The Problem: Why This Matters Now
Brazilian investigators allege that Banco Master's collapse involved $8.6 billion in fabricated carbon credits and $2.2 billion in diverted funds. The bank promised returns up to 140% of the market benchmark. Every layer of the structure carried a professional stamp: audited financials, fund managers, a banking license. None of those stamps verified that the underlying asset existed.
If your Customer Due Diligence stops at the paperwork around an asset, you're reviewing the story, not the asset. This guide turns that lesson into a repeatable workflow for testing inflated valuations, verifying ownership, and identifying reputation laundering as a risk indicator.
What You Need Before Starting
Gather these before you open a case:
- Scope Trigger List: Define when this enhanced workflow activates: returns materially above peer benchmarks, assets valued mainly on models or estimates, or valuations that sit in affiliated shell entities.
- Access to Primary-Source Registries: Land, title, and company registries in the relevant jurisdictions, plus a vendor or counsel who can pull certified extracts.
- Adverse Media and PEP Tools: You need Name Screening that covers relatives and close associates of politically exposed persons, not just principals.
- Independent Valuation Resource: A pre-approved panel of valuers or technical experts with no commercial ties to the counterparty.
- Escalation Authority: A written rule that unresolved findings go to the MLRO, and that deal timelines can't override an open question.
- Case Template: One document that records each question, the evidence obtained, and who closed it.
Step-by-Step Implementation
Step 1: Run a Return-Explainability Test.
Compare promised yield to a named market benchmark (in Brazil's case, the Interbank Deposit Certificate, or CDI). Record the gap. Require the counterparty to document the source of the excess return in writing. Outsized returns mean either outsized risk or an undisclosed profit source. If they can't explain which, treat it as a red flag and escalate.
Step 2: Verify Legal Title to the Underlying Asset.
Don't accept a representation letter. Obtain the registry extract showing the registered owner, encumbrances, and chain of title. Ask who held title before the current claimant. In the Banco Master allegations, the land behind the carbon credits reportedly belonged to the federal government and had been set aside for agrarian reform. That's the kind of fact a title search surfaces quickly.
Step 3: Interrogate the Valuation Method.
For any asset valued on estimates, document four things: who authored the valuation, whether the author has any relationship to the counterparty, whether the methodology has precedent in the market, and whether any unit of the asset has ever been sold at that price. Reports allege the carbon credit valuations rested on theoretical stock estimates using methods "never before applied in the market," and that not one credit was ever sold. A valuation with no observed transaction is an opinion. Weight it accordingly.
Step 4: Look Through Audits and Fund Wrappers.
Treat an audit opinion as evidence about financial statements, not proof the asset exists. For fund structures, request the portfolio-level holdings and trace each material position back to a verifiable asset. Ask what the fund actually holds, who holds legal title, and who administers it. If you can't see through a layer, record it as a transparency gap and score it in the Customer Risk Rating.
Step 5: Map Shell Entities and Beneficial Ownership.
Run Beneficial Owner Identification on every entity in the chain. Flag entities with audited billion-level valuations but no operating history or revenue. Note family-controlled holding companies that join a project late and sit behind intermediaries. Each added layer should raise your scrutiny, not lower it.
Step 6: Score Reputation Laundering Explicitly.
Add a field to your Customer Risk Profile for institutional association. Log sponsored events attended by officials, hospitality, retention of firms linked to officials' relatives, and introductions through former officials. Treat these as risk indicators, not credentials. Proximity to officials is what a bad actor sells. Where these features appear, test for improper-benefit exposure under the Clean Company Act and, if relevant, the FCPA, where knowledge can be established through high probability of obvious red flags.
Step 7: Decouple Deal Speed from Open Questions.
Build a gating rule into your workflow: no approval while any red flag from Steps 1 through 6 remains unresolved. If commercial pressure is accelerating the timeline, that fact itself goes in the case file and triggers escalation to MLRO.
Step 8: Treat Regulatory Status as an Input.
Record the counterparty's license, then keep going. A banking license didn't protect investors in uninsured securities. Record whether the product carries deposit insurance and size your exposure to the uninsured portion.
Validation: How to Verify It Works
Test the workflow before you trust it:
- Back-Test Against a Known Failure: Run the Banco Master fact pattern through your template as a tabletop exercise. Each red flag should map to a step that would have produced an escalation. If one doesn't, fix the gap.
- Check Evidence Quality: Sample closed cases. For each, confirm the file contains a primary-source document (registry extract, holdings report), not just a representation letter or audit opinion.
- Measure Open-Flag Discipline: Review whether any approval occurred with an unresolved flag. Any instance is a control failure, not a judgment call.
- Test Independence: Confirm that valuers and verifiers had no commercial link to the counterparty.
- Prepare for Hindsight Review: Prosecutors and regulators read files with the benefit of hindsight, so a known warning sign left unresolved is a dangerous position. Ask whether a reviewer could see, from the file alone, that each flag was raised and closed.
Maintenance: Ongoing Tasks
- Refresh on Triggers, Not Just Calendars: Apply Ongoing Due Diligence when valuations change, new affiliates appear, or adverse media surfaces, in addition to scheduled Periodic Review.
- Update the Scope Trigger List: As structures get more sophisticated, add new asset types and valuation patterns to the list.
- Rotate Your Valuer Panel: Re-check independence at least annually.
- Review Escalations Quarterly: Look for patterns in what gets flagged late, and feed those back into training.
- Document the Asymmetry: Bad actors will always know more about their scheme than you can learn in early encounters. Design the program around that. Rely on verification of the asset itself, and don't rely on trust built in the first meetings.




