TL;DR: Source of funds is the origin and means of a specific transfer. Source of wealth is the set of activities that built a customer's overall net worth. FATF Recommendation 12 requires reasonable measures to establish both for a foreign politically exposed person. In a 2025/26 review of 242 asset management and alternatives firms, the FCA found that 10% did not verify source of wealth for high-risk customers.
Two Questions, Not One File
Source of funds and source of wealth answer different questions. Teams blur them because both land in the same enhanced due diligence file, and a bank statement looks as if it settles both. A statement shows where money sat. It does not show how the customer came to have it, or why this amount is moving now.
Source of funds is the origin of the particular assets in the relationship: the amount invested, deposited, or wired. The FATF's 2013 PEP guidance says that record has to be substantive. Naming the sending institution leaves the inquiry unfinished. The Wolfsberg Group's FAQs, written for private banking and wealth management, describe source of funds as the origin and means of transfer, focused on the amount and the method, and tied to the purpose of the account. Source of wealth is the economic, business, or commercial activity that generated, or contributed in a material way to, overall net worth: the entire body of assets, not an audited net-worth figure. Where the account holder is a personal investment vehicle, Wolfsberg says the activities of material beneficial owners belong in that picture.
A customer who wires two million dollars from a brokerage has a source-of-funds question (the wire, the account it left, the sale that produced the cash) and a source-of-wealth question (how the portfolio was built). The funds file can close while the wealth file is still open. That is where enhanced due diligence collapses, when one document is asked to do both jobs.
When Each Question Has to Be Answered
Standard customer due diligence stops at identity, purpose, and a risk profile. Customer due diligence for banks requires the institution to understand why the relationship exists and to monitor it. Source of funds and source of wealth enter when the risk, or a specific rule, makes origin part of that profile.
FATF's Interpretive Note to Recommendation 10 lists information on the source of funds or the source of wealth as one enhanced measure for higher-risk relationships. The connector is "or". The measure has to match the risk. A large one-off credit into a retail account may need source of funds and no lifetime wealth narrative. A private-banking relationship with opaque ownership may need source of wealth before the first transfer is informative.
Foreign politically exposed persons are where the choice ends. FATF Recommendation 12 requires risk-management systems to identify a foreign PEP customer or beneficial owner, senior management approval, reasonable measures to establish source of wealth and source of funds, and enhanced ongoing monitoring. The same measures apply to family members and close associates. PEP screening identifies the person. It establishes neither source. For a domestic PEP, or a person entrusted with a prominent function by an international organisation, FATF requires those same measures, including both sources, when the relationship is higher risk.
US banks have a narrower written rule. The 21 August 2020 joint statement from FinCEN and the federal banking agencies says the customer due diligence rule creates no requirement, and no supervisory expectation, for unique extra steps solely because a customer is a PEP. Status alone does not make the relationship higher risk. Limited volume, a low-dollar account, a known legitimate source of funds, or products with fixed terms can support a lower profile.
Private banking is the exception with its own text. Under 31 CFR 1010.620, a covered institution must take reasonable steps to ascertain the sources of funds deposited into a private banking account, the purpose and expected use, and whether a nominal or beneficial owner is a senior foreign political figure. Where such a figure is an owner, enhanced scrutiny has to be reasonably designed to detect and report transactions that may involve the proceeds of foreign corruption. The rule names source of funds. It does not impose a source-of-wealth audit on every PEP the bank happens to hold.
Three bands follow. Ordinary relationships need a purpose, a profile, and a source-of-funds inquiry when a transfer's origin matters to monitoring. Other higher-risk relationships need the measure that fits the risk in front of the analyst. Foreign PEPs, and higher-risk domestic and international-organisation PEPs, need both sources, senior approval, and enhanced monitoring. In the FCA review published on 22 July 2026, 32% of private-market firms in that 242-firm sample reported PEPs among their customers, against 9% of firms outside private markets.
Evidence That Survives a File Review
Acceptable evidence lets a second reviewer reach the same conclusion without a phone call. The standard is reasonable measures, scaled to risk, not a census of every asset the customer has ever held.
For source of funds, Wolfsberg treats the useful record as the amount, the type of asset, the activity that generated it, the method of transfer, the remitter, and, where relevant, the sending institution and country. A third party who materially funds the account, especially with no apparent link to the customer, has to be tied to the customer in the file. A statement shows possession and transit. Provenance is the activity behind the balance: salary, a property sale, a dividend, a loan drawdown, a gift.
