Your AML CFT function. Live from day one.
Technology, operations and trained staff for PVARA sandbox and NOC applicants. From a regulated institution.
You keep control. We do the heavy lifting.
in Pakistan
files, reporting
a senior practitioner
What is AML CFT co-sourcing for PVARA applicants?
FPM runs your AML CFT function alongside you during the PVARA sandbox: the platform, daily screening and case work, and trained staff. Your Board and Compliance Officer keep accountability, as PVARA requires, and the arrangement is documented for disclosure.
UpdatedCo-source. Don't outsource.
PVARA keeps AML CFT with your Board. It expects a compliance lead inside your company.
Outsource it, and you look like you don't own it. Co-source it, and you keep control while we add the muscle.
At exit, you show a function that already works.
| Outsourcing | Co-sourcing with FPM | |
|---|---|---|
| Accountability | Blurred between you and vendor | Stays with your Board and Compliance Officer |
| STR decision | Often taken by the vendor | Taken by your Compliance Officer |
| Knowledge | Held by the vendor | Built inside your company |
| At license review | Hard to evidence ownership | Documented function you control |
| After licensing | Dependent on the vendor | Continue, scale down or take in-house |
Everything your function needs. One partner.
The platform
- Screening on domestic and global lists
- KYC SDK: CNIC OCR, liveness, face match
- Risk model built for your category
- Monitoring rules tuned to your product
- Case management and audit trail
- Hosted in Pakistan
The daily work
- Onboarding CDD and EDD reviews
- Screening alert resolution
- Ongoing re-screening of your base
- Transaction alert investigation
- STR case files for goAML filing
- TFS escalation on sanctions hits
The people
- Named AML analysts on your account
- Senior AML CFT practitioner beside your Compliance Officer
- Cover for leave and peaks
- Board and staff training
- Support during PVARA reviews
The documents
- AML CFT/CPF policy and procedures
- Entity-wide ML/TF risk assessment
- Customer risk methodology
- goAML registration readiness
- AML CFT section of your application
- Compliance testing plan and exit evidence
Clear roles. Easy to disclose.
Drop this split straight into your application.
Your company keeps
Accountability and decisions
- Board responsibility for AML CFT/CPF
Approves policy, risk appetite and the arrangement itself. - Your designated Compliance Officer
Directs the work and signs off on escalations. - The STR decision and goAML filing
Made and submitted by your Compliance Officer. - Customer acceptance and exit
Final say on high-risk onboarding and relationship exits. - Your regulatory relationship
You are the applicant and the licensee.
FPM delivers
Capacity, process and evidence
- FPM AML-CHECK, configured for you
Screening, KYC, risk scoring, monitoring, case management. - Daily operations to agreed SLAs
Alert reviews, CDD and EDD files, re-screening. - Case files ready for decision
Evidence, timeline and draft narrative for each escalation. - Management information
Monthly reporting to your Board, data for sandbox reports. - Policies, risk assessment and training
Drafted with you and kept current.
Application to license. And beyond.
Framework built
Policy, risk assessment and your application's AML CFT section.
Function running
Platform live. Analysts assigned. Reviews daily.
Evidence ready
Results and case history, ready for review.
Your choice
Stay with us, or take it in-house. Your call.
Regulated. Proven. Already in virtual assets.
We are regulated too
30 years licensed. SECP-regulated. PSX-listed. We hold ourselves to your standard.
Since 2019 in Pakistan
Deployed by CDC, PMEX, brokers, insurers, banks and fintechs.
Already in the virtual asset space
Compliance partner to a tokenization venture in its PVARA sandbox submission.
Before you sign up.
Is this outsourcing under PVARA's framework?
It is an outsourcing arrangement you disclose in your application, with your Board overseeing it. We call it co-sourcing because accountability, the Compliance Officer role and the STR decision stay inside your company.
Do we still need our own Compliance Officer?
Yes. We recommend you designate your own Compliance Officer from the start. Our senior practitioner works beside that person, and our analysts do the daily work under their direction.
Who files STRs?
Your Compliance Officer decides and files through FMU's goAML portal. We prepare the case file, the evidence and the narrative draft.
When should we engage you?
Before you submit. The AML CFT framework, risk assessment and testing plan are part of the application, and they are easier to build once than to fix after a review.
What happens after we get the license?
You choose. Continue co-sourcing at a scale that fits your volumes, or move the function in-house with a documented handover and trained staff.
Which license categories do you support?
All ten. Exchanges, broker-dealers, custodians, transfer and settlement providers, and token issuers carry the heaviest customer-side AML CFT load.
Planning a PVARA sandbox application?
Tell us your category. We will show you the plan.