1. Definitions in Banking Law

False Positive cost = operational + legal. Wasted investigation, customer exit.
False Negative cost = regulatory + criminal. You allowed money laundering.

AML systems must strike a balance between avoiding too many false positives and minimizing false negatives.

2. Regulatory Doctrine: Risk-Based Approach (RBA)

FATF Recommendation 1, RBI Master Direction on KYC, FinCEN Guidance all say: You cannot use blanket thresholds. You must tailor screening to risk.

Measures recognized by ACAMS and regulators:

1. Incorporating customers' and products' risk levels into rule suite
2. Suppression of repetitive alerts closed as non-issue
3. Creating risk profiles - high-risk customers get stricter rules, low-risk get relaxed rules

Goal: Less false positives for low-risk customers and more time to review potential true positives.

Failure to adopt RBA is itself treated as program deficiency.

3. Case Laws Illustrating Imbalance

A. When Bank Over-Suppressed = False Negative punished

1. BMO Harris Bank as successor to Marshall & Ilsley Bank - OFAC Finding of Violation, Oct 21, 2015

This is the leading case on false hit list abuse.

Bank had customer with word "Persian" in name doing Iranian carpet imports. While general license was valid, bank added customer to "false hit list" - list of names that trigger scrutiny but are not sanctioned, where alert can be disabled.

When OFAC revoked license, bank never removed customer from false hit list, so screening never alerted. Bank processed $67,000+ illegal transfers.

OFAC: Screening tools and false hit lists are only as reliable as rigor with which they are reviewed and updated. Finding of Violation issued, plus formal False Hit List Guidance.

Lesson: Suppressing alerts to reduce false positives without periodic review = false negative = breach.

2. Noida Commercial Co-operative Bank v Director, FIU [2024] 167 taxmann.com 174

Failed to file 16 CTRs, delayed 6 CTRs by 167 months. Bank argued unintentional, misunderstanding that loan accounts not covered. Tribunal upheld Rs 25.7 lakh penalty, applying SEBI v Shriram Mutual Fund (2006) 5 SCC 361 - mens rea not required for civil penalty. Warning insufficient for repeated failure.

Lesson: Trying to reduce reporting burden by narrow interpretation = systematic false negative.

3. Bank of America - $1.21 Billion Settlement, Oct 2024 + Union Bank 2024 Rs 54 Lakh

BofA admitted willfully failing / delaying to file thousands of SARs, failure to mitigate Chinese money laundering networks. Union Bank fined for filing only ONE STR about multiple circular NBFC transactions.

Both are classic false negative cases - system generated alert but compliance closed it as non-issue to control false positives.

4. HSBC Bank USA - OCC Cease and Desist

Widespread deficiencies in BSA/AML for wire transfers. Bank outsourced too much to affiliates, relied on low-risk assumptions. Resulted in bulk false negatives.

B. When Bank Over-Flagged = False Positive punished

5. Kuvera Resources Pte Ltd v JPMorgan Chase Bank NA [2023] SGCA 28

Singapore Court of Appeal. Chase flagged vessel on internal sanctions list, not on official OFAC/ UN list, and refused payment under LCs. Court held internal red flag without official listing insufficient to justify activating sanctions clause.

Lesson: Cannot convert a false positive into contractual defense. Need to distinguish potential match vs true match by verifying DOB, address, IMO number, ownership.

6. SAT Mumbai - [2023] 157 taxmann.com 39 - Misidentified Promoter

Demat frozen because person wrongly shown as promoter in delisted company. SAT said SEBI delisting regulations had no mechanism for misidentified persons. Recommends redressal system.

Indian law now recognizes harm of false positives.

7. Kadi I & II v Council EU and Tay Za v Council [2012]

EU listed individuals only on family connection or flawed intelligence. Grand Chamber held unlawful to include natural persons where ground is simply family connection. Annulled listing.

Established proportionality - you cannot prefer false positive over false negative when fundamental rights at stake.

4. How Courts Balance - The Legal Test

Suspension first, then verify: CBUAE Rulebook: When potential match found, LFI should suspend transaction until satisfied it is not listed person. But must then compare with UN list using DOB, address to eliminate false positives.

White List discipline: You may create white list of cleared false positives, but must not overly rely on it and must continuously screen against updated lists.

Documentation: If false positive established, you may allow transaction but must maintain evidence of verification and make available to authorities on request.

Risk-based tuning: Regulators expect statistical tuning:

• For low-risk retail - increase threshold, use exact name + DOB match
• For high-risk PEP / trade finance - use fuzzy + proximity + ownership
• Measure: If false positive rate >97%, your rule is defective per se. FinCEN expects annual independent testing.

5. Practical Balancing Framework for Indian Bank

Step 1: Tiering
Low risk - salary account < Rs 10L turnover: Screen name + PAN. Suppress repeat alerts for 90 days after clearance.
High risk - Forex, NBFC, crypto, border area: Name + DOB + Address + beneficial owner 10% threshold.

Step 2: Two-stage disposition
L1 - System: Potential match
L2 - Analyst: True vs False using identifiers beyond name - this is what CBUAE mandates. If false, record reason (DOB mismatch etc) and white list with expiry.

Step 3: False Hit List Governance (per OFAC Guidance)

• Review white list every 6 months
• Any list amendment in UNSCR / OFAC triggers re-screen of entire white list
• Approver must be Principal Officer, not L1 analyst

Step 4: Metric
Track: False Positive Rate, False Negative Rate from audit samples, Time to dispose. RBI inspection now asks for this.

If you reduce false positives from 98% to 85% without increasing false negatives, you are compliant. If you reduce to 60% by blind suppression, you will be penalized like BMO Harris / BofA.