Book an appointment with us, or search the directory to find the right lawyer for you directly through the app.
Find out more
Deal by Design
Welcome to this edition of Law Update, focusing on the evolving M&A landscape across the MENA region. With deal activity and value continuing to grow, the region is seeing increased investor interest alongside a changing regulatory environment.
This edition explores key legal and market developments affecting M&A transactions, including regulatory reforms, foreign investment, governance, due diligence and deal structuring across the region.
The banking sector is the backbone of any modern economy. It is also, by virtue of the very features that make it indispensable — speed, global reach, and the presumption of legitimacy — the most persistently targeted sector for money laundering. Amongst the techniques deployed by financial criminals, the loan-back scheme stands out for its sophistication. It does not rely on crude concealment: it relies on the law itself.
This article examines how loan-back schemes work, why they present such a formidable detection challenge, and how Iraq’s legal and regulatory framework — centred in the Anti Money Laundering and Counter Terrorism Financing Law No. 39 of 2015 (the Law), and the Central Bank of Iraq’s Due Diligence Instructions No. 1 of 2023 (the Instructions) — positions financial institutions to identify and disrupt them.
The loan-back scheme is, at its core, a form of self-collateralised laundering. The proceeds of crime are first deposited with a financial institution in a jurisdiction selected for a specific combination of attributes: a permissive or under-regulated banking environment; the absence of income taxation; ease of corporate formation; political and monetary stability; and access to modern financial infrastructure. These jurisdictions — typically classified as high risk in international compliance frameworks — provide the first layer of concealment.
The criminal then approaches a separate bank — often in their home jurisdiction or in a commercially active market — and applies for a loan, pledging the offshore deposits as collateral. The loan is approved on apparently legitimate grounds. The criminal receives clean funds. The illicit deposit remains in place, quietly servicing the debt. Once the loan is repaid from the proceeds of the original crime or otherwise, the cycle is complete: the money has passed through the banking system and emerged with the appearance of legitimacy.
The technique’s particular danger lies in its structural sophistication. Unlike cash-based laundering methods, the loan-back scheme operates entirely within formal financial channels. It generates genuine documentation loan agreements, collateral arrangements, and repayment records — all of which superficially withstand scrutiny. The criminal exploits not a weakness in the banking system, but one of its fundamental features: the presumption that a secured, documented lending transaction is, by definition, a legitimate one.
Complexity escalates when multiple jurisdictions are involved, when impervious corporate structures are interposed between the criminal and the collateral, and when correspondent banking relationships provide further layers of insulation between the funds and their true origin.
The Law addresses the loan-back scheme with precision. It captures as money laundering:
The loan-back scheme satisfies each of these thresholds: the criminal disguises the origin of illicit funds by converting them into collateral and then reintroduces them into the legitimate economy through the mechanism of a repaid loan.
Critically, the Law does not require a prior conviction for the predicate offence as a condition of prosecution for money laundering, a provision that affords prosecutors and regulators meaningful operational flexibility and removes a historically significant barrier to enforcement.
The Law further extends criminal liability beyond the principal offender. Drawing on the foundational principles of complicity embedded in the Iraqi Penal Code, those who assist or participate in the scheme — whether wittingly or through wilful blindness — are exposed to equivalent criminal liability. This has direct implications for banking professionals and compliance officers who fail to act on available indicators of suspicious activity.
The Instructions translate the Law’s broad obligations into a granular operational framework. Financial institutions are required to identify and verify the identity of all clients — permanent and occasional, domestic and foreign — through reliable, independent documentary sources, capturing not only personal identifiers, but also the client’s economic activity, source of income, and monthly revenue profile.
In the context of loan-back schemes, the identification of the beneficial owner is of strategic importance. The ultimate controller of a transaction may be deliberately obscured behind corporate intermediaries, nominee arrangements, or multi-jurisdictional structures. The Instructions require financial institutions to take reasonable steps calibrated to the assessed risk of the client and the relationship to identify beneficial owners and verify their identities against official documentation. Where a loan application involves collateral held in a high-risk jurisdiction, or where the relationship between the borrower and the collateral provider cannot be straightforwardly explained, the beneficial-ownership question demands rigorous and proactive investigation.
Ongoing transaction monitoring is equally critical. The Instructions mandate continuous scrutiny of business relationships and the examination of transactions to ensure consistency with the institution’s knowledge of the client, their business activities, and their declared sources of funds. A loan secured against offshore deposits that bear no apparent relationship to the client’s documented economic profile is precisely the kind of anomaly that effective monitoring is designed to surface.
The Instructions embed a risk-based approach as the organising principle of compliance. Not all loan transactions carry equivalent risk, and the framework is designed to ensure that enhanced scrutiny is deployed where the risk profile warrants it, rather than applied uniformly in a manner that would impede legitimate banking activity and undermine investor confidence.
Loan-back transactions should routinely be assessed as high risk where they involve non-resident clients, politically exposed persons, unusually complex or opaque ownership structures, or collateral arrangements in jurisdictions associated with elevated money laundering risk. In such cases, the Instructions require enhanced due diligence: deeper investigation into the client’s background, additional documentation of the source and purpose of funds, and heightened ongoing monitoring of the relationship.
This approach resolves a tension that is real and commercially significant. Overly broad or indiscriminate compliance procedures risk deterring legitimate investment and damaging Iraq’s standing as a destination for international banking and commercial activity. The risk-based approach is the regulatory answer to that concern: it reserves the most intensive scrutiny for the relationships and transactions that genuinely warrant it, while allowing lower-risk activity to proceed with proportionate rather than punitive oversight.
The loan-back scheme frequently exploits the correspondent banking system, particularly where shell bank institutions that are registered in a jurisdiction but have no physical presence there and are unaffiliated with any regulated financial group serve as intermediaries. The Law prohibits the establishment of shell banks in Iraq and prohibits financial institutions from entering or maintaining correspondent relationships with them, or with any institution that permits shell banks to use its accounts.
The Instructions reinforce this prohibition with operational specificity. Financial institutions are required to gather comprehensive information about correspondent institutions before establishing cross-border relationships, assess their anti-money laundering controls, verify their regulatory standing, and obtain senior management approval before any new correspondent relationship is initiated. Where an institution is found to have been subject to investigation or regulatory action in connection with money laundering or terrorist financing, that finding must inform the risk assessment and, in appropriate cases, lead to the termination of the relationship.
Financial institutions are also required to identify shell-bank risk across their existing client portfolios, applying a four-axis analytical framework:
The loan-back scheme is a reminder that financial crime, at its most sophisticated, does not circumvent the banking system it inhabits it. The challenge for regulators and financial institutions alike is to detect criminal intent within transactions that are, by design, indistinguishable in form from legitimate banking activity.
Iraq’s legal and regulatory framework meets this challenge with a well-constructed architecture. The Law provides the foundational criminal prohibition and the enforcement tools to pursue it. The Instructions translate that prohibition into a demanding but workable compliance regime, grounded in the risk-based approach and reinforced by clear obligations on client identification, beneficial ownership determination, suspicious transaction reporting, and the prohibition of shell-bank relationships.
For financial institutions operating in or engaging with the Iraqi market, the message is unambiguous: the sophistication of the threat demands a commensurate sophistication in the response. Compliance is not a procedural formality; it is a substantive institutional commitment, one that requires ongoing investment in systems, culture, and professional judgement. Stakeholders should monitor closely the continuing evolution of regulatory guidance and enforcement practice under the Law, as Iraq’s financial sector continues its trajectory towards greater integration with international standards.