy. The presence of regulation in the platform’s home jurisdiction does not dilute these expectations, because the licensing and accountability for the customer relationship remain with the domestic money changer.
Correspondents, agents, and blurred boundaries
Correspondent and agent relationships sit somewhere in between pure outsourcing and simple counterparty exposure. Traditional correspondent arrangements—where a foreign entity independently executes payout in its own jurisdiction under its own licence—are generally not treated as outsourcing, because each party remains responsible for its own regulatory compliance and risk management, and the relationship is viewed primarily through a counterparty risk and transparency lens.
The line begins to blur, however, when the correspondent performs controls on behalf of the money changer, such as applying AML or sanctions screening that the money changer relies upon, or when the correspondent hosts transaction-processing infrastructure used directly by the money changer. At that point, the relationship shifts from arm’s-length cooperation to delegated execution, and supervisory expectations rise accordingly, including stronger contractual rights, clearer service-level definitions, and the ability of supervisors to obtain information on outsourced functions where necessary.
Joint ventures and “look-through” expectations
Joint ventures present an even more nuanced challenge. In the remittance space, JVs are often used to combine a local licence with foreign technology or network access, sometimes with complex shareholding and governance structures. Firms sometimes assume that the presence of a separate legal entity automatically takes the arrangement outside outsourcing rules, because the JV is treated as an “affiliate” or “strategic partner” rather than a vendor.
Regulators do not share this assumption. If the joint venture effectively performs remittance operations for the money changer, if customers experience the service as belonging to the money changer, or if the money changer cannot ensure continuity of its remittance services without the JV, supervisors are likely to “look through” the structure and treat it as an outsourcing or third-party dependency for governance purposes. The key question remains unchanged across jurisdictions: has the licensed entity delegated a regulated activity while remaining accountable for the outcome, including compliance with AML/CFT, sanctions, conduct, and operational resilience expectations?
Risk concentration, resilience, and financial integrity
Underlying all of this is a consistent regulatory concern with risk concentration, operational resilience, and financial integrity rather than mere contractual form. Remittance businesses process high transaction volumes, operate across borders, and are inherently exposed to AML/CFT and sanctions risk, making the quality of controls and continuity planning central to supervisory assessments. Heavy reliance on a small number of platforms, correspondents, or joint ventures can amplify these vulnerabilities and create single points of failure, both operationally and in terms of data availability and auditability.
Regulators therefore focus on who controls the process, who owns and can access the data, who can be audited, and what happens if the arrangement fails or is terminated, including the ability to migrate volumes and preserve records in a timely, secure manner. Global guidance on remittances highlights the need for transparent, well-governed relationships and contingency plans that protect consumers and the integrity of the payment system when key service providers experience disruption or withdrawal from a corridor.
Practical implications for money changers
For money changers, the practical implication is clear. Before entering any remittance partnership—whether styled as a vendor contract, correspondent link, or joint venture—the firm must ask whether it is delegating execution of a regulated activity and becoming operationally dependent on a third party to meet its obligations to customers and supervisors. If the answer is yes, outsourcing governance should be applied proactively: this includes structured due diligence, risk assessment, board-approved contracts, ongoing performance and control monitoring, audit and access provisions, robust business continuity and exit strategies, and clear documentation of roles and responsibilities.
Attempting to rely on legal form rather than operational substance is unlikely to withstand supervisory scrutiny, especially in jurisdictions that have adopted detailed outsourcing and third-party risk guidelines for payment and remittance providers. The regulatory message is not hostile to innovation; supervisors generally welcome technology that improves transparency, speed, and inclusion in remittance markets, provided that risk management and accountability keep pace with the complexity of delivery chains. What they insist upon is clarity of responsibility: execution can be shared, but accountability cannot. In the remittance business of money changers, outsourcing is defined not by what the contract is called, but by where control, dependency, and risk ultimately sit across the value chain.
Basel Committee on Banking Supervision, Committee on Payment and Settlement Systems, & World Bank. (2007). General principles for international remittance services. Bank for International Settlements. https://www.bis.org/cpmi/publ/d76.pdfbis
Basel Committee on Banking Supervision. (2012). Core principles for effective banking supervision. Bank for International Settlements. https://www.bis.org/publ/bcbs230.pdffindevgateway
Basel Committee on Banking Supervision. (2024). Revised Basel Core Principles for effective banking supervision (IMF Policy Paper No. 2024/037). International Monetary Fund. https://www.imf.org/-/media/files/publications/pp/2024/english/ppea2024037.pdfimf
European Banking Authority. (2019). EBA guidelines on outsourcing arrangements (EBA/GL/2019/02). https://www.eba.europa.eu/activities/single-rulebook/regulatory-activities/internal-governance/guidelines-outsourcing-arrangementseba.europa
Financial Action Task Force. (2016). Guidance for a risk-based approach for money or value transfer services. FATF/OECD. https://apgml.org/sites/default/files/documents/FATF_Guidance_2016_-_Risk_Based_Approach_Money_or_Value_Transfer_Services.pdfapgml
Financial Stability Board. (2020). Regulatory and supervisory issues relating to outsourcing and third-party relationships. https://www.fsb.org/uploads/P091120.pdffsb
World Bank. (2009). Guidance report for the implementation of the general principles for international remittance services. World Bank. https://remittanceprices.worldbank.org/sites/default/files/wb2012_guidance_for_gps.pdfdocuments1.worldbank
Covington & Burling LLP. (2019, November 18). New EBA guidelines on outsourcing agreements: Compliance requirements for financial institutions [Client alert]. https://www.cov.com/en/news-and-insights/insights/2019/11/new-eba-guidelines-on-outsourcing-agreements-compliance-requirements-for-financial-institutionscov
KPMG Law. (2023, October 8). New guidelines for outsourcing to service providers in the financial industry. https://www.kpmg-law.de/en/new-guidelines-for-outsourcing-to-service-providers-in-the-financial-industry/kpmg-law
Regulation Tomorrow (Norton Rose Fulbright). (2016, February 24). FATF updates guidance for money or value transfer services. https://www.regulationtomorrow.com/eu/fatf-updates-guidance-for-money-or-value-transfer-services/regulationtomorrow
Leave a Reply