For source of wealth, Wolfsberg asks for the contributors that account for the total or the majority of wealth, plus an estimate of net worth. Its categories are generational and personal (inheritance, gifts, settlements, retirement payouts), income and business (ownership, employment, compensation, entity profits), and investment (real estate, securities, royalties, patents). "Family wealth" with no underlying activity is a label. So is "entrepreneur" with no company, no period, and no sense of what the company produced.
Corroboration comes from a source independent of the customer: public records, and documents from registries, banks, accountants, lawyers, or notaries. FATF adds property and land registers, asset-disclosure registers, company registers, past transactions, and beneficial-ownership information. For a high-profile PEP, open reporting on lifestyle and official income can matter, and a clash with the customer's declaration is a suspicion indicator. On a legal entity or holding vehicle, the wealth question often runs through the beneficial owner.
Two limits keep the request honest. Open sources can picture wealth the institution does not hold. Wealth received decades ago, including generational wealth, may be impossible to corroborate in full. Wolfsberg points to plausibility and the key milestones, and treats ordinary gaps in the chronology as unsurprising. A material gap, or a story that contradicts the file, is a different finding. FATF's test is what income, prior posts, business interests, and family estates can reasonably explain. The wealth one might expect of a person in that post is not an explanation. A form that says "employment" or "salary," with no employer and no income level, fails the same test.
The Call That Stays With a Person
Collection can follow a checklist. Plausibility cannot. Wolfsberg says the weight given to corroboration depends on the source, the type, and how far it can be checked. Short of the institution's own standard, the options are to refuse the relationship, raise the rating, restrict products, heighten monitoring, or exit.
The rating has to match the file. Customer risk rating should show both inquiries in a form a reviewer can follow. An unexplained source, a higher-risk industry or country, adverse information, and PEP status each belong there. A low rating on an uncorroborated wealth story is the finding an examiner writes up. Unresolved inconsistencies lead back to the same actions.
Monitoring is where the two records earn their place. FATF expects the level and type of transactions to fit what the institution knows about the PEP's sources. Divergence triggers a reassessment: continue, exit, or report. The private banking rule requires the same check against the recorded source of funds and the stated purpose of the account. The FCA's 22 July 2026 review found the break earlier: 10% of the 242 firms did not verify source of wealth for high-risk customers. A policy that names the test, and a file that never runs it, are the same defect.
Four calls stay with a person. Whether the evidence is independent enough. Whether a gap in the chronology is material. Whether uncorroborated wealth is acceptable or needs a restriction. And whether senior management, reading this file rather than a PEP flag, approves the relationship. A model can rank the queue. Each of those four is a risk decision the institution has to explain.
Where Sphinx Fits
Sphinx's agents work in the systems analysts already use. On a source-of-funds or source-of-wealth review they assemble the record, set the stated explanation against account activity, and write the reasoning down for audit. Sphinx's published production result is an 80% reduction in case review time. The plausibility judgment, and any senior approval that follows, stays with the institution.
Frequently Asked Questions
What is the difference between source of funds and source of wealth?
Source of funds is the origin and means of transfer of the particular assets moving into the relationship. Source of wealth is the activity that generated the customer's overall net worth. FATF's PEP guidance treats them as different concepts, and a document that only shows where money was held establishes neither.
When is source of wealth required, and when is source of funds enough?
FATF Recommendation 12 requires both for foreign PEPs, their family, and their close associates, and for higher-risk domestic PEPs and PEPs of international organisations. For other higher-risk customers, the Interpretive Note to Recommendation 10 treats source of funds or source of wealth as a measure matched to the risk. US private banking accounts must ascertain source of funds under 31 CFR 1010.620, and the CDD rule adds no unique source-of-wealth step for every PEP.
Is a bank statement enough to establish source of funds?
A statement can show possession and the path of a transfer. FATF and the Wolfsberg Group both require the activity that generated the funds, the amount, the method, and the remitter, and the customer's link to any third party who sent the money.
Do US banks have to collect source of wealth on every PEP?
FinCEN's 21 August 2020 joint statement says the CDD rule creates no requirement, and no supervisory expectation, for unique extra due diligence solely because a customer is a PEP. Banks still build a risk-based profile. Private banking accounts must ascertain sources of funds, and the bank's own policy can require source of wealth where the risk calls for it.
What should happen when a wealth explanation cannot be fully corroborated?
Wolfsberg treats full corroboration of older or generational wealth as sometimes impossible, and points institutions to plausibility and the key milestones. If what remains falls short of the institution's standard, the file should record a refusal, a higher rating, a product restriction, heightened monitoring, or an exit.
.png)
